Hacker Newsnew | past | comments | ask | show | jobs | submit | pareidolia's commentslogin

The bigger problem is that this model is inherently flawed. Even if end-to-end encryption with browser crypto were implemented, there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

I've been forced to use this service, by way of healthcare professionals just disclosing correspondence to this service without asking for my consent.

Smeerlappen.


> there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

This is not the case in the land of DICE-like key derivation; see TKey protocol for example. You can download and run an actual rv32 program on actual FPGA over WebUSB without having to worry about its provenance. If the program is modified, firmware will derive a completely different key.


Zivver is a web application. The javascript that comes with the webpage can change at any time for any reason, as Zivver sees fit.


I'm simply pointing out that web standards allow for secure end-to-end communication, and more, in fact they happen to allow arbitrary cryptographic constructions—as long as the program itself never changes.


But this requires special hardware right?


Not necessarily. You can run TKey in qemu :-) etc. The hardware aspect is what makes it easy to use, with WebUSB and all. The derivation algorithm is key. And it takes program binary as parameter to Blake2 hash function.


Security is an illusion.


Then reply with your passwords.


******

Luckily HN automatically detects when you post your password and obfuscates it with * - try it out yourself!


You think I was born yesterday :P


hunter2


Doesn't look obfuscated to me.


It only obfuscates it for others :)


Thats the genius of it, to us it looks like **** but you see hunter2. Its an automatic replace.


Oh whew, I thought he was using hunter2 as his password too.


This comment should be flagged for medical misinformation.


The NHS is so far behind the current science it's unreal. They're still using the 50% hypopnea defintion.


CPAP makes breathing harder than normal. It's antiquated technology, superseded by something called bilevel-CPAP (BiPAP) which has the quality that it makes breathing actually _easier_. It's slightly more expensive than plain CPAP so insurance and doctors withhold it from the patients and try to keep it a secret.


CPAP is NOT "antiquated technology." It has different indications from BPAP. Some people tolerate one better than the other. We are not "keeping one a secret."


He did say that having successive revisions is doing it wrong. Literal quote (from the translation)

"So then you get these version numbers, even with decimals, version 2.6 or 2.7. That's nonsense. While version 1 should have been the finished product."

So I think the nuance you are trying to make is unsupported. He did mean: think it through once, write it out once, version 1. Done.


Having a final output as a single version of the product does not imply anything about the production process behind it.


It's a runtime environment, like the JRE or Mono CLR. By your logic, the JRE is an emulator because it has a "java virtual machine."


WINE is not a VM though. It is an implementation of the Windows API.

The Wine documentation admits that it is emulating the Windows API.

https://wiki.winehq.org/Wine_Developer%27s_Guide/Architectur...

Of course there is no hardware emulation, so all Windows binary code is running natively with no performance drop. That's why it was called WINE. But still there are two meanings of the word. Hardware emulation or OS emulation at API level.


These two meaning are a little like how “theory” can mean different things to scientists vs non-scientists.

In the context of computers, “emulation” has a specific meaning and one which isn’t applicable to WINE.


> but their sleep studies are nearly perfect.

That's because most sleep studies are crap, unfortunately. I only got diagnosed with my 3rd PSG, which included the rare Pes because I insisted on it.


I really believe that too


CPAP doesn't always provide adequate treatment. Some reading: https://web.archive.org/web/20211006015015/https://sleepbrea... and a webinar: https://www.youtube.com/watch?t=1321&v=Syv7YcHbTCI


That's Jason Sazama a.k.a. TheLankyLefty27. He's good, he knows about UARS and flow limitation. His experience with bilevel/ASV modalities is very limited though.


AHI really doesn't mean anything besides the trivial: the density of apneas and hypopneas (relative to the applied definition of both) https://onlinelibrary.wiley.com/doi/full/10.1111/jsr.13066


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: