![[Valid Atom 1.0]](images/valid-atom.png "Valid Atom 1.0")
This is a valid Atom 1.0 feed.
This feed is valid, but interoperability with the widest range of feed readers could be improved by implementing the following recommendations.
<link rel='self' href='https://www.tbray.org/ongoing/ongoing.atom' />
^
<p>To set the stage, consider this regexp: <nobr><code>A?B?C?X</code></n ...
^
<?xml version='1.0' encoding='UTF-8'?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:thr='http://purl.org/syndication/thread/1.0' xml:lang='en-us'> <title>ongoing by Tim Bray</title> <link rel='hub' href='http://pubsubhubbub.appspot.com/' /> <id>https://www.tbray.org/ongoing/</id> <link href='https://www.tbray.org/ongoing/' /> <link rel='self' href='https://www.tbray.org/ongoing/ongoing.atom' /> <link rel='replies' thr:count='101' href='https://www.tbray.org/ongoing/comments.atom' /> <logo>rsslogo.jpg</logo> <icon>/favicon.ico</icon> <updated>2025-10-12T16:11:05-07:00</updated> <author><name>Tim Bray</name></author> <subtitle>ongoing fragmented essay by Tim Bray</subtitle> <rights>All content written by Tim Bray and photos by Tim Bray Copyright Tim Bray, some rights reserved, see /ongoing/misc/Copyright</rights> <generator uri='/misc/Colophon'>Generated from XML source code using Perl, Expat, Emacs, Mysql, Ruby, and ImageMagick. Industrial-strength technology, baby.</generator> <entry> <title>Social Media Provenance Challenge</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/10/01/C2PA-For-Social-Media' /> <link rel='replies' thr:count='13' type='application/xhtml+xml' href='/ongoing/When/202x/2025/10/01/C2PA-For-Social-Media#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/10/01/C2PA-For-Social-Media</id> <published>2025-10-01T12:00:00-07:00</published> <updated>2025-10-06T10:15:26-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Identity' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Identity' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Social Media' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Social Media' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>At a <a href='https://iptc.org/news/iptc-photo-metadata-conference-2025-recordings-now-available/'>a recent online conference</a>, I said that we can “change the global Internet conversation for the better, by making it harder for liars to lie and easier for truth-tellers to be believed.” I was talking about media<span class="dashes"> —</span> images, video, audio. We can make it <em>much</em> easier to tell when media is faked and when it’s real. There’s work to do, but it’s straightforward stuff and we could get there soon. Here’s how</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>At a <a href="https://iptc.org/news/iptc-photo-metadata-conference-2025-recordings-now-available/">a recent online conference</a>, I said that we can “change the global Internet conversation for the better, by making it harder for liars to lie and easier for truth-tellers to be believed.” I was talking about media<span class='dashes'> —</span> images, video, audio. We can make it <em>much</em> easier to tell when media is faked and when it’s real. There’s work to do, but it’s straightforward stuff and we could get there soon. Here’s how.</p> <h2 id='p-8'>The Nadia story</h2> <p>This is a vision of what success looks like.</p> <p>Nadia lives in LA. She has a popular social-media account with a reputation for stylish pictures of urban life. She’s not terribly political, just a talented street photog. Her handle is “CoolTonesLA@hotpix.example”.</p> <p>She’s in Venice Beach the afternoon of Sunday August 9, 2026, when federal agents take down a vendor selling cheap Asian ladies’ wear. She gets a great shot of an enforcer carrying away an armful of pretty dresses while two more bend the merchant over his countertop. None of the agents in the picture are in uniform, all are masked.</p> <p>She signs into her “CoolTonesLA” account on <code>hotpix.example</code> and drafts a post saying “Feds raid Venice Beach”. When she uploads the picture, there’s a pop-up asking “Sign this image?” Nadia knows what this means, and selects “Yes”. By midnight her post has gone viral.</p> <img src="cr.png" alt="Content Credentials glyph" class="inline"/> <p>As a result of Nadia agreeing to “sign” the image, anyone who sees her post, whether in a browser or mobile app, also sees that little “Cr” badge in the photo’s top right corner. When they mouse over it, a little pop-up says something like:</p> <blockquote class="popup"><p style="font-family: sans-serif">Signature is valid.<br/>Media was posted by <span class="fakelink">@CoolTonesLA</span><br/>on <span class="fakelink">hotpix.example</span><br/>at 5:40 PM PDT, August 9th, 2026.</p></blockquote> <p>The links point to Nadia’s feed and her instance’s home page. Following them can give the reader a feeling for what kind of person she is, the nature of her server, and the quality of her work. Most people are inclined to believe the photo is real.</p> <p>Marco is a troublemaker. He grabs Nadia’s photo and posts it to his social-media account with the caption “Criminal illegals terrorize local business. Lock ’em up!” He’s not technical and doesn’t strip the metadata. Since the picture is already signed, he doesn’t get the “Sign this picture?” prompt. Anyone who sees his post will see the “Cr” badge and mousing over it makes it pretty clear that it isn’t what he says it is. Commenters gleefully point this out. By the time Marco takes the post down, his credibility is damaged.</p> <p>Maggie is a more technical troublemaker. She sees Marco’s post and likes it, strips the picture’s metadata, and reposts it. When she gets the “Sign this picture?” prompt, she says “No”, so it doesn’t get a “Cr” badge. Hostile commenters accuse her of posting a fake, saying “LOL badge-free zone”. It is less likely that her post will go viral.</p> <p>Miko isn’t political but thinks the photo would be more dramatic if she Photoshopped it to add a harsh dystopian lighting effect. When she reposts her version, the “Cr” badge won’t be there because the pixels have changed.</p> <p>Morris follows Maggie. He grabs the stripped picture and, when he posts it, says “Yes” to signing. In his post the image will show up with the “Cr” and credit it to him, with a “posted” timestamp later than Nadia’s initial post. Now, the picture’s believability will depend on Morris’s. Does he have a credible track record? Also, there’s a chance that someone will notice what Morris did and point out that he stole Nadia’s picture.</p> <p>(In fact, I wouldn’t be surprised if people ran programs against the social-network firehose looking for media signed by more than one account, which would be easy to detect.)</p> <p>That’s the Nadia story.</p> <h2 id='p-2'>How it’s done</h2> <p>The rest of this piece explains in some detail how the Nadia story can be supported by technology that already exists, with a few adjustments. If jargon like “PKIX” and “TLS” and “Nginx” is foreign to you, you’re unlikely to enjoy the following. Before you go, please consider: Do you think making the Nadia story come true would be a good investment?</p> <p>I’m not a really deep expert on all the bits and pieces, so it’s possible that I’ve got something wrong. Therefore, this blog piece will be a living document in that I’ll correct any convincingly-reported errors, with the goal that it accurately describes a realistic technical roadmap to the Nadia story.</p> <p>By this time I’ve posted enough times about C2PA that I’m going to assume people know what it is and how it works. For my long, thorough explainer, see <a href="https://www.tbray.org/ongoing/When/202x/2023/10/28/C2PA-Workflows">On C2PA</a>. Or, check out the <a href="https://contentcredentials.org/">Content Credentials Web site.</a></p> <p>Tl;dr: C2PA is a list of assertions about a media object, stored in its metadata, with a digital signature that includes the assertions and the bits of the picture or video.</p> <p>This discussion assumes the use of C2PA and also an in-progress specification from the <a href="https://cawg.io">Creator Assertions Working Group</a> (CAWG) called <a href="https://cawg.io/identity/1.2-draft">Identity Assertion</a>.</p> <p>Not all the pieces are quite ready to support the Nadia story. But there’s a clear path forward to closing each gap.</p> <h2 id='p-3'>“Sign this picture?”</h2> <p>C2PA and CAWG specify many assertions that you can make about a piece of media. For now let’s focus just on what we need for provenance. When the media is uploaded to a social-network service, there are two facts that the server knows, absolutely and unambiguously: Who uploaded it (because they’ve had to sign in) and when it happened.</p> <p>In the current state of the specification drafts, “Who” is the <code>cawg.social_media</code> property from the draft <a href="https://cawg.io/identity/1.2-draft/#vc-credentialsubject-verifiedidentity-type">Identity Assertion spec, section 8.1.2.5.1</a>, and “When” is the <code>c2pa.time-stamp</code> property from the <a href="https://spec.c2pa.org/specifications/specifications/2.2/specs/C2PA_Specification.html#_requirements_2">C2PA specification, section 18.17.3</a>.</p> <p>I think these two are all you need for a big improvement in social network media provenance, so let’s stick with them.</p> <h2 id='p-4'>What key?</h2> <p>Let’s go back to the Nadia story. It needs the Who/When assertions to be digitally signed in a way that will convince a tech-savvy human or a PKIX validation library that the signature could only have been applied by the server at <code>hotpix.example</code>.</p> <p>The C2PA people have been thinking about this. They are working on a <a href="https://iptc.org/verified-news-publishers-list/">Verified News Publishers List</a>, to be maintained and managed by, uh, that’s not clear to me. The idea is that C2PA software would, when validating a digital signature, require that the PKIX cert is one of those on the Publishers List.</p> <p>This isn’t going to work for a decentralized social network, which has tens of thousands of independent servers run by co-ops, academic departments, municipal governments, or just a gaggle of friends who kick in on Patreon. And anyhow, Fediverse instances don’t claim to be “News Publishers”, verified or not.</p> <p>So what key can <code>hotpix.example</code> sign with? Fortunately, there’s already a keypair and PKIX certificate in place on every social-media server, the one it uses to support TLS connections. The one at <code>tbray.org</code>, that’s being used right now to protect your interaction with this blog, is in <code>/etc/letsencrypt/live/</code> and the private key is obviously not generally readable.