News for hackers. Stuff that matters.

Ken_Adler

ACA (ObamaCare) is available. Your monthly cost for top tier coverage can be as low as ~$5 a month for a family of 4.

The qualifying income cap is based on you anticipated "Modified Adjusted Gross Income". They don't count assets. This means that if you may have losses that bring your income for the year down to the income limits, then you can honestly say that and get subsidies. If you currently don't have any income, but you can imagine yourself earning the minimum income in the calendar year, then you can claim that. (If you are lower than the minimum for ACA, you will get MediCal for free)

For example, in California, for a family of 4, if you can honestly estimate that after potential losses and potential earnings, your modified adjusted gross income would be between $39,750 - $53,000, you can get top tier coverage for ~ $5 a month, no co-pay, very low prescription costs.

If your situation changes (you start working again) you just notify the state and either pay a higher rate or cancel and use your new company's plan.

Search for "2022 ACA Income limits [your state]"

Here is the 2022 chart for California: https://www.coveredca.com/pdfs/FPL-chart.pdf

Re:Decentralized Identifiers (DIDs) v1.0 (W3C draft) on Tuesday June 22, 2021 @09:30PM (#27599688)
BC's "orgBook"... running on Hyperledger Indy blockchain

https://www.orgbook.gov.bc.ca/en/home

This link has a search for Cannabis in BC's org book

https://www.orgbook.gov.bc.ca/en/search/name?query=cannabis&...

Re:Decentralized Identifiers (DIDs) v1.0 (W3C draft) on Tuesday June 22, 2021 @05:15PM (#27597311)
Especially in British Columbia. The government is way forward in implementing "TrustOverIP.org" type DID/VC/ETC systems for interacting with the government
Re:Decentralized Identifiers (DIDs) v1.0 (W3C draft) on Tuesday June 22, 2021 @05:05PM (#27597196)
Generally speaking, In the model of VCs et al espoused by TrustOverIP... the user's "Did" is never publically exposed.

The only DID that goes into some sort of Trust Registry is the DID of a PUBLIC ISSUER. (eg. GLIEF, Good Health Pass Coalition", etc._

For the user's did, it is primarily exchanged off chain, in a unique pairwise manner. So the user has a different DID for each relationship, and that DID is not publically disclosed anywhere.

Check out the Good Health Pass Interoperability Blueprint for one such Governance Framework which will publish by end of month. https://wiki.trustoverip.org/download/attachments/76241/GHPC...

Re:SecureDrop: Share and accept documents securely on Sunday January 24, 2021 @11:59AM (#25893538)
I am inspired by Aaron's memory in an on-going manner as I try to walk in his footprints as a fellow ThoughtWorker...

https://www.thoughtworks.com/news/thoughtworks-mourns-aaron-...

Re:IP over Avian Carriers on Saturday November 21, 2020 @12:58AM (#25168092)
On of my favorite memories is talking about this RFC with Jon Postel. RIP.
Re:JWT scope claim compression using a bitmap on Saturday May 23, 2020 @05:59PM (#23286909)
I commend you for the attempt...

But the issue you are trying to mitigate (heavy tokens due to complex scope strategy) is a symptom of a bigger problem that has caused OAuth-using folks to scratch their heads for a long while. (of course, also realtes to non-Oauth JWTs)

Tldr: The new "Cloud native" way of solving for this is to not push your "Permissions" thru the token.

Basically, you limit the scopes included in a token to just a few basic ones (essentially assigning the user to a "Role" - think RBAC)....

... and then you use a modern Authorization approach (e.g. CNCF Open Policy Agent) to implement the detailed/fine grain authorization.

Its hella cool, declarative, distributed, and infinitely scalable...

... and it obviates the whole "heavy JWT" issue before it starts....

Source: This is what I do day in day out in my day job....

My current favorite Shiny new thing: www.Grain.co
I'll look to see if there is anything I can share publicly...
LOL.... I know what you are saying,

It's interesting how different people process information.

All I can say is that it works for me.... and I find it to be highly impactful on my co-workers etc.

There is something about capturing nuance that "multimedia" really helps with....

So my mission is to reduce the effort it takes for me to do this to less then it takes to just write up and share notes...

I do it mostly so I don't have to repeat myself. :)

I use the clips so that others can gain from the kernals of wisdom those clips provide... without having to commit to some portion of an hour to find the kernal themselves.

Saves everyone time and enforces compliance to decisions made )

Also, of course, by manually editing down a deeply technical discussion from an hour to 20 minutes helps me REALLY listen and understand what the speaker is saying....and so it also helps me to continue improve my knowledge...

Can confirm the "new way of working" when it comes to video clips ...

I have made it a part of my worklife to share with co-workers EDITED video highlights of zoom calls and training sessions. This includes conference talks I find on youtube (e.g. Kubecon talks) that I want to have colleagues view.

I can usually cut down an hour talk/call. to around 5-20 minutes of good high impact content.

Historically, I just record in the cloud on Zoom (using all the nice extra features around auto-transcript, recording speaker and shared screen separately, etc... ) and edit it in Adobe Premier.

I've got the manual workflow down where this is something I don't do every day.. but several times a week is fine. Editing ain't pretty, but it is effective.

Since the lockdown, I have been working on the other end of the "pipeline"... the INPUT to Zoom. After a couple of false starts (OBS, CamTwist, Wirecast...). I ended up implementing Ecamm Studio Pro....

Looking forward to exploring your tool....

This. Just a few days ago I wasted a few hours playing with OBS, CamTwist, and a few other "chroma key capable apps"... all with no luck... Zoom's built in beats them all....

What I really would like to do is have my green screen capabiity regardless of the video conference app (e.g. Facetime, FB, etc)...

I ran into the issue with syphon and Camtwist... and I gave up :)

Re:Ask HN: How do you currently solve authentication? on Monday January 27, 2020 @04:07PM (#22163794)
For user authentication: Hosted (Auth0 or Okta), self-hosted: Hydra

For Service Identity: SPIRE/SPIFFE... (or Oauth CC flow if mTLS is not possible)

Re:Show HN: Hydra – Open-Source OAuth2 Server on Monday July 01, 2019 @01:48PM (#20327865)
In my research, Hydra is the only OSS OIDC server implementation that is built from the start in a modern, containerized manner.
A great book to read on this topic is 'How To Wreck A Nice Beach"

https://www.amazon.com/How-Wreck-Nice-Beach-Vocoder/dp/16121...

Re:RFC-1149: IP over Avian Carriers on Wednesday June 05, 2019 @07:20PM (#20110086)
Discussing RFC-1149 with Jon Postel is one of my favorite Internet memories... makes me think of him everytime this RFC is mentioned.
Re:School is all about signaling, not skill-building on Saturday March 16, 2019 @03:40AM (#19406815)
Crazy story: my son actually did what the author suggested, he talked his way into a free education at Princeton!!!

He audited all the classes he wanted to... no diploma, but what a great experience (and a great story....)

From the article:

Ponder this: If a student wants to study at Princeton, he doesn’t really need to apply or pay tuition. He can simply show up and start taking classes. As a professor, I assure you that we make near-zero effort to stop unofficial education; indeed, the rare, earnestly curious student touches our hearts. At the end of four years at Princeton, though, the guerrilla student would lack one precious thing: a diploma. The fact that almost no one tries this route — saving hundreds of thousands of dollars along the way — ....

Secure Production Identity Framework For Everyone

https://spiffe.io/