HNHacker News
TopNewBestAskShowJobs

pillfill

304 karma · joined December 18, 2013

submissionscomments
pillfill··on Stanford Reverses Cognitive Decline in Alzheimer's with Brain Metabolism Drug
In mice. “Their research has demonstrated that drugs blocking this pathway can restore cognitive function in Alzheimer’s mice by improving brain metabolism.”
pillfill··on Ask HN: Who is hiring? (December 2020)
Apothesource | Charleston, SC or Remote (US only) | Full-Time, Remote OK! | https://apothesource.com

Apothesource is a healthcare consulting company that specializes in building software that integrates directly with Electronic Health Record (EHR) and other healthcare systems.

Open Roles:

Java Service Developer: Develop RESTful microservices using Java, Maven, Spring Boot, and Docker / Kubernetes

Web API Wrapper: Extract information from existing web front-ends and develop new RESTful APIs on top of legacy web forms.

Please send your resume to hnjobs@apothesource.com

pillfill··on Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting Is Harmful
> Why a new standard than to push for reform to the current standard?

Or even just an opinionated library with some basic guardrails to prevent bad configurations.

pillfill··on Building a Stateless API Proxy
Unnecessarly and overly dramatic, essentially arguing that because JWT/JOSE is insecure because it can be used in an insecure manner.
pillfill··on Blocking website ads with a hosts file
Wow. I automatically assumed that you could still circumvent the random div IDs by just matching against the text itself (https://github.com/gorhill/uBlock/wiki/Procedural-cosmetic-f...), but they even obfuscate that!
pillfill··on Introducing Jib — Build Java Docker images better
It'll be really interesting to see where this goes. We currently use Fabric8's Docker Maven Plugin (https://dmp.fabric8.io/) for our Java-based containers. It's a little verbose but works really well- it allows us to run our integration tests directly against the final container images (+ any container dependencies) as part of the standard Maven build.
pillfill··on US Expected to Withdraw from UN Human Rights Council
Your claim and "source" are incoherent nonsense. I regret spending 5m of my life trying to make sense of it and am only writing this comment to help others avoid the same trap.
pillfill··on Non-profit’s $300 hepatitis C cure as effective as $84k alternative
Not OP, but I'm familiar with a couple primary care providers that don't file insurance claims. It's refreshing to see up-front pricing on their website for services they offer, e.g.: https://www.palmettoproactive.com/services-pricing
pillfill··on Bering Sea loses half its sea ice over two weeks
There's nothing inherently political about the this article or the science in general here.

There is, however, a very concerted effort to convince people that the science of climate change 'is political' in order to give those who find the issue uncomfortable license to question the legitimacy of the entire field of study. That's as dangerous as it is absurd, and it's important that it's challenged whenever it's encountered.

pillfill··on Ask HN: Who is hiring? (November 2017)
Apothesource | Healthcare IT | South Carolina | Full time | REMOTE (limited to US Citizens)

We're a small team of senior Healthcare IT engineers headquartered in Charleston SC. We specialize in building and orchestrating REST microservices for large healthcare providers. Primary qualification is experience building REST services using a Java-based microservice framework (e.g. Spring Boot, Dropwizard). We're also a shop heavily focused on containerization, so any previous experience or desire to learn Docker and/or Kubernetes will be put to good use.

If interested, please send your resume to jobs@apothesource.com.

pillfill··on We've Spent Billions to Fix Our Medical Records, and They're Still a Mess
While FHIR is certainly making health records development more approachable and sane for developers, it isn't going to fix the large-scale data interoperability problem. Even if we completely suspended disbelief and assumed it was perfectly and consistently adopted across all EHR products, it still is just a structured way of exchanging data like HL7- the much more complicated issues preventing semantic interoperability of clinical data still exist.
pillfill··on Apple’s Cool iPhone Fingerprint ID Means You’re Screwed
Or just turn off the phone. It requires a password on restart or 48h of inactivity.

You can hate biometrics (and I'm still skeptical in general), but Apple did a damned fine job of how they implemented it.

pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
Just confirmed that the UID follows the SIM, so even swapping phones won't save you.
pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
Edited Title- You're correct, no reason to believe this is happening anywhere else (e.g. FIOS)
pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
The news is that they are injecting it even when you have opted out of CNPI.

The disturbing part is a unique ID that follows you despite private browsing and across browsers. The worst part is that it goes to every site you visit (not just VZW or selected advertisers). It can be trivially linked to your existing cookies/identity to follow you even after clearing cookies, changing browsers, switching devices, etc.

pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
The news is that it's ignoring the opt-out selections (including mine that I set a while ago).
pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
Older article, but still works: http://www.nbcnews.com/tech/security/why-you-should-check-yo...
pillfill··on Verizon Wireless injecting tracking UIDs into HTTP requests
Private internet access. Works great.
pillfill··on Passwordless authentication: Secure, simple, and fast to deploy
Sure, but you're missing the bigger picture- The point is to reduce the total number of passwords a user has to manage in general. The fewer passwords you have to remember, the more likely you are to protect those few 'root identity' accounts (by using a strong auth/password).
pillfill··on OAuth 2.0 and OpenID Redirect Vulnerability
This seems painfully sensationalized to me. Unrestricted OAuth redirect URIs paired with not requiring signed requests has been known to be dangerous. Google and Facebook both have configurable whitelists for OAuth redirect URIs.