</p> <p>That cert will contain the public key corresponding to the host’s private key, the cert's ancestry, and the host name. It’s all that any PKIX library needs to verify that yes, this could only have been signed by <code>hotpix.example</code>. However, there will be objections.</p> <p><b>Objection</b>: “<code>hotpix.example</code> is not a Verified News Publisher!” True enough, the C2PA validation libraries would have to accept X.509 certs. Maybe they do already? Maybe this requires an extension of the current specs? In any case, the software’s all open-source, could be forked if necessary.</p> <p><b>Objection</b>: “That cert was issued for the purpose of encrypting TLS connections, not for some weird photo provenance application. Look at the <a href="https://en.wikipedia.org/wiki/Object_identifier">OID</a>!” OK, but seriously, who cares? The math does what the math does, and it works.</p> <p><b>Objection</b>: “I have to be super-careful about protecting my private key and I don’t want to give a copy to the hippies running the social-media server.” I sympathize but, in most cases, social media is all that server’s doing.</p> <p>Having said that, it would be great if there were extensions to Nginx and Apache httpd where you could request that they sign the assertions for you. Neither would be rocket science.</p> <p>OK, so we sign Nadia’s Who/When assertions and her photo’s pixels with our host’s TLS key, and ship it off into the world. What’s next?</p> <h2 id='p-5'>How to validate?</h2> <p>Verifying these assertions, in a Web or mobile app, is going to require a C2PA library to pick apart the assertions and a PKIX library for the signature check.</p> <p>We already have <a href="https://github.com/contentauth/c2pa-rs">c2pa-rs</a>, Rust code with MIT and Apache licenses. Rust libraries can be called from some other programming languages but in the normal course of affairs I’d expect there soon to be native implementations. Once again, all these technologies are old as dirt, absolutely no rocket science required.</p> <p>How about validating the signatures? I was initially puzzled about this one because, as a programmer, certs only come into the picture when I do something like <code>http.Get()</code> and the library takes care of all that stuff. So I can’t speak from experience.</p> <p>But I think the infrastructure is there. Here’s a Curl blogger praising <a href="https://eissing.org/icing/posts/curl-apple-sectrust/">Apple SecTrust</a>. Over on Android, there’s <a href="https://developer.android.com/reference/javax/net/ssl/X509ExtendedTrustManager">X509ExtendedTrustManager</a>. I assume Windows has something. And if all else fails, you could just download a trusted-roots file from the <a href="https://curl.se/docs/caextract.html">Curl</a> or <a href="https://android.googlesource.com/platform/system/ca-certificates/+/master/files/">Android</a> projects and refresh it every week or two.</p> <h2 id='p-7'>What am I missing?</h2> <p>This feels a little too easy, something that could be done in months not years. Perhaps I’m oversimplifying. Having said that, I think the most important thing to get right is the scenarios, so we know what effect we want to achieve.</p> <p>What do you think of the Nadia story?</p></div></content></entry> <entry> <title>GenAI Predictions</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/09/26/GenAI-Predictions' /> <link rel='replies' thr:count='7' type='application/xhtml+xml' href='/ongoing/When/202x/2025/09/26/GenAI-Predictions#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/09/26/GenAI-Predictions</id> <published>2025-09-26T12:00:00-07:00</published> <updated>2025-10-02T09:16:45-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/AI' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='AI' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>I’m going to take a big chance here and make predictions about GenAI’s future. Yeah, I know, you’re feeling overloaded on this stuff and me too, but it seems to have sucked the air out of all the other conversations. I would so like to return to arguing about Functional Programming or Free Trade. This is risky and there’s a pretty good chance that I’m completely wrong. But I’ll try to entertain while prognosticating</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>I’m going to take a big chance here and make predictions about GenAI’s future. Yeah, I know, you’re feeling overloaded on this stuff and me too, but it seems to have sucked the air out of all the other conversations. I would so like to return to arguing about Functional Programming or Free Trade. This is risky and there’s a pretty good chance that I’m completely wrong. But I’ll try to entertain while prognosticating.</p> <h2 id='p-6'>Reverse Centaurs</h2> <p>That’s the title of a <a href="https://locusmag.com/feature/commentary-cory-doctorow-reverse-centaurs/">Cory Doctorow</a> essay, which I think is spot on. I’m pretty sure anyone who’s read even this far would enjoy it and it’s not long, and it’d help understand this. Go have a look, I’ll wait.</p> <h2 id='p-4'>Hallucinations won’t get fixed</h2> <p>I have one good and one excellent argument to support this prediction. Good first: While my understanding of LLMs is not that deep, it doesn’t have to be to understand that it’s really difficult (as in, we don’t know how) to connect the model’s machinations to our underlying reality, so as to fact-check.</p> <p>The above is my non-expert intuition at work. But then there’s <a href="https://arxiv.org/pdf/2509.04664">Why Language Models Hallucinate</a>, three authors from OpenAI and one from Georgia Tech, which seems to show that hallucinations are an inevitable result of current training practices.</p> <p>And here’s the excellent argument: If there were a way to eliminate the hallucinations, <em>somebody already would have</em>. An army of smart, experienced people, backed by effectively infinite funds, have been hunting this white whale for years now without much success. My conclusion is, don’t hold your breath waiting.</p> <p>Maybe there’ll be a surprise breakthrough next Tuesday. Could happen, but I’d be really surprised.</p> <p>(When it comes to LLMs and code, the picture is different; see below.)</p> <h2 id='p-1'>The mass layoffs won’t happen</h2> <p>The central goal of GenAI is the elimination of tens of millions of knowledge workers. That’s the only path to the profits that can cover the costs of training and running those models.</p> <p>To support this scenario the AI has to run in Cory’s “reverse centaur” mode, where the models do the work and the humans tend them. This allows the production of several times more work per human, generally of lower quality, with inevitable hallucinations. There are two problems here: First, that at least some of the output is <a href="https://hbr.org/2025/09/ai-generated-workslop-is-destroying-productivity">workslop</a>, whose cleanup costs eat away at the productivity wins. Second, that the lower quality hurts your customers and your business goes downhill.</p> <p>I just don’t see it. Yeah, I know, every CEO is being told that this will work and they’ll be heroes to their shareholders. But the data we have so far keeps refusing to support those productivity claims.</p> <p>OK then, remove the “reverse” and run in centaur mode, where smart humans use AI tools judiciously to improve productivity and quality. Which might be a good idea for some people in some jobs. But in that scenario neither the output boost nor the quality gain get you to where you can dismiss enough millions of knowledge workers to afford the AI bills.</p> <h2 id='p-2'>The financial damage will be huge</h2> <p>Back to Cory, with <a href="https://pluralistic.net/2025/09/27/econopocalypse/#subprime-intelligence">The real (economic) AI apocalypse is nigh</a>. It’s good, well worth reading, but at this point pretty well conventional wisdom as seen by everyone who isn’t either peddling a GenAI product or (especially) fundraising to build one.</p> <p>To pile on a bit, I’m seeing things every week like for example this: <a href="https://fortune.com/2025/09/23/ai-boom-unsustainable-tech-spending-parabolic-deutsche-bank/">The AI boom is unsustainable unless tech spending goes ‘parabolic,’ Deutsche Bank warns: ‘This is highly unlikely’</a>.</p> <p>The aggregate investment is ludicrous. The only people who are actually making money are the ones <a href="https://www.ft.com/content/e93e56df-dd9b-40c1-b77a-dba1ca01e473">selling the gold-mining equipment</a> to the peddlers. Like they say, <a href="https://en.wikipedia.org/wiki/Herbert_Stein#Stein's_Law">“If something cannot go on forever, it will stop.”</a> Where by “forever”, in the case of GenAI, I mean “sometime in 2026, probably”.</p> <h2 id='p-3'>… But the economy won’t collapse</h2> <p>Cory forecasts existential disaster, but I’m less worried. Those most hurt when the bubble collapses will be the investing classes who, generally speaking, can afford it. Yeah, if the S&P 500 drops by a third, the screaming will shake the heavens, but I honestly don’t see it hitting as hard as 2008 and don’t see how the big-picture economy falls apart. That work that the genAI shills say would be automated away is still gonna have to be done, right?</p> <h2 id='p-5'>The software profession will change, but not <em>that</em> much</h2> <p>Here’s where I get in trouble, because a big chunk of my professional peers, including people I admire, see GenAI-boosted coding as pure poison: <a href="https://anthonymoser.github.io/writing/ai/haterdom/2025/08/26/i-am-an-ai-hater.html">“In a kind of nihilistic symmetry, their dream of the perfect slave machine drains the life of those who use it as well as those who turn the gears.”</a> (The title of that essay is “I Am An AI Hater.”)</p> <p>I’m not a hater. I argued above that LLMs generating human discourse have no way to check their output for consistency with reality. But if it’s code, “reality” is approximated by what will compile and build and pass the tests. The agent-based systems iteratively generate code, reality-check it, and don’t show it to you until it passes. One consequence is that the quality of help you get from the model should depend on the quality of your test framework. Which warms my <a href="/ongoing/When/202x/2021/05/15/Testing-in-2021">testing-fanatic</a> heart.</p> <p>So, my first specific prediction: Generated code will be a routine thing in the toolkit, going forward from here. It’s pretty obvious that LLMs are better at predicting code sequences than human language.