Preferences

repiret
Joined 1,942 karma

  1. Allegations of copyright infringement where the person making the allegation hasn't done due diligence need to be illegal and subject to civil penalty. The penalties for actual copyright infringement can be so severe that we cannot allow all the copyright wolf-crying that happens.
  2. The inflated medical bills are not malice from the medical provider, they're incentivized by the insurance system. Providers are required to have a standard price list for all their billing codes; hospitals are required to publish it even, although compliance with publishing is sketchy.

    Their contracts with insurers says they can't bill the insurer more than what's on the standard price list, but the insurer won't pay more than the contracted amount for each billing code. As a result, the standard way to make a price list is to periodically review what insurance has paid on all the billing codes you've used lately, and if there's any billing code for which insurance has fully paid, increase the price.

    This is exacerbated by the fact that a single encounter might be encoded into multiple billing codes. One billing code for an aspirin, one for the nursing time to administer it, for example. Suppose insurance A pays reasonably for the nursing time but in exchange pays a pittance for the aspirin, but insurance B pays enough for the aspirin to cover the nursing time to administer it, but doesn't pay the nursing time billing code, but insurance C pays for an omnibus code for "spent a couple hours in the ER", but doesn't pay for nursing time or aspirin separately at all. A provider can agree to all three contracts, because they each give them enough money to profitably provide the service, but that requires that their price list has a high price for the aspirin, an high price for the nursing time, and a high price for the omnibus billing code.

    A cash payer gets the same bill an insurance company would - high prices on all three items. But insurance companies never pay that. In the old days, you would just have a totally separate cash pay price list, but medicare rules don't allow that anymore, and limit the magnitude of cash discounts.

    Fix the insurance system, and the bogus hospital bills that the hospital doesn't actually expect people to pay go away.

  3. Passwordless boot with a TPM means the software can control what secrets it gives out. Yeah, if you boot to a desktop operating system and auto-login as an admin user, that doesn't leave things very secure, but that's not the only scenario.

    Consider a server. It can have an encrypted hard drive, boot with the TPM without a password, and run its services. In order to steal data from it, you need to either convince software running on the server to give you that data, or you need to do some sort of advanced hardware attack, like trying to read the contents of DRAM while the computer is running.

    There are other use cases too, like kiosks, booting to a guest login, corporate owned laptops issued to employees, allowing low-entropy (but rate limited) authentication after booting, to name a few.

  4. I agree that biometrics are in the same ballpark as low-entropy passwords, which means their security relies on avoiding offline attacks. My ATM card is protected by a 4-digit pin. That's perfectly secure, because the ATM network won't let you enter a wrong pin more than a single-digit number of times before locking the account.

    Windows Hello allows you to log in with a 6-digit pin. That's perfectly secure, because the TPM lets them design a system where you can't do an offline attack on the pin. Too many wrong entries and you'll need to use your password.

    I doubt there's more than two dozen bits of entropy provided by finger print readers or facial recognition authentication, but you can make an acceptably secure login experience with it because, again, the TPM lets you prevent offline attacks.

  5. But most people don't want to enter a password, and if you make people enter a password too much, they'll choose terrible passwords and put them on a sticky note. Windows Hello can only be done securely with a TPM. A server that I want to turn back on all by itself after a power outage can only be done securely with a TPM.

    I want a TPM in my computer so I can have the security and convenience. Yes, it's another point of failure. But I need backups in case the hard drive fails anyway. And besides, the OS can be designed so I can enter a password if I need to use the drive without the TPM.

  6. I agree with all of the articles points except for the first one: TPM and Secure Boot do not reduce user choice or promote state or corporate surveillance. If you want to be able to prevent root kits you need secure boot, and if you want to store secrets that don't need a user password to unlock and can't be stolen by taking apart the computer, you need a TPM; or you need substantially similar alternatives.

    I would say that specifically with Secure Boot, Microsoft actually promoted user choice: A Windows Logo compliant PC needs to have Microsoft's root of trust installed by default. Microsoft could have stopped there, but they didn't. A Windows Logo compliant PC _also_ needs a way for users to install their own root of trust. Microsoft didn't need to add that requirement. Sure, there are large corporate and government buyers that would insist on that, but they could convince (without loss of generality) Dell to offer it to them. Instead, Microsoft said all PCs need it, and as a result, anybody who wants to take advantage of secure boot can do so if they go through the bother of installing their own root of trust and signing their boot image.

  7. There is a large adult population with undiagnosed and untreated ADHD. A generation ago that population was even higher. A bunch of them are pilots.

    So then the question is, if in a professional pilot and I think I might have ADHD, do I follow up on that hunch? Of course not, because a diagnosis would cost me my career.

    There’s good research to show that stimulants reduce the rate of car crashes in people with ADHD. I have no doubt that if we encouraged pilots to seek ADHD treatment, it would improve safety.

    IMO the diagnoses that should exclude someone from flying are those that could cause them to become suddenly incapacitated. For everything else, we can just test whether someone can safely fly an airplane, which we already regularly do for pilots.

  8. I don't know what you mean by "home economics", but to me, that encompasses things like balancing a checkbook and making a budget and taxes and understanding how savings and debt and compound interest works how to choose when to save and when to go into debt. The sort of money matters that apply to any schmuck trying to live in the world. The reason so many people lack those skills is that for the most part we don't teach them in high school. Calculators have nothing to do with it.

