skysight-inc/HackerNews huggingface dataset:
Leave scrum to rugby, I like getting stuff done
Since there isn't an abstract, I'll drop a key quotes from the intro -

"In this paper, we point out a new vulnerability and show an attack, the NXNSAttack, that exploits the way DNS recursive resolvers operate when receiving NS referral response that contains nameservers but without their corresponding IP addresses (i.e., missing glue-records)"

"The NXNSAttack is more effective
than the NXDomain attack: i) It reaches an amplification factor of more than 1620x on the number of packets
exchanged by the recursive resolver. ii) Besides the negative cache, the attack also saturates the ‘NS’ resolver
caches."

"Essentially the attacker issues many requests for sub-domains of domains authorized by its own authoritative server (step 1 in Fig. 3). Each such request is crafted to have a different sub-domain to make sure it is not in the resolver’s cache, thus forcing the resolver to communicate with the attacker’s authoritative server to resolve the queried subdomains (step 2). The attacker authoritative name-server then returns an NS referral response with n name-server names but without their glue records(step 3), i.e., without their associated IP addresses, forcing the resolver to start a resolution query for each one of the name-server names in the response"
Some older discussion:

https://news.ycombinator.com/item?id=11352546 (2016)

https://news.ycombinator.com/item?id=4791284 (2012)
Godot is actually open source, unlike this - you can modify it however you like and still sell your game. Defold allows you to see the internals, but if something doesn't work the way you want, you can't change it and still get to sell your game.
>10 women believing that there is sexism rampant in tech doesn't mean that there is

And this attitude is why it's going to be hard work to change things to the better. You have no interest in listening to what women tell you. You'd rather cherry pick studies of dubious quality and relevance, and tell your female colleagues (if any) that they must just be imagining it all.

>[young women] earn more money than their male counterparts

This seems bogus, at least in reference to the USA. At most, it may the case that women earn slightly more than men straight out of college. The gender pay gap still clearly favors men overall.

As for suicide, I think men have pretty much always been more prone to suicide than women. If that's an argument for the non-existence of sexism, then you'd have to draw the absurd conclusion that, e.g., there was no sexism in Victorian Britain. See figure 1 here: https://watermark.silverchair.com/dyq094.pdf?token=AQECAHi20...

All that being said, it is a common misconception that sexism is by definition something that harms women and not men. Sexism certainly harms men too. The root cause of sexism is the power asymmetry between men and women. Generally speaking, men exercise that power in their own broad interests. But of course there are plenty of individual men who lose out.
Show HN: Python Client for Blockchain Exchange API
You can surely do better than drive-by snark?

Where do you feel this is likely to break down? What would a better approach look like? Is it intractable or can one have both simplicity and power? I suspect the answer is "yes" in which case OP deserves a better response.
Is baggage handling specific to an airline? It looks like it's a service provided by the airport.
Any time/effort you spend writing tests or fixing bugs caused by permitting whitespaces in filenames would be better spent on anything else.

Any time/effort you spend writing tests or fixing bugs caused by permitting Unicode characters in domain names would be better spent on anything else.

Any time/effort you spend writing tests or fixing bugs caused by permitting leap seconds in timestamps would be better spent on anything else.

Etc.
If We Are So Rich, Why Aren't We Happy? (1999) [pdf]
Once I heard there was a company called Red Hat...
Much the same here, but I tried fd the other week, and for simple searches it definitely feels much quicker and "lighter", so worth adding to the toolkit imo.
Show HN: I made an example landing page you can use to improve your copywriting
Set aside some time at the beginning of each day to buff your tools and skills. Over time these sessions compound like interest and make you wealthier in human capital and a more valuable employee.