</p> <p>In <a href="https://sourcegraph.com/blog/revenge-of-the-junior-developer">Revenge of the junior developer</a>, Steve Yegge says, more or less, “Resistance is useless. You will be assimilated.” But he’s wrong; there are going to be places where we put the models to work, and others where we won’t. We don’t know which places those are and aren’t, but I have (weaker) predictions; let’s be honest and just say “guesses”.</p> <p>Where I suspect generated code will likely appear:</p> <ul> <li><p>Application logic: “Depreciate the values in the <code>AMOUNT</code> field of the <code>INSTALLED</code> table forward ten years and write the <code>NAME</code> field and the depreciated value into a CSV.” Or “Look at JIRA ticket 248975 and create a fix.”</p> <p>(By the way, this is a high proportion of what actual real-world programmers do every day.)</p></li> <li><p>Glorified StackOverflow-style lookups like I did in <a href="/ongoing/When/202x/2025/07/01/First-AI-Code">My First GenAI Code</a>.</p></li> <li><p>Drafting code that needs to run against interfaces too big and complex to hold in your head, like for example the Android and AWS APIs (“When I shake the phone, grab the location from GPS and drop it in the <code>INCOMING</code> S3 bucket”). Or CSS (“Render that against a faded indigo background flush right, and hold it steady while scrolling so the text slides around it”).</p></li> <li><p>SQL. This feels like a no-brainer. So much klunky syntax and so many moving pieces.</p></li> </ul> <p>Where I suspect LLM output won’t help much.</p> <ul> <li><p>Interaction design. I mean, c’mon, it requires predicting how humans understand and behave.</p></li> <li><p>Low level infrastructure code, the kind I’ve spent my whole life on, where you care a whole lot about about conserving memory and finding sublinear algorithms and shrinking code paths and having good benchmarks.</p></li> </ul> <p>Here are areas where I don’t have a prediction but would like to know whether and how LLM fits in (or not).</p> <ul> <li><p>Help with testing: Writing unit and integration tests, keeping an eye on coverage, creating a bunch of BDD tests from a verbal description of what a function is going to do.</p></li> <li><p>Infrastructure as code: CI/CD, Terraform and peers, all that stuff. There are so many ways to get it wrong.</p></li> <li><p>Bad old-school concurrency that uses explicit mutexes and <code>java.lang.Thread</code> where you have to understand language memory models and suchlike.</p></li> </ul> <h2 id='p-7'>The real reason not to use GenAI</h2> <p>Because it’s being sold by a panoply of grifters and chancers and financial engineers who know that the world where their dreams come true would be generally shitty, and they don’t care.</p> <p>(Not to mention the environmental costs and the poor folk in the poor countries where the QA and safety work is outsourced.)</p> <p>Final prediction: After the air goes out of the assholes’ bubble, we won’t have to live in the world they imagine. Thank goodness.</p></div></content></entry> <entry> <title>C2PA Investigations</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/09/18/C2PA-Investigations' /> <link rel='replies' thr:count='5' type='application/xhtml+xml' href='/ongoing/When/202x/2025/09/18/C2PA-Investigations#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/09/18/C2PA-Investigations</id> <published>2025-09-18T12:00:00-07:00</published> <updated>2025-09-30T15:06:15-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Identity' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Identity' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>This is the blog version of my talk at the IPTC’s online <a href='https://iptc.org/events/photo-metadata-conference-2019/'>Photo Metadata Conference</a> conference. Its title is the one the conference organizers slapped on my session without asking; I was initially going to object but then I thought of the big guitar riff in Dire Straits’ <cite>Private Investigations</cite> and snickered. If you want, instead of reading, to watch me present, <a href='https://www.youtube.com/watch?si=BMfVGUQNcJOR1w2z&amp;t=1610&amp;v=wRjExw8OMUc&amp;feature=youtu.be'>that’s on YouTube</a>. Here we go</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>This is the blog version of my talk at the IPTC’s online <a href="https://iptc.org/events/photo-metadata-conference-2019/">Photo Metadata Conference</a> conference. Its title is the one the conference organizers slapped on my session without asking; I was initially going to object but then I thought of the big guitar riff in Dire Straits’ <cite>Private Investigations</cite> and snickered. If you want, instead of reading, to watch me present, <a href="https://www.youtube.com/watch?si=BMfVGUQNcJOR1w2z&t=1610&v=wRjExw8OMUc&feature=youtu.be">that’s on YouTube</a>. Here we go.</p> <p>Hi all, thanks for having me. Today I represent… nobody, <em>officially</em>. I’m not on any of the committees nor am I an employee of any of the providers. But I’m a photographer and software developer and social-media activist and have written a lot about C2PA. So under all those hats this is a subject I care about.</p> <p>Also, I posted this on Twitter back in 2017.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/2017-twitter.png" alt="Twitter post from 2017 presaging C2pA" /> <p>I’m not claiming that I was the first with this idea, but I’ve been thinking about the issues for quite a while.</p> <p>Enough self-introduction. Today I’m going to look at C2PA in practice right now in 2025. Then I’m going to talk about what I think it’s for. Let’s start with a picture.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/L1000004.png" alt="Picture of a shopping mall storefront" /> <div class='caption'><p>This smaller version doesn’t have C2PA,<br/>but if you click on it, the larger version you get does. <br/>Photo credit: Rob Pike</p></div> <p>I should start by saying that a few of the things that I’m going to show you are, umm, broken. But I’m still a C2PA fan. Bear in mind that at this point everything is beta or preview or whatever, at best v1.0. I think we’re in glass-half-full mode.</p> <p>This photo is entirely created and processed by off-the-shelf commercial products and has content credentials, and let me say that I had a freaking hard time finding such a photo. There are very few Content Credentials out there on the Internet. That’s because nearly every online photo is delivered either via social media or by professional publishing software. In both cases, the metadata is routinely stripped, bye-bye C2PA. So one of the big jobs facing us in putting Content Credentials to work is to stop publishers from deleting them.</p> <p>Of course, that’s complicated. Professional publishers probably want the Content Credentials in place, but on social media privacy is a key issue and stripping the metadata is arguably a good default choice. So there are a lot of policy discussions to be had up front of the software work.</p> <p>Anyhow, let’s look at the C2PA. </p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/ca-glyphs-1.png" alt="Picture with two Content Credentials glyphs and one drop-down" /> <p>I open up that picture in Chrome and there are little “Cr” glyphs at both the top left and top right corners; that’s because I’ve installed multiple C2PA Chrome plug-ins. Turns out these seem to only be available for Chrome, which is irritating. Anyhow, I’ve clicked on the one in the top left.</p> <p>That’s a little disappointing. It says the credentials were recorded by Lightroom, and gives my name, but I think it’s hiding way more than it’s revealing. Maybe the one on the top right will be more informative?</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/ca-glyphs-2.png" alt="Picture with two Content Credentials glyphs and one drop-down" /> <p>More or less the same info. A slightly richer presentation But both displays have an “inspect” button and both do the same thing. Let’s click it!</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/broken-inspector.png" alt="Content Credentials inspector page, failing to retrieve a page for review" /> <p>This is the Adobe Content Credentials inspector and it’s broken. That’s disappointing. Having said that, I was in a Discord chat with a senior Adobe person this morning and they’re aware of the problem.</p> <p>But anyhow, I can drag and drop the picture like they say.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/2-phase-c2pa.png" alt="Content credentials as displayed by the Inspector" /> <p>Much much better. It turns out that this picture was originally taken with a Leica M11-P. The photographer is a famous software guy named Rob Pike, who follows me on Mastodon and wanted to help out.</p> <p>So, thanks Rob, and thanks also to the Leica store in Sydney, Australia, who loaned him the M11. He hasn’t told me how he arranged that, but I’m curious.</p> <p>I edited it in Lightroom, and if you look close, you can see that I cropped it down and brightened it up. Let’s zoom in on the content credentials for the Leica image.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/leica-cc.png" alt="Leica-generated C2PA display" /> <p>There’s the camera model, the capture date (which is wrong because Rob didn’t get around to setting the camera’s date before he took the picture.) The additional hardware (R-Adapter-M), the dimensions, ISO, focal length, and shutter speed.</p> <p>Speaking as a photographer, this is kind of cool. There’s a problem in that it’s partly wrong. The focal length isn’t zero, and Rob is pretty sure he didn’t have an adapter on. But Leica is trying to do the right thing and they’ll get there.</p> <p>Now let’s look at the assertions that were added by Lightroom.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/lr-cc.png" alt="Lightroom-generated C2PA display" /> <p>There’s a lot of interesting stuff in here, particularly the provenance. Lightroom lets you manage your identities, using what we call “OAuth flows”, so it can ask Instagram (with my permission) what my Instagram ID is. It goes even further with LinkedIn; it turns out that LinkedIn has an integration with the Clear ID people, the ones who fast-track you at the airport. So I set up a Clear ID, which required photos of my passport, and went through the dance with LinkedIn to link it up, and then with Lightroom so it knew my LinkedIn ID. So to expand, what it’s really saying is: “Adobe says that LinkedIn says that Clear says that the government ID of the person who posted this says that he’s named Timothy Bray”.