pillfill's comments

On: Ask HN: Who is hiring? (December 2020)

[pillfill]

Apothesource | Charleston, SC or Remote (US only) | Full-Time, Remote OK! | https://apothesource.com

Apothesource is a healthcare consulting company that specializes in building software that integrates directly with Electronic Health Record (EHR) and other healthcare systems.

Open Roles:

Java Service Developer: Develop RESTful microservices using Java, Maven, Spring Boot, and Docker / Kubernetes

Web API Wrapper: Extract information from existing web front-ends and develop new RESTful APIs on top of legacy web forms.

Please send your resume to hnjobs@apothesource.com

On: Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting...

[pillfill]

> Why a new standard than to push for reform to the current standard?

Or even just an opinionated library with some basic guardrails to prevent bad configurations.

[kelnos → pillfill]

That's tempting, but as long as a standard has design flaws, there will be libraries out there that don't prevent bad configurations, and people (through innocent ignorance) will use them and end up in a bad place.

[blattimwind → pillfill]

The whole point of modern cryptography is to take all the oodles of rope to hang yourself with and hand it over to the cryptographers, to leave just the absolute minimum amount of rope with the application developers.

JWT is the opposite of that. It's essentially a reenactment of the bad parts of 90s crypto, including RSA and NONE ciphers.

[joepie91_ → pillfill]

I mean, "basic guardrails" is basically exactly what Auth0 tried to do here with their algorithm check, and see how that turned out.

On: Building a Stateless API Proxy

[pillfill]

Unnecessarly and overly dramatic, essentially arguing that because JWT/JOSE is insecure because it can be used in an insecure manner.

On: Blocking website ads with a hosts file

[pillfill]

Wow. I automatically assumed that you could still circumvent the random div IDs by just matching against the text itself (https://github.com/gorhill/uBlock/wiki/Procedural-cosmetic-f...), but they even obfuscate that!

On: Introducing Jib — Build Java Docker images better

[pillfill]

It'll be really interesting to see where this goes. We currently use Fabric8's Docker Maven Plugin (https://dmp.fabric8.io/) for our Java-based containers. It's a little verbose but works really well- it allows us to run our integration tests directly against the final container images (+ any container dependencies) as part of the standard Maven build.

[blahblahblogger → pillfill]

I wish fabric8 had Gradle support.

This ticket implies that it isn't "build tool agnostic" (https://github.com/fabric8io/fabric8-maven-plugin/issues/609...) and I found a few github repos that are "gradle plugins" for Fabric8 but they only had a few stars or were out of date.

[organsnyder → pillfill]

The Fabric8 Maven plugin is awesome. It has some rough edges, but streamlines a ton of things.

On: US Expected to Withdraw from UN Human Rights Counc...

[pillfill]

Your claim and "source" are incoherent nonsense. I regret spending 5m of my life trying to make sense of it and am only writing this comment to help others avoid the same trap.

On: Non-profit’s $300 hepatitis C cure as effective as...

[pillfill]

Not OP, but I'm familiar with a couple primary care providers that don't file insurance claims. It's refreshing to see up-front pricing on their website for services they offer, e.g.: https://www.palmettoproactive.com/services-pricing

[conanbatt → pillfill]

I agree! Its great, but lots of people have insurance already so they want to use that to get their primary care, so that 200 dollar visit becomes 40 bucks.

On: Bering Sea loses half its sea ice over two weeks

[pillfill]

There's nothing inherently political about the this article or the science in general here.

There is, however, a very concerted effort to convince people that the science of climate change 'is political' in order to give those who find the issue uncomfortable license to question the legitimacy of the entire field of study. That's as dangerous as it is absurd, and it's important that it's challenged whenever it's encountered.

On: Ask HN: Who is hiring? (November 2017)

[pillfill]

Apothesource | Healthcare IT | South Carolina | Full time | REMOTE (limited to US Citizens)

We're a small team of senior Healthcare IT engineers headquartered in Charleston SC. We specialize in building and orchestrating REST microservices for large healthcare providers. Primary qualification is experience building REST services using a Java-based microservice framework (e.g. Spring Boot, Dropwizard). We're also a shop heavily focused on containerization, so any previous experience or desire to learn Docker and/or Kubernetes will be put to good use.

If interested, please send your resume to jobs@apothesource.com.

On: We've Spent Billions to Fix Our Medical Records, a...

[pillfill]

While FHIR is certainly making health records development more approachable and sane for developers, it isn't going to fix the large-scale data interoperability problem. Even if we completely suspended disbelief and assumed it was perfectly and consistently adopted across all EHR products, it still is just a structured way of exchanging data like HL7- the much more complicated issues preventing semantic interoperability of clinical data still exist.