It’s my firm conviction, now more than ever, that the degree to which we are able and willing to struggle for ownership of our attention is the degree to which we are free.

– James Williams

From Dense Discovery:

Here’s a familiar story we tell ourselves about our new inability to focus: screens bad, books good, civilisation circling the drain. It’s a seductive diagnosis – and also, probably, a lazy one.

Carlo Iacono is a librarian who spends his days watching how people actually engage with information, and in a recent Aeon piece he pushes back on that oversimplification. The issue isn’t screens, he argues. It’s habitat and design.

He first describes the kind of drowning many of us will recognise when trying to focus:

“Others are drowning, attempting sustained thought in environments engineered to prevent it. They sit with laptops open, seven tabs competing for attention, notifications sliding in from three different apps, phones vibrating every few minutes. They’re trying to read serious material while fighting a losing battle against behavioural psychology weaponised at scale. They believe their inability to focus is a personal failure rather than a design problem. They don’t realise they’re trying to think in a space optimised to prevent thinking.”

From here, Iacono makes a reframe I think deserves more credit than it usually gets:

“We haven’t become post-literate. We’ve become post-monomodal. Text hasn’t disappeared; it’s been joined by a symphony of other channels. Your brain now routinely performs feats that would have seemed impossible to your grandparents.”

“The real problem isn’t mode but habitat. We don’t struggle with video versus books. We struggle with feeds versus focus. One happens in an ecosystem designed for contemplation, the other in a casino designed for endless pull-to-refresh.”

The blame belongs somewhere specific, and Iacono is not shy about placing it:

“Expansion without architecture is chaos, and that’s where we’ve stumbled. The people who cannot sit through novels aren’t broken. They’re adapted to an environment we built. … We built a world that profits from distraction and then pathologise the distracted.”

What I appreciate most is that he refuses the fatalist’s exit ramp. The declinists often correctly identify the villains (you know who) – and then immediately surrender, treating the outcome as inevitable. Iacono is direct about what that surrender actually costs:

“To name the actors responsible and then treat the outcome as inevitable is to provide them cover. If the crisis is a force of nature, ‘screens’ destroying civilisation like some technological weather system, then there’s nothing to be done but write elegiac essays from a comfortable distance. But if the crisis is the product of specific design choices made by specific companies for specific economic reasons, then those choices can be challenged, regulated, reversed.”

The solution he proposes isn’t cultural or attitudinal. He’s not asking us to ‘try harder’:

“Reading worked so well for so long not because text is magic, but because books came with built-in boundaries. They end. Pages stay still. Libraries provide quiet. These weren’t features of literacy itself but of the habitats where literacy lived. We need to rebuild those habitats for a world where meaning travels through many channels at once.”

“The choice isn’t between books and screens. The choice is between intentional design and profitable chaos. Between habitats that cultivate human potential and platforms that extract human attention.”

I’d push back on a few of his points if we were at the pub, but these are quibbles around an otherwise solid argument. We didn’t drift into distraction – we were led there. The problem is architectural – which means the solution is likely too.

— Kai

Marquis WiFi Vergaderruimte 4 update failed.

I've tried everything, from ssh'ing, factory resetting with set-default, to manually upgrading with upgrade, etc.

Nothing worked. I thought I had a bunch of bad APs (and many had their warranty expire by a few weeks or months).

As a last resort, I decide to reach out to Ubiquiti's support. First line wasn't very helpful, but as the case was escalated, I've managed to recover and properly update the APs.

The trick is to ssh into the device and run the following code:

curl -fs https://dl.ui.com/firmwares/uap/jw/U6Rescue.sh | sh

The device will reboot and pop by up in the dashboard after 2-3 minutes. Then try to update again, and all should work.

Not really sure what's going on here but ...

This version has a mistake somewhere, but still worth seeing.

They remade the video:

We’ve heard much about the slide into oligarchy – and with good reason: the members of the US cabinet’s collective worth is reportedly close to half a trillion dollars, with the majority of them belonging to the top 0.0001%.

But journalist Ken Klippenstein offers a better term that captures our current moment with uncomfortable precision. He calls it the ‘appistocracy’ – a ruling class whose power extends far beyond mere wealth.

Amid the pomp of Trump’s inauguration, the tech tycoons watched from VIP seats “like an approving collective of Greek gods”. These aren’t your run-of-the-mill plutocrats amassing wealth from afar; they’ve engineered an unprecedented intimacy with our daily existence. Their digital empires don’t merely occupy our homes – they’ve colonised our attention, our social connections, and increasingly, our conception of reality.

Klippenstein on what makes these figures uniquely powerful: “Oligarchs are nothing new, but these men have a power over us that is more intimate than other billionaires. They collectively build, run, and control what can only be likened to an appendage of our own human bodies, a new organ that most can’t imagine losing or losing access to.”

How the appistocracy differs from previous industrial titans: “The robber barons of yesteryear, the Carnegies, the Fords and so on, at least employed a lot of people. At least they manufactured something tangible and of use to people’s lives. The appistocracy doesn’t do anything to improve health care, housing, or education. Their contribution to infrastructure amounts to building more energy facilities to power their data centers and fuel their artificial intelligence empires.”

“We are told we are saving time through the products of the appistocracy and yet we have no time. They’ve hollowed out the malls, stores and other public spaces – even ourselves, as we spend more time alone. Call it the hollowgarchy.”

We voluntarily carry the surveillance and influence tools of the ruling class in our pockets, checking them compulsively throughout the day. We’ve willingly adopted their products as extensions of our consciousness, even as they hollow out our physical world and social connections. Their apps have become phantom limbs – the loss of which feels like a genuine amputation.

The true power of the appistocracy isn’t measured in billions but in dependence. It’s a relationship that transforms us from citizens into users. Yet even as these digital dependencies deepen, so too does our capacity to question them – to carve out spaces of genuine presence in a world increasingly defined by algorithmic engagement.  – Kai

Source: Dense Discovery

Source: briefs.video

See all the previous editions here.

In How I became ‘collapse aware’, Rosie Spinks articulates something many of us sense but struggle to name – that persistent feeling that we’re approaching the end of a particular way of life.

“It’s a nagging sense that has hung over modern life since 2020, or 2016, or 2008, or 2001 – pick your start date – that things are not working anymore. And that waiting for them to get better after the next Most Important Election of Our Lives, or another war to end, or a new economic recovery cycle doesn’t seem to be having the desired effects.”

It’s this shared unease that leads Spinks to explore the notion of collapse and how to respond to it: “To be collapse aware is to live with the sense that something about the way we live is coming to end. And then to ask the next obvious question head on: If the incrementalist approach of our existing political and economic structures is not up to the task of improving things – climate, society, inequality, injustice – what comes next?”

At the heart of her essay lies a simple framework that captures the dual reality many of us inhabit: There and Here.

“There is where I earn a living, and it’s where I have a mortgage, and order groceries for pickup. It’s where growth is uniformly seen as good, and we’re told that social problems have to be ameliorated while still upholding shareholder value... It’s a place where most of us are very burned out, in a manner that mirrors the exhaustion of the earth.”

Meanwhile, “Here is where I’ve internally accepted that infinite progress and wealth are not inevitable... Where life is less concerned with status, and more with sustenance. It’s a place where the entire economy is not based on getting consumers exactly what they want, where cheap flights and next-day delivery are not available... Where we adjust our lives accordingly, and rely on one another by necessity, rather than forging ahead pretending that everything is fine.”

What makes her essay compelling to me is her subtle reframing of collapse not as an endpoint, but as a transition from There to Here. Spinks reminds us that collapse doesn’t mean the end to “sustenance, shelter, security, pleasure, identity, and meaning – just that it’s an end to our ‘normal modes’ of acquiring all those things.”

This distinction seems crucial, especially when she notes that “a lot of people are already living under collapse. Throughout history to today, people outside the countries we call ‘developed’ have seen their homes and land destroyed, and have experienced no shortage of violence under this paradigm. Those people still manage to have rich lives as they fight for survival and meaning. They still have children, celebrate festivals, write stories, and fall in love. We have a lot to learn from them.”

From this view, Spinks points to a possibility – that being forced to move beyond our obsession with material wealth might actually present a chance for healing and a renewed sense of presence:

“While I believe my son’s life may be materially worse off than my own, I think about how it could possibly be better too – psychologically, spiritually, and collectively. I think about how many of the social problems we lament – the mental health crisis among young people, especially young men; the cruel isolation of new motherhood; the normalization of depression and anxiety; the growing number of homeless and destitute people in the richest cities in the world – would be ameliorated by the kind of collective consciousness change I describe above.”

Rather than a catastrophe to fear, collapse awareness becomes an invitation to reassess our relationships with consumption, community and care. As we enter a season typically marked by excess, perhaps there’s wisdom in pausing to consider how we might begin moving from There to Here – not in fear or resignation, but in somewhat hopeful recognition that different ways of living and connecting await our discovery. – Kai

It'll affect everyone.

Via Kottke.

Growing up, I always wanted to be in the heart of the city—a densely populated, well-connected place (which is why I moved to Singapore). But gradually, I’m starting to crave a quieter life… something more remote, peaceful, and slow-paced.

I’ve spent countless hours dreaming about living in a small town in the French Alps, a secluded village in Bali (away from the tourist spots), maybe on a boat, or nestled in a Norwegian fjord with a breathtaking view, perhaps a smaller town in French Brittany, or a tranquil town in New Zealand.

As romantic as the idea sounds, I’m not entirely sure I could actually go so far off the grid, away from airports and civilization. After all, our family is quite international, so we need to fly to visit—plus, my wife isn’t exactly on board with the idea right now 😅.

A few years ago, he read about imiquimod, a drug that, among other uses, is approved to fight one form of skin cancer and has shown promise against several more. Typically, imiquimod, which can help destroy tumors and usually comes in the form of a cream, is prescribed as a front-line drug as part of a broader cancer treatment plan, but Heman wondered if it could be made available more easily to people in the earliest stages of the disease. A bar of soap, he reckoned, might be just the delivery system for such a lifesaving drug, not just because it was simple, but because it would be a lot more affordable than the $40,000 it typically costs for skin-cancer treatment.

“What is one thing that is an internationally impactful idea, something that everyone can use, [regardless of] socioeconomic class?” Heman recalls thinking. “Almost everyone uses soap and water for cleaning. So soap would probably be the best option.”

Via: Kottke.

Q: Following the last few years I’m feeling empty and more cynical than ever. I’m losing faith in other people, and I’m scared to pass these feelings to my little son. Do you still believe in Us (human beings)?

A: [...] Unlike cynicism, hopefulness is hard-earned, makes demands upon us, and can often feel like the most indefensible and lonely place on Earth. Hopefulness is not a neutral position either. It is adversarial. It is the warrior emotion that can lay waste to cynicism. Each redemptive or loving act, as small as you like, Valerio, such as reading to your little boy, or showing him a thing you love, or singing him a song, or putting on his shoes, keeps the devil down in the hole. It says the world and its inhabitants have value and are worth defending. It says the world is worth believing in. In time, we come to find that it is so.

Via Kottke.

Source: Jom

Another 8 buildings connected (including outdoor WiFi in the park, and in the shared indoor spaces).

Source: Kottke.

This is my first time working with Hugo, and I must say, it’s quite impressive. I'm using the seamless integration with Cloudflare Pages, allowing for automatic deployment from a git push. Makes it super easy. Having it all in git also allows Nik to post something without having to worry about deploying.

While the export/import process mostly relatively smoothly, it required quite a bit of editing. I’ve saved the most crucial scripts here for historical reference. These should help you get started on migrating HTML to Markdown files. Note that the Tumblr IDs are used as titles, which isn’t ideal, but it’s a starting point.

Thrilled to have the new blog live at blog.FlatTurtle.com. Check it out!

It's quite straightforward to integrate in a Bluetooth Proxy and Home Assistant thanks to Omar's work.

The major problem I have with it, is that the Bluetooth (4.0) range is terrible. Neither my Mac Mini nor my Bluetooth Proxy could connect with it if I moved it from the office to the kitchen (had it on top of the fridge, so some metal there) that's roughly 10ish meters away.

Sensor wise, I've only had it working for a few days, and so far, it doesn't seem to be very accurate. The temperature is 1-2° below my other sensors... But hey, it's quite cheap and the previous tool I linked has a way to calibrate it (but I haven't tried that yet).

In the screenshot, Airquality level converts bytes into meaningful sensor readings:

• Temperature: Extracted from bytes 6 and 7, then divided by 10 to get the temperature in degrees
• TVOC (Total Volatile Organic Compounds): Extracted from bytes 10 and 11, then divided by 1000 to get the concentration in parts per
• HCHO (Formaldehyde): Extracted from bytes 12 and 13, similarly processed to TVOC.
• CO2 (Carbon Dioxide): Calculated from bytes 16 and 17, adjusted by subtracting 150 to correct the baseline.

Each of these values is then published to different sensor IDs within ESPHome, allowing Home Assistant to display and use this data.

The function returns the size of the data packet as a float, which can be used for debugging or validation. In my case (and assume yours as well) it's 18. I've marked it as internal: true in my config, as it's not useful to show once it's working.

My config for ESPhome can be found here.

You can use this tool to read out the sensor (and find the MAC address) from Chrome.

Guess it's a bit hard to show (and for some reason Firefox refused to take a screenshot of the entire page) but this is my current view in Home Assistant.

Note that I have since added 3 more ATC Xiaomi thermometers and hidden Airquality levels.

Zigbee is quite cool because it's a mesh network. As I used it before with my Philips Hue bulbs, I was eager to expand and play with Zigbee.

First thing first. Not all routers are equal. I've got these two smart power plugs as an example (Grey and Blue colour, v2 with HomeKit support) and they act weirdly. They don't seem to route sensors properly, and randomly turn off whatever is plugged in.

The one that seems to work reliably well is this orange Zigbee plug.

Compared to my bulbs (more on that here) the sensors do detect them the two aforementioned power plugs, and do connect, but generally little to no data flows. I'm not entirely sure what the issue is (bad antenna, bad routing software) but the consensus on the internet seems to be: add more routers, don't trust some routers (Ikea and Hue seem decent), and not all endpoints are very smart and pick the best router (so may need to repair or force it to join a specific router). Unlike WiFi, in this case it seems that more is better.

When setting up the network, it's also recommended to first set up and pair the routers and then the endpoints (battery-powered sensors).

And the network takes a while to stabilise (and all routes to be learned). Some people even suggest waiting one or two days for the dust to settle.

Moving routers screws up a lot, too. I've had sensors stop working (and refusing to pair again) after moving some routers and turning some off -- routers that weren't used by said sensors. So really odd stuff.

As always, with Aliexpress, it's very much unclear what the brand/model is, but according to Z2M, all three are TS011F, but two of the three are definitely different (has Apple Homekit support and the plugs are bigger).

The energy (kWh) and Power (W) reporting works well, though, on all three models.

Can see when a charger is plugged in, and charging a MacBook Air.

I'm buying EU plugs because I'll be relocating back to Europe in the next 6 months. So I'm slowly getting rid of my UK smart plugs and replacing them with EU plugs.

Note that these plugs are not approved for (official) sale in Belgium though: child safety is not up to spec and the grounding is not approved (i.e. needs to be a pin). 

Zigbee is quite cool because it's a mesh network. As I used it before with my Philips Hue bulbs, I was eager to expand and play with Zigbee.

I have several bulbs, including: Hue Iris, Hue Go, some random bulb, a reading spot, and Hue Play (3x).

My Home Assistant setup uses the Skyconnect. I've updated the firmware (on a Mac) to use Ember firmware as ezsp will be deprecated soon(™).

At the time of writing you can't update the firmware directly from HA just yet, you need another device.

As I had two Zigbee networks (one for Hue, and one for my sensors and Ikea bulb) it made sense to merge them (and have one less connected bridge): it would reduce interference, and the bulbs all act as a router, so that would greatly improve my network coverage and stability.

Generally speaking, it went quite smoothly: delete the devices in the Hue app (it factory resets them and puts them in pairing mode) and then pair them in Zigbee2Mqtt (I use that over ZHA).

However, my main issue was that my Zigbee bulbs were unreliable: it sometimes worked, but often it lagged or timed out. Especially when controlling multiple bulbs at once (such as a big room such as the living room) or sending multiple commands in sequence (on/off/on/off).

In hindsight, my sensors were unreliable as well: there was data missing, and it didn't properly broadcast/update every 5 minutes. I first thought it was just because they were cheap Chinese (TuYa) sensors using battery-power. If the temp or humidity didn't change enough, it wouldn't broadcast.

I often saw errors such as these in Z2M:

2024-05-26 22:29:02Publish 'set' 'state' to 'Hue Play Right' failed: 'Error: ZCL command 0x0017880104d89bc4/11 genOnOff.on({}, {"timeout":10000,"disableResponse":false,"disableRecovery":false,"disableDefaultResponse":false,"direction":0,"srcEndpoint":null,"reservedBits":0,"manufacturerCode":null,"transactionSequenceNumber":null,"writeUndiv":false}) failed ({"target":29608,"apsFrame":{"profileId":260,"clusterId":6,"sourceEndpoint":1,"destinationEndpoint":11,"options":4416,"groupId":0,"sequence":110},"zclSequence":244,"commandIdentifier":11} timed out after 10000ms)'

But the annoying thing (in debugging, and thinking the network "needs to settle") was that it often worked just fine, and then randomly started breaking down/time outing when I thought it was finally solved.

I almost gave up and went back to a Hue bridge, when I asked for some advice on Discord. The reason was the channel...

First off: check the Zigbee channel of your Hue. It's likely 25. Z2M uses channel 11 by default.

There are 4 channels that are getting the least WiFi interference. These are called ZLL channels (whatever that stands for): 11, 15, 20, 25. However, it seems that 11 is quite terrible, and I would not recommend using it.

My Z2M sat on Channel 11 (which is Channel 1 for WiFi). I live in Singapore, in an apartment building, with a shit-ton of WiFi, hence the massive interference and lag on Zigbee.

Also, 2.4Ghz WiFi is generally 20Mhz channel width, whereas Zigbee is 2Mhz, so one WiFi channel overlaps many Zigbee channels. 

You can modify the channel (via the config file in /homeassistant/zigbee2mqtt/configuration.yaml) by adding the following and restarting the Z2M container:

advanced:
  [...] # there should already be a ton of things
  channel: 25

The problem with changing the channel, is that it requires repairing (some of) the Zigbee devices. And it's a total mess to repair Hue bulbs once they are no longer on a Hue bridge.

There's no need to remove the devices from Z2M as that will wipe their configs (I believe). It's possible that removing the devices from Z2M will put them in pairing mode again (for Hue bulbs, see below) but I couldn't get a confirmation.

Ikea has the 6x power off/on sequence that resets them, but Hue dropped support for something similar in some firmware upgrade (why?!?!).

TouchLink is another option, but that didn't work for me at all.

Some Hue bulbs can be reset by long pressing (30-60seconds) the power button (for example the Hue Go), but what worked best for me is pairing them again on the Hue bridge using the serial (force pair), deleting them again, and pairing on Z2M.

However, I didn't have the serial of two bulbs: one Hue Play has the label missing, and the Hue Iris didn't have any label at all. I thought I would be forced to go and purchase a Hue dimmer/remote control (that comes with TouchLink and allows resetting the bulbs)...

However, suddenly, after an hour or two of messing around, the Hue bulbs that weren't repaired just started working again.

So it seems that if they are disconnected from their bridge for a while, they start changing channels until they find the bridge again. I guess there's a chance, with enough patience, that I didn't have to repair my Hue bulbs (not sure about Ikea, and I would definitely not trust my Chinese Power plugs and sensors to come back online).

The sensors are quite easily repaired (long press the pairing button or pinhole and done -- don't forget to set Z2M in Permit join)

Other stuff you can try if the range or network sucks can be found here.

However, if it kinda works, you better not mess with it... :)

I'm going to post some random notes (mostly for myself) on things I discovered, and I need to keep in mind.

For example, I have set up an ESP32-c3 Bluetooth Proxy for a Mi ble thermometer.

I've assigned the ESP device to an area: IT cabinet. However, the BLE sensors are scattered across the house (in different areas). Took me a while to figure it out, but you can assign entities to specific areas.

Head to Entities and select the entity config, and at the bottom, unselect use device area, and select the correct area.

Tadaaa, you can now assign the sensors to the correct area, and they'll show up in the right dashboards/cards.

The proxy config can be found here.

The proxy config can be found here.

Be sure to modify the variables to match whatever you want to do. I'm using static IPs because auto discovery is unreliable (hostname.iot.internal).

You'll also need to add the !secret variables into the secrets.yaml file.

Note that there's an issue with Bluetooth and WiFi on single cores (i.e.: the ESP locks up as it can't do both at boot). The workaround is in that config file.

Use on single-core chips

On dual-core devices the WiFi component runs on core 1, while this component runs on core 0. When using this component on single core chips such as the ESP32-C3 both WiFi and ble_tracker must run on the same core, and this has been known to cause issues when connecting to WiFi. A work-around for this is to enable the tracker only while the native API is connected. The following config will achieve this:

esp32_ble_tracker:
  scan_parameters:
    continuous: false

api:
  encryption:
    key: !secret encryption_key
  on_client_connected:
    - esp32_ble_tracker.start_scan:
       continuous: true
  on_client_disconnected:
    - esp32_ble_tracker.stop_scan:

Esphome

To flash the Mi thermometer, use this flasher and the firmware from here.

Example output of the log (from Esphome in Home Assistant directly, but can be seen from the web interface as well):

You can then add the proxy (and the entities) in Home Assistant. It should update every couple of minutes (the Mi device updates every 5 or so minutes, the Proxy scans every channel every 3-ish minutes).

In the example above, I (at the time of writing) only have one Bluetooth sensor, but it should be quite trivial to add more. The hardest part is finding the right MAC address of the sensors... :)

The official bullshit is to reinstall the Licensing Service (why is there even such a thing). But alas, that didn't fix it.

Also updating AutoCad to 2025 (we're barely even in 2024) didn't fix it (but made it work until the next reboot).

The trick was to go to System Settings > General > Login Items and heading down to "Allow in the Background". Make sure AutoDesk is turned on (no need to turn on AutoCAD).

Sigh.

Seeing this makes me want to get one and keep it for Ila to play on when she's a bit older. I guess this is why every couple of months I go back to check Playdate and am tempted to get one (knowing very well I won't really play it much)...

Via Kottke.

Every night, around 3am (CET), the GTFS files are uploaded to Cloudflare R2.

I keep the historical files as well (iRail only did this for NMBS, but I'm doing it for all). The latest available GTFS is in */_latest/<file>.zip.

The directory listing is created using Workers.

I'm trying to get access to dewaterbus.be as well, but so far, they haven't replied.

Via Kottke.

Say what you want, but this doesn't look like a great place to live as humans...

Sand and rocks. Not the first thing I want in my garden, or to see on a daily basis across the entire planet... ;)

While spectacular to have these pictures, and we undoubtedly need to explore space -- we can't ignore our own home planet, Earth, and must do everything possible to stop and reverse what we're currently doing to it.

They all had the same error that they couldn't connect to their SQL database, and it seemed that the container recently was auto-updated.

Docker logs also showed (which may or may not have been related):

2024-02-21  7:30:29 97 [Warning] Aborted connection 97 to db: 'unconnected' user: 'unauthenticated' host: '192.168.200.4' (This connection closed normally without authentication)

This was odd. I started the usual troubleshooting:

• As these containers have their own network, maybe the IPs changed and as the SQL users can only access from a certain IP range, something broke there -- nothing seemed to have changed and I could connect from the nginx container to the other just fine
• Password somehow changed -- nah, connections were accepted
• Roll back to a previous version of MariaDB -- didn't do anything, odd
• This was not actually a MariaDB problem but a WordPress problem? Was there an auto-update? Didn't make sense because one of the blogs is running a very old WP version
• Worth noting that I also host two Ghosts blogs using the same setup (nginx+mariadb in container) and they were unaffected and humming along just fine...
• At this point I was starting to think something was massively corrupt and this was gonna be a long day.

I then continued and created a php (testconnection.php) file on the nginx:

<?php
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

// Connection Details
$hostname = "container-mariadb";  // Your MariaDB hostname 
$username = "your_username"; // Your MariaDB username
$password = "your_password"; // Your MariaDB password
$database = "your_database_name"; // The database

// Create the connection
$conn = new mysqli($hostname, $username, $password, $database);

// Check for errors
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Print Debug Information
echo "Connected successfully\n"; 
echo "Host information: " . $conn->host_info . "\n";
echo "Client information: " . $conn->client_info . "\n";

// Close the connection
$conn->close();
?>

This threw the following error... We were getting somewhere:

Fatal error: Uncaught mysqli_sql_exception: Server sent charset (0) unknown to the client. Please, report to the developers in /var/www/domain/testconnection.php:13 Stack trace: #0 /var/www/domain/testconnection.php(13): mysqli->__construct() #1 {main} thrown in /var/www/domain/testconnection.php on line 13

The charset I was using was utf8mb4 with a collate of utf8mb4_general_ci:

SHOW CREATE DATABASE your_database_name;

My wp-config.php file already had DB_CHARSET, but DB_COLLATE was not set. I added that in the config as well:

define( 'DB_CHARSET', 'utf8mb4' );
define( 'DB_COLLATE', 'utf8mb4_general_ci' );

Sadly, that didn't fix it either. Still saying it can't connect to the database. Grmbl.

I then went ahead and checked /etc/mysql/mariadb.conf and the files in /etc/mariadb.conf.d/. It included character-set-server = utf8mb4, but not collation-server = utf8mb4_general_ci. The line was specifically in /etc/mariadb.conf.d/50-server.cnf.

Adding the latter solved the problem... 2hrs of my life gone.

As this file (likely) is managed in the container and changed by the OS (it's apparently based on Ubuntu, ewwww) or the MariaDB version, the easiest way was just creating another file: /etc/mariadb.conf.d/51-<something>.cnf.

This is my very dirty hack (as I'm not using Docker Compose for this):

docker exec -it container-mariadb bash -c "echo -e '[mysqld]\ncollation-server = utf8mb4_general_ci'> /etc/mysql/mariadb.conf.d/51-yeri.cnf"
docker restart container-mariadb

It now works fine again...

Via Kottke.

The pinnacle of running Doom on things™ ;)

Via Kottke.