</p> <p>I don’t know about you, but this feels like pretty strong provenance medicine to me. I understand that the C2PA committee and the <a href="https://cawg.io">CAWG</a> people are re-working the provenance assertions. To them: Please don’t screw this particular style of provenance up.</p> <p>Now let’s look at what Lightroom says it did. It may be helpful to know what I in fact did.</p> <ol> <li><p>Cropped the picture down.</p></li> <li><p>Used Lightroom’s “Dehaze” tool because it looked a little cloudy.</p></li> <li><p>Adjusted the exposure and contrast, and boosted the blacks a bit.</p></li> <li><p>Sharpened it up.</p></li> </ol> <p>Lightroom knows what I did, and you might wonder how it got from those facts to that relatively content-free description that reads like it was written by lawyers. Anyhow, I’d like to know. Since I’m a computer geek, I used the open-source “c2patool” to dump what the assertions actually are. I apologize if this hurts your eyes.</p> <p>It turns out that there is way more data in those files than the inspector shows. For example, the Leica claims included 29 EXIF values, here are three I selected more or less at random:</p> <div class="highlight"><pre><span></span><span class="p"></span><span class="w"> </span><span class="nt">"exif:ApertureValue"</span><span class="p">:</span><span class="w"> </span><span class="s2">"2.79917"</span><span class="p">,</span><span class="w"> </span><span class="nt">"exif:BitsPerSample"</span><span class="p">:</span><span class="w"> </span><span class="s2">"16"</span><span class="p">,</span><span class="w"> </span><span class="nt">"exif:BodySerialNumber"</span><span class="p">:</span><span class="w"> </span><span class="s2">"6006238"</span><span class="p">,</span></pre></div> <p>Some of these are interesting: In the Leica claims, the serial number. I could see that as a useful provenance claim. Or as a potentially lethal privacy risk. Hmmm.</p> <div class="highlight"><pre><span></span><span class="p"></span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"c2pa.color_adjustments"</span><span class="p">,</span><span class="w"> </span><span class="nt">"parameters"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"c2pa.color_adjustments"</span><span class="p">,</span><span class="w"> </span><span class="nt">"parameters"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"com.adobe.acr.value"</span><span class="p">:</span><span class="w"> </span><span class="s2">"60"</span><span class="p">,</span><span class="w"> </span><span class="nt">"com.adobe.acr"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Exposure2012"</span><span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="p">},</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"c2pa.color_adjustments"</span><span class="p">,</span><span class="w"> </span><span class="nt">"parameters"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"com.adobe.acr"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Sharpness"</span><span class="p">,</span><span class="w"> </span><span class="nt">"com.adobe.acr.value"</span><span class="p">:</span><span class="w"> </span><span class="s2">"52"</span><span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="p">},</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"c2pa.cropped"</span><span class="p">,</span><span class="w"> </span><span class="nt">"parameters"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nt">"com.adobe.acr.value"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Rotated Crop"</span><span class="p">,</span><span class="w"> </span><span class="nt">"com.adobe.acr"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Crop"</span><span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="p">}</span></pre></div> <p>And in the Lightroom section, it actually shows exactly what I did, see the sharpness and exposure values.</p> <p>My feeling is that the inspector is doing either too much or too little. At the minimal end you could just say “hand processed? Yes/No” and “genAI? Yes/No”. For a photo professional, they might like to drill down and see what I actually did. I don’t see who would find the existing presentation useful. There’s clearly work to do in this space.</p> <p>Oh wait, did I just say “AI”? Yes, yes I did. Let’s look at another picture, in this case a lousy picture.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/TXT55638.png" alt="Picture of an under-construction high-rise behind leaves" /> <p>I was out for a walk and thought the building behind the tree was interesting. I was disappointed when I pulled it up on the screen, but I still liked the shape and decided to try and save it.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/TXT55638-good.png" alt="Picture of an under-construction high-rise behind leaves, improved" /> <p>So I used Lightroom’s “Select Sky” to recover its color, and “Select Subject” to pull the building details out of the shadows. Both of these Lightroom features, which are pretty magic and I use all the time, are billed as being AI-based. I believe it.</p> <p>Let’s look at what the C2PA discloses.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/lr-tower.png" alt="Lightroom C2PA assertions with automation AI" /> <p>Having said all that, if you look at the C2PA (or at the data behind it) Lightroom discloses only “Color or Exposure”, “Cropping”, and “Drawing” edits. Nothing about AI.</p> <p>Hmm. Is that OK? I personally think it is, and highlights the distinction between what I’d call “automation” AI and Generative AI. I mean, selecting the sky and subject is something that a skilled Photoshop user could accomplish with a lot of tinkering, the software is just speeding things up. But I don’t know, others might disagree.</p> <p>Well, how about that generative AI?</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/chatgpt.png" alt="Turtle in shallow water, generated by ChatGPT" /> <div class='caption'><p>Fails <code>c2patool</code> validation, “DigitalSourceType” is <code>trainedAlgorithmicMedia</code></p></div> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/budai.png" alt="Desktop with decorations, Magic Erase has been applied" /> <div class='caption'><p>“DigitalSourceType” is <code>compositeWithTrainedAlgorithmicMedia</code></p></div> <p>The turtle is 100% synthetic, from ChatGPT, and on the right is a Pixel 10 shot on which I did a few edits including “Magic Eraser”. Both of these came with Content Credentials; chatGPT’s is actually invalid, but on the glass-half-full front, the Pixel 10’s were also invalid up until a few days ago, then they fixed it. So this stuff does get fixed.</p> <p>I’m happy about the consistent use of C2PA terminology, they are clearly marking the images as genAI-involved.</p> <p>I’m about done talking about the state of the Content Credentials art generally but I should probably talk about this device.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/pixel-10.png" alt="Blue Pixel 10" /> <p>Because it marks the arrival of Content Credentials on the mass consumer market. Nobody knows how many Pixels Google actually sells but I guarantee it’s a lot more than Leica sells M11’s. And since Samsung tends to follow Google pretty closely, we’re heading for tens then hundreds of millions of C2PA-generating mobile devices. I wonder when Apple will climb on board?</p> <p>Let’s have a look at that C2PA.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/p10-c2pa.png" alt="C2PA associated with Magic Eraser image" /> <p>This view of the C2PA is from the Google Photos app. It’s very limited. In particular, there is nothing in there to support provenance. In fact, it’s the opposite, Google is bending over backward to avoid anything that could be interpreted as breaking the privacy contract by sharing information about the user.</p> <p>Let’s pull back the covers and dig a little deeper. Here are a few notes</p> <ul> <li><p>The device is identified just as “Pixel camera”. There are lots of different kinds of those!</p></li> <li><p>The C2PA inclusion is Not optional!</p></li> <li><p>DigitalSourceType: <code>computationalCapture</code>
(if no genAI)</p></li> <li><p>Timestamp is “untrusted”</p></li> </ul> <p>The C2PA not being optional removes a lot of UI issues but still, well, I’m not smart enough to have fully thought through the implications. That Digital Source Type looks good and appropriate, and the untrusted-ness of the timestamp is interesting.</p> <p>You notice that my full-workflow examples featured a Leica rather than the Pixel, and that’s because the toolchain is currently broken for me: Neither Lightroom nor Photoshop can handle the P10 C2PA. I’ll skip the details, except to say that Adobe is aware of the bug, a version mismatch, and they say they’re working on it.</p> <p>Before we leave the Pixel 10, I should say that there are plenty of alternate camera apps in Android and iOS, some quite good, and it’d be perfectly possible for them to ship much richer C2PA, notably including provenance, location, and so on.</p> <p>I guess that concludes my look at the current state of the Content Credentials art. Now I’d like to talk about what Content Credentials are for. To start with, I think it’d be helpful to sort the assertions into three baskets.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/3-baskets-1.png" alt="C2PA assertions in Capture, Processing, and Provenance baskets" /> <p>Capture, that’s like that Leica EXIF stuff we showed earlier. What kind of camera and lens, what the shooting parameters were. Processing, that’s like the Lightroom report: How was the image manipulated, and by what software. Provenance: Which person or organization produced this?</p> <p>But I think this picture has an important oversimplification, let me fix that.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/3-baskets-2.png" alt="C2PA assertion baskets with the addition of GenAI" /> <p>Processing is logically where you’d disclose the presence of GenAI. And in terms of what people practically care about, that’s super important and deserves special consideration.</p> <p>Now I’m going to leave the realm of facts and give you opinions. As for the Capture data there on the left… who cares? Really, I’m trying to imagine a scenario in which anyone cares about the camera or lens or F stop. I guess there’s an exception if you want to prove that the photo was taken by one of Annie Liebowitz’s cameras, but that’s really provenance.