Rob

Rob

@multirob.bsky.social

Freelance dev with a security buff, math and science-interested, lapsed book consumer, hobbyist nature photographer, experienced tracker (animal and human). He/him. Mostly try to be a good human. I physically cringe whenever I hear the word "cyber".

99 followers646 following192 posts

You can build a better future by tearing down bad things. The old adage goes that it's easier to tear down than to build up. Right now, some pretty awful people are putting a lot of effort into building a worse future for the rest of us.

The good news is, the adage still holds. So many of the people I know are exhausted or struggling, but are able to scrape together just enough effort to keep tearing down the things being built by the morally bankrupt. It's fun, prosocial, and energizing.

Whether it's mass surveillance, roving federal gangs, hyperscale datacenters, or creeping authoritarianism, you can tear down something bad in your community and have fun doing it.

I beg of all media outlets: if an article's headline is going to start with the words "Trump says", please just scrap it and publish anything else instead. Anything at all.

So, today I learned that LetsEncrypt uses AWS for its outbound http-01 challenges. This is a problem because AWS is *also* a significant source of malicious traffic these days.

Whether it's because of any of a couple dozen different AI slop outfits aggressively crawling sites, or login abuse, or one (large) segment of the occasional DDoS, AWS has earned itself an honored place in my iptables drop rules. Except that also causes a LetsEncrypt outage.

I think the single most frustrating issue I've repeatedly run into while doing sysadmin things for the last 20 years is legit services that casually mix their traffic in with abusive networks. This has been a problem for a long time and I'm so, so disappointed that LetsEncrypt is doing it too.

@bennjordan.bsky.social Have you been able to play with Flock's gunshot detectors yet? That seems like a fun application of your background in acoustic engineering. Would an alert be triggered if, say, someone popped a balloon nearby? Or clapped two pieces of hardwood together?

(Been a fan for a while btw, and I'm one of the organizers for Flock-related efforts here in Eugene, Oregon, where we've been able to get them shut off. Your recent videos have been popular here.)

I've been saying for almost a decade that most of the complexity in software engineering is caused by resume-driven development. Here's a screenshot of someone that proudly contributed to that. (Context is re: silly interview questions.)

All these Silicon Valley tech bros want to be Steve Jobs sooo badly, but not a single one of them can see around their own ego enough to understand what made another person tick. It's all so inauthentic and cargo-culty.

Fortunately, I recently got local web archiving working to my satisfaction, so this is only a minor nuisance. The next step in this game will be to periodically restart my fiber connection to get new DHCP leases, browse more from coffee shops, and wreck Google for as many other people as possible.

I keep seeing this phrase used as though there haven't already been half-a-dozen constitutional crises recently. Our collective loss of long-term memory is crippling us.

Seth Abramson@sethabramson.bsky.social

BREAKING: The constitutional crisis has arrived. We knew it was coming, just not when.

The number one reason I'm dragging my feet on anything AI-related is that all of the people shouting the loudest about it are the ones that have carved a wide swath of destruction through society over the last 15 years, or are unrepentant dev hype-chasers.

When I've described the risks of these services to people, it's usually been in the form of possible abuses of data. The current political *and* corporate landscapes have only made those risk scenarios more likely. Deleting helps safeguard you, your family, and your descendants.

This reply got me blocked by the person I was replying to, which means they are also no longer going to be able to broadcast info to me on issues they care about, on which we are probably 99% aligned. This is not a good strategy for turning things around.

Rob@multirob.bsky.social

People can be both entirely opposed to what's happening and also frustrated with *all* of the people that have contributed to it happening, whatever their reasons. But yeah, some more leftist vs. liberal vs. democrat infighting oughtta get us some wins.

archive.today has been persistently hitting me with reCaptchas for the last few days. On the one hand, that's pretty annoying. On the other, it's given me lots of chances to contribute to future glitches in robotaxis. "This bike looks like a crosswalk to me..."

We're gonna need a generation of leftists in all offices (local, state, and federal) that are ready to throw hands when the occasion calls for it.

Just got an interesting email from a friend & former client. Scammers are now routing emails through Docusign. Example: create a Docusign document from the "PayPal Security Team", add target to the document. Nice way to float through spam filters. Docusign sucks anyway.

View full thread

And how does all this involve China? DeepSeek is a Chinese firm. If you use the API and their commercial service, then the usual censorship is in place (i.e. it won't answer questions about Tiananmen Square). The usual geopolitics. There are some security concerns in some contexts.

View full thread

What does this mean for software engineering? I've been bearish on the influence of LLMs on dev work, based on my own experiences and those of other devs. LLMs are okay at generating basic, boilerplate, junior-level code, but for complex things, they suck.

DeepSeek R1 seems to be a significant improvement, and associated tooling is getting a lot better too. There are more reasons to expect that the way we build software, and how we approach some problems in software dev, is going to start changing.

View full thread

Why is it a big deal? It performs very well. It doesn't have some of the "hallucination" problems associated with other LLMs. It can handle more complex problems. Oh, and also it's open source and far more efficient than e.g. OpenAI's models. You can run it on consumer hardware.

What happened to Nvidia? "The market", that panicky, thundering herd of witless beasts, decided that since DeepSeek R1 was so much more efficient than other models, Nvidia might not sell as many GPUs in the future.

View full thread

What is a "Reasoning" model? LLMs are more-or-less text generators. They encode lots of patterns of text, and then produce as output other patterns of text. They do this well enough to seem conversational, but they don't "think". A Reasoning model appears to think.

(Does it actually think? What does this mean for theory of mind? What is consciousness, actually? All way above my pay grade.) (And these days, I'm not even convinced most humans think all that much.)

What is it? "DeepSeek" has been around for a while, another competitor in the field of AI and LLM (Large Language Model) development. They recently released DeepSeek R1, which is a Reasoning model.

In multi-factor authentication, a factor is a) a thing you know, or b) a thing you have, or c) a thing you are. Passwords started out as a thing you know, but now should be a thing you have (an unguessable, randomly-generated password, stored in a password manager).

It has been a long time since I had a more heartfelt "honestly, fuck you" reaction to an academic text. (From "Computing and Technology Ethics" by Burton, Goldsmith, Mattej, Siler, and Swiatek).

View full thread

It has been a long time since I had a more heartfelt "honestly, fuck you" reaction to an academic text. (From "Computing and Technology Ethics" by Burton, Goldsmith, Mattej, Siler, and Swiatek).

It's not even that I necessarily disagree with the statement, it's that it follows some extraordinarily paternalistic prescriptions of ethics in computing, combined with what reads like an astonishing ignorance of the industry.

I see more people complaining about Google's "AI" suggestions in searches. Add this to the "My Filters" tab in your uBlock Origin settings: ```google.com##:xpath(//h1[text() = "AI Overview"]/following-sibling::div)``` (Just the text inside the backticks.) You -are- using uBlock Origin, right?

Just saw @johngreensbluesky.bsky.social 's video re: injury from signing 50,000+ pages for Everything Is Tuberculosis, and maybe he should contact Shane at Stuff Made Here: youtu.be/cQO2XTP7QDw (Not a serious suggestion, I was just reminded of Shane's very cool solution to this problem.)

youtu.beI sent robot forgeries to a handwriting expertYouTube video by Stuff Made Here
John Green@johngreensbluesky.bsky.social

It is once again time to sign my name over and over again.

There's a misplaced apostrophe in the alt text in my previous post and I don't know how it got there but it most certainly was not because I typed it that way, because I would never.

Some brilliant graphic artist snuck Blaster into the background of an unrelated video and I don't know who they are but they deserve a cookie (and some righteous tunes).