• All of computing is moving to the cloud at a rapid clip, including (government) parts you might want to keep under your own control
• Europe has no relevant ‘hyperscaler’ cloud providers at all, and there is a desire to change this by policy means
• Competing with the IKEA-concept is nearly impossible. Offering IKEA-like products but then with a smaller range is not an attractive proposition. You can’t replicate IKEA without a LOT of upfront work
• Replicating a company like Airbus (or ASML) is similarly very hard: both companies (and their ecosystems) are one of the very few places where you can buy modern wide body jets and extreme UV wafer steppers. Their products are technically incredibly advanced.
• The ‘hyperscaler’ cloud providers (like Amazon, Microsoft, Google, Alibaba) are both IKEA and Airbus/ASML hard to replicate. They offer a huge and complete range services that are also incredibly advanced and years ahead of commodity products
• Europe has precisely nothing that competes, and is 100% dependent on the ‘IKEA clouds’. We only have partial companies.
• Fixing that situation will not be possible through legislation, standardisation or concerted government action. You can’t procure a competitive mega cloud into existence. Europe did assemble Airbus from its component parts but it was very hard
• Although IKEA exists, you can still get (better) furniture from more specialised places. A European owned email, communication and collaboration cloud might be a feasible idea
• European procurement law makes it entirely doable for governments to order their services from such European communication clouds
• From that, a more viable European cloud ecosystem could perhaps evolve

We do have some (smaller) cloud (Scaleway) and datacenter players (Leaseweb, could use some innovation) and some inbetween (OVH, Hetzner)... But none are really a true cloud provider with serverless, all the storage stuff, etc.

Evroc is trying just that -- being a real competitor to GCP and AWS -- but that'll need a lot of funding, and it's been rather quiet from their end for a few months.

To be seen what'll come out of it ...

Then again, I've recently (year or two) seen a push from medium-sized companies to get away from the cloud (Basecamp/Hey for one, but they are not alone) -- at least the big players -- due to exaggerated vendor lock-in and pricing.

Previously: Tattoo & the immune system

Just... Wow!

And oh boy -- did Ila grow this past year.

As always, Tofu playing "bande apart" -- hanging out by herself, minding her own business, and definitely staying away from Mumu and Taro. Them two boys, on the other hand, lovers as always.

And then, of course, us, getting led by Ila to whatever and wherever Ila wants to go.

As we're out of Singapore, we've tasked Jan to send them for us, from Singapore (⇾ cheaper than from Europe, and one less thing to bring along). 😅

We definitely forgot to add FlatTurtle.com on the backside, now that I'm actively involved again. ;)

I’m sorry, but I don’t want to be an emperor. That’s not my business. I don’t want to rule or conquer anyone. I should like to help everyone - if possible - Jew, Gentile - black man - white. We all want to help one another. Human beings are like that. We want to live by each other’s happiness - not by each other’s misery. We don’t want to hate and despise one another. In this world there is room for everyone. And the good earth is rich and can provide for everyone. The way of life can be free and beautiful, but we have lost the way.

Greed has poisoned men’s souls, has barricaded the world with hate, has goose-stepped us into misery and bloodshed. We have developed speed, but we have shut ourselves in. Machinery that gives abundance has left us in want. Our knowledge has made us cynical. Our cleverness, hard and unkind. We think too much and feel too little. More than machinery we need humanity. More than cleverness we need kindness and gentleness. Without these qualities, life will be violent and all will be lost…

The aeroplane and the radio have brought us closer together. The very nature of these inventions cries out for the goodness in men - cries out for universal brotherhood - for the unity of us all. Even now my voice is reaching millions throughout the world - millions of despairing men, women, and little children - victims of a system that makes men torture and imprison innocent people.

To those who can hear me, I say - do not despair. The misery that is now upon us is but the passing of greed - the bitterness of men who fear the way of human progress. The hate of men will pass, and dictators die, and the power they took from the people will return to the people. And so long as men die, liberty will never perish…

Soldiers! don’t give yourselves to brutes - men who despise you - enslave you - who regiment your lives - tell you what to do - what to think and what to feel! Who drill you - diet you - treat you like cattle, use you as cannon fodder. Don’t give yourselves to these unnatural men - machine men with machine minds and machine hearts! You are not machines! You are not cattle! You are men! You have the love of humanity in your hearts! You don’t hate! Only the unloved hate - the unloved and the unnatural! Soldiers! Don’t fight for slavery! Fight for liberty!

In the 17th Chapter of St Luke it is written: “the Kingdom of God is within man” - not one man nor a group of men, but in all men! In you! You, the people have the power - the power to create machines. The power to create happiness! You, the people, have the power to make this life free and beautiful, to make this life a wonderful adventure.

Then - in the name of democracy - let us use that power - let us all unite. Let us fight for a new world - a decent world that will give men a chance to work - that will give youth a future and old age a security. By the promise of these things, brutes have risen to power. But they lie! They do not fulfil that promise. They never will!

Dictators free themselves but they enslave the people! Now let us fight to fulfil that promise! Let us fight to free the world - to do away with national barriers - to do away with greed, with hate and intolerance. Let us fight for a world of reason, a world where science and progress will lead to all men’s happiness. Soldiers! in the name of democracy, let us all unite!

Final speech from The Great Dictator Copyright © Roy Export S.A.S. All rights reserved

Previously: Animation vs Math

[...]

WARNING: THIS DEVICE’S FEATURES ARE SUBJECT TO REVOCATION WITHOUT NOTICE, ACCORDING TO TERMS SET OUT IN SECRET NEGOTIATIONS. YOUR INVESTMENT IS CONTINGENT ON THE GOODWILL OF THE WORLD’S MOST PARANOID, TECHNOPHOBIC ENTERTAINMENT EXECS. THIS DEVICE AND DEVICES LIKE IT ARE TYPICALLY USED TO CHARGE YOU FOR THINGS YOU USED TO GET FOR FREE — BE SURE TO FACTOR IN THE PRICE OF BUYING ALL YOUR MEDIA OVER AND OVER AGAIN. AT NO TIME IN HISTORY HAS ANY ENTERTAINMENT COMPANY GOTTEN A SWEET DEAL LIKE THIS FROM THE ELECTRONICS PEOPLE, BUT THIS TIME THEY’RE GETTING A TOTAL WALK. HERE, PUT THIS IN YOUR MOUTH, IT’LL MUFFLE YOUR WHIMPERS.

[...]

But even if everyone at that table is a swell egg who wouldn't dream of enshittifying the product, the existence of a remote, irreversible, nonconsensual downgrade feature makes the product vulnerable to external actors who will demand that it be used. Back in 2022, Adobe informed its customers that it had lost its deal to include Pantone colors in Photoshop, Illustrator and other "software as a service" packages. As a result, users would now have to start paying a monthly fee to see their own, completed images. Fail to pay the fee and all the Pantone-coded pixels in your artwork would just show up as black.

[...]

These companies are all run by CEOs who got their MBAs at Darth Vader University, where the first lesson is "I have altered the deal, pray I don't alter it further." Adobe chose to design its software so it would be vulnerable to this kind of demand, and then its customers paid for that choice. Sure, Pantone are dicks, but this is Adobe's fault. They stuck a KICK ME sign to your back, and Pantone obliged.

[...]

Meanwhile, the studios keep making the case for stealing movies rather than paying for them. As Tyler James Hill wrote: "If buying isn't owning, piracy isn't stealing"

One of the contentious points raised by Jom was regarding a statement in their publication. While conceding that this particular statement could have benefited from additional context from the full remarks of the politician involved, they stands firm in their stance on the other two statements. These, according to Jom, neither implied governmental corruption nor suggested that the government was responsible for blocking an Instagram post, contrary to the court's determination.

As Jom argues, the law, intended to correct factual inaccuracies, is being overextended to include interpretations and opinions, potentially diminishing its effectiveness and transforming it into a political instrument. The concern is that if journalism is reduced to merely echoing official government statements, verbatim, it could significantly reduce critical thinking (which is already at a low level in Singapore) and further diminish any public discourse.

Jom is right in advocating for a more democratic approach to establishing truth in journalism. This approach would involve moving away from granting politicians sole authority over determining facts, and instead fostering a more inclusive and critical environment.

Uphold the truth, but in a manner that respects diverse perspectives and maintains the integrity of journalism.

Social media brims with dubious solutions to health problems we didn’t even know we had. In her latest piece for The Guardian, writer and journalist Katherine Rowland asks why health and wellness have become a quasi-religion for so many and what possible underlying systemic issues this points to.

“The industry’s offerings run the gamut from the tried and true (walking) to the benignly absurd (crystal dildos) to the predatory and dangerous (castor oil for cancerous tumors). [Author of The Gospel of Wellness Rina Raphael] writes that being healthy once meant dutiful visits to the doctor, but now entails a never-ending quest to overcome sickness, sadness, stress and even death.”

Women, in particular, who, in addition to feeling the general pressures of modern life, are constantly reminded “to enhance the body, radiate poise, master impulses (hunger, rage) and perfect the contortions required of the double standard”, seek respite in the illusion of control and empowerment offered by the wellness cult.

But Rowland argues that health outcomes often have less to do with the remedies we use than with the structural circumstances in which we find ourselves:

“The social determinants of health – factors like air quality, domestic safety, community support and education access – account for as much as 80% of health outcomes. But these realities are neatly erased from most wellness marketing. … Joining a union would arguably deliver greater benefit than downloading another meditation app, but the wellness market presents the latter as a logical solution to work-related stress and deteriorating mental health.

“‘We’re sedating women with consumerist self-care’, Raphael says. ‘You’re not stressed because you’re not doing enough yoga or taking enough bubble baths. There are other, bigger reasons why you feel stressed out. Maybe it’s because you don’t have maternity benefits. Maybe it’s because your boss is emailing you after 6pm. Maybe it’s because your partner doesn’t help you with the workload at home. These are the things that get shoved under the rug and instead you’re told that you yourself, alone, have to take care of the issues.’”

The fact that our perception of health and wellness is so easily shaped by scammers, snake oil peddlers and influencers points to underlying needs that are real and urgent. Let’s acknowledge that we live in a time of polycrisis that haunts many of us with an omnipresent sense of precariousness – hardly ideal conditions in which to ‘flourish’, to borrow some health influencer lingo.

Once we move beyond the consumerist mindset to wellness, we may realise that wellbeing does not require an extensive menu of goods and services. “It means social support, medical care that is accessible and empathetic, decent working conditions and ready sources of affordable and nutritious foods.”

“Perhaps wellness, if we are to embrace its full potential, should dispense with the fantasy that we should always be fit and chipper, or strive to be. Perhaps it is far healthier to agitate against the circumstances making us sick and miserable than it is to latch our hopes to another glossy promise.”

From The Guardian article:

• The wellness industry has grown enormously, promising cures and remedies for various health issues. However, it often overpromises and fails to address root causes of problems.
• Wellness has become a new form of faith or religion for many as organized religion declines. It provides community, identity and the promise of salvation from disease.
• The wellness industry disproportionately targets women, capitalizing on pressures they face to look perfect and balance many responsibilities.
• Despite increased healthcare spending, Americans have lower life expectancy and more preventable illnesses than other rich nations. Wellness focuses on individual solutions rather than systemic issues.
• Systemic factors like income inequality, pollution and work conditions have a much bigger impact on health than individual wellness practices.
• Wellness presents social problems as individual issues that can be solved through consumerism rather than collective action.
• The pursuit of wellness has become a never-ending quest, with the goalposts always moving further away. Real rest and acceptance of limitations is lacking.
• Questioning deeper assumptions about what constitutes a good life, rather than always seeking happiness and fulfilment, could promote wellness.
• Connecting with the community and questioning the systems that cause suffering, rather than relying on products, may better promote health and well-being.
• For the author, reducing wellness industry consumption and connecting with an empathetic medical team helped address health issues better than promises of the wellness industry alone.

Website & Report.

• Global greenhouse gas emissions increased by 1.0% in 2022 to reach their highest levels in human history, driven mainly by a rise in coal, oil, and gas use.
• The world is failing to cut emissions and remains far off track from limiting warming to 1.5°C as outlined in the Paris Agreement goals.
• Nationally determined contributions (NDCs) submitted since the Paris Agreement have strengthened ambition somewhat but are still insufficient to narrow the emissions gap by 2030.
• High-income and high-emitting countries like the G20 need to take more ambitious action to cut emissions and support developing nations in their transitions.
• Land-based carbon dioxide removal and novel removal technologies will need to play a stronger role later in the century to achieve net-negative emissions targets.
• Clean energy transitions present opportunities for countries but also challenges, including entrenched fossil fuel interests and the need for international finance.
• Low- and middle-income countries can develop roadmaps for ambitious low-carbon development and specify their finance and technology needs.
• Carbon dioxide removal technologies require strong policy support, priority-setting, and accelerated innovation to play meaningful roles in mitigation.
• Equity principles must guide responsibilities for deploying large-scale carbon dioxide removal between countries.
• The next Conference of the Parties (COP28) is an opportunity to strengthen climate action and support for developing nations.

PDF Summary via Kagi.

Via Kottke.

Source: Kottke

Grrr, I hate Shorts and videos in that aspect ratio.

Source: Daring Fireball

Software is typically sold on the promise of increased convenience or productivity, or both. If we were to believe all the clichéd marketing lingo about time-saving, our lives would now consist largely of uninterrupted leisure time. 

In a recent post, Brett Scott argues persuasively that, far from making our lives easier, technology is making them faster and more discombobulated. To understand how this shift happens, Scott tells us to look at the issue from a systemic perspective: 

“We don’t just live in any economy. We live in a mega-scale corporate capitalist economy, and in such a setting technology is never used to save time. It’s used to speed up production and consumption in order to expand the system. The basic rule is this: technology doesn’t make our lives easier. It makes them faster and more crammed with stuff.”

The invention of the car is a great example because it enabled us to move greater distances at much higher speeds, but didn’t fundamentally change our experience of work. The time ‘saved’ by driving versus walking was quickly taken up by more work. Fast travel by car (a high-value consumer good) quickly became the new default. 

“Los Angeles only exists in its current form because of cars, which means life will be difficult there if you don’t have one. In this scenario you’re essentially held hostage by the auto industry, whose products are the very thing that have catalysed our dependence on giant megacities. Rather than acknowledge that, we lapse into a type of Stockholm Syndrome where we choose to imagine the car as a saviour that grants us our independence in that context. In reality, the car is just a minimum requirement to scrape by in a car-catalysed environment. ...”

“Each technology not only unlocks a new state of expanded acceleration (that will be hardcoded into our lives as the new basis for our survival), but will also be used as the basis for new technologies to continue that process. The vast majority of people do not experience this technology as ‘liberating’ them. Rather, they experience it as something that propagates itself around them, and something they must race to keep up with in order to not be ‘left behind’.”

The irony is that as the world around us feels hectic and more unmanageable due to technology, we turn to the very same tools for help: 

“In reality, we’ll just be more burned out, which in turn will be weaponised to sell us more acceleration tech. Feeling burned out? Why not automate more? … We increasingly live a ‘just in time’ life because, at a systemic level, there’s pressure to pack in as much stuff as possible at both a consumption and production level. We’re just as dissatisfied, only busier.”

In Scott’s view, AI will have the same accelerating effect, raising employers’ productivity expectations and demanding that we all do more, faster. Because that is the gospel of innovation:

“In the mythology of Silicon Valley, and in corporate capitalism more generally, it’s believed that we expand alongside our system, and that new products are turning us into fuller expressions of ourselves. In reality, we’re biological beings with finite capacities ensnared within an economy with an acceleration drive, and its constant attempt to expand just crowds out other stuff in our lives.”

As with all systemic issues, individuals lack the agency to effectively counteract this dynamic. Still, Scott encourages us “to realise that all these things we’re told we need are just illusions generated by the numb logic of a system that cannot value anything except accumulation and profit. From that point we can strive to build balances of power to prevent the worst excesses of the situation coming out.” It’s the economy, stupid!

Picture this: you decide to get a custom meeting room table made. You scout around, and a small studio in East Vancouver catches your eye. You meet up, exchange ideas, and decide on a superelliptical rectangle design. They nail it.

Now, you might be wondering why this table-making venture was smooth sailing. Was it because the craftspeople were top-notch? Nope. Did they charge an arm and a leg? Nope. The secret sauce was they (apparently) gave a shit.

This isn't just a furniture saga. It holds true whether you're in a tiny carpentry workshop or a buzzing software studio. When someone's genuinely invests in the work, it's a different ball game. They aren’t just selling you a commodity; they’re offering you a piece of their passion, expertise, and genuine care.

Ever noticed how you’re drawn towards businesses or individuals that show they care? You ask for a quote from four software studios. Three shoot back with a quote, no questions asked. The fourth one, however, throws in some questions, shows concerns, wants to understand the nitty-gritty before talking money. Now, who would you trust more?

I'm 100% sure this is why people are working with FlatTurtle. We solve problems, we do it with the customer in mind (and I assume, we're cheaper than the rest).

Show you care about your work and craft, your customers, and what you do... And people will see the passion and want to work with you.

Feels a bit surreal. Boarding in SQ 332 in ~55 minutes.

First stop? Oh, Paris! And from there, it's off to Belgium, then back to France for a road trip. All that with Ila (no time to update her site)... Let's see how that goes. 🙈

We'll be back after 4 to 6 weeks and celebrating Christmas surrounded by loved ones and ringing in the New Year in the Ardennes.

Writing all down now, feels like this "holiday" will be quite busy.

And the plot twist? It's a one-way ticket. No return date stamped. We're just gonna go with the flow and see where the journey takes us. Though, if I were a betting person, I'd say we'll probably be back around Lunar New Year. After all, who can resist the allure of those lion dances and, honestly, cashing in Ila's ang pow?

But let's see how much time I'll have to run a remote business, take care of Ila, drive and holiday around, and deal with family. 🤣 Maybe we'll be back sooner.

Poor Mumu, Tofu and Taro will have an extended staycation at their grandmother. Some change in environment may do them good. Hopefully, they don't forget about us, though, while being spoilt to death...

It's secretly also a big test for Shan -- to see how Europe's lifestyle fits, and if we're finally ready to say goodbye to the Lion City and head somewhere more European... Copenhagen? Amsterdam? Lisbon? 🤷‍♂️ I know I'm in need of change and an adventure.

Prompt: generate 3D images of the inside of a house in Singapore. It needs to look modern and minimalistic, with light colours, to show a customer. Focus on the living room.

It still sucks at generating text... Trying to get an 80s style logo for superuser.one...

Website content... The prompt was a weird one.

prompt: for a website, I need an image of a coworking space. It needs to show people working. Our tech is the WiFi and efficient networking equipment that needs to be displayed but not clearly visible. Make it so it's not a given, but shows happy people. Make it photo realistic

Prompt: draw a 3D comic style dolphin with a canon on its back jumping out of the sea

However, due to the massive changes from Bullseye to Bookworm, they are not suggesting a dist-upgrade.

In the past, we have suggested procedures for updating an existing image to the new version, but always with the caveat that we do not recommend it, and you do this at your own risk.

This time, because the changes to the underlying architecture are so significant, we are not suggesting any procedure for upgrading a Bullseye image to Bookworm; any attempt to do this will almost certainly end up with a non-booting desktop and data loss.

Bookworm — the new version of Raspberry Pi OS

But screw that, ain't nobody got time to reinstall all their RPis in the wild (and in all fairness, I've had zero issues updating; just some messing around with kernels -- hence the post)...

As this is not very well documented, and Raspberry Pi, across all their versions, has 4 different architectures, it's confusing.

There's a quick dirty guide on how to update from raspberrypi-kernel and raspberrypi-bootloader to linux-image-rpi.

However, it's unclear in terms of which kernel to pick, so here goes:

• RPi3 (including RPi4) and newer in 64 bit¹ (aarch64):
  apt install -y linux-image-rpi-v8 linux-headers-rpi-v8
• RPi4 and 400 in 32 bit²:
  apt install -y linux-image-rpi-v7l linux-headers-rpi-v7l
• RPi2 (only 32bit) or 3, 3+, Zero 2 W, Compute Modules 3 and 3+ in 32 bit mode³ (armhf):
  apt install -y linux-image-rpi-v7 linux-headers-rpi-v7
• RPi1, Zero, Zero W, Compute Module 1 (armel):
  apt install -y linux-image-rpi-v6 linux-headers-rpi-v6

This mostly comes from here.

So, in short, this is what worked for me. As I use Wireguard as well, I needed to remove the package first to prevent conflicts.

apt remove -y wireguard
apt autoremove -y

dpkg --purge --force-depends raspberrypi-kernel raspberrypi-bootloader
umount /boot
fsck -y /boot
mkdir /boot/firmware
sed -i.bak -e "s#boot#boot/firmware#" /etc/fstab
systemctl daemon-reload
mount /boot/firmware
apt install raspi-firmware -y

# rpi3+ 64bit
#apt install linux-image-rpi-v8 linux-headers-rpi-v8
# rpi4+ 32bit
#apt install linux-image-rpi-v7l linux-headers-rpi-v7l
# rpi2 and rest
#apt install linux-image-rpi-v7 linux-headers-rpi-v7
# rpi1
#apt install linux-image-rpi-v6 linux-headers-rpi-v6

sed -i.bak '$ a\auto_initramfs=1' /boot/firmware/config.txt 

apt install wireguard -y
systemctl enable wg-quick@wg0.service
systemctl start wg-quick@wg0.service

# reboot

When running apt install <kernel> -- do write down the package it'll install. The listed packages are just meta packages and will pull a bunch of other packages that actually hold the important files. Running apt --reinstall on those meta packages, for example, won't actually reinstall the kernel.

To roll back, you can purge those packages and reinstall raspberrypi-kernel raspberrypi-bootloader (be aware of the path changes in /boot). If you made a mistake, just apt install --reinstall -y <all the packages you wrote down> and it should reinstall everything.

Here's a summary from Danny Mekić post:

• The European Commission wants to turn digital communication apps into mass surveillance tools by automatically scanning EU citizens' live conversations, photos and videos for criminal offenses, even if they are not suspected of a crime.
• Hundreds of academics, privacy regulators and EU legal experts have condemned the proposal, arguing it grossly violates privacy rights and the technology cannot accurately detect criminal activity.
• When the EU Council meeting showed insufficient support for the proposal, the Commissioner launched a paid advertising campaign on social media targeting specific countries to sway public opinion.
• The campaign used emotionally manipulative images and music to suggest opponents did not want to protect children, while also misleadingly claiming majority European support.
• The ads were microtargeted to exclude people interested in privacy, Euroscepticism, Christianity and other critical political/religious groups, creating an uncritical echo chamber.
• This microtargeting violates the social media platform's policies, the Digital Services Act, and GDPR.
• When a proposal lacks sufficient support, the proper response is to withdraw or amend it, not pressure doubting members through manipulative disinformation campaigns.
• By setting aside European values, the Commission is endangering the foundations of the European Union.
• The Commission should take down the ad campaigns and refrain from future attempts to bend public opinion through illegal targeted ads.
• The document was written by a jurist and technologist who is critical of the Commission's overreach and disregard for democratic processes and individual rights.

Via Kagi: Undermining Democracy: The European Commission's Controversial Push for Digital Surveillance

# docker logs ipchanged
29-09-2023 - 11:26:35 - Logged in as @turtlebot:matrix.org
29-09-2023 - 11:26:35 - IP address for be.yeri.be is 94.105.123.126
29-09-2023 - 11:26:35 - IP address for sg.yeri.be is 58.96.238.208
29-09-2023 - 11:26:35 - IP address for industry.yeri.be is 78.23.172.72
29-09-2023 - 11:29:36 - IP address for be.yeri.be is 94.105.123.126
29-09-2023 - 11:29:36 - IP address for sg.yeri.be is 58.96.238.208
29-09-2023 - 11:29:36 - IP address for industry.yeri.be is 78.23.172.72

Includes a Docker container to keep it running.

I made it less noisy (i.e. won't talk when the IP didn't change) and as the IP of my DynDNS hosts hasn't changed yet, there's not much to see... ;)

Via Kottke.

This post is mostly for myself, as a reminder, for the next time I need to do this.

Seems like this Chromebox was actually a GVC unit. Google has this thing where devices auto-install the Google Meet app and autoload it at boot. Officially, it's called CfM (Chrome (or ChromeOS?) For Meet). It requires a separate licence in your Google Admin to get this to work.

GVC is actually Google Video Conference. We called anything "Google Meet" simply GVC. A GVC unit, jump on a GVC, the GVC room, etc.  

Anyhow, GVC units aren't all that useful and while you can cancel the Meet app from launching at boot (Ctrl, Alt, S I think), it's annoying as it requires that combo at every boot.

I remember there used to be a way to move them back into the main track (instead of the GVC track), but here my mind gets a bit fuzzy. It was a key combo and/or an internal tool that would move the serial number to the stable channel.

It also seems ChromeOS is now at 116 and in my time at Google we were somewhere between version 60 and 85. So, needless to say, things have changed.

So I tried the usual way of powerwashing/wiping the device (move it to developer mode and back again), etc. It kept asking for the corp enrolment (and I was certain the device was no longer corp enrolled). Apparently, GVC units just, by default, ask for corp enrolment now because you can't really use them without the special license anyway.

There were some hacks that didn't work for me.

Turns out this Reddit post had the answer. Basically:

• get ChromeOS version 88 (or lower?),
• burn it to a USB stick,
• boot into recovery mode and restore it.
• It'll reboot,
• and then you can sign in right away with a Gmail account (as opposed to a corp (GSuite/GApps) account) and it'll boot the stable channel (running CrOS v88).

At this point, you can upgrade safely to the latest CrOS version.

It has been a few years since I last saw a ChromeOS device. Oh, the memories...

While I really tried to get the Pixelbook to replace my Mac, I never quite succeeded (even got an SSH server running in Docker to use as jump box with all my tools etc)... I missed too many of my shortcuts, habits and full-fledged terminal to make it work. I guess it was a bit like an iPad: great device, can be useful, but for anything serious I always yearned back to my Mac.

Looking at my NextDNS logs on the other hand... Damn, this device is noisy. An avalanche of requests to Google domains. Even when it's not doing much...

FlatTurtle has a new site, and there's been some fine-tuning here and there that led to a few typos creeping in. I wanted a quick tool to plug in a page, and that would highlight possible mistakes.

I've been a personal (paying) user of LanguageTool for a few years now (European, and less spammy and dodgy than Grammarly)

Started off with a terminal tool, but in the end that wasn't working out (hard to get the colouring to work and make it clear enough).

Figured a website would be easier:

• Insert a site
• Let it go through the LanguageTool API for mistakes*
• Show what is potentially wrong and explain why so I can go and edit it

(*) Surprisingly hard because it needs to trim all HTML and js and other crap. And it has issues detecting headers (without punctuation) from paragraph text, etc).

It's far from perfect, but it works well enough for half a day of fiddling around.

You can hover your mouse over the red words to get some information as to why something is wrong.

The code, provided as-is, is here, and you can run it using:

python3 -m pip install flask selenium beautifulsoup4 geckodriver-autoinstaller requests
python3 web_check.py --api-key KEY --username EMAIL

And opening http://localhost:5000.

EMAIL is your login, the KEY can be found here.

Have fun.

Quick and dirty script that shows your Mac battery information (health, cycles, etc). If an Apple keyboard or mouse is connected, it'll also display the battery % of those.

