HNHacker News
TopNewBestAskShowJobs

Kadrith

172 karma · joined October 30, 2009

Information Assurance/Compliance/Risk Assessment/Auditing/Mamagement type.

Personal email: Wayne@knownGood.com

submissionscomments
Kadrith··on Review My Startup : AppCanvas - Web Development Framework for Non-Programmers.
I went to your site, read the FAQ and then registered to test it but was told I needed to download Firefox. I am using the latest Beta build of Chrome.

My only suggestions at this point are to highlight browser requirements before someone takes the time to register; even though the registration form is short.

Secondly, do we really have to use Firefox?

Kadrith··on Ask HN: HIPAA Hosting?
A system built from scratch can meet HIPAA, and HITECH, without much more than good security. The issue is often with companies that give security an afterthought or have older software that needs to be "made secure."

The key to that link is encryption; it gets Amazon off the hook for a lot of things.

Kadrith··on Ask HN: HIPAA Hosting?
The issue I'd have with this setup is reception. In our Hospital there are a lot of places with little or no reception; Radiology and Lab are two main examples. Due to all of the lead they have around there is no signal.

We had looked at iPhones for CC processing over cellular networks, but the lack of a consistent signal killed that. Which sucks because that would have been much easier and cheaper as a temporary solution than what we are doing now.

Kadrith··on Ask HN: HIPAA Hosting?
I work in IT at a health network; specifically doing compliance, audit and IT security. We have to keep logs for decades from every system used to "transmit, store or process ePHI." A LOT of time is spent chasing shadows when a patient thinks someone might have looked at their record.

Sure there are people who abuse the system but more time is spent on the false positives. Usually there is an innocent reason someone knows why the concerned patient was in the hospital; like they were shopping for baby clothes and put on a lot of weight recently.

With changes in HITECH the requirements for reporting are going to get broader, increasing the cost. Some of this can be planned for but much of it is just man hours to gather, report and store information.

The longest case I have been involved with is just over 2 years of litigation against a physician. The physician was found innocent but all of the emails, medical records, voice mails, etc that might pertain to that specific situation have to be preserved. Access logging is the largest use of disk space in our organization; around several GB per day.

For a hosting organization there is less to save, but there is also additional work in isolating systems. We have a significant investment in datacenter operations and lease the EMR out to specialty practices in our area. Most of the effort with external organizations is talking to their auditor of choice to prove that our systems are secure and isolated, running reports to show who has access to their data or what people did and the extra process to verify each change that affects their information or part of the system. Some of the extra steps are to address Accounting for Disclosures.

Kadrith··on Poll: Are you using SSDs?
We use them in a healthcare environment for our production system and some database systems. The nightly processing for data extraction and reports showed significant improvement. Things that used to take over 10 hours are down to about 45 minutes. I don't know what the old drive speeds were for comparison, but they weren't more than a year or two old.

Our Server team is selective with the drives due to cost and making sure the problem area would really benefit from that type of drive.

Kadrith··on Poll: Do you have Silverlight installed?
I do my best not to use any external plug-ins. If I find a site that looks really compelling I may consider it, but there is a lot that can be done without plug-ins.

If someone isn't willing to put in the effort to create a native web site why should I put in the effort to install a plug-in?

Kadrith··on RIM introduces PlayBook -- the BlackBerry tablet
Facebook has been suing organizations with "book" in their name.
Kadrith··on Spoon.net runs any software without installing it (incl. IE6/7)
Why should IT Managers fear this? From looking at their site it is very similar in concept to Citrix, which is already widely used. The browser plug-in is still needed so that provides some measure of control.

If people are able to install the browser plug-in then they could probably install the applications directly.

Kadrith··on Groupon’s Success Disaster
Why can't the CEO of a site also be a user of HN? Should they have to get someone else to post their article? How would we track that and is it really worth the effort?

Your posts that got downvoted were the short ones without context or value to the conversation. All of your posts that actually provide something to the conversation still have positive points (at the time of posting).

