skysight-inc/HackerNews huggingface dataset:
Show HN: I made a free Hashtag Generator for Pinterest to help you do marketing
Hey everyone,

I'm Nic, and I've been working on helping other people create beautiful and efficient Pinterest Pins

Pinterest is an incredible platform where you can get a lot of traffic on autopilot for free

But it takes strategy and skill. Some Pins require hashtags. Still, most of the hashtag generators are either paid or are just bad

So I've built this free micro tool to help anyone who has problems coming up with good hashtags for their Pins

Hope it helps. Would love it hear your feedback

Nic
Nobody was asking for A's to be handed out. Why the constant replies with strawmen? I'm not going to keep continuing.
Do you have more detail to share in support of such a strongly worded opinion?
Correct me if I'm wrong but I don't believe this works on the current AI overview rollout.

I Don’t Want To Spend My One Wild And Precious Life Dealing With Google’s AI Search
https://news.ycombinator.com/item?id=40380639 - (1 day ago, 204 points, 215 comments)

You can change the search engine URL in your browser or use an extension.

Bye Bye, AI: How to block Google's annoying AI overviews and just get search results - https://www.tomshardware.com/software/google-chrome/bye-bye-...

Google’s AI Overviews Are Here, Whether You Want Them or Not - https://archive.is/mFBUm

This support article is also from March, I think this is just applicable to Google Labs.
It becomes very obvious when the "cookie banners" talks about "Company and our 1234 partners ..."
That, the whole pop-up idea was just copy&pasted. It's possible to make commercial websites without it when turning off tracking without logging or having to explicitly opt-in, possibly for added value. There's a lot of confusion while the law is mainly about differentiating which data is needed to operate and which is purely nice to have. That said, there are plenty of GDPR-compliant services that keep data for 10 years mostly in finance or auditing related use cases and nobody bats an eye
A "coup" against Putin would be a coup against Russia? Yes, you are taking crazy pills.
Look at the tip.
Is the recursive sum the best function to show multi-threading or GPU speedups? Seems unlikely. FWIW, i ported the python example to Julia and it ran in about 2.5 seconds the same as the C++ version. Pure python 3.12 took 183 seconds.

function sum(depth, x)
if depth == 0
return x
else
fst = sum(depth-1, x*2+0)
snd = sum(depth-1, x*2+1)
end
return fst + snd
end

println(sum(30,0))
Wow, you can replace iphone batteries in Europe?
That sounds like a generic argument against any AI integration, though. "All they do is make up statistically plausible sounding nonsense" is definitionally true, but sorta specious as it turns out that nonsense is often pretty useful. In particular in this case because it gives you a "summary of the documentation page" you'd otherwise have to go look up, something we know empirically is difficult for a lot of otherwise productive folks.
It's enforced, but not fast enough, and not hard enough.

Even the enforcers are just not mentally ready (or just have too many cases) to really, really slam the monopoly of force on offenders.
My servers beg to differ.
Awesome little toy! I feel like no discussion of slicing/dicing physics in games can be complete without mentioning the madness that was Metal Gear Rising: Revengence - https://youtu.be/EhScbQoaLFQ?t=53

Anyways, just a few more pizzas and then I'll be on my way. One more...
Under the GDPR, an IP address is PII and recording the IP address of a visitor can be problematic.

https://gdpr.eu/eu-gdpr-personal-data/

Looking back at the GDPR’s definition, we have a list of different types of identifiers: “a name, an identification number, location data, an online identifier.” A special mention should be made for biometric data as well, such as fingerprints, which can also work as identifiers. While most of these are straightforward, online identifiers are a bit trickier. Fortunately, the GDPR provides several examples in Recital 30 that include:

Internet protocol (IP) addresses;
cookie identifiers; and
other identifiers such as radio frequency identification (RFID) tags.

These identifiers refer to information that is related to an individual’s tools, applications, or devices, like their computer or smartphone. The above is by no means an exhaustive list. Any information that could identify a specific device, like its digital fingerprint, are identifiers.
> Complying with GDPR by not taking data you do not need is easy.