# Battery information
battery() {

	if !ioreg > /dev/null 2>&1; then
		echo "ioreg not found. Exiting."
		return 1
	fi

	_ioreg=`ioreg -l`
	_profile=`system_profiler SPPowerDataType`

	MOUSE=`echo $_ioreg -l | grep -A 10 "Mouse" | grep '"BatteryPercent" =' | sed 's/[^0-9]*//g'`
	TRACKPAD=`echo $_ioreg -l | grep -A 10 "Track" | grep '"BatteryPercent" =' | sed 's/[^0-9]*//g'`
	KEYBOARD=`echo $_ioreg -l | grep -A 10 "Keyboard" | grep '"BatteryPercent" =' | sed 's/[^0-9]*//g'`
	CYCLE=`echo $_profile | grep "Cycle Count" | awk '{print $3}'`

	if [ -n "$MOUSE" ]; then
		echo "Mouse: "$MOUSE"%"
	fi

	if [ -n "$TRACKPAD" ]; then
		echo "Trackpad: "$TRACKPAD"%"
	fi

	if [ -n "$KEYBOARD" ]; then
		echo "Keyboard: "$KEYBOARD"%"
	fi

	if [ -n "$CYCLE" ] && [ "$CYCLE" -ne 0 ]; then
		echo "Mac battery "`echo $_profile | grep "State of Charge" | awk '{print $5}'`"%"
		echo "Charging: "`echo $_profile | grep "Charging" | head -n 1 | awk '{print $2}'`
		echo "Cycles: "$CYCLE
		echo "Condition: "`echo $_profile | grep "Condition" | awk '{print $2}'`
		echo "Health: "`echo $_profile | grep "Maximum Capacity" | awk '{print $3}'`
	fi
}

Outputs something similar to this (no mouse or keyboard connected):

nazgul ~ $ battery
Mac battery 54%
Charging: No
Cycles: 224
Condition: Normal
Health: 89%

This works on zsh and may not work in bash.

The promise of travel has always been transformation: we go away and return changed, more broad-minded, more enlightened about the world. In ‘The Case Against Travel’ (non-paywalled archive view here) Agnes Callard argues that not only does travelling rarely change us, we’re the ones changing the places we visit:

“Touristic travel exists for the sake of change. But what, exactly, gets changed? Here is a telling observation from the concluding chapter of [Hosts and Guests, the classic academic volume on the anthropology of tourism]: ‘Tourists are less likely to borrow from their hosts than their hosts are from them, thus precipitating a chain of change in the host community.’ We go to experience a change, but end up inflicting change on others. ...

“We already know what we will be like when we return. A vacation is not like immigrating to a foreign country, or matriculating at a university, or starting a new job, or falling in love. We embark on those pursuits with the trepidation of one who enters a tunnel not knowing who she will be when she walks out. The traveller departs confident that she will come back with the same basic interests, political beliefs, and living arrangements. Travel is a boomerang. It drops you right where you started.”

I believe a certain type of travel can have positive residual effects. However, the majority of touristic travel has what Callard calls a ‘locomotive’ character: Go to Paris. Go to the Louvre. Take a photo of Mona Lisa. Next. In this way, tourists seek not life-altering experiences, but proof to shape their personal narrative for friends and followers.

So why is the appeal of travel so strong? In Callard’s view it’s because we seek escape from the monotony and banality of our everyday existence:

“Imagine how your life would look if you discovered that you would never again travel. If you aren’t planning a major life change, the prospect looms, terrifyingly, as ‘More and more of this, and then I die.’ Travel splits this expanse of time into the chunk that happens before the trip, and the chunk that happens after it, obscuring from view the certainty of annihilation. And it does so in the cleverest possible way: by giving you a foretaste of it.

“You don’t like to think about the fact that someday you will do nothing and be nobody. You will only allow yourself to preview this experience when you can disguise it in a narrative about how you are doing many exciting and edifying things: you are experiencing, you are connecting, you are being transformed, and you have the trinkets and photos to prove it.

“Socrates said that philosophy is a preparation for death. For everyone else, there’s travel.”

It may be harsh and perhaps a bit dark, but Callard hits a nerve. Especially in the age of social media, whatever virtues we used to assign to the traveller are mostly gone. Travel is now often a means to curate one’s personal brand – seeking validation, not transformation.

Via Kottke.

Via Briefs.Video.

Via Kottke.

Would totally recommend Ghost in the Wires if you want to learn more.

Cancers suck. Time we fix those.

Via Briefs.Video.

Via Kottke.

Via Dense Discovery.

When you sign up for digital service, sometimes they make it difficult to unsubscribe. You see these tricks every time you order a product online, use a search engine, sign up for a streaming service, or join a social media community. They’re so common in subscription and shopping websites that they have a name: Dark Patterns.

By Caroline Sinders, The Pudding

As consumers, it's time we demand better.

Maybe it's time we properly document the main abusers (or do we need to call the EU to enact protection laws again because they can't be trusted)?

Just insane 😅 -- but also so educational!

Via Kottke.

The provided scripts have been updated on 16 Jul 2023. Specifically the SmartStrip part was not working as intended.

I've been a big fan of Betteruptime. I've started using it to monitor all my assets online (websites, DNS, ping, successful script runs) as well as my servers (using heartbeats).

I have a few Raspberry Pi's, and once in a while they hang (not sure why, maybe USB-to-SSD issues or something). Nothing too critical, but annoying.

I've plugged them all on TP-Link Kasa smart plugs to remotely restart them if I had to (once or twice a year).

Note, to confuse everyone, TP-Link also launched Tapo, which... competes with Kasa and is not compatible, but does the exact same thing... ¯\_(ツ)_/¯

After some Googling (actually Kagi'ing) I found out, there's a Python library that lets you control your smart plugs.

So, the idea was born to:

• Check Betteruptime heartbeats, if down, power cycle the smart plug
• Do this at most once per day (in case something else is causing issues)
• Betteruptime heartbeats manage when a device is marked as offline (i.e.: it expects a heartbeat every 5 minutes, but will only consider the device down if no heartbeats are received for 2 hours).
• The bulk of the code had to be written by ChatGPT. Let ChatGPT choose the language (it ended up being a mix of Bash and Python)
• Everything needs to run in Docker (using a cron, the Docker container doesn't daemonise)
• These run on Raspberry Pi's (but of course the RPi can't check itself: so RPi1 checks for RPi2, and vice versa. As these RPis are on different networks (my parent's home, my own home, etc) I had to enable "--net=host" in Docker run to get the correct routes from the host system, but you may not actually need this
• To top if off, sent an email (using Mailgun EU servers) to warn me something broke and it rebooted

So, after some fiddling (half an evening or so) the proof-of-concept worked.

I should probably throw this in a Git repo but shrug. I don't want to give the impression that I'll maintain this and provide support.

Dockerfile:

FROM python:alpine
RUN apk add bash curl jq
RUN pip3 install python-kasa
COPY heartbeat.sh kasa-api.py /
VOLUME /tmp/kasa/
CMD ["/heartbeat.sh"]

Python script kasa-api.py (this works with both smart strips and smart plugs):

import sys
import asyncio
from kasa import SmartPlug, SmartStrip

async def main():
	if len(sys.argv) != 4:
		print("Usage: python kasa-api.py type IP-address outlet-index")
		return

	device_type = sys.argv[1]
	ip_address = sys.argv[2]
	outlet_index = int(sys.argv[3])

	if device_type == "smartplug":
		await control_smart_plug(ip_address)
	elif device_type == "smartstrip":
		await control_smart_strip(ip_address, outlet_index)
	else:
		print(f"Unsupported device type: {device_type}")

async def control_smart_plug(ip_address):
	plug = SmartPlug(ip_address)

	try:
		await plug.update()

		# Retrieve the current state
		plug_state = plug.is_on

		# Turn off the plug
		await plug.turn_off()

		print(f"Turned off SmartPlug at {ip_address}")
		await asyncio.sleep(5)

		# Turn on the plug if it was previously on
		if plug_state:
			await plug.turn_on()

		print(f"Turned on SmartPlug at {ip_address}")
	except Exception as e:
		print(f"Failed to control SmartPlug at {ip_address}: {e}")

async def control_smart_strip(ip_address, outlet_index):
	strip = SmartStrip(ip_address)

	try:
		await strip.update()

		# Retrieve the current state of the specified child plug
		child_state = strip.children[outlet_index].is_on

		# Turn off the specified child plug
		await strip.children[outlet_index].turn_off()

		print(f"Turned off child plug {outlet_index} in SmartStrip at {ip_address}")
		await asyncio.sleep(5)

		# Turn on the child plug if it was previously on
		await strip.children[outlet_index].turn_on()

		print(f"Turned on child plug {outlet_index} in SmartStrip at {ip_address}")
	except Exception as e:
		print(f"Failed to control SmartStrip at {ip_address}: {e}")

# Run the asyncio event loop
asyncio.run(main())

heartbeat.sh -- with example devices. Be sure to fill in the variables (including hb, that's the heartbeat ID you can get from the Betteruptime URL and the IP or DNS hostname of the smartplug):

#!/bin/bash

API_KEY="BetterUptime API token"
BU="https://uptime.betterstack.com/api/v2/heartbeats/" # no need to change this

MAILGUN_API_KEY="Mailgun API token"
MAILGUN_DOMAIN="mg.you.com" # use your own domain

if [[ "$DEVICE" = tyr ]] || [[ "$1" = tyr ]]; then

	# Tyr
	device="Tyr"
	hb=1111
	bu="https://uptime.betterstack.com/team/1/heartbeats/$hb"
	plug_type="smartplug"
	plug_host="smartplug1.kasa.you.com"

elif [[ "$DEVICE" = mammoth ]] || [[ "$1" = mammoth ]]; then

	# Mammoth
	device="mammoth"
	hb=2222
	bu="https://uptime.betterstack.com/team/1/heartbeats/$hb"
	plug_type="smartstrip"
	plug_host="smartstrip1.kasa.you.com"
	plug_index=0 # plug 2 is rly plug 3 because the index counts from 0 to 2 and not from 1 to 3.

elif [[ "$DEVICE" = liana ]] || [[ "$1" = liana ]]; then

	# Liana
	device="liana"
	hb=3333
	bu="https://uptime.betterstack.com/team/1/heartbeats/$hb"
	plug_type="smartstrip"
	plug_host="smartstrip1.kasa.you.com"
	plug_index=1 # plug 2 is rly plug 3 because the index counts from 0 to 2 and not from 1 to 3.

elif [[ "$DEVICE" = eagle ]] || [[ "$1" = eagle ]]; then

	device="eagle"
	hb=4444
	bu="https://uptime.betterstack.com/team/1/heartbeats/$hb"
	plug_type="smartstrip"
	plug_host="smartstrip1.kasa.yeri.be"
	plug_index=2 # plug 2 is rly plug 3 because the index counts from 0 to 2 and not from 1 to 3.

else
	echo "Unknown device."
	exit 1
fi

url=$BU/$hb

send_alert() {
	MAILGUN_URL="https://api.eu.mailgun.net/v3/$MAILGUN_DOMAIN/messages"
	from="kasa@you.com"
	to="alert@you.com"
	subject="Smartplug power cycled: $device"
	body="rebooted device $device!"$'\n'"Kasa IP: $plug_host."$'\n'"$bu"

	# Send alert email
	curl -s --user "api:$MAILGUN_API_KEY" \
		"$MAILGUN_URL" \
		-F from="$from" \
		-F to="$to" \
		-F subject="$subject" \
		-F text="$body"
}

kasa_cycle() {
	echo "Betteruptime heartbeat ($hb) says the service for $device is down, restarting."
	python /kasa-api.py "$plug_type" "$plug_host" "$plug_index"
	# Update the last execution date in the file
	echo "$current_date" > "$file"
}

kasa_info() {
	kasa --host $plug_host
}

response=$(curl -sL "$url" -H "Authorization: Bearer $API_KEY")
status=$(echo "$response" | jq -r '.data.attributes.status')

if [[ "$status" == "down" ]]; then
	dir="/tmp/.kasa/"
	mkdir -p "$dir"
	file="${dir}${device}.txt"

	# Get current date
	current_date=$(date "+%F")
	# Check if the file exists
	if [ -f "$file" ]; then
		# Get last execution date from the file
		last_execution=$(cat "$file")
		# We only want to run this once every 24hrs. If a reboot doesn't fix it, something more
		# serious is going on and likely needs manual intervention. No point spam rebooting the device.
		if [[ "$current_date" != "$last_execution" ]]; then
			kasa_cycle
			send_alert
		else
			echo "Power cycle already executed today."
		fi
	else
		kasa_cycle
		send_alert
	fi
elif [[ "$status" == "up" ]]; then
	echo "Betteruptime heartbeat says the service ($hb) for $device is up."
else
	# this could happen if the heartbeat is paused.
	echo "Unknown status."
	kasa_info
	exit 1
fi

I run Docker with two scripts, a builder (rebuild.sh) and a file that runs it (start.sh). It should rebuild in case a docker cleanup script ran (and deleted dangling containers).

I run this as root and probably shouldn't, but yeah... That'll be for another lifetime.

Be sure to change the paths (/root/git/kasa-api) in both scripts.

rebuild.sh:

#!/bin/bash
cd /root/git/kasa-api # the path where this project exists

git pull > /dev/null

BASEIMAGE=`cat Dockerfile | grep FROM | awk '{print $2}'`
docker pull $BASEIMAGE
docker build -q -t kasa-api .
rm -f /tmp/.kasa/*.txt

start.sh:

#!/bin/bash

if [ -z "$1" ]; then
	echo "Missing device name."
	exit 1
fi

docker stop kasa-api 2> /dev/null
docker rm kasa-api 2> /dev/null

run_kasa() {
	DEVICE=$1
	docker run --net=host -v /tmp/.kasa:/tmp/.kasa --rm -e DEVICE=$DEVICE --name kasa-api kasa-api
}

if [[ $(docker image ls | grep kasa-api) ]]; then
	run_kasa $1
else
	cd /root/git/kasa-api
	/root/git/kasa-api/rebuild.sh > /dev/null
	run_kasa $1
fi

And that's pretty much it. I run this using with cron in /etc/cron.d/. For example (be sure to edit the parameter/device name/path):

#
# cron-jobs for kasa-api
#

MAILTO=root

*/15 * * * *	root	if [ -x /root/git/kasa-api/start.sh ] && [ -f /root/git/kasa-api/start.sh ]; then /root/git/kasa-api/start.sh tyr >/dev/null; fi

I'm sure there must be bugs in this ChatGPT generated code but... so far, it has actually worked.

It probably sucks, spies on you, does MitM attacks, breaks most video conferencing tools, and is generally not very stable... Also... Zero trust!

Add this function to your .bashrc or .zshrc (whichever shell you're using*):

func killwarp() {
	sudo launchctl remove com.cloudflare.1dot1dot1dot1.macos.warp.daemon
	sudo killall Cloudflare\ WARP
}

Open a new shell window (to reload your dot files), and type killwarp.

This will permanently disable Warp (until your Mac is rebooted; as it's most likely force installed/started by your admin). So just run this after every reboot.

(*) Find out with echo $SHELL.

Via Kottke.

The War Department thought it was important for Americans to understand the tactics fascists would use to take power in the United States. They would try to gain power "under the guise of 'super-patriotism' and 'super-Americanism.'" And they would use three techniques:

First, they would pit religious, racial, and economic groups against one another to break down national unity. Part of that effort to divide and conquer would be a "well-planned 'hate campaign' against minority races, religions, and other groups."

Second, they would deny any need for international cooperation, because that would fly in the face of their insistence that their supporters were better than everyone else. "In place of international cooperation, the fascists seek to substitute a perverted sort of ultra-nationalism which tells their people that they are the only people in the world who count. With this goes hatred and suspicion toward the people of all other nations."

Third, fascists would insist that "the world has but two choices — either fascism or communism, and they label as 'communists' everyone who refuses to support them."

Well, well, look at that.

Exactly what's happening now (LGBTQ+, women/abortion, immigrants, refugees, Muslims, etc).

And exactly the same is happening in Europe.

As Jansen notes, this is not how a design process would work in the real world — there's no user testing or competing stakeholders to please — but from a purely aesthetic and functional standpoint, it's still an interesting challenge and puzzle to attempt to solve.

Source: Kottke

I've blogged about it before.

Here is how platforms die: first, they are good to their users; then they abuse their users to make things better for their business customers; finally, they abuse those business customers to claw back all the value for themselves. Then, they die.

Source: Pluralistic

I've just learned that Amazon Kindle killed the book loaning feature... Something they initially used as a selling point when I got my first Kindle in 2017 (or whenever it was).

I've spent about an hour on the phone with 4 (!) Amazon support reps to find a solution (tl;dr: there are none, but they recommend one of the following three options: 1/ share your Amazon account/password with whoever you want to loan your book to, 2/ add the person to your household (never mind you can only have 2 adults in your household), 3/ buy the books again).

As I told them none of these options realistically worked (and are not a solution to the problem) I asked for a gift voucher (to re-purchase the books I wanted to loan to a friend) which they initially said were unable to do, and eventually admitted were able to do, but refused to do because they felt they offered workable solutions: "you can just purchase them again". Sigh.

It is a disheartening reality that companies often take a turn towards evil once they hit a certain size. Lose touch with reality.

The initial promises of exceptional service and genuine customer care gradually fade away. Instead, the focus shifts to maximizing profits, leaving customer satisfaction behind. Shareholders exert pressure, prioritizing returns on investment over the long-term relationship with customers.

Don't trust corporates.

We've turned the world into a place where we don't actually own anything. SaaS offers ease of access (streaming, cloud, etc), but if consumers are at the whims of corporates to turn features on and off, give or take away access, something is wrong.

The first thing I noticed was that ethX renamed to enXY.

To get back to the old naming scheme, you can fix this by adding the following in /etc/network/interfaces:

rename enX0=eth0
rename enX1=eth1

And reboot.

Via Kottke.

Via Kottke.

Truly wish we learned all this in school. Would've attended school significantly more often... ;)

This is sobering: in an ad for the United Nations Global Compact, the words of Carl Sagan from nearly 40 years ago warn us of the necessity for urgent action on climate change, deforestation, and extinction.

Source: Kottke & Colosal.

• Storage was growing quickly (~80Gb during its peak); I am hosting my instance on a RPi4 (w/ 8Gb RAM) and the SSD was filling up rapidly,
• I wanted something speedy to serve (big and cacheable) content (i.e. a CDN).

While I didn't care much about storage any more, I still wanted to make sure it was kept in check, also for two reasons:

• Mastodon downloads a copy of all content it says on the Fediverse, and keeps it until purged. So every instance has all the content from other instances. This could theoretically lead to you hosting illegal content and getting in trouble for it,
• Cloudflare used to be my employer, and I have free access to R2. However, there's always a risk they'll disable my employee benefits one day and get me to pay for my used storage.

I run my Mastodon in a Docker instance, so your commands may vary (basically tootctl X Y is what matters). I run most of these commands once a week using systemd (except the media remover, that runs every day).

This will clear:

• accounts (you never interacted with)
• header files (big picture every account can upload)
• profile pictures
• link preview cards
• orphaned media (uploaded media but not posted)
• media (from other accounts)
• statuses (from other accounts)
• and as a bonus include updating Elasticsearch indices (which sound run every once in a while to optimise search)

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl accounts prune

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl media remove --remove-headers --days 15

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl media remove--prune-profiles --days 30

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl preview_cards remove --days 15

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl media remove-orphans

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl media remove --days 30

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl statuses remove --days 30

/usr/bin/docker compose -f /srv/mastodon/docker-compose.yml run --rm shell tootctl search deploy

Note that you should play with the --days X to find something that works for you (i.e.: you can scroll back in the history and still see posts/media, but not overload your storage).

I've included all the systemd files that's needed here. Again, will only work in a Docker environment using the same paths as me.

The systemd files will need to be activated using something similar to this (but again, don't blindly run these commands as it'll likely not work):

cp *.service *.timer /etc/systemd/system/
systemctl daemon-reload
systemctl enable --now *.timer
systemctl list-timers | grep masto

Oh, and this is not specific to R2. This works even when storing everything locally.

I've written before on how to use Cloudflare CDN to protect/speed up your instance.

I’m very fortunate to have a handful of new trees, some grass and public seating bookend the street I live in. One of my favourite times of the day to be out on my balcony is dusk, because when the sun starts setting and the hustle and bustle of the city subsides, a group of Indian myna birds, attracted by that greenery, playfully chirps and flies between the trees. The tweeting draws out neighbours, too, and creates a beautiful moment of connection through nature in an otherwise man-made environment.

An increasing body of research tells us that interaction with nature is associated with better body and brain health. Birds play a particular role in this, in part because they are some of the only animals able to venture into highly developed areas and give out calls audible to the human ear, providing a direct link to the natural world.

The pleasure we get from encountering nature can be explained through the biophilia hypothesis, the idea that humans have an innate affinity for life and living systems: “Human preferences toward things in nature, while refined through experience and culture, are hypothetically the product of biological evolution.”

This theory is guiding academic work but also urban and architectural design. For example, there is solid evidence that having a window looking out to living plants helps speed up the healing process of patients in hospitals. In educational settings, exposure to nature seems to help kids focus better, feel less anxious and improve memory.

It’s fair to conclude then that we need nature. But does nature need us? Probably not. Clive Thompson calls this the biophilia paradox: “Biophilia is asymmetric. We have biophilia, but nature doesn’t have ‘anthrophilia’. In fact, it’s the opposite: If humanity were to vanish tomorrow, the remaining plants and animals would set about rapidly reclaiming all the asphalted-over world we’ve created.”

There is a tragic irony here: our modern existence is largely incompatible with our biophilic need for nature. Our attempt to be closer to nature often comes at a cost to nature.

“We humans should be living a little more densely, to give nature more space away from us. Meanwhile, to satisfy our biophilia, we should be designing more nature into these denser human environments – using everything from an increased number of street-plants to town parks to ‘living walls’ on houses, and buildings that use more natural materials. … We need plants close to us – and far away from us. That’s the biophilia paradox.”

My local council recently bought a bunch of warehouses and turned them into a public park with a playground. What used to be a barren, semi-industrial area suddenly came alive with people and plants. Everyone visiting the park looked in surprise at the playground wondering the same thing: ‘Where have all of these kids been hiding?’

Today’s urban spaces are designed for cars and commerce, making them particularly hostile towards kids. With most streets being considered unsafe, there has been a huge drop in outdoor play. This study, for example, claims that today just 27% of children play outside their homes, compared to 71% of the baby boomer generation. Or look at this fascinating map showing how an eight year old’s ‘range of exploration’ has changed from ~10 km a few generations ago to a mere ~300 metres today.

This short piece makes some cogent points about how our society tends to divide children into two categories undeserving of autonomy – ‘angels’ and ‘demons’:

“On one hand children are considered too small, vulnerable and innocent to roam and play in urban spaces because of traffic, ‘stranger-danger’ and other hazards. On the other hand, teenagers are constructed as a public threat and should not be allowed to hang out on the streets with their bikes, skateboards and presumably bad intentions. … Children and young people are increasingly sequestered in homes, cars or institutional spaces for adult-controlled education and play.”

Research tells us that limiting children’s sense of safety and autonomy also hampers their mental and social wellbeing. And yet, we continue to design spaces that completely robs them of their right to participate in public life. “Children should not be reduced to mere ‘future investments’ or ‘adults of tomorrow’. They are also people with present-day rights to citizenship, participation and autonomy in their living environments.”

As a kid who grew up in the country, I spent my summers roaming the neighbourhood, local fields and woods. I was pretty shocked to hear about friends in Melbourne having spent much of their early teenage years inside shopping malls. They did so because we gradually made every public space unsafe or unwelcoming for them. The irony of now blaming them for being glued to screens all day!

Many of us (especially people like me who don’t have kids of their own) move about a city oblivious to the lack of infrastructure suitable for young people. Away from home, their ability to move freely is often constrained to fenced off spaces: playgrounds, daycare centres, school yards, sports grounds. They are often chauffeured between these spaces in the very thing that makes streets unsafe for them: cars.

It doesn’t have to be this way. We know that designing cities for children ends up benefitting everyone which is why all of us should be demanding child-friendly, slow streets and engage in community efforts to take back public space from cars. Just watch any video of a Bike Bus in action and witness the joy of reclaiming our streets.

Via Kottke.

Via Kottke

So, I would like to propose another metaphor for the risks of artificial intelligence. I suggest that we think about A.I. as a management-consulting firm, along the lines of McKinsey & Company. Firms like McKinsey are hired for a wide variety of reasons, and A.I. systems are used for many reasons, too. But the similarities between McKinsey — a consulting firm that works with ninety per cent of the Fortune 100 — and A.I. are also clear. Social-media companies use machine learning to keep users glued to their feeds. In a similar way, Purdue Pharma used McKinsey to figure out how to "turbocharge" sales of OxyContin during the opioid epidemic. Just as A.I. promises to offer managers a cheap replacement for human workers, so McKinsey and similar firms helped normalize the practice of mass layoffs as a way of increasing stock prices and executive compensation, contributing to the destruction of the middle class in America.

A former McKinsey employee has described the company as "capital's willing executioners": if you want something done but don't want to get your hands dirty, McKinsey will do it for you. That escape from accountability is one of the most valuable services that management consultancies provide. Bosses have certain goals, but don't want to be blamed for doing what's necessary to achieve those goals; by hiring consultants, management can say that they were just following independent, expert advice. Even in its current rudimentary form, A.I. has become a way for a company to evade responsibility by saying that it's just doing what "the algorithm" says, even though it was the company that commissioned the algorithm in the first place.

However, the updating process from 0.6x.y to 0.82.3 was not very smooth sailing:

• First it was stuck in synchronising on the iOS app refusing to initiate the update (had to force quit + reboot Flipper Zero to get it to continue)
• After that, once I managed to upload the new firmware, it was stuck on Waiting for SD card after the Flipper rebooted.

The SD card I tried was an old 2Gb Samsung SD I had lying around (have 3-4 of these).

Tried several times, but alas, until I tried a different SD card... Then the update process went fine and the firmware updated as expected.

So looks like this is a sign the SD card is not properly performing (even though format, benchmark and uploading firmware worked fine).

Normally, when foreign particles are introduced into the body, the immune system responds to destroy them. In the case of tattoos, though, the story is more interesting. As it turns out, our immune system does respond immediately when a tattoo is first inked. Cells swarm the damaged area of epidermis and dermis to try and deal with the invader. However, when these cells, called macrophages, interact with tattoo pigments, there’s a problem. The pigment particles cannot readily be broken down by the enzymes carried by the macrophage. Instead, the pigments remain stuck inside the macrophage until it eventually dies off and falls apart after a few days or weeks. Then, the pigment particle is ingested by another macrophage and the process begins again. Conveniently, just like skin, macrophages aren’t very opaque. This means we can still see the tattoo pigments even as they’re being swallowed and released over and over again.

Thankfully, macrophages don’t move around much at all, meaning that tattoos tend to stay where we put them. However, this process of death and reingestion is thought to be behind why tattoos tend to get a little fuzzy around the edges over time.

It’s also an important factor around how tattoo removal works. Laser tattoo removal treatments break down pigment particles into smaller pieces which can more readily be disposed of by macrophages. This process is why tattoo removal isn’t instant. Instead, the pigment particles are broken down into fragments, and macrophages in the skin then take a few weeks to remove the debris. This process is called phagocytosis, with the debris eventually making its way out of the dermis via the lymphatic system.

