Hacker News new | past | comments | ask | show | jobs | submit | j33zusjuice's comments login

Agreed. Isn’t it better to donate to something that’s actually used than something that might have an audience of 1? It’d be nice to see donations to newer projects gaining momentum, but they get to choose how to hand out the cash. I just hope it’s not projects that are already exceptionally well funded (it’d be kinda ridicous if they gave $100k for Linux, for example).

I don’t know the answer, but I think it depends on how the money gets appropriated. You can’t buy a TV spot and call it good will, but could you setup a food drive in a large target city and you setup a bunch of fun shit for families and kids, and during which you also promoted your business. Can a corp write that off? Seems like the answer would be yes, but maybe not.

Are you saying that as a good or bad thing (an afternoon)? I have no clue if that’s good or bad, never done this kinda thing (more of a sysadmin than a SWE).

Comparatively very good. There are cases where it's weeks worth of paperwork and documetation.

No. WantedBy will have no impact on startup. Before or after would, but not Wantedby.


HIPAA is a joke in the first place. How to implement HIPAA compliance is entirely up to the company dealing with the data. There are no prescriptive standards to protect your data. Who isn’t HIPAA certified? It has to be the easiest thing to certify for from a technical perspective. Research teams run records through some NLP shit to depersonalize them, but we all already know it’s trivial to reverse engineer that data to its origin.


HIPAA is a legal framework to describe lawful disclosure of health information- defining who and when, and what steps must be taken when unauthorized / impermissible disclosure happens.

It is technologically agnostic, because it applies whether your doctor is fully remote and everything uses electronic records, or if the provider is still using pen and paper and carrier pigeons.

For actual security details, there may be some regulations with the change to the mandating of electronic records, but nothing in HIPAA ourself. For that, you want to look for organizations that have a certification like SOC2 or similar.


HIPAA is not a joke, employees can be held personally liable for breeches. At Helix we take HIPAA very seriously


> HIPAA is not a joke, employees can be held personally liable for breeches

Okay, great. So which employees were held personally liable for these two breeches? I got "The Letter" telling me I was one of the victims for both of them.

https://www.hhs.gov/hipaa/for-professionals/compliance-enfor...

https://en.wikipedia.org/wiki/Anthem_medical_data_breach


"There are no prescriptive standards to protect your data?"

How about the 18 standards labelled A) through R) in page 97 of: https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/ad...

I am no expert but HIPPA seems far more prescriptive than say GDPR or PII regulations.

I do agree that self-certification leads to perverse incentives and lowers the bar


Because they are.


Founders aren’t here, but all the workers are, and they’re overestimating HN’s prominence? Or are you overvaluing the position of founder. Like you’re on some Randian philosophy shit, or something.


They partner with them depending on the project, though.


Feels like it kinda fits under fake social proof. https://www.deceptive.design/types


Have you already looked here?

https://alternativeto.net/software/stripe/

I don’t run any commerce sites, myself, but is there a big difference in using stripe vs a more traditional processor, like working with CardPointe or something?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: