2026 1

Things I Learned - 18 Oct 2026

This week, I learned: I tested a few tools that help agents work with mobile devices. On Android, apart from adb, mobile-mcp seems better than Android-MCP or mobilerun (which has a different purpose, though) #ForNow. More importantly, agents controlling mobiles with USB debugging seems quite seamless. HeyPuter is cloning every software #ForNow into open-source apps. I expect more people will do this. Consumer software moats will probably erode faster than enterprise software (which has regulatory and other moats). My colleague built his own mobile music player yesterday using Claude Code and rea to reverse engineer the YMusic APK. Another example of technically capable users building their own (disposable) software. Fingerprints are the new cookies. I was surprised to see that the server could identify me correctly even in Incognito mode. Cover your tracks lets you test your browser privacy and mine was unique among ~369K users. My user agent, system fonts, Canvas fingerprint, WebGL fingerprint, audio compression float differences, WebGL Vendor & Renderer, and HTTP Accept Headers were the biggest unique-ness identifiers.. Thinking will become a hobby. Interesting point. After all, with the mechanical revolution, exercise became a hobby. (Interestingly, schools teach very little exercise - or most other hobbies.) Claude Code just told me that “Version 1.0.10 was published only 2 days ago, so to be supply-chain cautious I’ll pick a release that’s at least 2 weeks old.” That’s pretty circumspect of it - and I learnt a new term: “supply-chain caution”. Paraphrasing Andrej Karpathy: LLM capability is widening - something I’m seeing in my interactions, too #ForNow. 75% of the population has barely seen LLMs. 20% are free-tier users (searching, writing, maybe booking a flight) who see occasional use. 0.2% see large, complex projects one-shotted: apps, math proofs, … ~5,000 people see swarms of thousands of agents collaborating over weeks on software mega projects: minting zero days, running cyber attacks and defenses at machine speeds, discovering new science, advancing the frontier of mathematics. Human review and comprehension are falling behind: “archeology” of the OpenAI-HF incident, studying the 722 OpenAI proofs… That’s because we don’t have a reservoir of big, difficult problems we really care about; and the jagged edge: digital, verifiable and economically valuable domains grow faster; and access is uneven: free-tier, paid-tier, internal. Cloudflare acquired Deno. “After that year we will end our development of the Deno runtime.” Good for Cloudflare, pity about Deno. It was a good kick in the rear for NodeJS. Ryan’ll be porting celld into workerd. What I learnt is: workerd might be a realistic alternative to write web servers - instead of NodeJS, Express, etc. Durable Objects (worker + storage) seem to be a more powerful infrastructure component than I thought. They’re powering Queues, Workers, Git storage (artifacts), and more. Wallhop lets you skip paywalls #ForNow. Built by Josh as a 12ft.io replacement forking everywall/ladder. From How Anthropic Builds And How Engineering Will Change Soon | Thariq Shihipar: Examples - especially personal examples - are still an excellent way to prompt models. Agents do what the typical user wants pretty well. Focus your personalizations on how you want things done differently from the typical user. Learn vocabulary and intuition in areas where AI needs help. Visual design, mathematical ideation, economic theory, … Things move so fast (at least in code) #ForNow, so plan to deliver value within a month or two. For longer projects, wait for the next generation of agents to change the economics. Mistakes I made Week ending 18 Oct 2026 ...

2006 1

Paypal spam

I almost fell for this piece of spam.

2005 4

How to stop filesharers from stealing hotel bandwidth

Hilarious post on how to stop filesharers from stealing hotel bandwidth. So, I’m in Milwaukee at ye olde Holiday Inn Express. They have a wireless internet connection here and it’s been suckin’ all night, like I couldn’t even do anything on it. I suspected someone running a p2p program and taking up all of the bandwidth, so I fired up ntop to analyze the type of traffic on the network, and just who it was generating it. Lo and behold, someone was running a p2p app, and taking up 1.6Mbit worth of bandwidth. That’s just not fair to the 20 other people on the network, so I decided to boot him from the network. I tried poisoning his arp cache and the default gateway’s cache, but that only works on some wireless access points, apparently not this one. I can’t send an 802.11 deauth message from my OS X box, because the card doesn’t support raw packet injection, so what to do??? I notice that his IP in the ntop interface changed into a name. His windows machine was spewing Netbios packets with his computer name in it. For the sake of his privacy, I’ve changed the name, but let’s say it was “smith-laptop”. So I pick up my cellphone and call the front desk at the hotel and as for Mr. Smith’s room. The lady at the front desk says “Eric Smith?” And I tell her yes. The phone rings, someone picks up, the conversation goes like this: Me: Eric Smith? Eric: Uhh, yeah? Me: My name is Jim Grant, and I’m an investigator with the RIAA. Have you heard of us? Eric: Uhhhhh….. What does that stand for? Me: Recording Industry Association of America. We represent several large record companies. In monitoring several p2p filesharing networks, we have found that you Eric, are currently downloading copyrighted material. Are you aware that this is illegal? Eric: Ummm…. my laptop is off. (At this point, I no longer see him on the network) Me: We are in the process of filing 18182 lawsuits against people who steal copyrighted music on the internet. We will continue monitoring these networks, and if we see you on them again, you will hear back from us. Eric: Ok, thanks. Bye. So, now my network is nice and speedy again. And some guy is in his room trying to dry out his underwear. :) I should have recorded the call since my cellphone has the capability to record conversations. The above conversation can’t even begin to show the fear in his voice. I’m sure he’s scared as hell wondering how they found out his name and that he was staying at a hotel and exactly what room he was in. ...

Password on IRC

A hilarious chat on IRC about passwords. More at QDB. via Dhar <Cthon98> hey, if you type in your pw, it will show as stars <Cthon98> ***** see! <AzureDiamond> hunter2 <AzureDiamond> doesnt look like stars to me <Cthon98> <AzureDiamond> ***** <Cthon98> thats what I see <AzureDiamond> oh, really? <Cthon98> Absolutely <AzureDiamond> you can go hunter2 my hunter2-ing hunter2 <AzureDiamond> haha, does that look funny to you? <Cthon98> lol, yes. See, when YOU type hunter2, it shows to us as ***** <AzureDiamond> thats neat, I didnt know IRC did that <Cthon98> yep, no matter how many times you type hunter2, it will show to us as ***** <AzureDiamond> awesome! <AzureDiamond> wait, how do you know my pw? <Cthon98> er, I just copy pasted YOUR ****'s and it appears to YOU as hunter2 cause its your pw <AzureDiamond> oh, ok.

Salaam alekum

King’s Cross station. 6:20pm. I’m rushing along to catch the next train to Liverpool Street, when a jacket and suitcase step in front of me. “Salaam alekum.” This has happened to me before. 5 years ago. My response hasn’t changed. “Huh? “Salaam alekum?” “Huh? “SALAAM ALEKUM?” “Huh? “Aap Pakistani ho?” “No, India actually.” (smile) “I just lost my wallet, and I don’t have a ticket. Could you please help me?” ...

Spam techniques

Spammer ploys. From the Scientific American.

2001 1

Social engineering

Hacking and social engineering.