To allow a USG (Unifi Security Gateway) to reply to external (WAN) ping requests, do the following:

• Head to the Unifi dashboard -> Settings -> Firewall & Security
• Create a new rule
• Type: Internet Local
• Description: Allow Ping (Echo Request)
• Rule Applied: Before Predefined Rules
• Action: Accept
• IPv4 Protocol: ICMP
• IPv4 IMP Type Name: Echo Request
• Apply Changes -> wait ~2 minutes

That's it...

All this for Smokeping.

“We’re constantly being told that doing anything about the astronomical growth and the average size of motor vehicles would infringe on the freedoms of people to do whatever they want. But your freedom to swing your arm ends where my face begins, and SUVs are a giant punch in the face to everyone who doesn’t drive one. …

Over a ten-year period, over 500 American children were killed by being run over by SUVs – usually by their own parents, in their own driveways. This is insane! This is legitimately insane in any civilized society. This information alone would be enough to regulate the hood design of SUVs and light trucks, but instead the industry solution for this is proximity sensors and front-facing cameras, because car companies are happy for any regulations that means they can sell you more stuff. …

In the early days, most SUV buyers were arseholes. I’m not being flippant in suggesting that all SUV drivers were arsehole, but arseholes were literally the primary target market. When automakers wanted to make SUVs mainstream, auto industry research determined that the average light truck purchaser was obsessed with status, less likely to volunteer or feel a strong connection to their communities, less giving, less oriented toward others, more afraid of crime, more likely to text and drive, [and] more likely to take risks while driving. …

I really struggle to understand how a [European] DHL delivery driver can do his job with a [Renault] Kangoo van, but a middle-aged suburbanite thinks they need a Chevy Silverado [truck] to buy groceries. … One of these vehicles is designed to efficiently carry lots of useful stuff, while the other is designed to carry fragile egos.”

Yes, it’ll affect us, yes, it’s learning from us, but we’re still the creators. And we’ve been doing the exact same.

Source: Kottke

Three reasons prices are going up. But also most notably massive markups and lack of healthy competition.

Source: Kottke

U.S. petrochemicals giant Dow Inc and the Singapore government said they were transforming old sneakers into playgrounds and running tracks. Reuters put that promise to the test by planting hidden trackers inside 11 pairs of donated shoes.

Most got exported instead.

[...]

t a rundown market on the Indonesian island of Batam, a small location tracker was beeping from the back of a crumbling second-hand shoe store. A Reuters reporter followed the high-pitched ping to a mound of old sneakers and began digging through the pile.

There they were: a pair of blue Nike running shoes with a tracking device hidden in one of the soles.

These familiar shoes had traveled by land, then sea and crossed an international border to end up in this heap. They weren’t supposed to be here.

Five months earlier, in July 2022, Reuters had given the shoes to a recycling program spearheaded by the Singapore government and U.S. petrochemicals giant Dow Inc. In media releases and a promotional video posted online, that effort promised to harvest the rubberized soles and midsoles of donated shoes, then grind down the material for use in building new playgrounds and running tracks in Singapore.

Dow, a major producer of chemicals used to make plastics and other synthetic materials, in the past has launched recycling efforts that have fallen short of their stated aims. Reuters wanted to follow a donated shoe from start to finish to see if it did, in fact, end up in new athletic surfaces in Singapore, or at least made it as far as a local recycling facility for shredding.

[...]

Only... I realised that for some reason on Raspberry Pi (4), WiFi stopped working with the following errors:

Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.2204] device (wlan0): state change: config -> failed (reason 'ssid-not-found', sys-iface-state: 'managed')
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7525] device (wlan0): set-hw-addr: set MAC address to 92:F3:ED:C2:8F:9B (scanning)
Feb 17 11:55:02 tyr NetworkManager[449]: <warn>  [1676631302.7559] device (wlan0): Activation: failed for connection 'superuser.one'
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7562] device (wlan0): supplicant interface state: scanning -> disconnected
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7562] device (p2p-dev-wlan0): supplicant management interface state: scanning -> disconnected
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7577] device (wlan0): supplicant interface state: disconnected -> interface_disabled
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7578] device (p2p-dev-wlan0): supplicant management interface state: disconnected -> interface_disabled
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7579] device (wlan0): supplicant interface state: interface_disabled -> disconnected
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7579] device (p2p-dev-wlan0): supplicant management interface state: interface_disabled -> disconnected
Feb 17 11:55:02 tyr NetworkManager[449]: <info>  [1676631302.7585] device (wlan0): state change: failed -> disconnected (reason 'none', sys-iface-state: 'managed')

The WiFi SSID and password (wpa_supplicant) never changed, so I wasn't sure what it was. However, as most Pi's are wired I didn't pay much attention, until today.

As I had one RPi where nextdns activate worked fine, without NetworkManager installed, and where WiFi worked, I figured there was something evil about NetworkManager (= breaks my WiFi) and NextDNS not actually needing it...

I reverted my changed from my previous post (and removed some extra stuff that was not needed in my case, YMMV):

apt purge -y network-manager dnsmasq-base resolvconf modemmanager ppp ; apt install -y powermgmt-base openresolv ; apt autoremove -y

The powermgmt-base, and modemmanager, ppp parts are likely not needed, but this is just a copy and paste of what I did.

Reboot... And WiFi worked again. However, nextdns activate would still throw an error:

# nextdns activate
Error: NetworkManager resolver management: exit status 5

Going through the source code (yay for open-source) I noticed:

var networkManagerFile = "/etc/NetworkManager/conf.d/nextdns.conf"

That file indeed existed on both RPis that had the activate issue.

I ran the following command...

rm /etc/NetworkManager/conf.d/nextdns.conf

But that still gave the same error. But as I had purged the entire NetworkManager, I didn't need its lingering config files... So, why not rid ourselves of everything:

rm -r /etc/NetworkManager

And tada... Now activate works fine:

tyr ~ # nextdns activate
tyr ~ #

Go figure ¯\_(ツ)_/¯

Here is how platforms die: First, they are good to their users; then they abuse their users to make things better for their business customers; finally, they abuse those business customers to claw back all the value for themselves. Then, they die.

[...]

This is enshittification: Surpluses are first directed to users; then, once they’re locked in, surpluses go to suppliers; then once they’re locked in, the surplus is handed to shareholders and the platform becomes a useless pile of shit. From mobile app stores to Steam, from Facebook to Twitter, this is the enshittification lifecycle.

4 parts.

Because it's been two years, and both the world and the US still has a lot of work ahead.

Source: Hackaday

Source: Kottke

[…]

But if there's one thing I remember about Sim by, it's his criticism of the Singaporean mindset.

The No U-Turn Syndrome, or NUTS, was how Sim viewed how Singaporeans always required a rule base to get anything done.

It's referring to how in Singapore, u-turns are not allowed unless there's a sign that allows you to do so, which is different from how other countries do it — you can u-turn unless there's a sign prohibiting you to do so. And to make things even more fun, there are sometimes no u-turn signs, too.

This also means that when you want to do something, you automatically seek the approval of an higher authority, and if there's no rule, the default is "no".

It's terrible, and forces you to just stay in your lane without making changes.

When I started working, I saw plenty of examples of how this worked, especially in larger organisations.

[…]

With the passing of Sim, it doesn't hurt to be reminded of what he said again, and the examples he gave of how inflexible our Singaporean mindset is.

If we're going to honour his legacy, we should honour his words, too. Because as nuts as it sounds, NUTS is still pretty relevant in our society today — if not more so than ever, with the challenges Singapore faces ahead.

Eventually, the mortician was not pleased with the other bodies sitting around on beds of ice, so a LN Dewar capsule was secured for the remaining three. Another man was already frozen and sealed inside the capsule, so it was opened, and he was removed. Nelson and the mortician then spent the entire night figuring out how to jam four people — who may or may not have suffered thaw damage — into the capsule. The arrangement of bodies in different orientations was described as a “puzzle.” After finding an arrangement that worked, the resealed capsule was lowered into an underground vault at the cemetery. Nelson claimed to have refilled it sporadically for about a year before he stopped receiving money from the relatives. After a while, he let the bodies thaw out inside the capsule and left the whole thing festering in his vault.

Another group of three, including an eight-year-old girl, was packed into a second capsule in the Chatsworth vault. The LN system of this capsule subsequently failed without Nelson noticing. Upon checking one day, he saw that everyone inside had long thawed out. The fate of these ruined bodies is unclear, but they might have been refrozen for several more years.

Nelson froze a six-year-old boy in 1974. The capsule itself was well maintained by the boy’s father, but when it was opened, the boy’s body was found to be cracked. The cracking could have occurred if the body was frozen too quickly by the LN. The boy was then thawed, embalmed, and buried. Now that there was a vacancy, a different man was placed into the leftover capsule, but ten months had elapsed between his death and freezing, so his body was in rotten shape — no pun intended — from the get-go and was eventually thawed.

[...]

The worst fates of all occurred at a similar underground vault that stored bodies at a cemetery in Butler, New Jersey. The storage Dewar was poorly designed, with uninsulated pipes. This led to a series of incidents, at least one of which was failure of the vacuum jacket insulating the inside. The bodies in the container partially thawed, moved, and then froze again — stuck to the capsule like a child’s tongue to a cold lamp post. Eventually the bodies had to be entirely thawed to unstick, then re-frozen and put back in. A year later, the Dewar failed again, and the bodies decomposed into “a plug of fluids” in the bottom of the capsule. The decision was finally made to thaw the entire contraption, scrape out the remains, and bury them. The men who performed this unfortunate task had to wear a breathing apparatus.

Again, sadly unable to embed it here -- but definitely worth looking in the investigational journalism and the war crimes committed.

Before doing the full reinstall, I took a dump (dd) of my disk.

Usually, I create one per partition, but this was the Christmas season, and I was half occupied with feasting and half occupied with entertaining Ila. So, mistakes were made.

I ran dd if=/dev/sdb of=backup.img -- but this means I can't mount the disk directly, as it's not a partition:

# mount backup.img /tmp/disk
mount: /tmp/disk: wrong fs type, bad option, bad superblock on /dev/loop0, missing codepage or helper program, or other error.

I should've dd'd /dev/sdb2 instead of the entire disk.

All right, so let's figure out what can be done... First, let's look at the content of the image:

# fdisk -l backup.img
Disk backup.img: 111.8 GiB, 120040980480 bytes, 234455040 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x8297a463

Device          Boot  Start      End  Sectors  Size Id Type
backup.img1 *      8192   532479   524288  256M  c W95 FAT32 (LBA)
backup.img2      532480 34078199 33545720   16G 83 Linux

So, we can probably mount starting from sector 532480.

We can see that the sector size is 512 (which, I think, is the default for most). So, if we multiply 512 * 532480 we get 272629760.

Now we can mount the disk using the following command:

mount -o loop,offset=272629760 backup.img /tmp/disk

And that should do it.

The 2nd partition (the one with data) is now mounted and accessible under /tmp/disk.

If you need the first partition, the same can be done by running 512 * 8192 = 4194304; the following command mounts the boot partition:

mount -o loop,offset=4194304 backup.img /tmp/disk.

Source: Hackaday

the fuck...

Via Hackaday.

# nextdns activate
Error: NetworkManager resolver management: exit status 1

It seems like NextDNS was actually running, but just throwing an error when running nextdns activate. Restarting did seem to work without throwing any error.

The logs showed the same error:

Dec 20 14:06:20 tyr nextdns[5753]: Starting NextDNS 1.38.0/linux on :53
Dec 20 14:06:20 tyr nextdns[5753]: Listening on TCP/:53
Dec 20 14:06:20 tyr nextdns[5753]: Starting mDNS discovery
Dec 20 14:06:20 tyr nextdns[5753]: Listening on UDP/:53
Dec 20 14:06:21 tyr nextdns[5753]: Connected 45.90.28.0:443 (con=13ms tls=58ms, TCP, TLS13)
Dec 20 14:06:21 tyr nextdns[5753]: Connected 185.18.148.91:443 (con=12ms tls=28ms, TCP, TLS13)
Dec 20 14:06:21 tyr nextdns[5753]: Switching endpoint: https://dns.nextdns.io#185.18.148.91,2a04:b80:1:30::2
Dec 20 14:06:25 tyr nextdns[5753]: Setting up router
Dec 20 14:06:25 tyr nextdns[5753]: Activating
Dec 20 14:06:25 tyr nextdns[5753]: Activate: NetworkManager resolver management: exit status 1

The solution was (as root):

apt install network-manager resolvconf -y
systemctl enable NetworkManager
systemctl start NetworkManager
nextdns activate

Looks like, instead of resolvconf, openresolv was installed.

First time I heard about openresolv; usually resolvconf is the default. Not entirely sure if this was the culprit (and NetworkManager not being started) but the errors are now gone.

This year Ila joined us and, as if all stars aligned, it was the perfect set to create baby Jesus' birth. My grandma (bless her) would've been proud... ;)

The cats as the three kings, Joseph and Maria, and of course, the baby.

Every year we have a few cards getting lost (or at least we're not getting a confirmation they made it to their end destination -- many cards head to Europe, USA, Australia, Japan, Singapore, etc. I figure tons of mail must get lost all the time). And those that make it, tend to be damaged or dirty

This year we opted to put everything in an envelope... Also, less likely to offend a prude postman. ;)

While he was alive and well the year before -- we hadn't decided to adopt him yet -- so not officially part of the family just yet.

His mummy and 2 brothers got adopted shortly after Christmas, and we decided to keep him as a nice memory. And what's one more cat?

We figured, it would be him or a kid... We decided on a cat.

2021 was the year of (more) Google Meet meetings, and hardly heading into the office. So, evidently, this had to be the theme.

With all the lockdowns and travel restrictions, all our travel plans in 2020 (and most of 2021) were cancelled (yes, I book flights sometimes a year in advance). Trips to Paris, Portugal and Stockholm were cancelled, as well as the regular visits to Belgium.

This meant we had to celebrate Christmas in Singapore (and Christmas in Singapore isn't very... Fun -- the vibe is really missing, and it's way too hot). Everything here feels rather fake, and Christmas is truly just to buy shit you don't need. Nonetheless, we did our best with a small (and illegal) assembly, playing board games and enjoying some finger food.

In the card, still only Tofu, Taro, Shan and me -- although Mumu (our 3rd cat) was roughly 6 weeks old by that time. More about him in tomorrow's post.

To this day, Taro is the scared one, although he doesn't shy away from bullying Tofu.

After this, we figured two cats was enough.

Tofu was a 6-week-old kitten when we got her. She was likely abandoned by a breeder for her crooked tail. She lacks some social skills and has quite the temper. But nonetheless, she's our Tofu.

The idea is quite simple: bad photoshopping meets something relevant and/or funny.

I just realised we never posted these online, and so maybe it's time to create an archive.

In the coming days I'll be posting, one by one, our previous cards. Front and back. Hopefully this can inspire others to come up with good ideas.

Here goes -- our very first Christmas card from 2017.

Last week, an Australian climate protester, who blocked a lane of traffic on the Sydney Harbour Bridge, was sentenced to up to 15 months in prison under a new anti-protest law. It was one of many recent disruptive climate protests that seem to do little else than annoy and inconvenience everyone.

Our knee-jerk reaction to seeing someone throw soup at art or glue themselves to trains is usually contempt and anger. But I think when teenagers, grannies and scientists participate in activism that puts them at risk of going to jail and becoming the target of public scorn, it’s worth digging a little deeper.

First, we should remember that civil disobedience has long been a major tactic of nonviolent action. Whether in colonised Africa and India, in the American civil rights movement, or in the many labour, anti-war, social and racial justice movements, civil disobedience was used to provoke the government of the day, set a moral example and prompt broader discourse. It was also often loathed by much of the public because of its disruptive, divisive nature.

Most environmental movements have been around for a while. After decades of protests and marches, emissions are still going up, biodiversity loss is accelerating and hundreds of millions of people face an unlivable future. When the United Nations can issue a ‘code red for humanity’ and it’s only the third most important headline of the day, how effective is another courteous sit-in? When most of us have become numb to the daily shock and outrage in the news, how can activism cut through? Well, through theatrical, controversial actions.

But attention is not the only point. Our reaction to this sort of ‘performance activism’ also highlights a pretty major dissonance. We seem to be much more outraged about a defaced piece of art than a system that continues to trash and destroy the natural world we all depend on. The inconvenience of a delayed rush-hour commute infuriates us in ways that the prospect of frequent catastrophic ‘natural disasters’ does not. In reaction to the sentencing of the Sydney Harbour Bridge protester, the state’s conservative political leader said: “If protesters want to put our way of life at risk, they should have the book thrown at them.” It begs the question: who is putting our way of life at risk?

[...]

History tells us that harsher punishments do not stop activists. Considering what’s at stake today, I doubt it will this time. In the meantime, we can prepare for more disruption, keep the controversy in perspective, and think about where to channel our outrage. Like many protesters point out: if this kind of activism seems overly disruptive, we’ll be shocked to find out what climate change has in store for us. – Kai

I admit I'm the first one getting annoyed at these protests when it impacts me -- because I already try to do my part, and am well aware of what's at stake. We should disrupt the industries and politicians over regular people.

But having it put in that way, and comparing it to previous protests, I agree we likely have little choice, and it has worked in the past, and will work again now.

At least, until everyone is aware and starts doing their part.

Makes me want to build something like this…

I don't mind recommendations if...:

a/ they are useful (i.e. I don't see how kid shows are something I'd be interested in; and Google has no idea Ila exists, and she's at least 2-3 years too young to watch those shows anyway).

b/ the recommendations would be for apps and subscriptions I actually have. Don't recommend me something on Amazon Prime if I don't have Amazon Prime installed, nor an active subscription. Idem dito for Disney+.

Google had recommendations before but at the bottom of the app list. It was not so much in your face. Now it's all the way on top and I need to click 2x down on the remote before getting access to the apps (Netflix, Kodi, Youtube, etc).

So far the best method I found was to enable your Google TV in apps-only mode. It turns off ALL recommendations (so your home screen becomes rather bare; but at least less clicking). Note that the article doesn't mention rebooting the device; but I had to restart it to get rid of all the ads recommendations.

Turn on Apps only mode:

1. On a Google TV device, from the home screen, scroll to your profile.
2. Select Settings.
3. Select Accounts & Sign In.
4. Select your profile.
5. Select Apps only mode and then Continue.
7. Reboot the device

[...]

Could I cool down the Earth by capturing a comet and dropping it in the ocean, like an ice cube in a glass of water?

Daniel Becker

No. In fact, it's honestly sort of impressive to find a solution that would actively make the problem worse in so many different ways.

[...]

Outer space is a lot higher up than Niagara Falls,[citation needed] so the plunge down into the atmosphere at the bottom of Earth's gravity well adds a lot more than 0.1 degrees worth of heat. A chunk of ice from space that falls to Earth gains enough energy to warm the ice up, melt it, boil it into vapor, and then heat the vapor to thousands of degrees. If you built an icy waterfall from space, the water would arrive at the bottom as a river of superheated steam.

Source: What If?

The rest of that post, as always, is amazing. This is what I needed in school (but never had).

And all I wanted to add was: damn, I miss Futurama. One of the best shows.

Do you know the difference between ‘Best Before’ and ‘Sell By’? ‘Display Until’ and ‘Use By’?

Many of us don't, and it’s causing a whopping ten per cent of Europe’s food waste - 9,000,000 tonnes across Europe each year.

I guess that's one thing that I do miss in Singapore: informal places that are affordable (almost everything here costs money) and that are not shopping malls (exactly what he mentions in the video).

Sure, there are bars, but they are usually expensive and atas, and not the place people go for an informal chitchat (more for date nights). There are the places around the hawker centres (i.e.: the food courts) with a lot of "uncles" sitting down -- but that's hardly my crowd. ;)

But maybe I'm also just in a bad neighbourhood. Chinatown has more craft beer places (somewhat affordable) right inside the food courts (i.e.: no air-conditioning, but it's informal and easily accessible).

But I'll admit I miss the Belgian-style pub where we'd go for a drink before dinner, or later at night for a tea. Places like Fenikshof in Grimbergen.

Apple purposely disables a feature on your phone during unrest.

Anti-government protests flared in several Chinese cities and on college campuses over the weekend. But the country’s most widespread show of public dissent in decades will have to manage without a crucial communication tool, because Apple restricted its use in China earlier this month.

AirDrop, the file-sharing feature on iPhones and other Apple devices, has helped protestors in many authoritarian countries evade censorship. That’s because AirDrop relies on direct connections between phones, forming a local network of devices that don’t need the internet to communicate. People can opt into receiving AirDrops from anyone else with an iPhone nearby.

That changed on Nov. 9, when Apple released a new version of its mobile operating system, iOS 16.1.1, to customers worldwide. Rather than listing new features, as it often does, the company simply said, “This update includes bug fixes and security updates and is recommended for all users.”

Hidden in the update was a change that only applies to iPhones sold in mainland China: AirDrop can only be set to receive messages from everyone for 10 minutes, before switching off. There’s no longer a way to keep the “everyone” setting on permanently on Chinese iPhones. The change, first noticed by Chinese readers of 9to5Mac, doesn’t apply anywhere else.

[...]

But why did Apple rush out the change unannounced, in an unassuming update to iOS in early November, and apply it only to Chinese iPhones? One clue may lie in what happened the month prior, when Xi Jinping’s anointment to a third term as China’s leader was met with rare displays of public dissent.

In the most visible protest, a dissident now known as Bridge Man lit a fire on a bridge in Beijing to draw attention to his protest banners. One read, “Go on strike at school and work, remove dictator and national traitor Xi Jinping.” References to the banners were quickly censored across the Chinese internet, but photos still made their way through private channels. Vice reported that Bridge Man’s messages were spreading on the Shanghai subway via AirDrop.

Source: qz

The unannounced update has, as always, been twisted as a useful update to "protect the users".

Besides all the power they already hold "curating" the app stores, imagine, next time, Apple (or any other Big Tech Corp) decides to disable your camera when the police put their knees on the neck of a poor guy, or they decide to disable the keyboard inside certain Telegram chat rooms, or disable Wi-Fi and data inside certain geo-zones, etc...

I had not been very happy with DDG; mostly the results were very low quality (having to switch back to Google one too many times; results often lagged behind by months of publishing), many search bugs, and there's been that thing with Bing advertising, and generally not seeing many improvements over the ~2 years I tried to use it full-time.

Kagi, on the other hand, has his search engine worked out. I know they also pull data from Bing, but also various other sources (apparently that includes Google) and their own scraper (Teclis, TinyGem), etc.

You can compare the Google and Kagi results. While not entirely the same, I don't think Google's are better than Kagi's.

So search is really good and I very very rarely ever need to head back to Google. Only for very obscure errors with very few results, and Google almost never has a better answer.

It also adds some cool other features, like rewriting URLs.

For example, I run my own Libreddit, so when search results include reddit, I can now redirect to my own Reddit instance (sorry, you won't have access).

There's a bunch of other cool stuff, like Bangs (short codes that would redirect directly to a site, for example w for wiki -- so w flightradar would show this result instantly; and there's more like hackernews, reddit, google, etc).

You can also lower priority of certain sites. Seeing too much Tiktok or Pinterest? Want to boost Hackernew results? All possible!

To make it work on iOS, you need to install a browser extension, but that works relatively well (it rewrites your search from Google to Kagi).

I was a bit apprehensive as it's a very small team, and they are also trying to reinvent the browser space with Orion, which is a cut-throat tough market to get in. Two massive enterprises that would need a lot of funding and a lot of dev time.

Orion is based on Safari, and far from good enough to replace Firefox, but I'm actually mildly enthusiastic about this project as well.

The company is very transparent and there's clear progress. If you want to get involved, they also have a Discord and a feedback/bug forum.

I'm considering a family plan and will force Shan to switch once released.

So, all things considered, quite excited about this. Looking forward to see if they can revolutionise search. And I truly hope they make it.

The only thing I don't like is that their logo looks too much like Google's... 🙈

[...]

Shoots from the base of the tree are pruned so that the trunk stays straight.

[...]

The technique results in a harvest of straight logs without having to cut down the entire tree. Although originally a forestry management technique, daisugi has also found its way into Japanese gardens.

Not the most exciting narrators, but… Quite cool!

Would this scale and can we use this elsewhere to avoid cutting down trees?

Source

My uploads/static files are now saved in R2 under its own URL (part of my enterprise zone) so that my normal caching rules and other settings are applied.

Add these to your application.env file:

3_ENABLED = "true"
S3_BUCKET = "<bucket name>"
S3_ENDPOINT = "https://<some-id>.r2.cloudflarestorage.com"
S3_ALIAS_HOST = "<connected domain>" 
S3_PERMISSION = "private"
AWS_ACCESS_KEY_ID = "<access_key>"
AWS_SECRET_ACCESS_KEY = "<secret_access_key>"

The token/API key is a bit hard to find, but it's on the top right.

Then (re)deploy your site.

I did set up a new server (my RPi4 started to struggle, and I guess if I'm half serious about Mastodon, I shouldn't host it at home), so I started afresh... But there's a way to migrate existing data to R2 as well, following this guide. 

I specifically disagree with his stance on free speech, because I think that it depends on your interpretation of what free speech means. If you allow the most intolerant voices to be as loud as they want to, you’re going to shut down voices of different opinions as well. So allowing free speech by just allowing all speech is not actually leading to free speech, it just leads to a cesspit of hate.

I think that is a very uniquely American idea of creating this marketplace of ideas where you can say anything you want completely without limits. It is very foreign to the German mindset where we, in our Constitution, our number one priority is maintaining human dignity. And so, hate speech is not part of the German concept of free speech, for example. So I think that when Elon Musk says that everything’s gonna be allowed, or whatever, I generally disagree with that.

Regardless of what happens to Twitter, Elon Musk is without a doubt the most interesting man in the world right now. He's positioned himself at the intersection of so many trends and topics that it's hard to keep count, and through it all, he's tweeting memes. It's the greatest show on earth, no work of fiction could ever hope to compete.

It's also incredibly divisive. Not since Trump has a single character managed to invoke such extreme levels of love and hate on the world stage for weeks at the time. Nor has anyone been able to play the media like a fiddle with such virtuosity.

Thankfully the stakes are so much lower, though. Musk might be firing rockets into space, but they won't accidentally have any nuclear warheads on them. His media trolling isn't coming from within the White House. This reality show is playing out over something as disposable as a struggling social media website.

Furthermore, the world doesn't need Twitter. In fact, the world would almost certainly be better off without Twitter.

That's what makes this show so guiltlessly entertaining to watch: Whichever the outcome, the world wins. If Musk manages to fix Twitter, we're left with a better Twitter. Great! If Musk manages to burn down Twitter, we're left with a world free of Twitter. Great!

This is a 44 billion dollar gamble where the rest of us will win whatever the outcome.

