Honeypot.net

He held the shiny little thing in his hand and blinked. It was as cute and innocuous as it was perfectly lethal. He’d said the right words, and it popped into existence, eager to please by killing everything within reach upon command. He paused and aimed, thought once, twice… then launched it. Click. Nothing happened. He tried again, and the world unfolded and fell in on itself, a smoking crater where the target had sat. Oh. Its voice rose, squeaking. “Want me to do it again?” Yeah.

Google crossed a threshold last month where over 50% of their users accessed it via IPv6. If you were wondering if this would be a good time to make your service available over IPv6: yes. Yes, it would.

Ow, ow, ow. A car pulled mostly through the crosswalk before their light turned and they got stuck. I started crossing the street behind it when the owner panicked and started to back up. I reflexively whacked their trunk with my hand to make them stop. The driver rolled down their window and yelled at me for slapping their car. I resisted the urge to practice amateur, ad-hoc orthodontia. I think I bruised my wrist, though. Ow. Ow. Ow.

Pentesters: there’s a fine line between diligence and being freaking annoying. Last year a tester found that our auth provider’s SDK generated a sensitive one-time-use URL for our client to connect to their server with, over TLS. I’m still dealing with this dumb finding, which pissed me off so badly that I fired the testing firm and switched to someone else this year. Do be diligent, but don’t pick stupid hills to die on.

Currently reading: Beowulf: A New Translation by Maria Dahvana Headley 📚

Finished reading: The Random Universe by Andrew H. Jaffe 📚

I won the Internet! My blog post was shared to Hacker News and was #1 on the page at the same time my karma hit 31337.

I wrote to Flock’s privacy contact to opt out of their domestic spying program: I am a resident of California. As such, and because you are subject to the CCPA, delete all information about me, my vehicle, and other household members from all of your databases. I do not give you permission to collect or store data about me, my vehicles, or my relatives, in any future situation. [Me] [My address] They replied today: Dear [misspelled name, i.e. not copied and pasted], Your request cannot be ...

I’m playing Silent Hill F, which is beautiful, well made, and playable for up to 30 minutes per day until I get the heebie jeebies and have to put it down.

In certain forums I frequent, some people developed the habit of commenting on other users that “this sounds like AI wrote it”. Confession: I downvote every one of those. This blog you’re reading at this moment is 100% handwritten. I haven’t used AI to write a single word or edit a single sentence. It’s wholly, completely, my work. Yet, one tool I tested labeled it “about 30% slop”, apparently because I enjoy punctuation and sentences longer than 4 words. I have no patience for that.

Huh, whatever could that be? It looks promising. Awww, yeah.

Oracle Files Thousands of H-1B Visa Petitions Amid Mass Layoffs: Federal data shows Oracle filed for 2,690 H-1B visas in fiscal year 2025 and 436 so far in fiscal year 2026, totaling over 3,100 visa requests. Oh hell no. You cannot make me believe that the talent they’re seeking isn’t already here, or that this isn’t fraud.

macOS Tahoe has one feature that I adore: a setting to remove an app’s icon from the menu bar at the top of the screen. Far too many apps want to put their icon there for no helpful reason other than to remind me that they exist. That led to a proliferation of apps like Bartender (which I use to like before it sold out), Ice, and others that let users control what shows up in the menu bar. I don’t need those apps anymore and I don’t miss them. Here’s the 1Password icon in my menu bar. I have ...

I wrote a little Python web chat thingy ages ago, Seshat. I haven’t touched it again in over 15 years. Someone asked me for permission to re-use that name on PyPI. I’d refuse under other circumstances — supply chain attack, anyone? — except that I strongly doubt there’s a single user of my package anywhere. The new person wants to rename their legitimate, long-lived project in a completely different niche so there’s no chance of confusing the two, either. Because of all that, I’m agreeing to ...

You can tell much about a person by the logos they wear. For example, if someone has a shirt or jacket with the “HH” logo, you know they’re a brand ambassador for Hamburger Helper®️, and are huge fans of beefy, cheese-product flavored pasta meals they eat thrice daily.

Artemis II is go. 🚀🌕❤️

My back’s been killing me after some weekend hijinks. This morning I threw a 20 pound plate in my backpack for the commute, which is the only reliable method I’ve found for fixing it.

Target texted me the same one-time password 3 times in a row. No April Fool’s joke here. This really happened.

Prompt injection is a lot like SQL injection: take untrusted data, shove it into a data stream that uses in-band signaling, and hope for the best. A common approach for dealing with prompt injections is to ask another process, or even a model, to scan the resulting string and see if it looks safe. This is about like shoving user data straight into a SQL template and looking at the result to see if it more or less looks alright. That’s nuts. Why don’t we have a standard format for escaping use...

There are entirely too many Yankees hats on BART today. Have these people no shame? No soul?

Updates to GitHub Copilot interaction data usage policy: From April 24 onward, interaction data—specifically inputs, outputs, code snippets, and associated context—from Copilot Free, Pro, and Pro+ users will be used to train and improve our AI models unless they opt out. Copilot Business and Copilot Enterprise users are not affected by this update. Don’t forget to opt out.

Prompt 3.5 for Apple Vision Pro adds a wild new immersive environment! I was today years old when I started wanting an Apple Vision Pro for the first time ever.

Oakland Tribune building, Oakland, California.

Took the family to see Nine Inch Nails in Sacramento last night. If we’re going through the time, hassle, and expense to see a show, I want good seats.