</p> <p>Let’s think about a professional publication scenario. They get photos from photographers, employees or agencies or whatever. They might want to be really sure that the photo was from the photographer and not an imposter. So having C2PA provenance would be nice. Then when the publisher gets photos, they do a routine check of the provenance and if it doesn’t check out, they don’t run the picture without a close look first.</p> <p>They also probably want to check for the “is there genAI?” indicator in the C2PA, and, well, I don’t know what they might do, but I’m pretty sure they’d want to know.</p> <p>That same publisher might want to equip the photos they publish with C2PA, to demonstrate that they are really the ones who chose and provided the media. That assertion should be applied routinely by their content management system. Which should be easy, on the technology side anyhow.</p> <p>So from the point of view of a professional publisher, provenance matters, and being careful about GenAI matters, and in the C2PA domain, I think that’s all that really matters.</p> <p>Now let’s turn to Social Media, which is the source of most of the images that most people see most days. Today, all the networks strip all the photo metadata, and that decision involves a lot of complicated privacy and intellectual-property thinking. But there is one important FACT that they know: For any new piece of media, they know which account uploaded the damn thing, because that account owner had to log in to do it. So I think it’s a no-brainer that IF THE USER WISHES, they can have a Content Credentials assertion in the photo saying “Initially uploaded by Tim Bray at LinkedIn” or whoever at wherever.</p> <p>What we’d like to achieve is that if you see some shocking or controversial media, you’d really want to know who originally posted it before you decided whether you believed it, and if Content Credentials are absent, that’s a big red flag. And if the picture is of the current situation in Gaza, your reaction might be different depending on whether it was originally from an Israeli military social-media account, or the Popular Front for the Liberation of Palestine, or by the BBC, or by igor282356057@popular.online.</p> <p>Anyhow, here’s how I see it:</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/18/3-baskets-3.png" alt="C2PA assertion baskets inflated according to their relative importance" /> <p>So for me, it’s the P and A in C2PA that matter – provenance and authenticity. I think the technology has the potential to change the global Internet conversation for the better, by making it harder for liars to lie and easier for truth-tellers to be believed. I think the first steps that have been taken so far are broadly correct and the path forward is reasonably clear. All the little things that are broken, we can fix ’em.</p> <p>And there aren’t that many things that matter more than promoting truth and discouraging lies.</p> <p>And that’s all, folks.</p></div></content></entry> <entry> <title>Maritime Wrap-up</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/09/13/Maritime-Wrap' /> <link rel='replies' thr:count='3' type='application/xhtml+xml' href='/ongoing/When/202x/2025/09/13/Maritime-Wrap#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/09/13/Maritime-Wrap</id> <published>2025-09-13T12:00:00-07:00</published> <updated>2025-09-15T22:22:33-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Places/Maritimes' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Places' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Maritimes' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Only a few more pictures to share from <a href='/ongoing/When/202x/2025/08/27/Maritime-Vacation'>our vacation</a>, which I’ll wrap up in conventional tourism advice</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Only a few more pictures to share from <a href="/ongoing/When/202x/2025/08/27/Maritime-Vacation">our vacation</a>, which I’ll wrap up in conventional tourism advice.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55876.png" alt="Looking down off a cliff at a tiny boat far below" /> <div class='caption'><p>It’s mostly about the oceanfront, and what you can see from it.</p></div> <h2 id='p-1'>Food and drink</h2> <p>I recommend all of the following.</p> <p><a href="https://www.schoolhousebrewery.ca">Schoolhouse Brewery</a> in Windsor, NS; nice space, decent food, the Vice Principal is a good IPA. Maybe the beer that I enjoyed most was “Exile on North Street” from <a href="https://unfuckingfiltered.com/beer/">unfiltered brewing</a>; you might want to follow that link and also check out the URL.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/PXL_20250815_230941783.png" alt="sunset through grasses" /> <p>I didn’t love Halifax that much but it has this charming little neighborhood called <a href="https://en.wikipedia.org/wiki/Hydrostone">Hydrostone</a>, where <a href="https://www.thebrownhound.ca">The Brown Hound</a> offered very solid food and beer. We didn’t spend that much time in New Brunswick, but Moncton’s <a href="https://www.pumphousebrewpub.ca">Pump House</a> was cheery and competent; a cool space; I can’t remember which of their IPAs I had, but it was good. The other peak New Brunswick goodness was <a href="https://www.adorablechocolat.ca">Adorable Chocolat</a> in Shediac, where everyone was effortlessly bilingual and the pastries just divine. Don’t miss it if you’re anywhere near.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55910.png" alt="Cape Breton coastline, people swimming, houses on the slopes" /> <div class='caption'><p>People live by the sea, and swim in it.</p></div> <p>Charlottetown’s not that rich in dining options, but got a really excellent lunch at <a href="https://www.thecorkandcast.com">The Cork & Cast</a>. Maybe our best meal of the trip was at <a href="https://wheelhouseseafoodpasta.ca/menu#SEAFOOD">The Wheelhouse</a>, in Digby. Scallops all around, seared is the best option. </p> <h2 id='p-5'>Cities, towns, and other tourists</h2> <p>Every good tourist spot in the world seems to suffer from increasingly intense and persistent overcrowding, and the Maritimes are no exception. On top of which, they’re thinly populated, fewer than two million souls in three provinces. The biggest city, Halifax (and the entire province of Prince Edward Island) are both smaller than individual Vancouver suburbs. It’s not a place for savouring urban flavors.</p> <p>In Nova Scotia, Halifax has too many cruise ships; stay away from its so-called “farmers market” unless you love cruise culture. Lunenberg is big enough to soak up its waves of visitors and still offer unique visuals.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55847.png" alt="Tourists at Peggy’s Cove" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55848.png" alt="The cove at Peggy’s Cove" /> <div class='caption'><p>Overcrowded but has nice bits.</p></div> <p>Peggy’s Cove I just can’t recommend; beautiful but jam-packed with cars looking for parking and people risking their lives on the rocks.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/PXL_20250822_163228719.png" alt="Fort Anne in Annapolis Royal" /> <div class='caption'><p>These were once defences but now just a pleasant walk.</p></div> <p>I do recommend visiting <a href="https://en.wikipedia.org/wiki/Annapolis_Royal">Annapolis Royal</a>; it’s got that great garden and Fort Anne, despite its lengthy and chequered military history, is lovely and peaceful.</p> <p>In PEI, Charlottetown makes an effort and it has a beautiful basilica, but just isn’t big enough to reward a whole day’s visit.</p> <p>In NB, Moncton is OK but its biggest tourist attraction is the tide going in and out.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55961.png" alt="Crowded tidal flat at Hopewell Provincial Park" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT55966.png" alt="Clifftop forest at Hopewell Provincial Park" /> <div class='caption'><p>Hopewell Provincial Park, NB. The clifftop trees are exceptional.</p></div> <h2 id='p-3'>Lodging</h2> <p>The hotels and Airbnbs and VRBOs were OK, mostly. The <a href="https://www.theharbourviewinn.com">Harbourview Inn</a>, near Digby, is a charmingly-traditional guest-house. The rooms are OK, but the downstairs is warmly welcoming, drinks available when the host’s there to man the bar, lots of space to sink into a comfy chair and conversation or your laptop. Also the breakfast was solid.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/PXL_20250813_113114060.png" alt="Sky drama over Lake Ainsley" /> <div class='caption'><p>Excited clouds over Lake Ainsley, NS.</p></div> <p>But the trip’s lodging highlight was this VRBO called <a href="https://www.vrbo.com/en-ca/cottage-rental/p9830781">Forest Lake House</a> on Lake Ainsley, the Maritimes’ biggest. Isolated, comfortable, outstanding grounds, your own private forest walk; everything anyone could want. We stopped traveling and had a chill-out day there, enjoying every minute of it.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/PXL_20250817_152127492.png" alt="Swimming at Cavendish, PEI" /> <div class='caption'><p>Lots of people but plenty at room at Cavendish beach.</p></div> <h2 id='p-4'>Otherwise</h2> <p>We only swam once, at Cavendish Beach in PEI’s Anne of Green Gables territory, very nicely set up. But what looked most appealing to me was <a href="https://www.lockeport.ns.ca/index.php/tourism-recreation/crescent-beach-vic">Crescent Beach</a> in Lockeport, Nova Scotia; I wish we’d made time to have a swim there.</p> <p>Turns out all three vacationers had farming or agriculture-adjacent roots. If you care about that stuff, driving around PEI is a treat; the agriculture is super-intensive and, to my eye, pleasingly well-done.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT56060.png" alt="A farm field with hay bales by the seaside" /> <div class='caption'><p>The farmlands extend to the seaside.</p></div> <p>But if you have the time, get away from PEI’s farms and head northwest, drive down the coast from Tignish to West Point; that ride is full of colors and sea-fronts that aren’t like anywhere else I’ve seen.</p> <p>Since it’s the New World there’s plenty of nasty history around the indigenous folk, the <a href="https://en.wikipedia.org/wiki/Mi%27kmaq">Mi'kmaq</a> nation. But you really have to look to find it. We visited the <a href="https://www.millbrookheritagecentre.ca">Millbrook Cultural & Heritage Centre</a> in Truro, which is much better than nothing.</p> <p>You gotta drive; we put 3,742km on a basic rented Kia. The roads are way better taken care of than here out West.