If your claim was true, the solution would be easy: I simply find a need for all data that I collect.

Problem solved? For sure not, which obviously falsifies your "idea" that it is so easy.
Thanks -- assumed it was an issue on the app's side.

Also, that was fast. Do y'all have a script checking for Kagi/Orion mentions on HN?
This is getting ridiculous; at the level of a Preston&Child novel.
Eh? Wind farms cause noise?? A massive windfarm was built on the hills behind the house I grew up on and I never heard any noise, even when visiting the extremely popular walking route that goes through them.
> she was present for every death

For every death she was indicted for, yes; for every death on the unit, no.

"[Schafer] thought that [the diagram] should have spanned a longer period of time and included all the deaths on the unit, not just the ones in the indictment."
I once worked with someone who was doing performance benchmarking of two systems, and made a duel axis chart with the lines right on top of eachother when in fact one system was like 5x faster than the other. it drove me nuts because I didn't even realize the dual axis at first and thought that they literally had identical performance
Checking if user has "Do Not Track" or its newer equivalent set and just triggering the same flow as if the user refused all tracking (outside of what falls under "legitimate interest" according to GDPR and not IAB) would be perfectly fine implementation.
I didn't comment on whether you've read the article. There's a strong expectation a toplevel comment in a Show HN thread is concretely about the thing being showhn. That's not some complicated thing that requires the subtle parsing of multiple rules.
You can import and export CSV, JSON, etc (including parquet via an extension) which gets you VCS diffs for history. Set operations are built in (though I admit they may be as “natural” as you like), and there’s been decent (though, again, your idea of cumbersome may be different than mine) JSON blob support for some time.

It’s a tool that consistently gets underestimated at the same time it’s also consistently improving.
The coolest things are often the most difficult to understand.

Difficult to understand is often threatening.

Criticism is a popular response to threat and is the form of reply that requires the least understanding.
> For * and +, there's a agreed upon order of operations

So... we collectively made a choice and wrote it down, then? I think you whooshed on the point. The if/else ambiguity is just a precedence rule, like many others in the expression grammar of every (well, every non-lisp) language that exists.
I'm not sure what is meant by "exact" here - do they describe their binarisation process at all? This seems more like an XOR benchmark than a rag benchmark, no mention of recall or other relevant performance metrics
Discussed 15 days ago [0] (515 points, 593 comments)

[0]: https://news.ycombinator.com/item?id=40230790
Serious question: I noticed that the logo has the Italian colors. On the surface, this could be a reference to the fact that the game has pizza. Digging a little deeper though, is this an Italo disco reference? Specifically, is it a reference to the song Slice me Nice by the artist Fancy (1985)?
Tell him on a team call that you can also google the first result and that he is more than free to pull the project and implement the solution to this difficult bug and take responsibility for it. For me that stopped the "Boss" bullshit. Had AI been involved, I can only imagine how painful that would be.
The unusual ‘r’ glyphs in the text led me to reading about “R rotunda”.

https://en.wikipedia.org/wiki/R_rotunda
There's nothing cruel about notifying students at the very first class of the term that they'll need to spell "business" correctly. Those that cannot handle it have plenty of time to drop the class.

If the requirements of college are too stressful,

1. drop out and try something simpler

2. put in a lot more time studying

I had a lot of stress in college, to the point of abdominal pain, and picked option 2. It never occurred to me to demand easier coursework.
The Nazi government officially wanted to exterminate a whole people and enslave the majority of the world for benefit of the few. Only someone not on the receiving end of such a treatment can say something that stupid. The Soviet Union was established on the premise of ending imperialist wars and bringing about equality.

> To paint the Soviets as heroes is grotesque

The Soviet people who fought the Nazis and liberated half of Europe were definitely heroes. There is no mistaking it
Where did I respond with that?

My central concern is there is a trade off to be made between keeping the data in place and building a capability to actually read/index the actual personal data. My opinion many times is that not having the technical capability to read that data is often a better privacy control in practice than building it to delete data and hoping it doesn’t get repurposed.

That seems to be a minority opinion here.
The original Doom was released in 1993 for DOS [1]. The iPad came in 2010 [2]. Siri was only released in 2011 [3].

[1] https://en.wikipedia.org/wiki/Doom_(1993_video_game)

[2] https://en.wikipedia.org/wiki/IPad

[3] https://en.wikipedia.org/wiki/Siri
> Any measure less severe than an F is too much coddling in your book? Is your perspective that suicide rates are high because kids aren't getting enough failing grades due to typos?

You're twisting my words, and I didn't say any of that.

My point was that if it's "better suited to previous generations than today's," it's probably due to today's generation being over-protected to the point were they can't handle a failing grade on a paper. Avoiding that kind of thing more will just make them even less capable of handling it.

And honestly thinking about it a bit more, "failing grades due to typos" may actually be a fairly ego-preserving way to get a kid exposure to the experience that an F isn't the end of the world, and they can recover from it. That kind of grade couldn't reasonably be interpreted as the kid being judged incapable of good work.
You don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
This is an excellent writeup, and great example of responsible disclosure done right.

However, I can't get over the clickbait title. This seems like a real cheap shot at BIMI, and DMARC for that matter.

BIMI never pretended to be a 'security' protocol of any kind. It's a branding opportunity to incentivize DMARC adoption. That's what is literally explained on the front page of the BIMI workgroup website [0]. I won't go into the discussion whether the price of a VMC is justifiable or not, but saying 'BIMI can't safe you' as if BIMI ever promised it would is just ridiculous in my opinion.

DMARC on the other hand is more of a policy protocol than an additional layer of security. Yes, it does strengthen the underlying protocols (SPF & DKIM) a little bit by adding the alignment requirement, which more-or-less patches the worst flaws of both protocols, but it doesn't magically make email secure. Saying 'DMARC won't safe you', as if DMARC was somehow ever capable of fixing 0-days in the underlying protocols is, again in my opinion, ridiculous.

I get that the company is proud of the discovery of this security flaw, and that such a publication is a great opportunity them to get your name out. But I just can't shake off the thought of the engineers having to witness some guy from PR slapping a cringy clickbait title on their otherwise excellent work.

[0] https://bimigroup.org/
Ex-OpenAI staff must sign lifetime no-criticism contract or forfeit all equity
And by that definition this is a counting algorithm.
I doubt you even have surface level of the topic, can you explain your view or is it just "west bad"?

Is ECOWAS also imperialism?

Is it ok to let countries fall to islamists because helping them even if they explicitly ask is "imperialism"?
Congrats!

I’ve been watching HVM for a while and think it’s extremely cool.

My intuition is that this will eventually be a really big deal.
>> - You can't just skip stuff if you run any kind of normalization

> - delay validation until normalization

You probably want to normalize if you want to use them as keys in a hash table, which is pretty common. Or serialize them to JSON (or protobufs, or msgpack, etc. etc.), also pretty common. Why? Because you're commonly comparing strings and normalization lets strings that should be equal be equal. Canonicalization also requires sorting which requires normalization, etc. etc.

>> - How would you index into or split an invalid UTF-8 string?

> - treat non-utf-8 bytes as bytes

Well I mean by code point, or grapheme. Does the invalid byte go with the 1st or the 2nd? What about multiple invalid bytes? Will all implementations agree? Also hey, looks like you scanned a string and found some invalid bytes. Looks like you validated a UTF-8 string!

>> - How would you apply a regex?

> - regexes match bytes just fine: the article has a whole section on ripgrep’s use of bstr

They definitely don't [0]. If you're allowing invalid UTF-8 you're giving up Unicode support entirely, by necessity.

>> - What is its length?