Kadrith··on Groupon’s Success Disaster
I'd wager you are getting downvoted more for how you are saying things, rather than what you are saying.
Kadrith··on Groupon’s Success Disaster
I thought the merchant was able to set a limit, if they choose to. Or am I wrong?
Kadrith··on Google Instant Proves Google's Design Process is Broken
I just open the links in a new tab, then once I have several open I check to see if they are what I want. If they are not I close them and go back to the search tab to refine what I am looking for.

Slightly different topic, but I like Wonder Wheel for searching as well. I start with something intentionally vague if I don't know the exact phrase I want for describing something. Then I select the best choice from the Wonder Wheel.

Kadrith··on Google fired engineer for breaking internal privacy policies
While it is no guarantee of any change I like that they are not attempting to sweep this under the rug. There are a lot of companies where people have access to a lot of sensitive data. All you can do is screen the employees, limit their access where possible and audit their use of the security.

But then someone needs to audit the auditors. Just before I started here we used to have an employee who would look in the Oracle database used by Lawson to check payroll data. Nobody knew for a long time since he was the UNIX admin and DBA.

Kadrith··on Ask HN: Has a candidate's political views ever stopped you from hiring them?
> I agree to what you said, but isn't it the problem that we consider people with political views that we _strongly_ disagree with, as less smart or smart but evil?

I don't look at it that way. Smart people can disagree if they place a different weight on the various data points.

Kadrith··on Editorial: The Google Algorithm
Not even close to a valid comparison. When has Google gone to the lengths that Microsoft did to tie services/applications together? What indication have they shown that, even given the opportunity, they would sabotage another vendor for market share?
Kadrith··on [dead]
http://www.paulgraham.com/identity.html
Kadrith··on Diaspora pledges have just crossed the $50,000 mark
They will release code for anyone to host their own site, but provide a subscription service for people that do not want to manage the code. I'd imagine some of the sites will be free, but they may not have all of the features possible. For example a company may want to use the subscription service for internal use but not want to host it.
Kadrith··on Wil Shipley on Apple's Patent Enforcement
> - Asserts patent infringement claims against non-copiers or against a large industry that is composed of non-copiers

Isn't this what the case will determine? If that is the situation then nobody really knows if there is infringement until the courts decide. They have also only filed against one company right now.

I don't agree with the action, but I don't think they even remotely qualify as a patent troll.

Kadrith··on Apple Sues HTC for Patent Infringement
How would your father update the iPad without a system running iTunes? That is the only major thing I do not like from what information has been released.
Kadrith··on Google's Parisian Love Superbowl Ad
Depends on how cute she is...
Kadrith··on Google's Parisian Love Superbowl Ad
I have quite a bit of loyalty to Google. I use them for RSS, Email, Calendar, Documents, mobile alerts, maps and phone service among other things.

I have no doubt that Google will improve and adjust to any threats Bing might one day bring. The cost of me moving all of my data and changing habits to another place would be high. That and there is no way in hell I'd trust Microsoft with my data.

Kadrith··on Ask HN: Should TechCrunch Reveal Who Paid For Posts?
Yes, not because they offered the gift but because they offered it knowing that it was against TC's policy. Providing the company's name would help ensure other companies think hard about bribing TC writers.

Right now the TC writer has been punished, rightfully so, but the company has gotten away with it.

Or are we to assume that any company he wrote about may have provided the bribe?

Kadrith··on Introducing Google Public DNS: A new DNS resolver from Google
> Not monetizing this? Where do you think their motivation is coming from (to make the world a better place?)

One thing I like about Google is that they research and share infrastructure technologies. Why is there any reason to think that they would not be interested in improving DNS if it makes the Internet a better place for applications?

They would likely benefit if more applications are moved to the Internet but that does not make this an "evil" or deceptive tactic. What other company today would improve an Internet protocol or create a new protocol (Wave) and release it openly in an effort to move the Internet forward?

Sure you need to be mindful of how data is used and the services you sign up for but that applies to any service, including OpenDNS.

Kadrith··on Google Wave's Phased Beta is Disappointing
"(unless they open this protocol to other companies)"

http://www.waveprotocol.org/

← PreviousPage 4 of 4