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT56014.png" alt="Maritime sunset" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/PXL_20250824_214226484.png" alt="The ocean near Liverpool, NS" /> <div class='caption'><p>Bye-bye, Maritimes.</p></div> <p>We didn’t run across a single human Maritimer who was anything less than friendly and welcoming.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/13/TXT56069.png" alt="A white house perched on rocks above the sea-side" /> <p>Nice people living along beautiful oceanfronts, plenty good enough for me.</p></div></content></entry> <entry> <title>Maritime Colors</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/09/01/Maritime-Colors' /> <link rel='replies' thr:count='1' type='application/xhtml+xml' href='/ongoing/When/202x/2025/09/01/Maritime-Colors#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/09/01/Maritime-Colors</id> <published>2025-09-01T12:00:00-07:00</published> <updated>2025-09-05T22:48:59-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Places/Maritimes' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Places' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Maritimes' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts/Photos/Cameras' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Photos' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Cameras' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>When someone (<a href='/ongoing/When/202x/2025/08/27/Maritime-Vacation'>like us</a>) comes back from a trip to the Maritimes, they’re apt to have pictures of brightly-colored houses. This is to show those colors off and not just in houses. Plus a camera color conundrum</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>When someone (<a href="/ongoing/When/202x/2025/08/27/Maritime-Vacation">like us</a>) comes back from a trip to the Maritimes, they’re apt to have pictures of brightly-colored houses. This is to show those colors off and not just in houses. Plus a camera color conundrum.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/TXT55945.png" alt="A trailer park with small building covered by bright colored fenders" /> <div class='caption'><p>On the northwest coast of PEI, probably near Cape Wolfe.</p></div> <p>In that picture above, glance at the bit of beach showing left of the little lighthouse. There’s a color story there too.</p> <h2 id='p-1'>Residentials</h2> <p>As it happens, our very first outing on the vacation was to <a href="https://en.wikipedia.org/wiki/Lunenburg,_Nova_Scotia">Lunenberg</a>, which features those cheerful houses.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/TXT55826.png" alt="Brightly colored houses in Lunenberg" /> <p>It wasn’t just tourist magnets like Lunenberg; anywhere in the Maritimes you’re apt to see exuberantly-painted residences, a practice I admire. While the Maritimes are a long way from my home in Vancouver, we share a long, dim, grey winter, and any splash of color can help with that Seasonal Affective Disorder.</p> <p>Also, we <a href="/ongoing/When/202x/2025/02/28/Moved">recently bought a house</a> and, while we like it, it’s an undistinguished near-grey, so we’re looking for color schemes to steal. Thus I took lots of pictures of bright houses.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/PXL_20250822_180516990.png" alt="Apricot-and-brown house" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/TXT55828.png" alt="Blue house in Lunenberg" /> <p>A couple years back we painted our cabin a cheery blue based on sampling photos of the shutters on Mykonos. A few neighbors rolled their eyes but nobody’s actually complained.</p> <h2 id='p-2'>Red</h2> <p>That’s the other color you have to talk about down east; I mean the color of the soil and sand and rocks. PEI in particular is famous for its red dirt, when you come in the on the ferry from Nova Scotia the first thing you notice is the island’s red fringe. I took a million pictures and maybe this is the closest to capturing it.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/TXT55948.png" alt="Red sand and dirt on a PEI beachfront" /> <div class='caption'><p>Not far from that first picture.</p></div> <h2 id='p-3'>Green Conundrum</h2> <p>One of Nova Scotia’s attractions is the <a href="https://en.wikipedia.org/wiki/Cabot_Trail">Cabot Trail</a>, a 300km loop around Cape Breton, stretching northeast out into the Atlantic. This one scenic turn-off has you looking at a big, densely-forested mountainside. It’s more chaotic than our West-Coast temperate rain forests, with many tree species jumbled together. The spectrum of greens under shifting clouds was a real treat for the eyes. Here are two of the pictures I came away with. Have a look at them for a moment.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/PXL_20250813_161053505.png" alt="Forested mountainside" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/09/01/TXT55881.png" alt="Forested mountainside" /> <p>Above is by my Pixel 7, below a modern Fujifilm camera. When I unloaded them on the big outboard screen, I was disappointed with the Fujifilm take, which seemed a little flat and boring; was thinking the Pixel had done better. But then I started feeling uneasy; my memory kept telling me that that mountainside just didn’t include that yellow flavor in the Pixel’s highlights. I mean, those highlights look great, but I’m pretty sure they’re lies.</p> <p>After a while, I edited the Fujifilm version just a teeny bit, gently bumping Lightroom’s “exposure” and “Vibrance” sliders, and I thought what I got was very close to what I remembered. The Pixel photo is entirely un-touched.</p> <p>I’m not sure what to think. Mobile-phone cameras in general and the Pixel in particular proudly boast their “computational photography” and “AI” chops and, yeah, the Pixel produced a photo that it’s hard not to like.</p> <p>And quite a few of the pictures I publish in this space have have been adjusted pretty heavily in Lightroom. I stand by my claim that I’m mostly trying to make something that looks like what I saw. But increasingly, I suspect the Pixel is showing colors people like, as opposed to what’s real.</p></div></content></entry> <entry> <title>Maritime Birds and Bees</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/08/30/Maritime-Wildlife' /> <link rel='replies' thr:count='0' type='application/xhtml+xml' href='/ongoing/When/202x/2025/08/30/Maritime-Wildlife#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/08/30/Maritime-Wildlife</id> <published>2025-08-30T12:00:00-07:00</published> <updated>2025-08-31T09:05:08-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Places/Maritimes' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Places' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Maritimes' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Nova Scotia and New Brunswick each have plenty of wilderness; PEI not so much. So pictures of bears and cougars and so on would be plausible, as would marine mammals. But no. Herewith, from our <a href='/ongoing/When/202x/2025/08/27/Maritime-Vacation'>recent vacation</a>, birds and bees, with a little lens-geek side trip</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Nova Scotia and New Brunswick each have plenty of wilderness; PEI not so much. So pictures of bears and cougars and so on would be plausible, as would marine mammals. But no. Herewith, from our <a href="/ongoing/When/202x/2025/08/27/Maritime-Vacation">recent vacation</a>, birds and bees, with a little lens-geek side trip.</p> <h2 id='p-1'>Birds</h2> <p>Having touristed around Charlottetown, we drove down a series of smaller and smaller back roads and ended up at Canceaux Cove near Rocky Point, which I thought might present a nice vista of the city. It did, but the city looks boring. By way of consolation, there were these cute little birds running around on the beach and then flying loops in formation over the water.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT55982.png" alt="Small birds on a beach" /> <div class='caption'><p>Pretty sure these are <a href="https://en.wikipedia.org/wiki/Semipalmated_plover">Semipalmated plovers</a>.</p></div> <p>I wanted to get a picture of them in the air so I sauntered down the beach, assuming they’d fly away picturesquely. They studiously ignored me and eventually I had to jump and down and wave my arms and even then they took off grudgingly.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT55984.png" alt="small birds flying over the ocean" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT55987.png" alt="small birds flying over the ocean" /> <p>They were graceful and did this mysterious thing that birds can do, staying in formation with no obvious leader. I’ve had the pleasure, very occasionally, of being in engineering teams like that.</p> <h2 id='p-2'>Bees</h2> <p>We went to <a href="https://en.wikipedia.org/wiki/Annapolis_Royal">Annapolis Royal</a> because of its <a href="https://historicgardens.wordpress.com">Historic Gardens</a> and wow, what a treat. I think even those who don’t see themselves as garden fans would enjoy an hour or more sauntering around in there. I like taking pictures of flowers and a lot of these flowers had bees in them.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56034-2.png" alt="Three orange flowers, one with bee" /> <p>This one was cute enough to reward a close-up.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56034.png" alt="Close-up of bee in orange flower." /> <div class='caption'><p>Aren’t her wings cute?</p></div> <p>And I ask, what could be better than a cute bee in a pretty flower? Obviously, <em>two</em> bees.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56040.png" alt="Two bees in an orange flower" /> <p>And again, a closer look.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56040-2.png" alt="Two bees in an orange flower, close-up" /> <p>Bees are admirable creatures and I don’t want to make fun of them, but this surprised-looking little citizen makes me laugh. (She’s just navigating from one blossom to the next.)</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56045.png" alt="bee caught in flight among the blossoms" /> <h2 id='p-3'>Lens</h2> <p>All of these are shot with Fujifilm’s <a href="https://www.fujifilm-x.com/en-ca/products/lenses/xf55-200mmf35-48-r-lm-ois/">55-200mm</a> lens, which I’ve had for at least eleven years. Up till now, I’ve always pointed it at faraway things, but wow, I think I’ll be taking this to more gardens in future.