I do it for one pomodoro, 25 minutes. For me an example might be installing and learning a new vim addon or scripting a common task or focusing on a tough corner of a programming language. Something useful to the job but not directly making progress on an assignment. This is an easier habit to acquire if you do it from the start, before your routine consolidates.
Really not anything beyond the mentioned plugins. On my old system, I could open the offending pages in Chromium and they'd usually work there. On my new one I have no second browser yet, because my distro is Ubuntu-based and I've purged the snap bs.
Original Art or Digital Copy? Can Your Brain Tell the Difference?
I'm suggesting language is fluid, never static.
Corona and Isis are two common branding gotos that will now be forever out-of-favor.

Also, you probably can't name anything COVID, but I think that's a less likely scenario.
The Line6 Variax does this. With their digital modelers, you can set different effects for each string. Pretty wild.
Could you elaborate? I've never heard that before.
So, what is it that you don't like about Racket macros? The quote doesn't explain it. Is it the fact that there are some concepts to learn before you can use them effectively?

> that precludes hygienic macros.

The fact that you are so fixated on hygiene as problematic, but can't really explain why you think it's like this, is a huge red herring.
It is well known amongst statisticians that several states cook their numbers in different political ways. Belgium is known to massively over report, every death is COVID-19 there. Belgium got famous for having the highest death rates worldwide, which did not make sense at all.

Many others states don't test dead flu suspects at all, and thereby don't report as COVID-19. You only see the real numbers later with the excess mortality.

But recently (starting with April 24) even these numbers were cooked as they applied wrong models for the last two weeks. They were proven wrong when you compare the reports for subsequent weeks via archive.org.

Other known cheaters are Japan, Turkey, Russia, Germany. It's an interesting game and not many whistleblowers or good journalism.
I totally agree, I think we're going to have a multi-decade period of technological improvement in this area from the first useful implementation to full sensory immersion.
Which mobile browser? Android Chrome looks nice, draggable sliders, all animations working.
GSaaS
The Growth of STO Industry: Then and Now
Please tell me that people were not using the batteries as hammers.
Closer is `apropos` which uses an index of installed man pages.
> so that proves that the most important allegation of this person is correct

We'll take your word for it. I assume you have ascertained that what your sources are claiming is correct and that the data displayed previously was also correct?

I can think of many other possibilities and prefer to wait for an official investigation before yelling for someone's head.
I've been using `jsown` for all my Common Lisp JSON needs. There are more JSON libraries and I think JSON support for Common Lisp is good, not perfect, but no worse than most other popular languages.

With regards to Steve's issues: ask yourself whether they apply to you.
Hey HN!

I made a landing page based on high-conversion copywriting best practices:
https://uselander.xyz

It's a proven SaaS website blueprint you can clone on Webflow or download as a .zip to edit for your own projects.

It outlines the the considerations and points your page should address in order to sell your value & turn visitors into customers.

These topics are covered:
- Headlines
- Social proof
- Objection handling
- Customer language
- Benefits instead of features
- Addressing pain points
- Differentiation
- Call to Actions

You'll also find some links to awesome free tools, guides, and resources

I'm really excited to share it with you. I put a lot of work in to it. The findings are based on research and my personal experiences creating high-converting landing pages for clients as a freelancer.
The vast majority of developers that would be interested in this engine only care about building games with it and selling those without any worry, without any interest in selling any modifications to the engine itself as a new package. They are presumably the target audience for whom this can be considered a permissive license.
https://password-diary.webflow.io/

Does the link work with https?
> Would the Go runtime lock you to that specific thread and block it or sleep that goroutine and move it to another thread when its no longer sleeping?

By default, the Go runtime does not guarantee any affinity between Go-level threads (goroutines) and OS threads. There's a way to forcibly pin a goroutine to a specific thread[1], but it limits your concurrency.

The Go approach does indeed cause problems wrt. OS-thread-affine state. It's a tradeoff. For RPC-oriented network services, the Go niche, OS thread state is very rare.

[1]: https://golang.org/pkg/runtime/#LockOSThread
Maybe so, but a lot of their stuff is the same castings as everything else made in that part of the planet. Compare:

http://www.powermatic.com/us/en/c/planers/P260/?reset=true

https://www.grizzly.com/search?q=((category:"Planers"))+AND+...