> - another section discusses how the length of a string is not a well defined quantity

The article doesn't say that, it says you can know neither the printed length of a Unicode string just by its contents, nor the number of characters in a Unicode string. It's right about the first, but wrong about the second: a Unicode character is represented by a Unicode code point, so their number is knowable. UTF-8 strings have a specific number of bytes and a specific number of code points and graphemes. You can know the number of bytes, code points or graphemes, but not if the string is invalid, because all bets are off.

>> - How do you deal with other systems that do validate UTF-8 strings?

> - the article says you can delay validation until required

My general point is there are very few things you can do without validating. If you're passing them around completely internally, never normalizing, never sending to another system, never writing them into a file name or a file itself, etc. You can gain a tiny amount of speedup by not validating, but it's a huge risk and not worth it for 99% of programs.

[0]: https://docs.rs/regex/1.10.4/regex/bytes/index.html#syntax
> it looks more like you have an axe to grind

Well of course they do. The whole point of the argument is that LFJ is so hellbent on trying to take Josh's site down in any and all ways possible, every single day, continually for years, and people are letting them get away with it. They both have axes to grind with each other.
You don't need to ask if the information you collect is necessary for your site to work.
> Not just regulators, I'm a developer in the EU and I find GDPR a great thing. I have yet to find a fellow developer here that disagrees.

I know lots of developers who are still today incredibly furious about the legal effort that complying to GDPR requires (even if they - typically - don't intend to track users).
Having lived near both simultaneously I can tell you power lines definitely do makes noise while I'm genuinely having to google to confirm which wind turbines make noise because I never noticed.
Haha, my father was able to punish me with simply a look that said "I'm disappointed in you."
I put in quite a few stocks and the results were often strange. Negative values, under a dollar, etc. These were all stable companies, not penny stocks.
Familiarity breeds contempt. 3rd to last DDS drilled a cavity freehand in like 5 minutes without being all that careful. Seemed like it was maximizing the number of procedures while minimizing the amount of care and time spent.
Nonetheless, is it possible for the site to fulfill its obligations under the GDPR without needing a cookie or other tracking information that would warrant needing to say "you are being tracked"?

GDPR.EU is a website operated by Proton Technologies AG, which is co-funded by Project REP-791727-1 of the Horizon 2020 Framework Programme of the European Union. This is not an official EU Commission or Government resource. The europa.eu webpage concerning GDPR can be found here. Nothing found in this portal constitutes legal advice.

The "here" link goes to https://commission.europa.eu/law/law-topic/data-protection/r...

Would you be surprised if there was a big banner at the bottom of the page that read

This site uses cookies. Visit our cookies policy page or click the link in any footer for more information and to change your preferences
Is this terribly surprising, I thought the real problem was having too many years of experience, ie ageism?
> I rarely see a site that has essential-only.

You'd need no cookie banner, then. :-)
You can Show HN, and you have before [0] (2 points, 56 days ago, 1 comment), but; are you sure editorializing your own title (Pinterest Hashtag Generator) and alienating potential audience is the right play?

[0]: https://news.ycombinator.com/item?id=39785832
I mean the same could be said for tech.

In startups most people are actually fine, but there are wolves as well. People who scam others, lie and steal, use people, etc. And there are VCs and various circles that protect them.

Does that mean we just don't push forward? Your 1 in 100 or 1 in 1000 fits here as well.

That's life. If you operate that way, good for you. But I operate in reality.
If you're too stupid to handle a simple "do not track, write down that you do not track, do not sell your users to others" policy, I have bad things to say about validity of the rest of your startup.
DevTools can't force frameworks and libraries to output better error messages.

But it can help us humans understand them better.
The guarantees would not hold, I'm pretty sure ;) Maybe one of the authors could chip in, but my hunch is that with that you could actually introduce arbitrarily large errors. The beauty of this algorithm really is its simplicity. Of course, simple is.. not always easy. This absolute masterpiece by Knuth should demonstrate this quite well:

https://www.sciencedirect.com/science/article/pii/0022000078...

It's an absolutely trivial algorithm. Its average-case analysis is ridiculously hard. Hence why I think this whole Ordo obsessions needs to be refined -- worst case complexity has often little to do with real-world behavior.
Some good ideas, but also stops short on a few things.

* It talks about signing the message to prove the sender, but why stop there? We might as well extend it by having recipient public keys available via DNS records directly (or DNS specifying how to fetch them using some other protocol) and encrypting the contents of the e-mail as well. This alone could be the killer-app reason to adopt this thing.

* As the recipient of spam, I don't really care so much whether the sender owns the domain or not, because it's relatively cheap and easy for them to buy a domain and set up DKIM/DMARC if they had to. What I really care about is only receiving e-mail that I have opted into receiving. Whilst there will always be a need for some people to have public mailboxes that anyone can send to, for the most people it'd be better to have something where you can only send a mail to them if you have a token that grants you that right. My mail client should be able to fetch the potential sender's public key and sign a token that says this key can send mail to me until this date. Maybe every time you reply to someone, you send out a new token with a longer window. Maybe you need your mail client to prompt you to re-issue tokens to people you've previously been in contact with. But the ability to choose to end the conversation further would be great.

* Maybe for people who don't have a valid token to send to someone, there can be a way of requesting a token, maybe the sender's name, public key/address, a short sentence for justifciation and if the recipient agrees, then the sender can send the rest of the mail.

* Mailing lists would get a bit more messy, as they'd have to re-sign and maybe re-encrypt every message. Maybe that's not a bad thing though, as with re-encrypted contents it'd be harder to correlate the same message sent to different people as the same, thus tying them to the same list.

* As some other senders have said, I'm not sure full HTML is the answer. Markdown is better, because it would enable a client to unambiguously cut, quote and cite parts of the original. But people want all sorts of fancy formatting at times, so maybe we need a better markdown and/or restricted set of features. Most people also, don't really need all those colours etc, they just want something that's visually different to the rest of the conversation so you can tell who said what in a very jumbled thread. Maybe the markup should be required to identify which bits of copied content came from where.

That said, getting critical mass of adoption is going to be hard, and there's not really any money to make from implementing it, only expense. The article correctly points out that something will only happen if it gets critical buy-in from all the big names, but of them probably only want to do it if they can get up controlling something and being the gatekeepers of the rest of the internet.
>Was unsure you could remove them!

Why wouldn't you be able to remove them ? Nobody would have used this if ads were not removable.

Just right click -> remove.
its not clear how this differs from just using htmx + alpinejs

basically im on a path to ditch *SPA frameworks altogether and have been evaluating the following:

- Unpoly

- Hotwired

- HTMX/Alpinejs

Now looks like Datastar will need to be explored, i think it has potential but the documentation needs rework, more details should be included in landing page
Can you give some examples of this disillusionment? I see more, not less people talking about these things nowadays. I'd like to believe that AGI is impossible but I don't see any evidence.
Rentec also doesn't do HFT
Introducing Superalignment (July 2023)
That popup is not the half-height YOUR PRIVACY IS IMPORTANT TO US blocker, it's a banner at the bottom. Totally different (but still worth a block from my side if possible)
Why not use the built in BitVector type that has specialized code for things like xor?

https://docs.julialang.org/en/v1/base/arrays/#Base.BitArray
None of those cases other than the pci scoped one were covered by regulations at the time. They are just experiences I’ve had where I got data I didn’t want and didn’t ask for and had to make the decision on if building a capability to read/detect it systematically for deletion was a better privacy control than not.

I have had similar cases covered by GDPR as well of course but my broader point is that the idea that you only get the data you ask for doesn’t align with my lived experience.
If you're technically unable to comply with the requirements of fetching all PII for a given person and subsequently delete it, you have no business storing that PII in the first place. Your line of argument is like complaining that seatbelts are government overreach that increases the cost of cars.