</p> <p>I mention the lens partly so I can link to this <a href="https://www.lensrentals.com/blog/2016/02/the-long-awaited-scary-and-amazing-fuji-lens-teardown/?srsltid=AfmBOorQfgob6drIXwtTJ9xuixBbnSvZE2F8x7Jba0AA3U60uoFAB3gY">awesome (and funny) teardown piece</a> from Lensrentals.</p> <p>And, on the way out, let’s let that lens show off with a couple of roses.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56057.png" alt="Yellow rose and bud" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/30/TXT56058.png" alt="Pink roses, black background" /> <p>Remember, pink and black are the colors of rock & roll. And if you’re anywhere near Annapolis Royal, stop and visit that garden.</p></div></content></entry> <entry> <title>Maritime Vacation</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/08/27/Maritime-Vacation' /> <link rel='replies' thr:count='0' type='application/xhtml+xml' href='/ongoing/When/202x/2025/08/27/Maritime-Vacation#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/08/27/Maritime-Vacation</id> <published>2025-08-27T12:00:00-07:00</published> <updated>2025-08-28T12:36:15-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Places/Maritimes' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Places' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Maritimes' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>The sound of the wind surging through birchy Eastern woods isn’t like the same coastal gusts in my own Pacific rain forest; around you not above you, alto not baritone. The colors differ too: Forests, houses, soil, and sea. And everywhere little white churches, each with its cemetery. A scattering of forts, far too many cannons. And everything faces the sea</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>The sound of the wind surging through birchy Eastern woods isn’t like the same coastal gusts in my own Pacific rain forest; around you not above you, alto not baritone. The colors differ too: Forests, houses, soil, and sea. And everywhere little white churches, each with its cemetery. A scattering of forts, far too many cannons. And everything faces the sea.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/PXL_20250814_142523016.png" alt="Cape Breton forest" /> <div class='caption'><p>Birchy Cape Breton forest.</p></div> <p>For the first time since Covid and, more important, since Lauren’s 2½-year battle with Long Covid, we went on the road for pleasure; Lauren and I and our dear friend Sally from Warragul, Australia. To my shame, all my decades’ travel had never taken me to Canada east of Montreal, so we spent a couple of weeks poking around Nova Scotia and Prince Edward Island, plus a bit of New Brunswick. I took many pictures and it’ll take a few blog pieces to share those that I think deserve it.</p> <p>No part of Canada’s settler culture is old by European or Asian standards, but ten generations of white people lived and died here before the first rough town organized itself near what’s now Vancouver. They had to be buried someplace, thus the graveyards everywhere you go. These were captured near Whycocomagh.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT55871.png" alt="Gravestone of Lillian S. DeWolfe, 1876-1958" /> <div class='caption'><p>Lillian S. DeWolfe, Oct 1876 Sept 1958.</p></div> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT55874.png" alt="A simple grave marker saying only “sleeping”" /> <p>How long will it still matter that my hometown is one of the world’s youngest big cities?</p> <p>Many graveyards are church attachments, but many more greet you at a random turn in the road; always framed by forest. The density of churches is remarkable; all built of wood, mostly white, mostly well-kept. This one was attached to the graves above and is untypically faded (but lovely inside).</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT55869.png" alt="Square white wooden church, it needs a paint job" /> <p>Some of the churches have become boutiques and breweries, but those that haven’t still occur more densely than in any other New World jurisdiction I’ve seen. Why should faith hold stronger down East?</p> <p>Another church, St Dunstan’s Basilica in Charlottetown, offered perhaps the most intense experience of the whole trip, because a singer and organist were practicing elaborate hymn treatments. Both were great, the organ is a magnificent Casavant, and parish organist <a href="https://en.wikipedia.org/wiki/Leo_Marchildon">Leo Marchildon</a> was having fun, putting lots of wind through those pipes including the 32’ bass monsters. My ears and I were smiling when we left.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT55925.png" alt="Stained glass in St. Dunstan’s Basilica, Charlottetown" /> <div class='caption'><p>The stained glass is nothing special<br/>but I liked the opened panes at the bottom.</p></div> <p>Forts and cannons, I said; the Maritimes’ messy history included repeated captures and recaptures by the forces of France and Britain and the USA, and quite a few of the forts had been put to their intended use, repelling or falling to one invader or another.</p> <p>The locals, at least the ones who set things up for tourists, seem to take their history seriously; I don’t pretend expertise or even much interest in it, but I have to say that some cannons have good typography.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/PXL_20250824_214613137.png" alt="Engraving on metal: Crown and “VR”" /> <div class='caption'><p>“VR” is Victoria Regina of course,<br/>so sometime in the second half of the 19<sup>th</sup> century.</p></div> <p>The colors are different, and an entry later in this series will dip in gleefully and give me a platform for camera geekery. One expects changes in houses and vegetation when you travel four timezones away, but nothing prepared me for the shockingly red soil in Prince Edward Island (hereinafter PEI).</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT55937.png" alt="red and blue see, red soil, wind turbines" /> <div class='caption'><p>Past Tignish at PEI’s northern extremity,<br/>well off the paved-roads part.</p></div> <p>I opened with words about everything facing the sea. Not entirely true, sometimes you’re looking at a lake.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/PXL_20250823_162017189.png" alt="Kids in a large calm lake, circular ripples" /> <div class='caption'><p>Those kids don’t know how lucky they are.</p></div> <p>This is in the wonderful Kejimkujik National Park in central Nova Scotia, mostly closed due to extreme wildfire peril.</p> <p>All across the Maritimes, drought was in effect; crops failing, forest trails closed. Which reminds me; near that lake there was a birch-bark-canoe workshop. I asked the guy making the canoe how long it took. He said “My great-grandpa could do it in seven days, because back then there were birch trees big enough that you could make the whole hull out of a single piece.” It’s very difficult to find any aspect of life on earth that isn’t exhibiting Anthropocene damage.</p> <p>Usually, it’s the sea that you’re looking at.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/TXT56066.png" alt="Nova Scotia coastline near Annapolis Royal" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/PXL_20250822_223613924.png" alt="rocky beach at low tide" /> <div class='caption'><p>Above, coastline near Annapolis Royal.<br/>Below, low tide near Chipman Brook.</p></div> <p>From one end of Canada to the other; to me, the surprise was not so much the difference in the landscapes but the similarity of the people; they spoke my accent, shopped in my stores, obeyed my road signs. More on that later. For now, this.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/08/27/PXL_20250825_141305938.png" alt="Trees frame the seawater and a couple of oceanfront houses" /> <div class='caption'><p>On Bell Island, among the LaHaves.</p></div></div></content></entry> <entry> <title>RFC 9839 and Bad Unicode</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/08/14/RFC9839' /> <link rel='replies' thr:count='3' type='application/xhtml+xml' href='/ongoing/When/202x/2025/08/14/RFC9839#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/08/14/RFC9839</id> <published>2025-08-14T12:00:00-07:00</published> <updated>2025-08-23T03:17:06-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Text' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Text' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Unicode is good. If you’re designing a data structure or protocol that has text fields, they should contain Unicode characters encoded in UTF-8. There’s another question, though: “<em>Which</em> Unicode characters?” The answer is “Not all of them, please exclude some.”</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Unicode is good. If you’re designing a data structure or protocol that has text fields, they should contain Unicode characters encoded in UTF-8. There’s another question, though: “<em>Which</em> Unicode characters?” The answer is “Not all of them, please exclude some.”</p> <p>This issue keeps coming up, so Paul Hoffman and I put together an individual-submission draft to the IETF and now (where by “now” I mean “two years later”) it’s been published as <a href="https://www.rfc-editor.org/rfc/rfc9839.html">RFC 9839</a>. It explains which characters are bad, and why, then offers three plausible less-bad subsets that you might want to use. Herewith a bit of background, but…</p> <h2 id='p-2'>Please</h2> <p>If you’re actually working on something new that will have text fields, please read the RFC. It’s only ten pages long, and that’s with all the IETF boilerplate. It’s written specifically for software and networking people.</p> <h2 id='p-3'>The smoking gun</h2> <p>The badness that 9839 focuses on is “problematic characters”, so let’s start with a painful example of what that means. Suppose you’re designing a protocol that uses JSON and one of your constructs has a <code>username</code> field. Suppose you get this message (I omit all the non-<code>username</code> fields). It’s a perfectly legal JSON text:</p> <div class="highlight"><pre><span></span><span class="p">{</span> <span class="w"> </span><span class="nt">"username"</span><span class="p">:</span><span class="w"> </span><span class="s2">"\u0000\u0089\uDEAD\uD9BF\uDFFF"</span><span class="p">}</span> </pre></div> <p>Unpacking all the JSON escaping gibberish reveals that the value of the <code>username</code> field contains four numeric “code points” identifying Unicode characters:</p> <ol> <li><p>The first code point is zero, in Unicode jargon <code>U+0000</code>. In human-readable text it has no meaning, but it will interfere with the operation of certain programming languages.