    Thank god we still teach quadratic equations, complex numbers, hyperbolic trig functions, and geometric constructions though. I don't know what would become of the world if most people didn't understand those things when we set them loose in the world.

  9. Based on my experience with county boards of supervisors and their interactions with library management and library funding decisions, the Warren County Board of Supervisors' statement that the library has poor management shouldn't be given much credence unless backed up by evidence.

    Somewhat amusingly, the library is a subordinate of the county. If the library is in fact poorly managed, the poor management is the fault of the board of supervisors.

  10. There is no overflow risk. The trick works on any Abelian group. N-bit values form an Albanian group with xor where 0 is the identity and every element is its own inverse. But N-bit values also form an Abelian group under addition with overflow, where 0 is the identity and 2s-compliment is the inverse.

    If you’re working on an architecture where a single multiplication and a bit shift is cheaper than N xor’s, and where xor, add, and sub are all the same cost, then you can get a performance win by computing the sum as N(N+1)/2; and you don’t need a blog post to understand why it works.

  11. The code in the article is written in Python, whose only for loop is for-each. It is 2N XOR operations, regardless of whether you use one or two loops.

    I probably would have written it with a single loop, using the `enumerate` iterator adapter. But in Python, two loops is almost certainly more efficient.

  12. I think A* deserves the popularity. It’s a simple variation on depth-first and breadth-first graph traversal that everyone learns in CS101, massively useful in some situations, yet for some reason isn’t a standard part of CS education. It’s a marvelous thing the first time you learn about it.

    It’s even more marvelous if it helps you recognize that the difference between BFS and DFS is how you pick the next node to explore out of your bag of unexplored nodes. That symmetry is easily lost if DFS is only taught as a recursive algorithm.

    Let it keep coming up every couple years to marvel a new generation of programmers.

  13. I think there are two interpretations of schematics.

    One is where the components on the schematic represent physical things, where the resistors have some inductance and some non-linearity, and some capacitance to the ground plane and so on. This is what we mean by schematics when we’re using OrCad or whatever.

    There is another interpretation where resistors are ideal ohms law devices, the traces have no inductance or propagation delay or resistance. Where connecting a trace between both ends of a voltage source is akin to division by zero.

    Sometimes you translate from the first interpretation to the second, adding explicit resistors and inductors and so on to model the real world behavior of traces etc. if you don’t, then maybe SPICE does for you.

    Infinite resistor lattices exist only in the second interpretation.

  14. > The pigs were assessed at approximately 205 days in age. Pigs can live up to 20 years. Would be good to test the long term effects and the effects over multiple generations.

    It would be good to test for those things if the concern was for the long-term health of the pigs. The concern is whether or not they produce safe meat. Somewhere between most and all of the pork I've eaten in my life came from pigs less than a year old.

  15. > Unfortunately no one bothers to install the 6-15/6-20 plugs

    Almost no one, but I had a 6-15R put in my kitchen. Then I imported a 3kW tea kettle from the UK, lopped off the plug, and put on a 6-15P. And now my wife doesn’t have to wait very long for her hot water.

  16. Veering off topic, but this letter is in a variable width font. Were there typewriters that could do that? Was this so widely distributed that it was typeset on a printing press? The letterhead and body text aren’t aligned, so if it did go through a press it took two passes. The signature is also in ink, so that’s either a third pass for color, or an actual signature, and the letter doesn’t have the notation to indicate that it was signed by the secretary, so that leads me to think that it wasn’t widely distributed.

    Does anybody have any other insights?

  17. > I can't think of a good reason for them

    I work on a product whose user interface in one place says something like “Copyright 2004-2025”. The second year there is generated from __DATE__, that way nobody has to do anything to keep it up to date.

  18. Not all pilots have a commercial pilots license, without which you can’t get paid to fly at all.

    Early career professional pilots make surprisingly little money flying.

    And professional pilots of all sorts often find themselves in a hotel in a city away from home with time to kill.

  19. It's not about morality, it's about incentives. Under the current system in the US, if you're broke and you have no insurance:

    1. The ER is free to you, because they legally cannot refuse to treat you based on your ability to pay.

    2. A regular doctor's visit costs $250 and your medicine costs $5-$500/month depending on what you need, because those businesses won't give you things they don't think you'll pay for.

    One need not be morally bankrupt to make choice #1. We all choose things that are more expensive for society because they are more convenient or less expensive for us - lots of regular activities of what patio11 calls the professional/managerial class have negative externalities that the rest of society pays for: air travel, personal automobiles, and lawns all come immediately to mind.

    If you want people to get their medical care from a PCP and their medicine from the pharmacy, then make it cheaper for them. Health insurance companies know this; that's why many plans lets you see your PCP for a small fixed price even before your deductible is met - because they want to incentivise you to get your care in the way that's cheapest for them.

  20. If you’re working with me, please don’t follow this article’s advice. Please communicate with me with direct language and with a goal to advance our project.

    If I have a terrible idea, or am over complicating things, just tell me. And tell me why, and maybe I’ll see it your way, or maybe I’ll convince you the complexity is essential, but we’ll be better for it either way.

This user hasn’t submitted anything.

Keyboard Shortcuts

Story Lists

j
Next story
k
Previous story
Shift+j
Last story
Shift+k
First story
o Enter
Go to story URL
c
Go to comments
u
Go to author

Navigation

Shift+t
Go to top stories
Shift+n
Go to new stories
Shift+b
Go to best stories
Shift+a
Go to Ask HN
Shift+s
Go to Show HN

Miscellaneous

?
Show this modal