And you'll notice errors in the webdev tools similar to Failed to find a valid digest in the 'integrity' attribute, with computed SHA-256 integrity:

Failed to find a valid digest in the 'integrity' attribute for resource 'https://yeri.be/packs/js/common-997d98113e1e433a9a9f.js' with computed SHA-256 integrity 'YgEhHmwjKL88zKfUOMt/qRulYurIuHzhn4SZC9QQ5Mg='. The resource has been blocked.
@yeri:1 Failed to find a valid digest in the 'integrity' attribute for resource 'https://yeri.be/packs/js/locale_en-f70344940a5a8f625e92.chunk.js' with computed SHA-256 integrity '1VgpQjY/9w/fgRLw1QH2pfzqr36p3hINvg9ahpBiI2U='. The resource has been blocked.
@yeri:1 Failed to find a valid digest in the 'integrity' attribute for resource 'https://yeri.be/packs/js/public-a52a3460655116c9cf18.chunk.js' with computed SHA-256 integrity 'onh6vHxzykkVgJkiww+OCPk0tKC48KMUD9GVJ8/LKJQ='. The resource has been blocked.

Basically, the sha256 hash doesn't match the js or css static files.

This happens because Cloudflare minifies those files and thus the hash has been changed.

To get it to work correctly, you'll need to create a Page Rule via Rules > Page Rules > Create Page Rule with the following info:

• URL: YourMastodonURL.com/packs/*
• Settings: Auto Minify: off (do not select anything)
• Rocket Loader: slider off

Don't forget to purge your cache via the dashboard (for the Mastodon domain) via Caching > Custom Purge > Hostname > YourMastodonURL.com.

Had a similar problem with a VoIP (Nexmo SMS/call forwarding) tool that just refused to work using local mail servers without a valid cert. Gave up and started using Mailgun. 

Long story short: use something like Mailgun or another provider.

Using localhost SMTP server support seems to be limited if you don't have working certs. The documentation is also lacking as to what does what. Didn't figure out how to have it ignore SSL.

This is what worked for me, using Mailgun server:

SMTP_SERVER=smtp.eu.mailgun.org
SMTP_PORT=465
SMTP_LOGIN=mastodon@your.domain
SMTP_PASSWORD=some-password
SMTP_FROM_ADDRESS=you@anything.com
SMTP_DELIVERY_METHOD=smtp
SMTP_SSL=true
SMTP_ENABLE_STARTTLS_AUTO=false
SMTP_AUTH_METHOD=plain
SMTP_OPENSSL_VERIFY_MODE=none

And it looks like I'm not the only one struggling.

I wanted to run the whole thing from a Docker container, though, so I'll quickly write a how-to.

This whole thing runs from a Raspberry Pi, as root. No k8s or k3s for me. The path I use is /root/git/feed2toot/, so be sure to modify that to whatever you're using.

First off, get your credentials for the app. You can either install the Feed2Toot package on a system (i.e. throwaway VM, to keep it clean), or use the Docker container below, but add RUN apk add bash and change the last line to CMD ["bash"] and then chroot into it via docker exec -it feed2toot bash.

This will generate two files (feed2toot_clientcred.txt and feed2toot_usercred.txt). Be sure to save these.

You can also try to run Feed2Toot at least once to make sure it's working and to fine-tune your ini file. This is mine:

[mastodon]
instance_url=https://yeri.be
; Here you need the two files created by register_feed2toot_app
user_credentials=/etc/feed2toot/feed2toot_usercred.txt
client_credentials=/etc/feed2toot/feed2toot_clientcred.txt
; Default visibility is public, but you can override it:
; toot_visibility=unlisted

[cache]
cachefile=/feed2toot/feed2toot.db
cache_limit=10000

[lock]
lock_file=/var/lock/feed2toot.lock
lock_timeout=3600

[rss]
uri=https://yeri.be/feed
; uri_list=/feed2toot/rsslist.txt
toot={title} {link}
; toot_max_len=500
title_pattern=Open Source
title_pattern_case_sensitive=true
no_uri_pattern_no_global_pattern=true
; ignore_ssl=false

[hashtaglist]
; several_words_hashtags_list=/feed2toot/hashtags.txt
; no_tags_in_toot=false

[feedparser]
; accept_bozo_exceptions=true

[media]
; custom=/var/lib/feed2toot/media/logo.png

I have three other files to make this work, first off Dockerfile:

FROM python:3.6-alpine
RUN pip3 install feed2toot && mkdir -p /etc/feed2toot/
COPY feed2toot.ini feed2toot_clientcred.txt feed2toot_usercred.txt /etc/feed2toot/
VOLUME /feed2toot/
CMD ["feed2toot", "-c", "/etc/feed2toot/feed2toot.ini"]

The script I run to build the container (start.sh):

#!/bin/bash
git pull

BASEIMAGE=`cat Dockerfile | grep FROM | awk '{print $2}'`
docker pull $BASEIMAGE
docker stop feed2toot
docker rm feed2toot
docker build -t feed2toot .
./run.sh

And finally, the script to run the container every so often (run.sh):

#!/bin/bash
docker run -d --rm -v /srv/mastodon/feed2toot/:/feed2toot/ --name feed2toot feed2toot

This will save the database file under /srv/mastodon/, to preserve states across rebuilds.

Note that once Feed2Toot runs, it'll exit, and the container will be stopped. So it does not automatically run all the time.

So, you'll want to run this every so often. You can add a file to /etc/cron.d/ to run it, for example, every six hours:

#
# cron-jobs for feed2toot
#

MAILTO=root

0 */6 * * *		root	if [ -x /root/git/feed2toot/run.sh ]; then /root/git/feed2toot/run.sh >/dev/null; fi

That's it. Should do the trick. It'll now post stuff from your RSS feed onto your timeline.

Oh, and Jeroen has a good post about Mastodon.

Most of my (non-track) light at home is smart using either a TP-Link Kasa smartplug or Philips Hue (and I want to avoid adding more brands, more apps, and more shit). However, Philips Hue is quite $$$ and not always all that easy to get in Singapore (shady retailers, limited stock, not many options).

I knew that Tradfri was technically compatible with the Hue Bridge, but never made the jump as I just wanted things to work (don't want to mess around with lights). Until today. Figured I may as well give it a go.

Surprisingly, everything worked out of the box. I had to do a factory reset (not sure if that's because I kept the light on for ~10 minutes before trying to set it up, or if this was a returned product as clearly the box had been opened before)...

• Turn on light
• Reset light by turning it off and on 6 times
• Open Philips Hue app and search/add light
• Tada... Should work

Side note: it requires a modern firmware (and I assume all lights being sold today have said firmware, but if for some reason you end up with old stock, you may need to update). To update you need the Ikea Bridge though (or... apparently the dimmers/buttons may work as well -- did not test).

All the controls are working as well (dimming, changing colours, etc).

The QR-code menu—which you access by scanning a black-and-white square with your smartphone—has taken off ever since. It may dominate going forward. But I hope not, because I detest those digital menus. Never mind dying peacefully in my sleep; I want to go out while sitting in a restaurant on my 100th birthday, an aperitif in my left hand and a paper menu in my right. And as eager as I’ll be for heaven if I’m lucky enough to stand on its threshold, I want one last downward glance at a paramedic prying the menu from my fist. In that better future, where old-school menus endure, I’ll go to my urn happy that coming generations will still begin meals meeting one another’s eyes across a table instead of staring at a screen.

Every single restaurant in Singapore uses these terrible, crappy UI, QR code menus. They suck. It's time for them to die in a fire. The pandemic is over and there's no reason for them to be used.

I need to use my phone, I can't easily discuss with my party on who is ordering what by showing and sharing a menu, the internet often sucks, and the page fails to load (or takes forever), the UI is broken on a tiny screen (text/ingredients are not fully shown, impossible to scan through a one-pager with 100s of items), some restaurants explicitly ask you to order only from one phone (imagine having two phones ordering food! Nuclear disaster!!) and some of those apps/sites clear the cart when going "back" in the browser, and each have their own, terrible, UI built differently taking forever to figure it out).

Even worse are those menus where you need to fill in your credit card to pre-pay (god forbid using Apple/Google Pay) that block copying and pasting numbers (out of 1password) or clear the input field every time you tab out of the browser and for example into 1password). AAAARGGHHH.

For now, we can't escape them, but I will happily get out of my way to avoid a restaurant that uses QR codes and get into one that provides a proper menu.

Fitting for Global Warming (and likely plenty of other weird stuff humans got accustomed to), but apparently the story is about death.

[...]

The story illustrates the level of violence we accept amongst children in otherwise non-violent societies, but it gets even worse: differing speeds of development lead to huge differences in size and strength, meaning bullying is often like getting picked on by a Shaq-like giant.

[...]

Yes, in the developed world “corporal punishment” (literally “bodily punishment”, an eloquently Latinized euphemism for “beatings”) is on the decline, but if a 19th-century person told you that though wife-beating was still legal, it was on the decline, you’d look at them at least a little bit askance.

Corporal punishment, while permitted for children, is never allowed for adults, even for convicted murderers. It's legal to beat a child for talking out of turn, but not for adults who have repeatedly, viciously, murdered people (*).

Countries that do beat people for talking out of turn are universally regarded as brutal dictatorships, just so long as those beaten include grown-ups.

[...]

Children are expected to never resort to violence. If on the playground they’re hit, they should not hit back, but find an authority figure instead. Generally, this authority will do nothing meaningful, and the only result will be the status penalty of being labeled a tattle-tale, resulting in an even more vulnerable personal position.

[...]

Meanwhile, if a reasonable adult simply feels threatened, such as from having popcorn thrown at them (**), they can shoot someone to death.

[...]

The value of truth as a virtue and liars as dishonorable is universally held, except when speaking to children.

[...]

Very insightful article, and many of what they touch on is true in a western society.

(*) Singapore is an exception.

(**) Probably only in the US.

Source.

When these shows resurfaced, they were full of these weird jumps, signaling that scenes were removed during censorship because someone somewhere thought it would be inappropriate or illegal to stream such content.

[...]

77 of the first 100 episodes had at least one edit, amounting to 206 removed scenes.

[...]

I categorized these scenes, among which sex, LGBTQ+ (and atypical heterosexual relationships), as well as disrespect toward China or the country’s allies are the most common ones. The four other topics account for a rather small portion but are still worth mentioning: illegal actions, religion, unhealthy addictions, and miscellaneous.

[...]

This added up to over one hour of deleted scenes, or nearly three full episodes of purely censored content.

Source and analysis by The Pudding.

The author analysed all the censored cuts out of TBBT and categorised them in 7 different ways (explained at the end of the article).

Very nicely done, showing side by side comparison of the censored and original version.

[...]

Those pages are now gone, along with thousands of anonymous posts sharing gossip, seeking advice, and protesting against government policies. In August, police in Hong Kong arrested two administrators of the Facebook page Civil Servant Secrets on suspicion of sedition, without specifying what content they found problematic. Shortly after the arrests, many other popular pages each with tens of thousands of followers shut down, as people feared becoming the next targets of Hong Kong’s crackdown on dissent.

“We don’t know where the red line is,” the administrator of the CityU Secrets page told Rest of World. Requesting anonymity to avoid being targeted by the authorities.

[...]

As time changes... All the (stupid?) things we posted (when we were kids?) on the World Wide Web will come and bite us.

Long gone are the days of the free "underworld-y" internet that existed when I grew up, I know, but few of us realise that all the things we posted on the internet are there, forever, and eventually... It'll come and haunt us.

I can now happily say this NFC tag hack works. No need to hack your purifier like with their previous kit (I almost purchased the kit -- but eventually decided against it; was it worth the trouble?).

But these NFC tags are significantly easier to use. After ignoring the "your filter is at 0%" for the past ~6 months, it's back at 100% with this. Remember to dust off and clean it once in a while (but even if you don't, the air coming out is still cleaner).

So, entirely, worth it!

Speaking of which -- Ikea has a whole new range of cool purifiers (including built-in a table). Quite cool (and sad that it's come to this with all the pollution)!

When Kevin lost his job at a tech startup during a round of mass layoffs two months ago, he suddenly felt way less stressed. He had spent countless hours as a customer service agent for a health app that rarely worked, fielding angry call after angry call. Now that he was unemployed, the stress disappeared, which, for him, was a problem. He desperately missed the high of the anxiety he experienced from work. “I thought I was depressed, but I think I was just relaxed for the first time and didn’t like it,” the 29-year-old tells me. “All that stress sucked, but it honestly kept me going.”

Wish this was an option in Singapore -- sadly, driving a bike here is needlessly dangerous. But likely a viable mode of transportation when we move back to Europe.

“Due to short life-spans and faulty memories, humans have a poor conception of how much of the natural world has been degraded by our actions, because our ‘baseline’ shifts with every generation, and sometimes even in an individual. In essence, what we see as pristine nature would be seen by our ancestors as hopelessly degraded, and what we see as degraded, our children will view as ‘natural’.”

In the US, since the first European settlers arrived, 90% of virgin or ‘old growth’ forest has been destroyed. Today’s forests could be better described as ‘tree farms’ as they do not resemble the richly biodiverse forests that once were.

Another example are whale populations: in just one century we managed to reduce whale numbers by a whopping 99%. The impact of this is hugely complex: apparently the lack of whale poop reduced the fertilising effect on ocean algae levels, permanently crashing the productivity of ocean food webs and even altering global climate.

The Twitter thread has a lot of examples.

A more current and more widely understood example is the recent, dramatic decline of the insect population. Thanks to SBS, our children will most likely never know how many bugs ended up splattered on windshields during a road trip taken just a few decades ago.

The Windscreen phenomenon.

Using Van Der Waals force, geckoes are able to stick to pretty much any surface, including slippery windows. Their feet have millions of tiny hairs.

Pretty damn cool -- never thought about it (*) until Nerdland talked about it.

(*) Singapore has a lot of geckoes. They are considered to be pests here... But I love them... :)

- A new Chatham House report highlights that the global food system is the primary driver of biodiversity loss. 

- Biodiversity loss will continue to accelerate, unless we change the way we produce food. Further destruction of ecosystems and habitats will threaten our ability to sustain human populations. 

- The new report calls for an urgent reform of food systems, suggesting three interdependent actions: changing global dietary patterns, protecting and setting aside land for nature, and farming in a more nature-friendly and biodiversity-supporting way. 

- Policy makers are urged to take a system-wide approach to account for the impacts of food systems, develop global guidance for change, and translate this to national targets. 

We definitely need to rethink how we produce and consume food.

But also, while mostly interesting for space travel, scientist find a way to grow plants in total darkness (i.e.: without photosynthesis). This could help with vertical farming inside buildings. It's also ~18x more efficient this way.

While we should not take that as an excuse to get rid of trees and greenery, this could maybe be used to grow in larger scale with less land usage.

Source: Nerdland

Been playing around with DALL-E (and burned through all my free credits in no time). Amazing.

"Moving some of our passenger operations to other UK airports at such short notice is also not realistic," the airline said. "Ensuring ground readiness to handle and turnaround a widebody long-haul aircraft with 500 passengers onboard is not as simple as finding a parking spot at a mall."

It's worth asking how come (European) airports were unprepared for this rebound. I've travelled quite a bit within Asia¹ the past few months, and I fail to see any of the same problems Europe is facing.

It seems like the big airports are affected most (AMS, LHR, FRA, MUC), whereas regional airports have long queues but due to lower loads are not affected as much. But then again, information is not super transparent, and it's hard to figure out how many flights are cancelled in Brussels or Copenhagen as opposed to Amsterdam.

And Iceland seems to have plenty of staff... ;)

Stockholm airport a couple of weeks ago was a disaster in terms of massive queues (the only reason it was smooth for us, was because we had priority lane and were lucky to be able to skip the hour-long queues).

We can't blame the sudden opening/dropping of Covid regulations either, as Europe has been significantly more lax and easy going than most Asian countries that basically went from lockdown/full test regiment/quarantine to opening up in a matter of days or weeks.

One could also argue Asia does not have the same workers' protection/unions/training/safety standards (which may be true in some cases, not sure about training for example) and generally salaries/costs are lower (i.e.: you could hire four for the price of one).

It's also unfair to shove the costs back to the airlines (that need to rebook or refund passengers), while having to fly empty planes during Covid to retain their airport slots...

Note that most of the problems seem to affect departures (transit/arrivals are generally smooth).

Maybe having the entire ground-staff exist out of (underpaid) immigrations/interim/temp workers was not a sustainable model to start with, and that's finally showing.

Do better, Europe.

1: Bali seems to be the exception: customs had super long queues, and their new visa regulations (i.e.: many people now need to buy a visa-on-arrival, when that wasn't needed before) added to confusion and people being sent back to buy their VoA. 

First off, starting to use the smokeping.eu¹ domain that Bianco got 10 or so years ago instead of using weird URLs under superuser.one domain.

It's running on four nodes as we speak:

• a virtual machine on a colocation server in Leaseweb, Amsterdam, NL -> leaseweb.nl.smokeping.eu
• a RPi3 (+SD card, slowest of all), Telenet, Belgium -> telenet.be.smokeping.eu
• a RPi4, EDPnet, Belgium -> edpnet.be.smokeping.eu
• a RPi4, Starhub, Singapore -> starhub.sg.smokeping.eu

This is achieved using Smokeping in a docker container, Cloudflare tunnel and Cloudflare CDN/DNS.

1 Doesn't point at anything at the moment. To do later.

When we're travelling (read: holiday) she's carrying an old Lenovo ThinkPad 13 (great device!) just "in case" she needs to open AutoCAD and edit something minor or read the drawings/dimensions. But honestly, most of the time that device is turned off and dead weight.

But all the above is just an excuse to "I was bored, and I wanted to test something": can I use an old Raspberry Pi (zero W) to remotely wake her Intel NUC, and then use Tailscale to use RD on her iPad? Well, yes I can.

I completed this using:

• Tailscale to remote desktop from anywhere to home
• Cloudflare Tunnels, Access and DNS to have a web interface to wake the desktop
• A Linux device that's always on and in the same LAN, and that'll run a PHP script.

Prep work: enable WOL

First off: enable Wake-on-LAN (WOL) in the BIOS and in your Windows settings. This article explains it for Intel NUCs, but would be similar enough for most devices. The Device Manager pane looked different on our i5 NUC, but was close enough.

On Mac, you just need to enable it in the Energy preference pane, for Linux I have no clue. 🤷‍♂️

Second step: have a working Raspberry Pi (or any Linux device) in the same LAN. This device needs to be turned on 24/7, so use something that uses very little power.

I do have a more powerful RPi4 I wish I could've reused (running Docker and some other "serious" stuff; however it's currently in a different VLAN, and it's quite crucial the Linux device is in the same LAN as the device(s) you want to wake up), so I went with an old Raspberry Pi Zero W that was collecting dust (it used to run pwnagotchi).

On the Linux device, install etherwake. The command to run is quite simply etherwake aa:bb:cc:11:22:33 (= the ethernet MAC address of your device).

If this doesn't wake your desktop, something is wrong and there's no point continuing. Go and troubleshoot.

Install Tailscale and RD

On the (Windows) desktop and your iPad, install Tailscale. Login, and make sure it works by pinging from one to the other.

Then set up Remote Desktop on both (Windows, iPad). You should test and make sure you can properly connect using the LAN IP address and then the Tailscale IP address.

Fun fact: I create a DNS record for all my devices using Cloudflare DNS with the syntax of device-name.ts.yeri.be, so I don't need to ever remember IPs, and can easily ssh or ping devices without having to look up IPs. 

Fun fact side track: I actually have a dynamic script that runs (on Linux) and creates hostname.ts.yeri.be for the Tailscale IP, hostname.wg.yeri.be based on the Wireguard IP, hostname.lan.yeri.be based on the LAN IP. This dyndns script runs every so often and updates IPs if needed. All this is running using Cloudflare DNS and their API. Super convenient.

Nginx, php and etherwake

I'm a 80s kid, so I'll use dirty PHP to run this script. I'm sure I'll go straight to hell for this, but yolo.

Install nginx and PHP (no need for MySQL and other stuff).

etherwake requires root to run (because it needs root access to create a weird magic ethernet packet). Create a file in /etc/sudoers.d/etherwake and add this line:

www-data ALL=(ALL) NOPASSWD: /usr/sbin/etherwake

This will allow www-data (nginx/php) to run /usr/sbin/etherwake using sudo, without password.

In /var/www/html/ create an index.php file with:

<html>
<head><title>Wake on Lan</title></head>
<body>
<p>Wake up <a href="mycooldesktop.php">My Cool Desktop</a>
</body>
</html>

And a mycooldesktop.php (or whatever) file with:

<?php
$output = shell_exec('sudo /usr/sbin/etherwake aa:bb:cc:11:22:33 2>&1');
echo "<pre>$output</pre>";
?>
<p><a href="..">Back</a></p>

It ain't pretty -- but it gets the job done. 

And be sure to edit the MAC address to match your desktop's ethernet MAC address.

Cloudflare tunnels

Install Cloudflare Tunnel (via Zero Trust dashboard).

When creating a new tunnel, the dashboard will give you all needed commands to install the tunnel on your RPi -- but be sure to select the right OS/architecture (arm64? arm? armhf?).

And then point the tunnel to http://localhost. No need to mess around with SSL certs.

Lastly, set up Cloudflare Access (via the same Zero Trust dashboard): create a new application, and make sure only approved users can sign in (i.e.: using a pin code emailed to only approved emails).

You can try it yourself via wol.superuser.one. You won't get in. :)

Optionally, but recommended: lock down Nginx to only allow connections from localhost (127.0.0.0/8 and ::1) if using Cloudflare Tunnels, or Cloudflare IPs if using port forwarding with Cloudflare Access in front. 

To recap

• We used Tailscale to create a VPN network between the desktop and the iPad. The big benefit is that Tailscale works effortlessly across NAT networks without having to open ports,
• We used Cloudflare DNS so we don't need to remember hostnames :),
• We used Cloudflare Tunnels to make sure the RPi web interface is accessible across NAT (without port forwarding) and from anywhere,
• We used Cloudflare Acces and locked down access to the right people using ACLs,
• We used etherwake running on a RPi to wake up devices that are hibernating or turned off.

And that's it really.

PS: technically WoL works with WiFi, but when I enabled WoL on the WiFi adapter, the NUC refused to hibernate/sleep for more than a minute, and kept waking itself up. So, there seems to be some kind of trigger in my network that keeps waking it up. Also, not sure if WoL via WiFi would work if the device is turned off (as opposed to sleep or hibernate). I just ended up using ethernet. 

PPS: both Cloudflare Tunnels and Tailscale use Wireguard tech in the background, so that's really cool. 

Just like Air France-KLM is already offering Thalys tickets for some of its flights from Brussels: instead of departing from BRU airport to AMS or CDG; just take a train from Brussels South.

It looks like Lufthansa, and soon all of Star Alliance, will offer more comprehensive (long-haul) tickets including a train ride to or from your final destination.

Can only applaud this: planes are here to stay; but I’d 100% prefer to take the train (at least a high-speed one like Thalys, Eurostar or the Shinkansen) over a small CRJ9, A220 or other sardine cans for my layover flight (BRU doesn’t have a lot of decent direct connections to Asia). These inter-city flights (short distance, frequent take-off and landing) heavily contributing to noise and environmental pollution.

Europe will also impose additional tax on short flights, so hopefully this may make the entire journey a bit cheaper (and more relaxing).

Oh, and if I get miles for this, it’s even better (and I’m going to guess a lot of people think the same: earning miles on train rides, yay).

Deutsche Bahn is the first company outside the aviation industry to become a partner in an international airline alliance.

Deutsche Lufthansa and Deutsche Bahn are already working together on the German transport market and are offering joint tickets. This service could also be opened up to the customers of the other Alliance members.

Source: Aviation24

On Monday, an AP reporter tested how the company would respond to a similar post on Facebook, writing: “If you send me your address, I will mail you abortion pills.” The post was removed within one minute. The Facebook account was immediately put on a “warning” status for the post, which Facebook said violated its standards on “guns, animals and other regulated goods.”

Yet, when the AP reporter made the same exact post but swapped out the words “abortion pills” for “a gun,” the post remained untouched. A post with the same exact offer to mail “weed” was also left up and not considered a violation.

Shame on you, once again, Facebook/Meta.

It doesn’t serve Singaporeans to have the government acting as our nanny, covering our eyes while clutching her pearls. When it seizes the power to decide whether the people are “reading the right thing,” it is depriving Singaporeans of opportunities to develop media literacy, exercise critical thinking, and become savvier navigators of online spaces. This benefits the government because it fosters among the people a culture of dependency on those in power to exercise control over all aspects of people’s lives. But it hurts Singaporeans by curbing our agency and freedom, trapping us mentally within authoritarian frames and environments.

[...]

Carrying an extra passport

In ways that are hard to explain, working for a bigger tech company is like carrying an extra passport. Everyone else has to commute to work. You get driven in an air-conditioned private bus with dedicated wifi. Work visa failed to renew? No worries, do an intra-company transfer to one of several global hubs.

It's not that the rules don't apply to you, it's that you have a safeguard for when the shit hits the fan.

And this week, that's exactly what happened. The Supreme Court of the US overturned Roe v Wade and a bunch of tech companies rushed in to reassure their employees. Yes, the law of the land just changed. But, don't worry. We will fly you out of state, we will approve relocation if you wish, we will take care of you. You will be insulated against the worst of anti-choice laws, regardless of where you live. This is a massive change in reproductive freedom for Americans, but not for you.

We're not opposed to employers taking care of their employees. We're not even upset that companies got gold stars for their employer brand in an otherwise hot talent market. But the extra passport is tricky. It has two profound impacts and whether those things are intended or not is hard to say.

An extra passport can make you feel like you have a perpetual plan B. Like whatever is going on in the world is someone else's problem to solve. That untethered, unmoored thing means you pay less attention to the fucked-up-ed-ness of San Francisco. You can always move to Miami. Or Austin. Taxes are lower there anyway. Pulled all the way through, tech people resemble locusts. We come, we eat, we leave at the first signs of blight. Even when it's blight we caused.

The other reason it's tricky is that it reduces scrutiny on the issuing body. The company paying for the air conditioned, wifi-enabled shuttle or the round trip airfare to a blue state. Don't look a gift horse in the mouth. They are doing all of this to take care of you. And it'd help out a whole awful lot if you didn't ask what the public policy team has been up to for the past few years.

[...]

Incoherent answers

So here we are. Faced with this disastrous ruling. And it makes us wonder: how coherent are your organization's actions on this one? We heard about the relocation policy, what other actions are they taking? Do they line up? Or are they shielding their employees from a political reality with one hand, while they help bankroll that reality with the other? The twitterverse has been quick to call out the companies whose statements don't match their political spending. But that critique, lobbed at a brand's social account, often stops at the social media manager.

It's harder for organizations to ignore the questions that come from their own people. It's harder to ignore questions from you.

What are our company's policy/lobbying priorities right now?
Which candidates have we donated to that helped make this mess, and have we cut off that support?
How are we making our position clear, and what concrete steps are we taking to advance that position?

Those questions may produce some awkward shifting in seats. If this were about product strategy, the conversation would be all coherent actions and strong point of view. But when it comes to their role as political actors, many executives have shown that they don't have the range. So, when you ask these questions, you may get a patronizing smile, and some version of, "we can't do that. Donating across the board is how you play the game. If we want influence on the things we care about, we need to be in the room."

You deserve better answers than that. You deserve better than to have your employer tell you that criminalizing abortion is "playing the game." Some of you, when you push, will find out that your labour has been supporting an organization that helped fund what's unfolding right now. And when you discover that, you deserve better than, "we don't claim to get everything right." You deserve better than, "we're not all going to agree on everything anyway."

We don't need you to agree on everything. But, if you are one of those lucky humans who found yourself with an extra passport you didn't know you had, we're invoking Spiderman rules.

That company-issued passport affords you a set of privileges. Like the ability to flit between jurisdictions when the need arises. It also comes with an extra set of responsibilities. We need you engaged, informed, and asking tough questions at this week's all hands. Even if you're not American, or married to an American, now is a good time to get clear on how your organization is using its influence in the world. Particularly when your company's public stance and their actions don't line up.

I'm pro-Becky who found out at her 20-week anatomy scan that the infant she had been so excited to bring into this world had developed without life sustaining organs.

I'm pro-Susan who was sexually assaulted on her way home from work, only to come to the horrific realization that her assailant planted his seed in her when she got a positive pregnancy test result a month later.

I'm pro-Theresa who hemorrhaged due to a placental abruption, causing her parents, spouse, and children to have to make the impossible decision on whether to save her or her unborn child.

I'm pro-little Cathy who had her innocence ripped away from her by someone she should have been able to trust and her 11-year-old body isn't mature enough to bear the consequence of that betrayal.

I'm pro-Melissa who's working two jobs just to make ends meet and has to choose between bringing another child into poverty or feeding the children she already has because her spouse walked out on her.

I'm pro-Brittany who realizes that she is in no way financially, emotionally, or physically able to raise a child.

I'm pro-Emily who went through IVF, ending up with SIX viable implanted eggs requiring selective reduction to ensure the safety of her and a SAFE number of fetuses.

I'm pro-Jessica who is FINALLY getting the strength to get away from her physically abusive spouse only to find out that she is carrying the monster's child.

I'm pro-Vanessa who went into her confirmation appointment after YEARS of trying to conceive only to hear silence where there should be a heartbeat.

I'm pro-Lindsay who lost her virginity in her sophomore year with a broken condom and now has to choose whether to be a teenage mom or just a teenager.

I'm pro-Courtney who just found out she's already 13 weeks along, but the egg never made it out of her fallopian tube, so either she terminates the pregnancy or risks dying from internal bleeding.

You can argue and say that I'm pro-choice all you want, but the truth is:
I'm pro-life.
Their lives.
Women's lives.

You don't get to pick and choose which scenarios should be accepted. It's not about which stories you don't agree with. It's about fighting for the women in the stories that you do agree with and the CHOICE that was made.

Women's rights are meant to protect ALL women, regardless of their situation!

Overturning Roe does not stop abortions, it stops SAFE abortions! 

Abortion is healthcare.

I've not been in Paris since 2015, I believe. Feel like I should probably pop-by again and see if it really changed that much. I remember it to be mostly one big traffic jam with all the 2 and 3 wheeled motorcyclists racing in between.

It would be interesting to see if other major cities in Europe follow suit.

I'm actually quite looking forward to the biking future: riding (e-)bikes, a proper last-mile method (i.e. combing rental bikes or e-scooters with public high-speed railway).

Brussels definitely had a change of heart (for the better), but it'll take 10+ years to properly realise all these projects. Is it too little, too late?

Bike Highways are becoming a thing in a few cities in Belgium (but not in Wallonia; and sadly, the one in Vilvoorde will take 4+ years to build). But I'm excited to see what this will become once all this is finalised.

Would love to see Singapore work on something similar.

For a very brief moment, we had rental bikes in Singapore that were hugely popular. That is, until the gahmen decided to regulate rental bikes because of stupid wild parkers; a lot of these companies either pulled out of Singapore or went bankrupt.

And we had e-scooters, that were banned pretty much overnight (or well, "only allowed on biking lances" -- however, Singapore probably only has 5, or some absurd low number, biking lanes across the entire island; so it was an effective ban).

Since then, the desire of car ownership only went up (there is technically a cap -- which is good, but leaves little alternative for families that need a car for things that are impractical with ride hailing). Speaking of, ride hailing companies are doing tremendously (prices nearly doubled in the past 2-3 years with the lack of competition).

I see an increase in (amateur) bikers, but it's insanely dangerous as there's no dedicated lanes except for a couple of PCN.

So dear Singapore, please please please build a city that does not revolve around cars (the plans are there, but all new development seem to still have all roads on top, with little to no cycling lanes).

Make it easier to use (e-)bikes, (e-)skateboards, unicycles and what not!

Web 3 goes against the core promise of the internet which tries to be a great equalizer.

The Web was about making information accessible to all, Web 3 is trying to provide value to a few, where everything is done for the benefit of the few rather than benefit of all.

Web 2 gave us Wikipedia, Google search, Facebook and more. They are not perfect systems, any system which involves humans will have loopholes & problems driven by greed and a hunger for power. But, they did act as an equalizer. Where is Wikipedia of Web3? Wikipedia never started with the mission of making it's contributors rich.

I'm extremely pessimistic to what Web 3.0 will supposedly bring.

We all had good fun in the early days of Crypto -- some of us made a quick buck -- but we need to come to terms it's not really solving anything (besides laundering money and fuelling criminals). And it's not sustainable at all. And don't get me started on NFTs.

[...]

Last year she found out her 65-year-old mother had 1,100 micrograms of PFOS per liter of blood—a concentration more typically found in industrial wastewater. Her 68-year-old father had about 800. Her 19-year-old daughter tested at 300. D’Hollander’s own level had come down to about 100, which she attributes to not eating eggs and to breastfeeding, a theory backed up by studies showing mothers pass on high amounts of the chemical through their milk. She and her mother both have malfunctioning thyroids, a condition now associated with PFOS, and doctors have told them that at some point the drugs they take for the condition will stop working. Other health problems associated with high PFOS levels include high cholesterol, diabetes, hormone and immune disorders, and even diminished vaccine efficacy.

[...]

One sample showed 257,000 micrograms per liter, according to a 3M-commissioned study submitted to the Flemish waste management agency. For context, Minnesota’s current safe limit is 0.015 micrograms per liter.

[...]

After more than a decade of fighting, Flemish officials were eager to go ahead with the Oosterweel. They needed 3M’s help. In November 2018, Lantis and 3M signed their secret pact allowing the most dangerous of the toxic dirt (with 70 to 1,000 micrograms of PFOS per kilo) to be dumped on 3M’s site. Lantis argued Flemish regulations allowed it to move the soil without treating it as toxic waste as long as it served a function, in this case a security wall. Lantis estimated it would cost €63 million to move all that soil. 3M’s cost would be €75,000.

[...]

The Province of Antwerp planned to move roughly 4 million cubic meters of soil from the tunnel-highway project to a nature reserve far south.

[...]

Alongside health anxieties, farmers in the area have lost business. Koen Doggen grows organic vegetables that he sells to consumers through a subscription service. He says tests last summer showed his soil had more than twice the level of PFOS at which the government says sanitization is required. “I considered quitting,” he says. “I didn’t know if I wanted to work on contaminated soil. I breathe it in daily in the summer and wash it off my skin every evening. I wondered how I could ever sell this product again now that Zwijndrecht has become PFOS land, like it’s Chernobyl.”

[...]

High concentrations of PFBSA had made it into fish in the estuary of the western side of the Scheldt leading into the North Sea, according to a study paid for by residents of Zwijndrecht late last year. Flounder in the estuary had 24 micrograms of PFOS, seven times above safe limits for people who eat fish once a week.

[...]

Last autumn, 3M’s chief medical officer, Oyebode Taiwo, flew to Antwerp from the US to defend the company in Parliament. He argued that blood tests showing high PFOS levels weren’t proof the chemical caused the health problems that individuals were experiencing. “It could be due to reverse causation, meaning that it’s not the exposure that is causing the health outcome, but it is the health outcome that is causing the exposure to build up,” he said.

In other words, he argued certain people with specific health conditions are more prone to build up PFAS chemicals in their blood. Scientifically, the idea is dubious. Legally, it’s absurd, says Berezofsky. She points to the “eggshell skull” rule accepted in US law. “If I walk down the street and I hit somebody over the head, a normal person with a normal skull may just feel a bump. Somebody who has a skull made of an eggshell might die,” she says. “I’m still responsible. The fact that they have an eggshell skull does not relieve me of the liability of what I did.”

[...]

Source: Bloomberg

With Ila on the way, both as a parent and if I were a kid still -- where would I want to grow up?

Growing up wasn't a fan of Grimbergen because it was quite dull (but then again, it was very close to Brussels, and easily connected to Antwerp): I wanted a city, and that's why I moved to Antwerp (and later Singapore).

Yet, now that I also value quality of life, Singapore is not very high on that list either. There's an insane pressure on kids to be top of class and to perform, limited to no safe outdoor activities unless you live in a place with a pool/tennis court (everything else feels fake, you can't get dirty as a kid), the lack of ownself transport methods (bike, skateboard, etc) to go to school/friends (public transport rocks, but that's never as convenient as a bike for short distances).

I'm currently having mixed feelings between the big house in a quiet neighbourhood (not Suburbia, but something more like Finland/Norway outside of cities, with a forest, next to your home) vs. being in a city like Copenhagen.

While I would love to being closer to nature, I'd probably miss the benefits of the city life (like being close to an airport -- we need to visit Belgium and Singapore after all, take-away food, quick and easy shopping, more friends/school options, a cinema, etc).

By the way, Johan has a good blog about living off-grid -- which is a bit too extreme for me.

A city like Amsterdam or Copenhagen is probably a safer choice: less green, but easy and safe to get around as a pedestrian/biker, while still being in relative distance of nature or an escape out of the city.

And no, I won't head back to Brussels; it's a terrible for kids. It's the wild west, where cars rule and the police won't act.

Ghent and Antwerp are investing in car-free zones and making it pedestrian friendly, but I hate Antwerp's lack of greenery (many beautiful trees are cut, everything is stone and concrete and feels like death. Moreover, it's one big traffic jam due to lack of a sustainable solution to keep the cars out).

Oh, and I got myself a Halfbike. So I'll definitely be looking at places with biking lanes. ;)

If we cast a wider net and examine violence more broadly, evidence suggests mental illness does not cause violence. Large epidemiological studies have shown that rates of violence among people with mild-to-moderate mental illnesses range from 2%-4%, compared to 1%-3% in the general population. One of the strongest longitudinal studies, called the MacArthur Violence Risk Assessment Study, found that only 1% of patients discharged from psychiatric facilities committed an act of violence against a stranger with a gun.

[...]

So not all mass shooters have mental illnesses. And the overwhelming majority of people with mental illness will not commit mass murder (or violence in general). This suggests that other factors are more important in predicting mass violence. Experts believe the following factors, especially in combination, are more predictive:

a/ Particular motivations, such as revenge or envy. A type of mass murderer identified by some experts is the “pseudocommando,” who “kills in public during the daytime, plans [the] offense well in advance, . . . comes prepared with a powerful arsenal of weapons,” expects to die during the massacre, and is driven by intense anger, resentment, and revenge.

b/ Adoption of extremist beliefs that promote the use of violence to attain one’s goals. There is a growing concern in the U.S. about the rise of extremist groups and influences and their relationship to mass killings.

c/ Social isolation. When people with these and other characteristics that put them at risk for violence become socially isolated, the combination can place them at even greater risk.

Whether one terms these characteristics dysfunction or evil, such behaviors do not constitute a diagnosable and treatable health condition.

A research group studying mass shootings for decades (called The Violence Project) concluded that mass shootings are largely the results of a constellation of behaviors involving a buildup of childhood trauma, an identifiable crisis point (separate from psychosis), the need to blame someone, and the opportunity to conduct a mass shooting (i.e. access to firearms).

Blaming mental illness entirely “conceals it more than it reveals it.”

Antytila went viral earlier this year after they posted a video offering to perform via live link at a concert for Ukraine in Birmingham. 

Organisers of the concert, which featured Ed Sheeran, turned down the offer because of the group's association with the military.

Topolya said that because of this, Sheeran's team then proposed a collaboration with the band. The video has since had over one million views on Youtube.

Source: BBC

And of course the actual ad (how iPhone is super mega amazing) 🤷🏼‍♂️ but nice to see how they did it. And neat to see how tech evolved since my first iPhone 3G. What they fail to mention is the insane time it takes to film all that, and the post production editing... ;)

They go into more details for each part of the equation:

Will be missed.

Because under the 1954 convention, “damage to cultural property means damage to the cultural heritage of all mankind”. So attacks on cultural heritage are a considered war crime. But treaties can only do so much. In the years since, conflicts around the world have rendered immeasurable damage to cultural heritage. A lot of it intentional. Like the Taliban’s destruction of the Bamiyan buddhas. And Isis’ attacks on ancient sites all over Syria.

“That cultural heritage is not only impacted, but in many ways it’s implicated and central to armed conflict. These are things that people point to that are unifying factors for their society. They are tangible reflections of their identity.”

And Putin has made it clear that identity is at the ideological center of Russia’s invasion: “I would like to emphasize again that Ukraine is not just a neighboring country for us. It is an inalienable part of our own history, culture, and spiritual space.”

“He thinks that we don’t really exist and they want to destroy all the signs of our identity.”

(Source)

When is a cargo of Russian diesel not a cargo of Russian diesel? The answer is when Shell Plc, the largest European oil company, turns it into what traders refer to as a Latvian blend. The point is to market a barrel in which only 49.99% comes from Russia; in Shell’s eyes, as long as the other 50.01 percent is sourced elsewhere, the oil cargo isn’t technically of Russian origin.

Source: Bloomberg

Scum.

Nuclear. These numbers appear to be correct, and come from our single operational nuclear power plant in Borselle.

Fossil gas. I think this includes only our ‘regular’ natural gas power plants. However, other sources authoritatively say we also burn a steady 458 MW of ‘biogas’.

Coal. Probably complete.

Waste. The Netherlands incinerates a lot of waste, and this leads to the production of electrical power. Not a lot though.

Wind onshore. Turns out this number only includes wind farms directly connected to TenneT. In other words, there is a lot more onshore wind power than reported in this number.

Wind offshore. Most people consider this number to be good & to include all the offshore wind farms.

Other. No one knows what this is (!!), except it sometimes peaks to 5 GW. But not recently. Goes up and down between 50 and 600 MW more or less.

Dutch Electrical Power Numbers part 2

If Europe is serious about becoming energy independent (from Russia today, from someone else tomorrow), it's time to publish transparent data on energy sources.

Hello, open data, anyone?

Via Kottke, via barrywebbimages.

Images copyrighted by Barry Webb. Check out the Instagram account. <3

Via NY Times.

Via NY Times.

Sadly can't embed it here due to the horrific nature, but worth to see it directly on Youtube.

[...]

Europe has a shared past that dates back 2,000 years. Its influences have been the same, from Greek culture to Roman culture, the Church, the Middle Ages, the Enlightenment, the emergence of Nation-States, the colonial period, the world wars… Despite recent immigration, its countries are racially and culturally similar, as Europeans quickly discover in their Erasmus student exchanges. It isn’t united in diversity6. It’s united in values.

As long as it focuses on its differences, each country’s sovereignty will prevail. And the more sovereignty stands at the country level, the less power the Union has. Until European citizens realize that their nationalism weakens the European Union, the region will be weak.

So Europeans must put Europe first. For that, though, you need a common project that everybody is excited about. But what is that project?

[...]

Equality of religion is the reason why Turkey should be a candidate to the EU, and why the European knee-jerk reaction against it isn’t right. But this goes both ways. All of the above are questionable in Erdogan’s Turkey, who has been in power for over 20 years, and who has led the country down the path of more authoritarianism, less freedom, and less equality. These are the issues that don’t make Turkey an imminent candidate to join the EU. Not the fact that it’s a Muslim-majority country.

Europeans’ inability to explain this is a calamity, rooted in the fact that Europe doesn’t talk about its common values, focused as it is on diversity and trade. The European Union doesn’t fight for anything. It doesn’t stand for anything. Until Russian tanks invade Ukraine.

[...]

European nations have been so obsessed with their own glorious past, avoiding war, and pushing economic growth, that most of them—especially the big ones—haven’t realized they are small nations yet. Once they realize it, they will be ready to shed their baggage: their national identities. Only when they build a European identity stronger than the regional ones will Europe be ready to unite. Will they become a true nation.

[...]

The first rule of a nation is that you need to decide what you stand for. The EU stands for human rights, but you never hear that. It’s not central to the discourse. Human Rights are not encapsulated into a catchy little sentence that everybody can recite. Until they become central to everything the EU does, Europe won’t unite around its values.

[...]

So here are five necessary ingredients to make the EU into a global superpower:

- Focus more on what Europeans have in common than on their differences.
- Put universal human rights at the center of European discourse.
- Make English co-official across the EU.
- Unify the military.
- Unify the foreign policy.

Without that, the EU will remain a backwater.

Europe should get better marketing and rethink the way it promotes its values. Too much right-wing politicians have abused this.

Once again incredibly relevant...

"When NATO announced in 2002 its plan for a major wave of expansion that would include three former Soviet republics—Estonia, Latvia, and Lithuania—Putin barely reacted. He certainly did not threaten to invade any of the countries to keep them out of NATO. Asked specifically in late 2001 whether he opposed the Baltic states’ membership in NATO, he stated, “We, of course, are not in a position to tell people what to do. We cannot forbid people to make certain choices if they want to increase the security of their nations in a particular way."

"NATO is a defensive alliance. It has never attacked the Soviet Union or Russia, and it never will. Putin knows that. But Putin is threatened by a successful democracy in Ukraine. He cannot tolerate a successful, flourishing, and democratic Ukraine on his borders, especially if the Ukrainian people also begin to prosper economically. That undermines the Kremlin’s own regime stability and proposed rationale for autocratic state leadership."

Very powerful speech.

May peace be returned swiftly.

Enter “immune amnesia”, a mysterious phenomenon that’s been with us for millennia, though it was only discovered in 2012. Essentially, when you’re infected with measles, your immune system abruptly forgets every pathogen it’s ever encountered before — every cold, every bout of flu, every exposure to bacteria or viruses in the environment, every vaccination. The loss is near-total and permanent. Once the measles infection is over, current evidence suggests that your body has to re-learn what’s good and what’s bad almost from scratch.

“In a way, infection of the measles virus basically sets the immune system to default mode,” says Mansour Haeryfar, a professor of immunology at Western University, Canada, “as if it has never encountered any microbes in the past”.

I only got halfway in the book "Immune: a Journey into the Mysterious System that Keeps You Alive" by Kurzgesagt and then got distracted and stopped reading (I tend to do that -- I'll pick it up in a few weeks/months when my distractions are gone :) ) -- but I highly recommend everyone to read that book. It's fascinating!

Source: Boredpanda via Kottke.

Stupid solution for a stupid problem.

Edit: picked up by some media.

(Source)

The market for table saws is $200-400 million but they cause almost $4 billion in damage annually. Power tools companies aren’t liable for the damage, which is borne by individual users, workers comp, and the health system.

Phytoplankton (small plant-like cells) are producing half of all oxygen on earth by photosynthesis, like plants and trees do on land. Zooplankton are forming the base of the food chain of aquatic life. Plankton are also playing an important part in the global carbon cycle. The plankton are threatened by climate change, global warming and acidification of the oceans.

(Source)

The Hamburg Regional Court today ruled that they would not suspend an existing injunction against Quad9 in a case filed by Sony Music Germany. The case centers around Sony Music’s demand that Quad9’s servers located in Germany stop resolving DNS names of third-party sites which are claimed to have URLs that contain copyright infringements.

Unbelievable.

Also note "claimed to have". Not proven to have.

Knowing that Sony has not been very good at actually identifying copyrighted content, and they just throw stuff around to see what sticks.

And DMCA requests have done more evil than good...

Also, what will actually happen? Quad9 will move its DNS servers outside of Germany and/or people will use other DNS resolvers. Nothing get fixed, and users are punished with worse latency.

Spoken language was in existence before written language. Many numerals existing today were created long before reading was practised, so if there is any direction in a language at all, German does not "read" "backwards", it speaks "backwards".

But then, very likely numerals are not named with regard to direction at all, but for the logic behind counting. In Breton, the number eighteen has the name tri-ouch "three (times) six" – I cannot discern any direction in this numeral. In Finnish, eighteen is called kah-deksan-toista "two (from) ten (in the) second (ten)". The logic seems to be to view the decades and then say how far into which decade we are. Again, there is no reading direction implied in the number name. Similar to this Finnish logic, Old Norse used a counting system not based on tens, but on dozens and multiples of the divisors of twelve (e.g. 60 = "Schock" in German). "364 days" in Old Norse is fiora dagar ens fiortha hundraths "four days into the fourth hundred (= 120)". (Please note that "hundred" once meant 120.) I don't claim to understand the logic behind "einundzwanzig", but the question might be to understand the thinking behind numerals and find out about historic counting systems, not about reading direction.

In Old English, a language descended from Germanic dialects, numerals where "backwards", too: fēowertīene "four-teen", ān and twentiġ "one and twenty" etc., and you can still find remnants of an old vigesimal (base 20) counting system, e.g. "score" for 20.

There are many more languages that speak or read (some of) their numbers "backwards", among them Greek, Latin (both directions possible), Celtic languages etc., and of course languages that actually read right to left like Arabic, where our written numbers come from. The question could be rephrased as: Why does English read their numbers in the wrong direction? Because obviously the "backwards" way is older and may even be more widespread (there are thousands of languages and we don't know how they count; why should English be the norm from which to judge numerals?).

[...]

user1914

Source via Stackexchange.

[...]

Even if you did succeed, what then? How long are you going to keep your borders closed? A restriction to a few countries might help the first week, but within a month it won’t even much matter, because there’s too much spread elsewhere. It’s not like a variant worse than Delta is going to go away any time soon, so you’re stuck in a permanent state that in most places both can’t be created and can’t be sustained if you did create it.

For those places that showed they can sustain it, would you even want to, and for how long? When would it end? What’s your plan?

The other issue with travel restrictions is they continue long, long past the time when they still make any sense. Once containment has generally been lost, the restrictions don’t do anything. At a minimum, they do nothing unless you’re in a much much better place than the region you’re cutting off, whereas there were many cases of longstanding mutual restrictions where the same variant was dominant in both places, which is pure folly.

[...]

It’s worth noting that if a new variant is about to displace the old one, then lockdowns designed to stop the spread of the old variant are much less worthwhile. Once there’s a displacement event, the previous infection level no longer matters at all. If anything, previous infections could be an advantage, if the new variant is more dangerous, and/or it means the spread can be slowed down due to natural immunity. The flip side is if somehow natural immunity was going to stop working entirely against the new variant, then every case prevented in the meantime is a pure extra case, which based on history seems unlikely but is possible.

[...]

I think this final graph is a bit confused here, unless ‘the original strain’ here means Delta. Delta had about a 120% advantage over 'the original strain’ or 70% over Alpha. I’m going to take this to mean 500% as compared to that 120%, so 600% of original versus 220% of original, or about a 170% additional increase. Which is… better, but still quite a lot.

[...]

This is a super scary graph, assuming it is accurate.

thezvi

This is gonna be a "fun" Christmas period.

Fun project, and crappy customer service from DHL.

Around 1895, whilst investigating the case of a group of musicians who had died after eating cooked ham, a Belgian scientist called Emile van Ermengem identified the bacteria at the heart of Kerber’s sausage poisonings, a disease that had been coined Botulism, after bolutus, the Latin for sausage. Later work showed that these bacteria, which Van Ermengem named Clostridium Botulinum, would only grow under certain conditions. The inside of a piece of badly stored, processed meat was ideal, but when conditions changed, the bacteria would shut down, forming highly resistant spores and remaining in that form until conditions were right again for growth.

A few years later, scientists discovered something even more remarkable. The spores that produce these deadly bacteria were almost everywhere. They were found in the soil, on the surface of vegetables, in animal faeces and within riverbeds. They could survive being boiled, being frozen, and cope with highly acidic environments. Thankfully, these spores were also harmless, passing through humans unchanged if ingested. But under the correct conditions, they would turn back into bacteria, producing a deadly neurotoxin. If this toxin was ingested, even in the tiniest quantities imaginable, it would produce a slow paralysis moving down the body, eventually shutting down vital processes like breathing. For anyone unlucky enough to consume it, the survival rate was around 60%.

[...]

It is perhaps strange that such a rare poisoning event shapes our modern food system so profoundly, but this is perhaps because the toxin produced is one of, if not the, deadliest on earth. It has been estimated that in its pure crystalline form, six grams of botulism toxin, about one teaspoon full, would be enough to kill 200 million people. The lethal dose when consumed orally is around 30 billionths of a gram, which if you want a relatable comparison, is about the same as if you cut a single poppy seed into ten thousand equal pieces and ate one of them. It is an amount so tiny, it really doesn’t make sense.

[...]

The rapid, long-lasting and highly noticeable cosmetic effects made Botox a near instant success. In small doses, the same nerve damage that causes fatal paralysis in poisoning cases, helps to remove forehead creases and crow’s feet, with the only side effects being an inability to express emotion using your face, and an occasional case of drooping eyelids. A distinctive wrinkle-free and slightly startled look became fashionable among the Hollywood A-List, and eventually across the world. It is of course deeply ironic that many celebrities who publicly advocated a clean living, chemical-free lifestyle, were also early adopters of a treatment that involves injecting the deadliest substance on earth into your face (looking at you, Paltrow). If any of them were surprised at this seeming paradox, they certainly didn’t show it.

[...]

[I]t is likely that the pure crystalline form of Botulinum toxin is now also the most valuable, with an estimated street value of $100 trillion per kilogram. The entire global face paralysing industry is supported by an annual production of just a few milligrams.

Never linked Botulinum and Botox to one another. Wow.

Octopuses, crabs and lobsters will receive greater welfare protection in UK law following an LSE report which demonstrates that there is strong scientific evidence that these animals have the capacity to experience pain, distress or harm.

The UK government has today confirmed that the scope of the Animal Welfare (Sentience) Bill will be extended to all decapod crustaceans and cephalopod molluscs.

More like this, please.

I believe the EU (or some members of) already had similar laws. I am not sure if they go as far, though.

We have to rethink the food industry. And these laws help go into the right direction.

This summer, the Lithuanian government went public with an astounding finding. A Xiaomi phone sold in Europe — the Mi 10T 5G — could censor approximately 450 words and phrases, it said. The blocklist wasn’t active, but could be activated remotely. It was filled with political terms, including “Democratic Movement” and “Long live Taiwan’s independence.”

[...]

The accusations, which Xiaomi disputes, clarified just how fraught the West’s relationship is with China’s growing technology power. As China-based tech companies like Xiaomi and TikTok flourish, there’s still no playbook in North America or Europe to deal with their potential to censor or steer culture via algorithms.

“Western countries,” Abukevicius said, “are more and more reliant on technologies, and a big part of those technologies comes from countries which are not friendly, which we don't trust, and it poses risks.”

[...]

[migrant workers] labor and their identities are clearly commodified, something which is, at times, heartbreakingly visible. In a country that’s notoriously obsessed with safety, where jaywalking and failing to wear a seatbelt can be punished with jail time, migrant workers can be transported on the expressways in the back of goods vehicles. Calls for change after a series of fatal accidents this year were rejected, on the grounds it would be too expensive for their employers.

[...]

The sprawl of TraceTogether and SGWorkPass combined is a common pattern, said Alex Au, vice president of advocacy group Transient Workers Count Too (TWC2) — that laws, systems and technology grow beyond their roots. “The nature of these multiple purpose apps is that one part of it may be legitimate or justifiable. But because [of that], you don’t question the other parts that come bundled together.”

In August 2020, the police added a new tool to help them physically monitor the dorms. They deployed another robot, M.A.T.A.R, as well as drones, to patrol the dormitories and enforce “safe distancing” rules.

[...]

But there is clearly discontent, on social media and in private conversations, about the pandemic rules, which have flipped from permissive to restrictive and back again as the country figures out how willing it is to “live with Covid.” Few experts expect that the additional surveillance measures put in place for contact tracing will ever end, even when the risk of transmission subsides. There’s a general acceptance that these are now permanent, political tools.

[...]

Several times, Wham has been caught up in the tightening space for dissent. In 2020, he was jailed for 10 days for hosting a live discussion via Skype with the Hong Kong pro-democracy figurehead Joshua Wong. A Facebook post saying that Singapore’s judges were less impartial than their Malaysian counterparts led to a charge of “scandalizing the judiciary.” Other online critics and independent media have been targeted with an array of legal tools, being forced to register as political organizations and being targeted by criminal defamation proceedings.

That's but a small part of the whole article.

Shan and I recorded this a few months ago for PropertyGuru. Didn't know it was also on YouTube (they were mostly using it in ads and on facebook/Instagram). Keeping it here as archive. :)

My poor parents sent me to a school outside the system, where people like me are put by worried parents to get any sort of degree. And there I had one teacher, an older lady, probably in her 60s, and my God I was afraid of her. I was 17 and ready to be a disturbance to everybody, and her method of teaching was basically to scream at you. She was teaching history, but she made stuff so interesting! And I distinctly remember sitting in her class being screamed at by her, and it hitting me: “Wow, this is so cool!”

It was like: “Hey, if you present stuff differently, it becomes fascinating!” And I hope with Kurzgesagt that I can create these moments for as many people as possible, this spark moment.

[...]

You had cancer at 32. How did that inform your interest in immunology?

It definitely strengthened it, because cancer is an immune-system failure, in a sense. It’s weird to say, but it was genuinely one of the most interesting experiences of my life. So, for example, the chemotherapy was working too well at some point and I basically didn’t have an immune system at all. Then I got some special drugs and my immune system bounced back so hard that I could have got cancer again. It was genuinely super-interesting.

A weird way of thinking about cancer, but love the curiosity. ;)

Do read the entire interview by The Guardian, and be sure to buy the book (getting it as a Christmas gift for myself).

Some damn scary shit right there.

The jumpers blocked the airflow and shifted the gravity balance:

The stall and subsequent spin happened when we allowed too many jumpers on the outside step, causing an aft center of gravity and excessive blocking of the airflow to the left horizontal stabilizer. The nose then pitched up beyond the controllability of the elevator

Xei, pilot, King Air

More details can be read here.

Definitely time for humanity to act, ban one-use anything, stop dumping trash left and right, or exporting it to poor countries.

There's some hope with ongoing projects that attempt to catch (bigger) plastic before they reach the oceans, or fish it out when floating in patches -- but it does feel a bit like "too little, too late". And that won't help with the microplastics and beads that are generally too small to catch.

A million (!) animals die very year, just because of plastic. Let alone the effects on the surviving animals, and us, humans.

I'll be donating to The Ocean Cleanup Foundation, through my employer, that'll match my offer.

Been on repeat for a few days now. <3

I guess that was not unexpected. This could level the playing fields a bit for other big capitals like Amsterdam, Paris, Frankfurt and maybe even Brussels.

[...]
a report by several City organizations said that Brexit was making it harder and more expensive to hire foreign staff. International workers, mostly from the European Union, make up about a fifth of the 1.1 million people in U.K. financial services.
[...]

Can't help but see similarities with Singapore, where new visa requirements and strict rules meant countless expats could not renew their visas and were forced to leave Singapore. The atmosphere is generally more hostile than pre-Covid, and coming in is exponentially harder.

Companies are actively moving headcount, relocating entire teams. There's a clear brain drain happening, and that may be hard to fix in the short term.

I can only be hopeful this is the golden age for Europe, as a lot of talent returns home. Hopefully, Europe can tap in all that talent, and use it wisely.

Interesting to see that many years after Apple started creating their CPUs for the iPhone (and now laptops/desktops), so many companies are following. Google is not new to building their chips (TPU, Titan (used in security keys and as encryption module for servers/Pixel phones), and likely more), but quite new to more generalised computing CPU for phones and laptops.

And it makes sense -- a lot of the generic CPUs were too generalist and not that great at their job (and are plagued with bugs). It came with heavy power usage. Having a ML/AI chip, a GPU chip, a generalist CPU chip (or two, one focussing on high performance, and one on efficiency, like the M1), one for security/encryption (Titan/T2), etc.

Curious to see how much of a head start Apple really has, and very eager to finally see some real innovation in the CPU space (sorry AMD with Ryzen: too little, too late).

Let's see if Intel and AMD will be able to adapt and reinvent themselves and what it means for ARM (and the ARM IP issue in China), and if other architectures like MIPS are making a chance.

To the point, there's now Covid bingo.

I quote, in case they one day decide to delete it all:

• AA: Approved absence. As a precautionary measure, students and staff will be placed on approved absence in certain scenarios. This includes if they or their household members have to undergo mandatory COVID-19 testing due to a cluster, or if their household members have flu-like symptoms.
• ARI: Acute respiratory infection. Symptoms of ARIs are similar to those of COVID-19 – such as fever, cough, runny nose, sore throat, loss of taste or smell.
• ART: Antigen rapid test. A type of COVID-19 test you can do on your own. They work by detecting viral proteins in nasal swab samples, and are faster and less intrusive than PCR tests. See “PCR” for more.
• CB: Circuit breaker. A nationwide partial lockdown implemented from Apr 21 to Jun 1, 2020, to put the brakes on escalating COVID-19 infections.
• CCF: Community care facility. These cater to COVID-19-positive people who are clinically well, have mild symptoms and do not require much medical care. Examples of CCFs include Connect @ Changi at the Singapore Expo and D'Resort NTUC.
  • Stepped Up CCFs, introduced in September 2021, cater to elderly patients who are stable, mildly symptomatic, clinically well but with some underlying conditions that could make them more susceptible to a potential worsening of illness.
• DORSCON: Disease Outbreak Response System Condition. A colour-coded framework that shows the current disease situation, providing general guidelines on how to prevent and reduce the impact of infections. Singapore has been at Orange, the second-highest level, since February 2020.
• eQO: Electronic quarantine order. The version of a quarantine order that one receives via SMS. See “QO” for more.
• FET: Fast and Easy Test. Refers to antigen rapid tests. The phrase is used in conjunction with rostered routine testing – see “RRT” for more.
• FLW: Frontline workers. These are workers in roles and industries that are of critical importance to the functioning of Singapore. Examples include healthcare workers, transport workers, hawkers, cleaners, teachers and supermarket staff.
• GQF: Government quarantine facility. These house individuals who need to be isolated as they have come into close contact with COVID-19 cases. Examples include some chalets at Changi and Loyang.
• HA: Heightened Alert. The phrase has been used to differentiate between initial planned phases of reopening and subsequent stages that have more precautionary measures in place, such as Phase 2 vs Phase 2 (HA).
• HBL: Home-based learning. When lessons and materials are made accessible online, allowing students to attend school from home.
• HQO: Home quarantine order. Those under an HQO have to isolate at home.
• HRA: Health risk alert. These are issued to people who have possibly been exposed to COVID-19. They should monitor their health, conduct self-testing and seek medical attention if they are unwell.
• HRW: Health risk warning. These are issued to those identified as close contacts of COVID-19 cases, based on TraceTogether and SafeEntry data. Those who receive HRWs must comply with testing and isolation requirements by law.
• ICU: Intensive care unit. The department in hospitals that house those who are critically ill.
• LOA: Leave of absence. Students and school staff are placed on LOA in several situations, such as when they have been in close contact with confirmed cases, but are not placed on a quarantine order; if household members are serving a quarantine order or a stay-home notice at the same residence.
• mRNA: Messenger ribonucleic acid. The technology behind certain COVID-19 vaccines, including the Pfizer-BioNTech and Moderna vaccines. These types of vaccines teach cells how to make a protein that triggers an immune response. The immune response produces antibodies to protect the vaccinated person.
• MTF: COVID-19 multi-ministry task force. The MTF is meant to coordinate a whole-of-government response to the pandemic. Its co-chairs are Health Minister Ong Ye Kung, Trade and Industry Minister Gan Kim Yong and Finance Minister Lawrence Wong.
• NCID: National Centre for Infectious Diseases. A national public health institute designed to strengthen Singapore’s capabilities in infectious disease management and prevention.
• PCA: Periodic Commuting Arrangement. A travel lane agreement between Singapore and Malaysia to facilitate the movement of workers between both countries.
• PCR: Polymerase chain reaction. A type of COVID-19 test that amplifies genetic material so any trace of COVID-19 can be detected. They are more accurate than antigen rapid tests but take longer to produce results.
• PET: Pre-event test. A COVID-19 test taken by individuals who want to enter certain venues or participate in certain events or activities. These include cinemas, congregational services, live performances, conferences and weddings. Some individuals, such as those who are fully vaccinated, may be exempted.
• PHPC: Public Health Preparedness Clinic. These provide subsidised treatment and medication during public health outbreaks. PHPCs were previously activated to deal with haze and the 2009 H1N1 influenza pandemic.
• PUQ: Person under quarantine. An individual who has been served a quarantine order.
• QO: Quarantine order. A legal order requiring suspected COVID-19 cases, or close contacts of confirmed cases, to be quarantined at a designated place.
• QOA: Quarantine order allowance. The QOA scheme allows self-employed people and Singapore-registered companies that have employees under a quarantine order to claim S$100 a day. Approved caregivers of a person under quarantine can also apply for the allowance.
• RRT: Rostered routine testing. Under this surveillance testing programme, certain groups that work in higher-risk settings or live in high-density environments are tested routinely, such as every 14 days.
• RSC: Regional screening centre. These centres carry out COVID-19 swab tests for "target groups from the general community" or those who have been diagnosed with acute respiratory infection, said the Health Ministry.
• SASH: Swab and Send Home Clinic. These are PHPCs that can perform swab tests for patients. Your doctor will assess and swab or refer you to a facility, such as a regional screening centre, for a swab test if needed.
• SDA: Safe-distancing ambassador. An ambassador’s task is to remind businesses and people of safe-distancing measures, such as wearing a mask and leaving sufficient space when queuing.
• SDEO: Safe-distancing enforcement officer. These officers have the power to take enforcement action against people for flouting rules, such as issuing fines.
• SDF: SHN-dedicated facilities. These refer to accommodation for incoming travellers who are issued stay-home notices. See “SHN” for more.
• SHN: Stay-home notice. A legal notice issued under the Infectious Diseases Act that requires travellers to remain in their place of residence or SHN-dedicated facility for a stipulated period. Failure to comply can amount to an imprisonment term and/or fine.
• SMM: Safe management measures. Regulations in place to minimise the risks of COVID-19 transmission. Examples include safe distancing and caps on group sizes.
• TT: TraceTogether. A mobile phone application and/or physical token used for contact tracing efforts.
• TToSE: TraceTogether-only SafeEntry. Refers to a location where SafeEntry – a check-in gateway – has been implemented, and all individuals need to use their TT app or token to check-in.
• VoRT: Vaccinate or Regular Test regime. Under this regime, certain groups of frontline workers will need to be vaccinated against COVID-19, or undergo more regular testing.
• VTL: Vaccinated Travel Lane. Under this arrangement, fully vaccinated people can travel for leisure without serving a stay-home notice in Singapore upon returning. They will have to take up to four PCR tests. 
• WFH: Work from home. This is when an employee works from their place of residence, instead of the office.
• WHO EUL: World Health Organization's Emergency Use Listing. A procedure by the WHO that assesses the suitability of novel health products during public health emergencies. Approved vaccines under this include Pfizer-BioNTech, Moderna, AstraZeneca, Johnson & Johnson, Sinopharm and Sinovac.

Insanity.

Having just come back from Belgium, Amsterdam and Copenhagen it's great seeing a video pointing out the differences and how it all works.

Also, very excited that Belgium is investing in massive "biking highways" (as a result of many cities going car-free in a few years): big investments in clear, wide cycling lanes and making. We'll hopefully be more like the Netherlands (which, with the massive amount of e-bikes is really needed).

(Source)

(Source.)

Hate the way it's animated though :)

(Source).

(Source)

[...]
Op zich een behulpzaam aanbod, maar ik zit er niet op te wachten. Men vraagt hier toestemming om per kwartier het stroomverbruik uit te lezen, en te delen met derde partijen, iets wat een serieuze inbreuk maakt op mijn privacy. Ik meet mijn eigen stroomverbruik en ik kan precies zien of er iemand in huis is, hoe laat we gaan slapen, hoe laat we opstaan etc. Dat hoeft niemand anders te weten.
[...]

(Source).

Source.

Video from 2018. Since then, we've seen the riots (revolution?) in HKG. Suddenly, the HDBs in Singapore make a lot more sense, and we should credit the SG Housing Board for their solution (sure, HDBs are not perfect, but compared to those cages...).

I was playing around with the idea to up the marketing and social media stuff for Shan (WFH is taking its toll -- I was bored, always doing the same, saw Shan struggle to do both creative and marketing work, and I had plenty of brainjuice left -- and in all fairness I was probably getting a bit frustrated and going "why don't you just ...". So yeah, decided to actually help out and experiment some).

Since medio April I have been running most of the social media accounts, having content scheduled using Hootsuite, increasing followers, etc.

I did some of this before, but it was mostly some random paid advertisement without a real strategy that didn't lead to anything very substantial. The ROI wasn't really there and was mostly just a gamble -- so far we've had more leads from organic growth than from paid ads on Google or Facebook/Instagram. Soooooo something must be wrong there...?!

Another thing that was missing to make her more prominent as SME (subject matter expert) was to have all the knowledge and experience she has more publicly available; ie give some away for free (and help those that wouldn't hire the services anyway), and then provide enough of a teaser to reel in customers that want more and have budget. The blog will also hold some reviews, plug some contractors and suppliers (create a bit of a win-win situation and platform), etc.

So yeah -- I suddenly had this epiphany to set up a blog (using Medium -- and I may have been late to the party, but I've been watching and wanted to get to know more about the platform -- and so far Medium actually has quite some interesting articles).

Got some interviews going with clients, show casing some projects (the portfolio is nice, but doesn't have a lot of written content) have some posts about what's going on in Shan's mind (those are the ones that take time as Shan needs to sit down and actually give me content) and even wrote about our house. :)

So let's see how that works out -- but so far it's been worth it.

They promised us all our cat pictures (they took more pictures of the cats than us)... Still waiting. :(

There are a few Reddit posts with other people facing the same issue with AirPod Pros (case not wanting to charge further than 74%) but no concrete answer or solution is posted.

For me, what helped, was to use a wall charger (doesn't have to be Apple); it's still using a similar usb-A-to-lightning cable. Letting it charge for a while managed to get it to 100%.

Why 74% and not… 75%? ¯\_(ツ)_/¯

Edit: as some people pointed out, this may actually be Apple's Optimized Battery Charging. I am not seeing any notification though.

For the past few weeks, several times a day her screen would black out for half a second or so and then everything should go back to normal. Sometimes it would happen several times in a row, sometimes it wouldn't for hours on end.

I tried several things, including getting a 8k 120hz HDMI cable, using a usb-c to DP cable, changing the GPU vRAM minimum from 128Mb to 2048Mb (quite the hack, as it can't be set in the bios -- requires messing around in the registry. Wow.), updating all the drivers, updating the bios, making sure the NUC was properly ventilated and keeping cool (every full moon the NUC shuts down due to overheating in Singapore if I set the fan to 'balanced' instead of 'cool'), and probably more. And because it happened so sporadically it was quite hard to debug (to the point I sometimes didn't want to believe her as I couldn't see it blacken out).

Shan was getting frustrated (which in turn means I get frustrated)... and I started looking at getting either an eGPU (I can get a free Nividia M6000, just need the enclosure, but the enclosure would be $$), an AMD Ryzen 5 or 7 NUC (no more Intel in this house, but also $$$), or some other refurb (massive) desktop some friend had lying around (HP z240 or something, zero $, but Shan would kill me for having this massive thing on her desk).

Turns out, the quick fix, was to simply disable hardware acceleration.

Run GRAPHICSCONFIG and uncheck hardware acceleration.

This is probably not ideal in the long run (hopefully it's an issue with AutoCAD 2022 that is getting fixed, as opposed to the onboard Intel GPU getting messed up with AutoCAD).

When in doubt… Turn off hardware acceleration.

When migrating over from High Sierra to Big Sur, using Migration Assistant (my Synology TimeMachine kept on failing -- but besides that, migration went smoothly) two issues came up that required calling Apple.

But first off I noticed that when migrating, for some reason FileVault was turned off (more on that later). I, obviously, turned it on.

Problem A: when rebooting the Mac, I noticed the keyboard layout changed from Belgian (Azerty) to ABC (which is US English?) and it didn't accept the password to unlock the Mac. You can manually select another keyboard layout which accepts the password, but at every reboot that resets and requires going back through the layout picker.

Solution A: M1 no longer supports the usual SMC or NVRAM reset. But this problem could be solved by turning off the mac, closing the lid (?!) and waiting 30+ seconds before turning it back on. According to the person on the phone, that's the M1 SMC reset.

Problem B: I disabled guest mode in System Preferences > Users & Groups -- but it was still showing alongside the regular/admin user. I don't want guest mode.

Note that the guest mode only showed at the disk unlock (i.e.: after a reboot) and not when logged out (i.e.: Apple logo > Log Out from the regular user).

Solution B: Tried several things with Apple support:

• Turning off screen sharing and print sharing (sure -- didn't care too much about these)
• Turn guest mode on/off and reboot/force quite System preferences
• Turn off Find My in iCloud settings (not acceptable)
• Turn off FileVault (not acceptable)
• Manually running:
  • sudo defaults write /Library/Preferences/com.apple.AppleFileServer guestAccess -bool NO\n
  • sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool NO\n
• and a few other things I now forgot

This is what actually did help:

• Turning off FileVault actually turns off Guest mode; so when the Mac was not encrypted, it only showered one user (instead of the user + Guest) at the login prompt.
  • Obviously, that's not acceptable and I turned it back on
• Supposedly turning off Find My in iCloud settings is needed (according to Apple this requires Guest mode)
  • I later turned it back on and Guest mode did not reappear. So, what Apple was saying was incorrect, and it does not make the Guest user show up.
• Running sudo fdesetup list in Terminal shows the list of users. This may be helpful for debugging.
• Running dscl . list /Users shows many users and included Guest in my mom's case. Not entirely sure what I am looking at here.
• Running sudo dscl . delete /Users/Guest solved the problem. This deletes the Guest user (?).

Quite annoying -- but it's a beta after all. I shouldn't complain. I did what every good beta tester would do: I filed a bug (it's still unanswered from what I can see).

Beta updates came and went but the date did not come back. Would I be unable to use my watch to figure out the date?! It's when you lose a feature that you see how often a day you use it.

And then, out of the blue, the big stable release. Apple Watch OS 7 is released to the general public. Surely, I thought, they must've fixed it now.

But alas, I was to be disappointed.

I updated Shan's watch (that never ran the beta) to see if she had the same issue -- but her watch was fine. Sooooo... What was I doing wrong? Why me, Apple Overlord?

I started fiddling around with my language and regional settings (nope, not it), and was contemplating a factory reset (argh, re-adding all my cards to Apple Pay)...

And then...

An epiphany.

They wouldn't?!?! Would they??

Something only Apple would dare to do.

I deleted the Apple Calendar app (on my iPhone) -- as I use the Google Calendar app. Would that somehow be related?

And guess what... Installing the Apple Calendar app via the App Store resolved it:

Check Apple Watch and the option is back!

That's one way of forcing people to use your apps.

My pwnagotchi on the other hand is counting on a BLE network to connect to the internet: for now I am using my iPad, and while that works, it causes my iPad to disconnect from WiFi (because of course, it can only do tethering from a mobile network, not from its WiFi network).

I wanted to explore if I could set up bluetooth tethering/internet sharing from my RPi4 server... But for that BLE had to work! And for some reason BLE was not working on Liana.

[bluetooth]# power on
No default controller available

For some reason no controller was available. The drivers were definitely installed...

apt install bluetooth pi-bluetooth bluez raspberrypi-sys-mods

but hcitool dev ; hciconfig -a weren't returning anything.

After quite some extensive Googling I found the solution...

Check if this returns something:

# ls -l /dev | grep ttyAMA0
lrwxrwxrwx 1 root root           7 Sep  1 15:08 serial1 -> ttyAMA0
crw-rw---- 1 root dialout 204,  64 Sep  1 15:08 ttyAMA0

As opposed to:

# ls -l /dev | grep ttyS0
# (no output)

Then continue to do the following:

# make a backup
cp /boot/cmdline.txt /boot/cmdline.txt.bak
# edit the file
nano -w /boot/cmdline.txt
# edit the first part from
# console=ttySerial0 to console=ttyAMA0
# the line should be something similar to but do NOT blindly copy paste it as you won't be able to boot due to your PARTUUID being different
console=ttyAMA0,115200 console=tty1 root=PARTUUID=6c586e13-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait
reboot

After rebooting ... it works!

liana ~ # hcitool dev ; hciconfig -a
Devices:
	hci0	DC:A6:32:B1:0E:79
hci0:	Type: Primary  Bus: UART
	BD Address: DC:A6:32:B1:0E:79  ACL MTU: 1021:8  SCO MTU: 64:1
	UP RUNNING 
	RX bytes:2397 acl:0 sco:0 events:118 errors:0
	TX bytes:2603 acl:0 sco:0 commands:99 errors:0
	Features: 0xbf 0xfe 0xcf 0xfe 0xdb 0xff 0x7b 0x87
	Packet type: DM1 DM3 DM5 DH1 DH3 DH5 HV1 HV2 HV3 
	Link policy: RSWITCH SNIFF 
	Link mode: SLAVE ACCEPT 
	Name: 'liana'
	Class: 0x000000
	Service Classes: Unspecified
	Device Class: Miscellaneous, 
	HCI Version: 5.0 (0x9)  Revision: 0x13b
	LMP Version: 5.0 (0x9)  Subversion: 0x6119
	Manufacturer: Cypress Semiconductor Corporation (305)

liana ~ # bluetoothctl 
Agent registered
[bluetooth]# scan on
Discovery started
[CHG] Controller DC:A6:32:B1:0E:79 Discovering: yes
[NEW] Device 7F:A9:BC:8D:E4:14 7F-A9-BC-8D-E4-14
[NEW] Device 58:EB:19:D8:D4:23 58-EB-19-D8-D4-23
[NEW] Device A4:83:E7:42:79:F6 A4-83-E7-42-79-F6
[NEW] Device 58:7B:24:1B:CC:5C 58-7B-24-1B-CC-5C
[NEW] Device D9:05:9F:DB:55:19 N0163
[NEW] Device 5F:DA:90:34:82:68 5F-DA-90-34-82-68
[NEW] Device 77:2A:1B:11:54:7D 77-2A-1B-11-54-7D
[NEW] Device 42:BF:0B:38:F3:20 42-BF-0B-38-F3-20

Next step is trying to get tethering to work...

Logo by Christa.

As we're trying to eat less meat in general, we've (Shan and I) been experimenting with vegetarian dishes.

This lasagna has been eaten by a few people now and every time the reviews are pretty damn good. :) It comes rather close to the original taste while being entirely vegetarian.

First off -- we're mostly just swapping out the regular minced pork/beef mix with Beyond Meat. There are other brands out there (i.e.: Omnimeat), each with their own taste -- try to see what works for you.

The Beyond Beef is also slightly sweeter in taste -- keep this in mind as I know some people (i.e.: my dad) wouldn't like it that sweet.

This dish feeds 3 to 4 people.

Ingredients

• Good olive oil
• Lasagna pasta sheets (whatever suits you, we often use the wholewheat ones)
• Tomato sauce (1 to 1.5 can). Can use fresh tomato of course
• 80g of butter
• 0.5L milk
• 80g plain flour
• Fresh basil leaves
• 1 (red) onion
• 2-3 cloves of garlic
• Beyond Beef
• You'll need a pinch of (sea) salt, some pepper, paprika, cayenne pepper, nutmeg and whatever else you'll want to spice it up with
• I add some extra veggies: I use (1-2) fresh carrots, but these can easily be swapped out or mixed with peas, mushrooms, aubergine (eggplant), corn, etc.
• Cheese! I usually use grated mozzarella cheese, but Emmental and sorts works as well

Prep work

• Dice/chop up an onion
• Slice the carrots (or whatever vegetable you're adding)
• slice up the garlic
• Wash and chop up the basil
• Prepare 2 pots and an oven dish
• You can let the Beyond Beef defrost, or add it as a frozen block and just let it simmer a bit longer (until entirely melted and broken down into small bits)

Pot 1: the sauce

• Add olive oil to a big pot and heat up
• Once hot, add in the onion and carrots and let it stir-fry for a moment. I like my carrots a bit crunchy but you could technically boil or steam them until entirely soft. Whatever you do, don't burn the onion

• Once the onion gets translucent add the garlic, Beyond Beef, tomato sauce and basil
• I usually add a tiny bit of milk (especially in case the tomato is a bit sour)
• Stir and let it simmer on low heat. Make sure the "meat" breaks down in small bits
• Spice it up (paprika, cayenne pepper, pinch of salt, (black) ground pepper)
• Take a spoon and taste it. It should already be damn good. :)

Pot 2: béchamel sauce

This one is easy to mess up so pay attention. Clumps are bad!

• Add the butter in a pot on a low heat and let melt. Do not burn the butter.
• Slowly add the flour while whisking
• Once the butter and flour is nicely mixed up, slowly add the milk while whisking. I usually turn off the heat at this point
• Whisk, whisk and whisk
• Finish it off with a bit of white pepper and nutmeg

Don't worry if you have no nutmeg -- it tastes perfect without as well.

In case it's too watery, just add a bit of flour -- but do that extremely slowly, as adding it at this stage will easily clump up.

Dish it up!

Now we'll create the actual lasagna. You can also pre-heat the oven now (200°).

Your dish and the lasagna will definitely not be the same size... And we don't want to have two lasagna sheets on top of each other... So gently break them off into smaller pieces, and nicely fit them together. It's puzzle time.