As near as I can tell, the 20" planers differ primarily in what color they're painted. I say that having used and wrenched on both in various shops I've worked in.

I also have firsthand experience with HolyTek's 24" thicknessing planer (no direct link, because god forbid the web actually worked the way it did in 1998), and it sure looks to be the same machine as Grizzly's offering in that size and horsepower rating:

http://www.holytek.com.tw/product.html?cid=2 click single and double sided planer

https://www.grizzly.com/search?q=((category:"Planers"))+AND+...

Grizzly may be organizationally and financially independent of the other vendors, but they sure seem to share manufacturing or sub it out to the same foundries and machining outfits.
I actually considered that when writing my original comment but "the mythical man-month" is such an obvious reference that it felt weird to change it. I suppose you can also think of it like "horsepower", it's an equivalency but doesn't actually mean that the power literally comes from a horse.

Still, point taken, I'll consider using person-year next time.
Yeah, sure. I can’t think of a single way in which they’re different either.
Of course the attacks have to be “highly sophisticated” in order to beat the “world-class” system that “highly paid” EasyJet security experts have put in place to secure customer data, which EasyJet “cares deeply” about.
So I can just decide that "Donald Trump is a space alien" actually means that I'm gonna go buy a burger today, and this isn't going to mislead anyone at all? How about that "water" can now be used do describe any clear liquid, including sulfuric acid?

Go find your own words. "Shared source" has been used for literally decades to mean Defold's exact situation - why would you not use that?
It depends on the airport and the airline.
Good points in the article but I have to mention a scrum master isn’t supposed to be telling people what to do, but rather coach on the scrum process.
It feels rather gratuitous to mention Trump's claim in such an article even, or especially, with an added disclaimer that there is zero evidence to support that claim.
Enter Admin Password: 12345
I found an article about writing games in Defold and Godot. It's a bit old (it was written a year ago).

https://agameamonth.net/defold-vs-godot-my-experiences/
Bitcoin now consumes as much electricity as Israel
Nope. Accept language[s]are as expected:

en-GB,en;q=0.9,ga;q=0.8,es;q=0.7

I could be wrong. This is a complete guess, but my suspicion is that Yandex Browser is doing some very lazy checking of a user's language preferences and defaults to Russian if the visited site is not available in the user's preferred language[s]and user hasn't got 'en-US' defined as a fallback.

[My language preference are set to: English UK > Irish > Spanish > English]
Thanks for your response. Yes, I didn't really want to be thinking about complicating the legal structure this early.

We've made it clear to them that our complete ownership of the IP is non-negotiable, and they haven't challenged it. That doesn't preclude them from trying something legally clever obviously, but we would get any contracts reviewed by our own lawyers.

The scaring-away of other investors is a strong concern, though we don't plan on raising funding... not sure if a VC would raise eyebrows if 5-10% has already been carved out, even if it were done cleanly.

Also, I'm hoping they won't ask for access to our communications and plans with other customers. That has not come up. Actually we did talk about us selling to their competitors, and they claimed, because they have multiple business arms, a lot of our other customers will also be their customers. It's hard to figure out how true this is.

I'll definitely take you up on your offer after I digest the situation more, thanks!
The Finnish Covid dogs’ nose knows
C doesn't have first-class functions, because you can't define new functions in general places (only at top level).
Or they could know the law themselves.

Weird how for everyone else ignorance of the law isn't an excuse, only for the ones enforcing it.
>So I can just decide that "Donald Trump is a space alien" actually means that I'm gonna go buy a burger today, and this isn't going to mislead anyone at all

Yes you can, some people will hate it some people will like it, just like anything else
> PWA is spreading like wildfire.

Do you mean on Android? I've read they're a bit crippled on iOS
> Is baggage handling specific to an airline? It looks like it's a service provided by the airport.

Generally you are right yes, it is airport service under one of the operating company of the airport.

However easyJet and other low cost airline have generally a very vertically integrated system where they try to operate almost everything themselves to reduce cost.

Some airport have entire dedicated terminal for them, I would not surprise if they manage also their luggage system in these airports.
Is there some research behind this or are you opining on how YOUR brain works?
APM IO – The Ultimate Product Management Portal
Hello Everyone!

We launched APM IO today!

The Ultimate Product Management Portal

APM IO is an online portal to help students and early professionals to break into the competitive field of product management. We host courses by leading instructors, distribute cheatsheets and interview guides and also showcase a list of resources to help you develop the product mindset

Features

Courses/Cheatsheets/Learning Resources

Hustle your way and break into product management, online courses on product development, product creation, and more.

Community

Join a community of like-minded/aspiring product managers and grow together!

Blog

Must-read articles for developing that product intuition

Book Recommendations

Must-read books for Product Managers to boost software development, prototyping, analysis, and user experience skills.

Product Management Portal

A job board that accumulates all product management jobs over 14+ sources, it is updated every day so that you are the first one to know

Get exclusive access to APM IO:

https://upscri.be/apmio

Top 50 Product Management Frameworks

http://apmio.innovationscalar.com/

#productmanager #productmanager #productmanagment #productmanagment #productmanagement #product #productmanagers #startup #productstrategy #productleadership
My guess is that some higher-up employee clicked on a bonus.pdf.exe and that's it
TypeScript Bliss
The moon is made of cheese. Flubber dub. Go drink some water.

Language is useless when it can't be used to create shared understanding.
Notice of cyber security incident: https://otp.investis.com/clients/uk/easyjet1/rns/regulatory-...
The original Doom license is not a free open-source license, and is in fact fairly restrictive. However you are right, the game was re-licensed a few years later under GPL, making the game dual-licenses under GPL and the Doom License.
Some more joy: https://github.com/fabiospampinato/store/blob/master/src/rea...
I can relate about this problem: I love to read, but can't find the time to do so.

Mindfulness about "distraction" is the first step.
We don't need more time, we need to prioritize what we do every moment of the day.

What also helped me is to switch my mental approach when reading: I don't see it as a "read it from A to Z" task.

I took the opposite approach, reading only the first 20 pages of lots of different books. It gives a wide perspective of what's available, it broaden the spectrum of knowledge. Then I rate each book so I can come back and read through the ones that look the most appealing to me.
> 2. What's with /* */ ? Doesn't js allow keyword arguments?

No.
My point isn't that they're equivalent (they're not), but that the analysis never stops at "this will save lives, so we should do it". There's always more layers, such as here your very valid analysis of whether people are choosing to participate.
Only 5 javascript needs to be downloaded for this tiny website.

This guy should be banned from the internet.
I'm totally baffled by people claiming to be able to function with less than 8 hours of sleep.

Even 1 night of 6 hours is enough to reduce my mental capabilities immensely. It is like a fog closes on my mind. Memory suffers particularly, have much greater difficulty recalling words for things/people(and if the sleep loss is severe it can become impossible), and any code I write in this state is subpar when I look at it later. Additionally it often takes me exponentially longer to write the code when tired..

Also recovery from sleep deprivation requires extra sleep for me. If I follow up a night of 6 hours with a night of 8 hours, I still feel like I only had 6 hours, requiring me to sleep extra until the 'fog' goes away.

And age has nothing to do with it, had the same problem as teen.
because it defies first principles logic. you should know in some capacity what's going on behind the scenes, and Op's point is that Flask forces you to understand that.
distortion is for pretending i meant to clip my recordings at a frequency i didn't notice on studio monitors.

let's talk about bitcrunching! now that's fun. and definitely not the other way i cover up poor recording!
Thanks, that's exactly what I was hoping for!
For my own engine I was looking at my options for the future.

If I would ever release it with restrictions, I would call it "source available" or something like that.

I think as a community, we should also have a strict term for a project with source code, but too restrictive to be called open source.

From my search, "Source Available" was the best terminology, unless someone knows a better one.
thanks for that link! that's my repo and what i've historically used for projects, have been looking for a good framework :)
I was already on the cheapest plan so I'm good :)
Congrats.

I'd advise you to avoid setting too many goals each day, especially when you are getting up to speed at a new workplace. I like to make a morning checklist of just three things that - if I was to achieve them - I'd finish the day thinking "That was a good day".

Not my original idea but seems to work, and three is a far more manageable number than five. ;)
Fedora Workstation 32
I'm currently trying to decide which vendor/battery system to buy into for the long run. Festool/Hilti are too high end for DIY/Hobby. I'm looking at De Walt/Makita and leaning towards Makita.
Ncbrick – A nice tool from design to code
Me too, could be a lot of passports being cancelled and reissued shortly
Me: Sees "Pricing" page in the contents. Middle click it to open in new tab to check what they want. Sees homepage again.

Apparently bookmark extension site is above making proper links which can be bookmarked.
Sigh. Been typing too fast as usual. I know thats not the way the Nvidia-thing works, instead doing the glue-thing which interfaces to the binary blob like you mentioned. But it could (instead of that)! That's what i meant to say.
do you have any example repos of flask projects that do this right?
You left out the most important fact of the Marissa Alexander case: she left the room in which the confrontation was occurring, went to the attached garage, retrieved her handgun from her car, and then went back. There's also a question of whether it was a "warning shot" as she claims, or just bad marksmanship in trying to kill her husband, the facts strongly support the latter, and that's generally something for a jury to decide. Warning shots are also very strongly frowned upon for reasons that should be obvious.

So Florida's stand your ground law provision had absolutely nothing to do with the case. Plus there's one now pretty old study out there that shows in Florida that blacks successfully used the stand your ground provision of Florida law as part of a self-defense affirmative defense more often than whites. The claim that women are disfavored in claiming self-defense is literally something I've never heard of.
This is a huge part of the reason why I think we should go with mobile-first web design rather than build native apps that have to go through these stores. I have to build and deploy a mobile app on iOS and Android for work and it's a) a pain in the ass and b) we're at the mercy of these two megacorporations.

If you can get by without a separate mobile app, do so. And if you need some functionality, consider pushing for that to be a part of the web standard and contributing to whatever projects can make that functionality accessible through the browsers.
That accounts for catching up to other vehicles. It doesn't deal with the problems I mention.
Five Intel Microcode (UCode) Sequencer's Arrays
Interesting[1]:

> This library defines disposables, composable first-class producers of values with associated external resources that must be allocated and deallocated such as database connections. Several safe abstractions are provided to consume disposable values while ensuring their associated resources are deallocated after use.

Apparently, disposable supplement custodians to work better for cleaning up externally allocated resources. I found the concept of custodians powerful, but not quite powerful enough, so it's good to see some work done in this area.

[1] https://docs.racket-lang.org/disposable/Basic_Disposable_API...
Reddit Is Launching Ethereum Tokens for Its Subreddits
Israel linked to a disruptive cyberattack on Iranian port facility
The question is: who will pay that? It costs around 100 Euro to renew a passport here in Germany.
The CEO says " it has become clear that owing to Covid-19 there is heightened concern about personal data being used for online scams"

Am I missing something here? This doesn't make sense really.
Well you have an incentive when you read stuff like this:

- Hackers from China are believed to have stolen the social security number for every US federal employee in a cyber-attack much larger than it first seemed (2015)

- For the first time ever, data breaches compromised more Social Security numbers (35 percent) than credit card numbers (30 percent). The Equifax breach was largely responsible for that. (2017)

- If a cyberthief has your name, address and SSN, he is not far from being able to steal your identity. (2018)