I just find it incredible that in 30+ years the industry hasn't adapted one bit to the brittle failure modes of certificates. I did some subcontract work with Verisign to deploy their CA infrastructure back in the early oughties and it felt like a solution was overdue way back then. I was at Google in the teensies when gmail broke due to expired SMTP certs. WAAAY overdue by then. Here we are, a decade later and it's still the same lol.
The number one thing for me would be to standardize methods to implement soft failures. Minimally in standard clients and libraries the ability to warn when certs are nearing expiration. Cert extensions to declare lifecycle expectations and possibly even warning endpoints for notification. Basically some way to empirically look at a valid cert and know something is wrong before it fails.
There are all sorts of potential privacy/security issues with any feature built in this area so it would have to be done carefully, but I think useful improvements could easily be made.
I'd like to see better support for networks that aren't connected to the broader internet, or moving away from X.509. Note that these are contradictory. X.509 was intentionally designed to support offline verification and has a lot of elaborate ceremony to support it (like all the rest of the OSI stack). The industry just doesn't, so we get the worst of both worlds.
This is great but as someone in infrastructure tech at a large financial, there is almost no framework for cleanly separating control from data plane operations, read vs write, anything. As of right now you have to build nearly all of that yourself.
It feels like juggling pipe bombs and I have a ton of empathy for the teams being pressured by the business to roll them out with no appreciation for the regulatory rat's nest that ensues.
I experience the same thing very frequently. I likened it to activation energy in a reaction, that no matter what I did I couldn't create the required electrochemical bias in my brain needed to put ideas into action. It's like being stranded in your own mind, you know what you need to do, but the 'go' just never arrives.
I eventually discovered that the adrenaline response from extreme stress ('if I don't get this fucking thing done by 7:30am I'm fired' kind of thing) allows me to lock in and do the thing.
>I eventually discovered that the adrenaline response from extreme stress ('if I don't get this fucking thing done by 7:30am I'm fired' kind of thing) allows me to lock in and do the thing.
I went the other way. I knew from the start that this "trick" helped me work. It took until my 30s to learn that that's ADHD and that I can skip the stress with medication. God knows how many years of life I've robbed myself of with the stress spikes.
For me, the side effects of the medication are intolerable. I wish there was a way to get that starting impulse without stimulants or SNRIs which kill my libido
If it helps, another trick I used to use was external help. As in, calling a colleague and starting in pair programming or simply discussing or whatever. Having eyes on me had the same effect as the looming deadline without the stress.
You have to learn to be super trigger happy with it, otherwise you fall in the trap of 'I've been inactive for too long, I can't call and reveal that I haven't started'.
A phrase I've heard is to "put it into existence."
By sharing the idea with somebody else, even just communicating your intention, it becomes partially reified, better-anchored to things outside yourself.
Yes, I agree, I'm lucky that legality was never a concern.
I'm covered by public healthcare so access to medication is stable and costs literal cents. My only complain is that ADHD is not at all known here so it took time and luck to get a diagnosis, because the possibility wasn't in my radar.
It was a surprise to visit London recently and see the amount of ADHD-related ads everywhere (books,clinics, etc).
>interesting. the meds help me in many ways, but often I still need that activation energy to kick things off
Similar problem here. ADHD meds have different thresholds for allievation of ADHD symptoms and for negative effects.
Usually the bigger the dose, the more symptoms allievated, but the higher the chance of side effects.
In my specific case, methylphenidate had too much side effects, but was the one that helped the most with focus/task prioritization/task recall.
Lisdextroamphetamine on the other hand has much less side effects (sweating, emotional detachment), but doesn't help that much with task recall and prioritization. But still helps with anxiety, emotional deregulation (being too emotional, too fast, over non issues and taking long to calm down) and general focus/working memory.
Funny that people talk here about looking at ADHD more like executive function disorder. Because I first came upon that idea in Thomas E. Browns video seminars. And he wrote a book on that in 2005 - Attention Deficit Disorder: The Unfocused Mind in Children and Adults.
I actually used material from his book, Outside the Box: Rethinking ADD/ADHD in Children and Adults, to help get diagnosed. I already had one negative diagnosis behind me. And in that book Brown has a lot on clinical requirements for diagnosis) and how research data shows that it's wrong.
He also has books on high functioning ADHD+ASD, like Smart but Stuck and ADHD and Asperger Syndrome in Smart Kids and Adults: Twelve Stories of Struggle, Support, and Treatment. Tho the last two are more about using specific cases as examples of how you don't have to be "stupid" to have ADHD.
Because to quote the first diagnostician, "you sure do have a lot of ADHD symptoms, but I've never seen anybody with ADHD who has such high scores on the iq tests". Too bad that being good at guessing a pattern in a picture doesn't correspond to life success.
That wouldn't work (for me, at least). As soon as I figured out the pattern, I'd know I had a week after the 'deadline' and then the pressure is off until that week is passed/nearly up
That's been my experience with tricks. I'll think of some clever trick to work around my ADHD, and it'll work great for about two weeks. Then after that I'll start anticipating it and working around it. The self-defeating nature of ADHD might be one of the most frustrating things.
Everything is due NOW, seems to work best for me. Just a list to make empty, so I can sleep. Give me deadlines, or ask for estimates, and the task is doomed.
I use the same analogy explaining to people what my meds do. They’re a catalyst in that they lower the activation energy of doing anything other than doomscrolling
$100 for a somewhat specialized, durable medical device that has to meet regulatory standards and will be used daily, possibly for years, by healthcare providers to do patient assessments?
A 3D printed option is going to require a 3D printer, appropriate filament and should be unit tested to ensure it's within spec. The durability is going to be suspect no matter what. It's an awesome project and I'm sure would be a welcome addition to the 'boostrap humanity' catalog of 3D printed parts, but for everyday doctors plunking a hundo on a good tool is going to be a no-brainer.
A commercially sold hospital stethoscope is a legally marketed medical device made under a manufacturer quality system, with labeling/instructions, device listing/registration obligations, adverse-event/complaint processes, cleanability expectations, liability, warranty, consistent materials, and repeatable acoustic performance.
An open-source 3D-printed stethoscope is a cool project, but unless it is produced and controlled as a medical device, it is not equivalent to what hospitals are buying for daily patient care.
Personally, if I was a hospital or a doctor, it would be a no-brainer for me to go with the commercially sold stethoscopes. All those factors I listed above, if neglected, can end up costing a lot more in terms of consequences. I would rather pay a fixed extra overhead price per unit to sleep well, knowing I don't have to worry or think about those factors at all. And, I would assume, most of the patients would be in favor of that as well.
I know nothing of this, but it looks like stethoscopes are Class 1 medical devices with 501(k) exemption, and fall under the "Good manufacturing practices" guidelines of Quality System Regulation (21 CFR 820), but that seems pretty squishy.
> $100 for a somewhat specialized, durable medical device...
And one which is treated as a status symbol, at that. Part of the reason a good stethoscope costs more is because it looks nicer, not just because it works better.
I experimented with this way back when custom GPTs were first released (looks like late 2023). There are a few / commands you can use to suggest what product to inject, how overt, etc and a generic /operator command to send whatever you like 'out of band' from the chat.
One of the most interesting things is when it starts pitching a product and you start interrogating it about why it picked that product. I haven't used it in probably a year so it may not do the same thing now, but back then it 100% lied consistently and without any speck of remorse. It was rather eye opening.
I was going to use that to start a private voicemail company in my little rural town. Had the name and everything ready to go (mailvox!) but I was too broke to afford the second phone line xD.
Plus in retrospect I'm sure it would have been used almost exclusively for illicit purposes. But that wasn't really something I had thought of back then.
reply