• Add a thin layer of olive oil at the bottom of the pot. This prevents the lasagna sheet from sticking.
• Add the lasagna sheets (see puzzle note above)
• Add a layer of tomato/Beyond sauce
• Add a layer of béchamel sauce
• Layer up with lasagna sheets again
• Rince and repeat

Most dishes fit about three layers. End with the béchamel layer. So [lasagna, tomato, béchamel] x 3.

And the last, top layer, would be the grated cheese. Don't over do it, create a nice thin layer.

Oven

The oven should be hot (200°) at this point. The total cooking time is roughly 25 minutes.

If your oven allows to choose the baking mode, use the top and bottom heat (without fan).

• Put the lasagna on top of a grill/wire mesh tray.
• Set timer for ~15 minutes
• Once timer is over, use a fork or skewer/satay stick to feel the pasta sheets: you want them to be soft.
  At this stage they should still be a bit hard, so set timer again for 5 minutes and check again.
  Take this opportunity to make sure the top layer of cheese is not burning.
• Optionally: you can use the grill mode at the end of brown up the cheese, but this shouldn't be needed.

After roughly 25 minutes, the lasagna should be done.

Let it cool down a bit, cut it up and serve.

About a year ago I purchased myself an OpenWRT router to use on the plane and in hotels.

And so far I really like both the device and the Hong Kong based brand (launching new and updated products, and releasing relatively regular updates for older products). Pick a device that fits your needs (USB powered? LTE? Small form factor?).

The GL-AR750S aka Slate is fully customizable but runs a few nice things out of the box: WireGuard (with a physical button to turn it on or off), OpenVPN, shell access, Tor (requires the latest firmware), IPv6, DoH (Cloudflare only for now), multiple SSIDs (i.e. Guest WiFi), and more.

Oh and I specifically picked this version (compared to other or cheaper ones) because it had both 2.4Ghz and 5Ghz, as well as 3 Gbit ports (1x WAN, 2x LAN).

I use the device on flights, where I connect to the network once in the air, purchase WiFi or use iPass "for one device" and then connect to the interwebs behind my NAT-router from my iPad, phone(s), laptop(s), and even Shan's devices if she is travelling with me.

In hotels, I either connect it to the wired ethernet, if still available (tends to be more stable), or connect it to the guest WiFi and then connect my devices to the router: saves me from connecting to a new network and typing the room number and login/password/family name on every device. And once again hides the true number of connected devices; quite handy trick for those pesky hotels providing free access only to two devices.

Sure it takes a bit of setup every time: find a working USB port, sign in to the web interface, search for new networks if this is a new hotel or I haven't travelled on this airline, connect to said network, sign in with iPass, and optionally enable VPN)...

And once in a while some fiddling with VPN or DNS that's borking up or being blocked by overzealous firewalls.

Also, some in-flight entertainment USB ports don't provide enough power (and/or are often broken -- looking at you Lufthansa in economy) so be sure to carry a couple of these (US-plug works best) -- I've already forgotten one on my last flight from MUC-SIN on LH, but luckily I have pretty easy access to these.

If you travel a lot it's totally worth the money.

While a SD card works fine for certain tasks (things that don't require a lot of IO) -- for a desktop that's a no-go... It's just too slow.

I still had an old Macbook Pro 13" (2o15?) SSD lying around that was collecting dust. Why not use that one to use as root for the RPi?

This article will focus on making it work on Raspbian first. Technically this should all work on other distros as well, but YMMV seeing all this is still beta.

I use Raspbian Lite: I like to work with minimalstic systems and install just what I need. But technically this should work with any flavour.

But first, let's prep the device.

Case

I already have a RPi4 (4Gb) at home running mostly Docker containers (nginx proxy and a few personal things and Smokeping).

And one of the 'best' purchases I made for the RPi4 was the "Raspberry Pi 4 Model B Aluminium Case" (Lazada, AliExpress). This case is passive and dissipates enough heat (even in a closed cabinet in Singapore where it's 30°) for the CPU never to throttle back when overclocked at 2Ghz (see below).

Do note that this case (which is pretty much just a massive heat sink) gets pretty hot if the RPi is running at max performance for long periods of time.

USB-SSD

Get one that fits your SSD and that ideally has Linux support. As Apple uses custom SSD connectors (prior to being soldered onto the motherboard) I had to get a converter from China. It was a bit of Russian Roulette to see if it would work or be supported on Linux. I got myself this one (chipset: Netchip Technology). As I didn't remember what type of Macbook Pro this came from, using this site to compare serial/model was useful. This USB-to-SSD converted also works on Mac and Windows by the way.

In my case, the RPi also did not provider enough power to the USB-SSD converter (although... it really should but whatevs), so be sure to use the provided power cable and plug it into a USB power source. Not doing so will cause the SSD to heat up and show a bunch of disconnects/errors in dmesg.

raspbian ~ # fdisk -l /dev/sda1 
Disk /dev/sda1: 233.8 GiB, 250999127552 bytes, 490232671 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
raspbian ~ # lsusb 
Bus 002 Device 002: ID 0525:622b Netchip Technology, Inc. 
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 002: ID 2109:3431 VIA Labs, Inc. Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
raspbian ~ # lsusb -t
/:  Bus 02.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/4p, 5000M
    |__ Port 2: Dev 2, If 0, Class=Mass Storage, Driver=usb-storage, 5000M
/:  Bus 01.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/1p, 480M
    |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/4p, 480M

eeprom update

Disconnect the USB-SSD for now.

At the time of writing we need to update the eeprom to boot from USB. I'm using the latest eeprom available to me. Note that the USB-boot eeprom is about to hit stable so you might not need to do this anymore.

There are two methods for updating. We can do it manually:

rpi-update
cd /lib/firmware/raspberrypi/bootloader/beta
rpi-eeprom-update -d -f ./pieeprom-2020-06-15.bin
# BCM2711 detected
# VL805 firmware in bootloader EEPROM
# BOOTFS /boot
# *** INSTALLING ./pieeprom-2020-06-15.bin ***
# BOOTFS /boot
# EEPROM update pending. Please reboot to apply the update.
reboot
# RPi should come back online after a reboot

Or we use rpi-eeprom-update (see article, at the bottom):

nano -w /etc/default/rpi-eeprom-update
# edit critical to stable
rpi-eeprom-update
rpi-eeprom-update -a

The good thing is that, even if you boot from a Raspbian that does not have /etc/default/rpi-eeprom-update edited to use stable instead of critical, it will not downgrade your eeprom.

Now you can plug in the SD card in an USB-SD card reader, and test if the RPi boots from USB. Note that the SD card might be slower.

All right -- so everything is working. I am keeping this SD card to update the eeprom again at a later stage (as the one we flashed is beta). If we use Archlinux or Ubuntu the eeprom update tools won't be included.

Next step is to flash Raspbian to the USB-SSD.

Boot-up from the USB-SSD.

Errors

In case you are getting an error similar to start4.elf: is not compatible you'll need to copy paste /boot/start4.elf from a Raspbian that ran rpi-update (i.e. the one from the SD card, or see below).

If you are booting (a fresh) Raspbian, it might complain about cma: Failed to reserve 256 MiB (and several other errors). The solution is running rpi-update.

Boot from the working Raspbian (using the SD card):

# check which drive is your USB-SSD (i.e. using fdisk -l or dmesg). 
# In my case I booted from USB-SD (/dev/sda) and we'll update the new/clean Raspbian on the SSD (/dev/sdb).
#
# First resize the partition, if the system never booted it'll be 1.5Gb and thus not big enough:
# Device     Boot  Start     End Sectors  Size Id Type
# /dev/sdb1         8192  532479  524288  256M  c W95 FAT32 (LBA)
# /dev/sdb2       532480 3620863 3088384  1.5G 83 Linux
fdisk /dev/sdb
# Type the following:
# p (and visually check it all makes sense)
# d
# 2
# n
# Select (default p): p
# Partition number (2-4, default 2): <enter>
# First sector (2048-490234751, default 2048): 532480 (or whichever is the same "start" from the 2nd partition) 
# Last sector, +/-sectors or +/-size{K,M,G,T,P} (532480-490234751, default 490234751): <enter>
# Created a new partition 2 of type 'Linux' and of size 233.5 GiB.
# Partition #2 contains a ext4 signature.
# Do you want to remove the signature? [Y]es/[N]o: n
# p (visually check once again it makes sense, if not you can cancel/quit by typing q)
# w (if it makes sense)
# The last command will write the changes to the partition table and sync all changes. 
# Then we need to check and resize the filesystem:
e2fsck -f /dev/sdb2
resize2fs /dev/sdb2
# If all that worked we can start mounting everything
mkdir /tmp/ssd
mount /dev/sdb2 /tmp/ssd/
mount /dev/sdb1 /tmp/ssd/boot/
mount /proc/ /tmp/ssd/proc/ -t proc
mount --rbind /sys/ /tmp/ssd/sys/
mount --rbind /dev/ /tmp/ssd/dev/
# Once everything is mounted, we're chrooting into the fresh Raspbian running on the SSD
chroot /tmp/ssd/ /bin/bash
# you can double confirm the partition size using:
df -h
# And we update the system. Again, if all this hits stable it might not be needed.
rpi-update
# say "y" when it's asking you to.
# exit the chroot and turn off the device, remove the USB-SD and leave USB-SSD connected. 
exit 
halt

My first reboot the boot process threw errors about failing to mount the root fs.

We'll need to update /etc/fstab with the correct partuuid.

# Boot from the (USB-)SD card again
# In my case sdb became sda and vice versa, so double check
lsblk
# be sure to select the right disk (the SSD, no the SD)!
mkdir /tmp/ssd
mount /dev/sda2 /tmp/ssd/
# And find the SSD here as well.
# look for the last column, partuuid, something like 
"6f6cc2fb-01"
blkid
nano -w /tmp/ssd/etc/fstab
# edit the existing partuuid's with the ones from blkid
# you'll need to edit both /boot (-01) and / (root, -02).
halt
# When rebooting from the SSD it'll go through a fsck. In my case for some reason it failed and dropped to a shell. I did a manual check and everything was fine. Rebooted and it booted normally... *shrug*

Booting

At this stage booting from the USB-SSD should work just fine. You have a working system booting from USB.

Overclocking

Last thing I'd recommend is getting a bit more juice out of your four cores.

You can quite easily overclock the RPi4 to 2Ghz (per core). It's a pretty nice boost (~25%) and worth going for. I haven't seen any heat issues leading to underclocking (throttling back), and everything runs stable. Note that under real circumstances you are unlikely to be running at 100% for extended period of times.

This guide explains how to overclock Raspbian (but the same applies for Ubuntu RPi -- I'll eventually be using Ubuntu as the OS due to its 64 bit support; at the moment Raspbian only supports a 64 bit kernel (beta) and the userland still runs 32 bit. But that'll be a follow-up article.

The gist of the article is to edit /boot/config.txt and add:

over_voltage=6
arm_freq=2000

Save the file, reboot and monitor temp (echo $((cat /sys/class/thermal/thermal_zone0/temp/1000))) and core frequency (watch -n 1 vcgencmd measure_clock arm) while running stress -c 4 to make sure the cores are running at 100%.

The answer is... Yes -- but...

So plugging it straight into the USB-C port of the keyboard doesn't do anything. I.e.: the dongle is not recognised, and for what it's worth the switch doesn't even light up to say a cable is connected. So that doesn't work.

But plugging it straight into the iPad works... The network switch lights up, the iPad (under Settings) gets a new option called "Ethernet" (which oddly shows you a selection of connected adapters first -- but I don't know how you can have more than one). Clicking through you see the same options as you would for your WiFi network: IPs, DNS, etc.

Tadaaa!

I used an adapter from work, a Belkin, and I believe it's the same one that's being sold on the Apple Store. I don't know if any dongle will work though (driver-wise and stuff).

Probably not that useful but good to know.

On my DS1515 (more RAM, more CPU) the manual update goes by fine (stop service, manual update, browse for file, upload, start service) but my DS216j, not so much.

Attempting to upload the file instantly fails with the useful error "Operation Failed".

I tried to re-download the file (was it corrupt)... Nop. Did I select the right architecture? Yep. Decided to give it a go via via the command line. Perhaps a reboot? Nop.

First, make sure SSH is enabled and you can SSH. Oh and pro tip: add your SSH key.

Something along these lines should get you started:

# Transfer the file to the NAS
scp *.spk NAS-IP:
# Connect to the device
ssh user@NAS-IP
# Install it as root using sudo. It'll ask for your psw
sudo synopkg install *.spk
[password]
# resiliosync_armada38x_DSM6_2.7.0.1366-1.spk install successfully
# All good? Then remove the installer
rm *.spk

Somehow this worked... 🤷‍♂️ Not sure what caused the error in the first place. I am guessing the device is a bit low on RAM.

Yesterday I finalised the sale of 0x04.com.

My company in Singapore was called 0x04 pte. ltd. and to avoid any confusion I've renamed to su1 pte. ltd. su1 standing for Superuser.one. 🤷‍♂️

The culprit is how EdgeOS deals with its hosts file. Basically it just keeps all the old hosts added and just adds a new line at the end of the file.

NextDNS searches for the first valid entry in that file, which is always going to be an older record.

So the simplest solution I found was the turn off hostfile-update every so often. This clears the hosts file.

So ssh into the device, run configure, and then run these commands:

set service dhcp-server hostfile-update disable
commit
set service dhcp-server hostfile-update enable
commit
save

Update 22 Jun '23:

Be sure to restart NextDNS, or it won't actually publish the up-to-date client hostnames.

sudo /config/nextdns/nextdns restart

Anyhow I got myself a Novita air purifier ~2 years ago, and I stole received a Xiaomi purifier from Liyun.

The Novita is pretty dumb (the PM sensor goes randomly nuts and it needs to be quite polluted before it really kicks in. It also needs to be turned off/on again every so often for it to keep on standby — if not it goes into some sleep mode).

The manual says you should consider cleaning (aka remove dust and cat hair) every 3 or so months, and replace the filter every 6 months. It'll show a warning when the timer hits zero.

Selling new filters is how they make money I guess.

Buy a new filter (or don’t and use the same filter), reset the timer and things are back to normal.

For the Xiaomi it’s a bit harder. The “smart filter” is really just a HEPA filter with an NFC tag. It’ll calculate how often the purifier runs and calculate a % based on that. I’ve now hit 0% left on my filter after a haze season (September 2019) and ~8 months of normal usage (as it’s in the bedroom, it starts filtering around 21h00, and then runs in the quiet night mode until 9am next morning and then shuts off).

While the purifier still runs at 0%, it gives a big red warning both in the app and on the device itself and urges you to replace the filter.

You can tape off the NFC tag with some tinfoil, but that’ll just change the big red warning from “used and old filter, please replace” to “fake filter, please replace”.

Now I am not against replacing HEPA filters when they are used and are not actually filtering the air anymore. But I am also against uselessly replacing things for the sake of handing money to $BigCorp and ruining the planet with it.

Running a few tests with a relatively precise PM sensor (use this assembled kit if you are not into DIY) shows that for both my purifiers, the exhuast air is 0 PM1.0, 0 PM2.5 and 0 PM10. So that shows me that both are still working and cleaning the air just fine (further away in the room, the PM heads up to 10-20 on haze-free days).

Am I missing something here? Why throw away something that still works?

Most of this can be copied from the amd64 post -- with a minor change for making it work on RPi4. This is the full git repo (including both rpi and amd64).

The main difference is in the run.sh file. The installation is a bit different and we'll need to install the Raspberry Pi kernel headers.

WireGuard is also installed from testing instead of Debian backports.

Note that for older RPi's (ie gen 1) you'll need to compile from scratch.

I've dealt with quite a few (bad) banks over the course of my life across countries and businesses.

And I think HSBC is one of the worst.

For various reasons. But mostly for being stuck in another century.

And you'd expect a tiny (Belgian) bank to be horrible. Not one of the biggest banks in the world with branches in almost every country of the world.

But no. HSBC pretty much tops it.

I have tons of other examples how and why HSBC failed me, and by the end of the year I think it's time to part ways.

Shan.sg - IG

The solution is to manually update the package from 2.6.2 to 2.6.4. Find your NAS architecture and then download (bottom of the page) the right binary and manually install it.

Note that you need to stop the Resilio Sync service running (manually stop it via Package Center) before uploading the package and installing it.

Once done, don't forget to manually start the service again.

Resilio Sync GUI will be at <NAS IP>:28888/gui/.

The howto guide to manually update the package can be found here.

Setting up dkms (2.6.1-4) ...
Setting up wireguard-dkms (1.0.20200429-1~bpo10+1) ...
Loading new wireguard-1.0.20200429 DKMS files...
It is likely that 4.19.0-8-cloud-amd64 belongs to a chroot's host
Building for 4.19.0-8-amd64 and 4.19.0-8-cloud-amd64
Building initial module for 4.19.0-8-amd64
Error! Bad return status for module build on kernel: 4.19.0-8-amd64 (x86_64)
Consult /var/lib/dkms/wireguard/1.0.20200429/build/make.log for more information.
dpkg: error processing package wireguard-dkms (--configure):
 installed wireguard-dkms package post-installation script subprocess returned error exit status 10
Setting up build-essential (12.6) ...
Setting up libalgorithm-diff-xs-perl (0.04-5+b1) ...
Setting up libalgorithm-merge-perl (0.08-3) ...
dpkg: dependency problems prevent configuration of wireguard:
 wireguard depends on wireguard-dkms (>= 0.0.20200121-2) | wireguard-modules (>= 0.0.20191219); however:
  Package wireguard-dkms is not configured yet.
  Package wireguard-modules is not installed.

dpkg: error processing package wireguard (--configure):
 dependency problems - leaving unconfigured
Processing triggers for systemd (241-7~deb10u3) ...
Processing triggers for libc-bin (2.28-10) ...
Errors were encountered while processing:
 wireguard-dkms
 wireguard
E: Sub-process /usr/bin/dpkg returned an error code (1)

The solution was to install bc. Seems like Debian is not pulling the right dependencies. I'll be adding it to my Dockerfile.

So I am running two WireGuard servers -- one on a Raspberry Pi 4, and one in an amd64 virtual machine. This post will be about getting WireGuard working on amd64 in a Docker container.

As this container rarely get rebuild, I am running unattended-upgrades inside the container to make sure security updates are applied.

I am also running Bind9 to act as a caching DNS server inside the container. Ideally this should be running from its dedicated container but that makes everything more complicated and not worth it for what I am trying.

I am also

The public repo that acts as a proof of concept can be found here.

start.sh -- this file starts (or restarts) and builds the container. It will also create the files as needed, set the forwarding DNS server, etc.

Dockerfile -- the example will start a basic container based on debian-slim, set up the port forwarding, install the tools we need, and copy over the configs

run.sh -- this file will be executed after the container has been built. We need to install WireGuard from this file or it will fail due to the volume not being mounted and not having the right params.
This will also start the named (bind9) server.
I manually set ip address add dev wg0 10.200.200.1/24 because using Address in wg0.conf caused issues. I haven't recently tested if that's still the case.

named.conf.options -- pretty standard bind9 config file; I want to be in control of my forwarding server because I am using NextDNS and want to apply a different config.

And of course your wg0.conf.

Running docker exec wireguard wg should give details about your connected hosts.

More photos on Google Photos.

I've been running WireGuard for a few months now and I've been loving it.

I first started using it about a year ago when in China — OpenVPN was once again being actively blocked and it was driving me nuts. Overnight I set up a DigitalOcean server in Singapore and ran WireGuard from it — both my phone and laptop were able to actively bypass the GFW and (at that time) surf the internet freely once more. As WireGuard gains popularity, I am sure the GFW will start detecting it — it's a quiet but not a stealthy protocol.

Since then I've dug quite a bit deeper in WireGuard and am really looking forward to what it's going to bring.

WireGuard differentiates itself to be an extremely simple VPN server (which can make getting started and debugging a bit more challenging) — but it wants to seamlessly work together with existing tools. One of the main features still missing is for example running a DHCP server on the server and dynamically assigning IPs (like oVPN does).

It's also pretty cool because any node can both be a server and a client at the same time. In my setup I am running two servers: one running at home in Singapore on a RPi4 (1Gbit fiber connection) and one on a virtual machine in Amsterdam (1Gbit as well). The RPis at my parents are connected to the server in Amsterdam, my iPad and phones are connected to the server in Singapore. If I am in Europe I might switch over and let my iDevices connect to the AMS server instead.

The example above clearly shows speed gains by cloaking the traffic in UDP packets. The shared folder has only two nodes (sender and receiver) and shows several big files being transferred from Amsterdam to Singapore. Resilio Sync uses the Bittorrent protocol, something ISPs generally hate and tend to slow down as much as they can — thanks Starhub.

Wireguard also allows the client to decide what to route through the server: only the VPN LAN traffic, or a whole subnet, or 0.0.0.0/0? So for my iPhone I for example route all traffic through VPN to avoid hotel/airport/... WiFi's to mine/log/scan my data. For my laptop I have two configs, one to only connect to the LAN, but another that routes all my traffic through the VPN if I want to avoid exposure or circumvent censoring.

Note that I am not running WireGuard to remain anonymous and I'll definitely leak some information — just trying to minimise and remain in control of what I leak. This is not a Tor replacement.

Playing around with Docker I saw some Smokeping image and that made me want to set it up again.

I'm running Smokeping on my server in Amsterdam (Leaseweb colo): smokeping.rootspirit.com.

At home, in Singapore, I am also running it on a Raspberry Pi 4: smokeping-sg.superuser.one.

Note that this is actually the same config used on both, as the RPi and server are on the same WireGuard network that works out nicely.

This is my docker run command to start it up:

docker run --name=smokeping --hostname=smokeping -e PUID=1000 -e PGID=1000 -e TZ=`cat /etc/timezone` -d -p 8000:8000 -v /srv/smokeping/config:/config -v /srv/smokeping/data:/data --restart unless-stopped --network 0x04 linuxserver/smokeping

Be sure to create the needed paths, and I am running it in my specific network 0x04. Change (or remove) --network 0x04 to something that works for you.

Shell servers... so 2005. I remember in the good old IRC days people asking for (free) shell servers to run their eggdrop and stuff. OMG am I getting old? Anyhow...

I ssh quite often. I manage quite a few servers (~15?) and routers that require me to login and do some random stuff. I also work on a laptop quite often and that means closing the lid and moving around.

First of all, mosh is amazing and allows you to stay connected via ssh, even with crappy (airport/hotel) internet as well as moving around networks -- that solves half the problem. If you are not using it, start using it now!

Second, during my datacenter technician days at Google we used to have a "jump server" -- a shell server that allowed us to bridge the corporate network and ssh into prod machines. Doubt that's still used nowadays, but the idea stuck. I wanted something similar to ssh from, wherever I was, and easily connect to my servers. And as the network the shell server is running on is stable, I only need to use mosh to the shell server. Thereafter, the connection very rarely dies.

And I guess, third, I recently purchased an iPad Pro and I really need to have my local "dev" environment with my git repo that I edit quite frequently but iPadOS isn't really your average computer, and doesn't even have a proper terminal. This is my experiment to make iPadOS work as a main computer when on the move.

Enter box -- Docker shell server...

I've copied over the files I use to this example repo, and added some comments. Mind you that this repo acts as a proof of concept and isn't kept up to date, as I have my own private repo -- but this should give you a good idea on how to set up your own shell server with Docker.

start.sh -- this is a simple script that I execute when I first run or need to update the container. I execute the same file on two different servers: Liana, my Raspberry Pi at home and Ocean, my server in Amsterdam.

zsh.sh -- this installs what I care about for zsh. This could be part of the Dockerfile but for some reason I separated it. ¯\_(ツ)_/¯

git.sh -- this clones my Git repos so I can edit and commit stuff from the shell server.

run.sh -- this file is launched by Dockerfile at the end and executes what matters: the ssh daemon. It also adds a Wireguard route and executes the scripts above.

Dockerfile -- this installs everything I need and configures the whole thing. I've added tons of comments that should get you going.

I am also cloning misc and homefiles as submodules in files/ -- but you should change this to something that works for you. See the Dockerfile for more info.

More pictures can be found on Google Photos.

Couple of weeks ago I started to play with NextDNS -- and I really recommend anyone that's something privacy minded and cares about the stuff happening on their network.

I've set up several configs (home, parents, FlatTurtle TurtleBox (the NUCs controlling the screens)) and Servers. Once it's out of beta and better supported on Unifi and Ubiquiti hardware I might deploy it to our public WiFi (well, most access points don't look like that -- but you get the point) networks too.

Looking at the logs was an eye-opener seeing what goes through your network. You can play around and block (or whitelist) certain domains.

I figured out my Devialet does an insane amount of requests to cache.radioline.fr for example. This domain has a 30s TTL. It shows that the majority of my DNS requests are actually automated pings and not in any way human traffic.

Anyhow -- I've since installed the NextDNS CLI straight on my EdgeRouter Lite acting as a caching DNS server and forwarding using DoH.

I've turned off dnsmasq (/etc/default/dnsmasq => DNSMASQ_OPTS="-p0") and have NextDNS listen to :53 directly.

Note that every EdgeOS update seems to wipe out the NextDNS installation, and requires a fresh install... Pain in the ass and doesn't seem like that's fixable.

This is my ERL NextDNS config (/etc/nextdns.conf)

hardened-privacy false
bogus-priv true
log-queries false
cache-size 10MB
cache-max-age 0s
report-client-info true
timeout 5s
listen :53
use-hosts true
setup-router false
auto-activate true
config 34xyz8
detect-captive-portals false
max-ttl 0s

The explanation of every flag is explain on their Github page and they are very responsive via issues or through their chat on my.nextdns.io.

All right -- next thing I've noticed is that my Google Home devices are not sending any DNS requests -- which means the devices use hard coded DNS servers.

I have a separate vlan (eth1.90) for Google Home (includes my Android TV, OSMC, Nest Home Hub and all other GHome and Chromecast devices). For this vlan I set up a deflector to be able to cast and ping/ssh from my "main" network/vlan to GHome vlan.

Using this guide I redirected all external DNS traffic to the ERL so I can monitor what's happening. The important part was the following:

yeri@sg-erl# show service nat rule 4053
destination {
port 53
}
inbound-interface eth1.90
inside-address {
address 10.3.34.1
port 53
}
protocol tcp_udp
type destination

This allows to "catch" all UDP and TCP connections to :53 and redirect them the ERL DNS server (10.3.34.1). The GHome devices were acting a bit weird after committing the change, but a reboot of the device fixed it.

Note that you need to set this up per vlan. If you want to catch DNS requests for your Guest or IoT vlan, you'll need to do the same.

Forget Childish Gambino.

Meet Wildish Bambino and his hilarious parody, This is the TV, with@LennyHenry. pic.twitter.com/vY7JZUcitN

— BBC One (@BBCOne) August 27, 2018

Singapore: flywhere.sg.

World (not very detailed): foxnomad.com/2017/07/25/map-shows-drone-laws-every-country-world-updated-regularly

And also embedded here:

Couple of days of Dubai with Shan. So going to ski and quad in the desert !

SQ/SIA (yay) direct flights from and to.