</p></li> <li><p>Next is Unicode <code>U+0089</code>, official name “CHARACTER TABULATION WITH JUSTIFICATION”. It’s what Unicode calls a <a href="https://en.wikipedia.org/wiki/C0_and_C1_control_codes">C1 control code</a>, inherited from ISO/IEC 6429:1992, adopted from <a href="https://www.ecma-international.org/wp-content/uploads/ECMA-48_5th_edition_june_1991.pdf">ECMA 48</a> (1991), which calls it “HTJ” and says: <i>HTJ causes the contents of the active field (the field in the presentation component that contains the active presentation position) to be shifted forward so that it ends at the character position preceding the following character tabulation stop. The active presentation position is moved to that following character tabulation stop. The character positions which precede the beginning of the shifted string are put into the erased state.</i></p> <p>Good luck with that.</p></li> <li><p>The third code point, <code>U+DEAD</code>, in Unicode lingo, is an “unpaired surrogate”. To understand, you’d have to learn how Unicode’s much-detested <a href="https://en.wikipedia.org/wiki/UTF-16">UTF-16</a> encoding works. I recommend not bothering.</p> <p>All you need to know is that surrogates are only meaningful when they come in pairs in UTF-16 encoded text. There is effectively no such text on the wire and thus no excuse for tolerating surrogates in your data. In fact, the UTF-8 specification says that you mustn’t use UTF-8 to encode surrogates. But the real problem is that different libraries in different programming languages don’t always do the same things when they encounter this sort of fœtid interloper.</p> </li> <li><p>Finally, <code>\uD9BF\uDFFF</code> is JSON for the code point <code>U+7FFFF</code>. Unicode has a category called “noncharacter”, containing a few dozen code points that, for a variety of reasons, some good, don’t represent anything and must not be interchanged on the wire. <code>U+7FFFF</code> is one of those.</p></li> </ol> <p>The four code points in the example are all clearly problematic. The just-arrived RFC 9839 formalizes the notion of “problematic” and offers easy-to-cite language saying which of these problematic types you want to exclude from your text fields. Which, if you’re going to use JSON, you should probably do.</p> <h2 id='p-6'>Don’t blame Doug</h2> <p>Doug Crockford I mean, the inventor of JSON. If he (or I or really anyone careful) were inventing JSON now that Unicode is mature, he’d have been fussier about its character repertoire. Having said that, we’re stuck with JSON-as-it-is forever, so we need a good way to say which of the problematic characters we’re going to exclude even if JSON allows them.</p> <h2 id='p-5'>PRECISion</h2> <p>You may find yourself wondering why the IETF waited until 2025 to provide help with Bad Unicode. It didn’t; here’s <a href="https://www.rfc-editor.org/rfc/rfc8264.html">RFC 8264</a>: <cite>PRECIS Framework: Preparation, Enforcement, and Comparison of Internationalized Strings in Application Protocols</cite>; the first PRECIS predecessor was published in 2002. 8264 is 43 pages long, containing a <em>very</em> thorough discussion of many more potential Bad Unicode issues than 9839 does.</p> <p>Like 9839, PRECIS specifies subsets of the Unicode character repertoire and goes further, providing a mechanism for defining more.</p> <p>Having said that, PRECIS doesn’t seem to be very widely used by people who are defining new data structures and protocols. My personal opinion is that there are two problems which make it hard to adopt. First, it’s large and complex, with many moving parts, and requires careful study to understand. Developers are (for good reason) lazy.</p> <p>Second, using PRECIS ties you to a specific version of Unicode. In particular, it forbids the use of the (nearly a million) unassigned code points. Since each release of Unicode includes new code point assignments, that means that a sender and receiver need to agree on exactly which version of Unicode they’re both going to use if they want reliably interoperable behavior. This makes life difficult for anyone writing a general-purpose code designed to be used in lots of different applications.</p> <p>I personally think that the only version of Unicode anybody wants to use is “as recent as possible”, so they can be confident of having all the latest emojis.</p> <p>Anyhow, 9839 is simpler and dumber than PRECIS. But I think some people will find it useful and now the IETF agrees.</p> <h2 id='p-7'>Source code</h2> <p>I’ve written a little Go-language library to validate incoming text fields against each of the three subsets that 9839 specifies, <a href="https://github.com/timbray/RFC9839">here</a>. I don’t claim it’s optimal, but it is well-tested.</p> <p>It doesn’t have a version number or release just yet, I’ll wait till a few folk have had a chance to spot any dumb mistakes I probably made.</p> <h2 id='p-9'>Details</h2> <p>Here’s a compact summary of the world of problematic Unicode code points and data formats and standards.</p> <table> <tr valign="top" align="center"><td class="empty"></td><th colspan="3">Problematic classes excluded?</th></tr> <tr valign="top"><td class="empty"></td><th>Surrogates</th><th>Legacy controls</th><th>Noncharacters</th></tr> <tr align="center"><td>CBOR</td><td class="happy">yes</td><td class="unhappy">no</td><td class="unhappy">no</td></tr> <tr align="center"><td>I-JSON</td><td class="happy">yes</td><td class="unhappy">no</td><td class="happy">yes</td></tr> <tr align="center"><td>JSON</td><td class="unhappy">no</td><td class="unhappy">no</td><td class="unhappy">no</td></tr> <tr align="center"><td>Protobufs</td><td class="unhappy">no</td><td class="unhappy">no</td><td class="unhappy">no</td></tr> <tr align="center"><td>TOML</td><td class="happy">yes</td><td class="unhappy">no</td><td class="unhappy">no</td></tr> <tr align="center"><td>XML</td><td class="happy">yes</td><td class="neutral">partial [1]</td><td class="neutral">partial [2]</td></tr> <tr align="center"><td>YAML</td><td class="happy">yes</td><td class="neutral">mostly [3]</td><td class="neutral">partial [2]</td></tr> <tr valign="top" align="center"><td class="empty"></td><th colspan="3">RFC 9839 Subsets</th></tr> <tr align="center"><td>Scalars</td><td class="happy">yes</td><td class="unhappy">no</td><td class="unhappy">no</td></tr> <tr align="center"><td>XML</td><td class="happy">yes</td><td class="neutral">partial</td><td class="neutral">partial</td></tr> <tr align="center"><td>Assignables</td><td class="happy">yes</td><td class="happy">yes</td><td class="happy">yes</td></tr> </table> <p>Notes:</p> <p><b>[1]</b> XML allows C1 controls.</p> <p><b>[2]</b> XML and YAML don’t exclude the noncharacters outside the Basic Multilingual Pane.</p> <p><b>[3]</b> YAML excludes all the legacy controls except for the mostly-harmless <code>U+0085</code>, another version of <code>\n</code> used in IBM mainframe documents.</p> <h2 id='p-8'>Thanks!</h2> <p>9839 is not a solo production. It received an extraordinary amount of discussion and improvement from a lot of smart and well-informed people and the published version, 15 draft revisions later, is immensely better than my initial draft. My sincere thanks go to my co-editor Paul Hoffman and to all those mentioned in the RFC’s “Acknowledgements” section.</p> <h2 id='p-4'>On individual submissions</h2> <p>9839 is the second “individual submission” RFC I’ve pushed through the IETF (the other is <a href="https://datatracker.ietf.org/doc/html/rfc7725">RFC 7725</a>, which registers the HTTP 451 status code). While it’s nice to decide something is worth standardizing and eventually have that happen, it’s really a lot of work. Some of that work is annoying.</p> <p>I’ve been involved in other efforts as Working-Group member, WG chair, and WG specification editor, and I can report authoritatively that creating an RFC the traditional way, through a Working Group, is easier and better.</p> <p>I feel discomfort advising others not to follow in my footsteps, but in this case I think it’s the right advice.</p></div></content></entry> <entry> <title>Long Links</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/08/04/Long-Links' /> <link rel='replies' thr:count='1' type='application/xhtml+xml' href='/ongoing/When/202x/2025/08/04/Long-Links#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/08/04/Long-Links</id> <published>2025-08-04T12:00:00-07:00</published> <updated>2025-08-07T11:14:33-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>All of these <cite>Long Links</cite> pieces have begun with more or less the same words, so why stop now? This is an annotated parade of links to long-form pieces. Most people won’t have the time (nor the weird assortment of interests) to consume them all, but I hope that most readers will find one or two reward a visit</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>All of these <cite>Long Links</cite> pieces have begun with more or less the same words, so why stop now? This is an annotated parade of links to long-form pieces. Most people won’t have the time (nor the weird assortment of interests) to consume them all, but I hope that most readers will find one or two reward a visit.</p> <h2 id='p-2'>Radisson (and Groseilliers)</h2> <p>I don’t know if it is still the case, but in my youth, Canadian elementary education included several overexcited units about the <a href="https://en.wikipedia.org/wiki/Coureur_des_bois"><i>Coureurs des bois</i></a>, early European settlers in “New France” (now Québec) who ventured, by foot and canoe, far to the north and west, mostly engaged in trading with the indigenous peoples: trinkets (and later, serious hardware including guns) for furs.</p> <p>The names I remembered were Radisson and Groseilliers, but I don’t recall learning much about who they were and what they did. Then I ran across the 2019 book <a href="https://www.biblioasis.com/shop/non-fiction/bush-runner-the-life-and-times-of-pierre-esprit-radisson/">Bush Runner: The Adventures of Pierre-Esprit Radisson</a> and, wow… The writing is pedestrian but who cares because what a story! Radisson lived an absolutely astonishing life. He went as deep into the bush as anyone of his era, interacted intensely with the indigenous people as business partner, friend, and foe, worked for Charles of England and Louis of France (changing sides several times), in 1670 founded the Hudson’s Bay Company (recently, 355 years later, deceased), and fortunately took notes, a copy of which was preserved by Samuel Pepys.</p> <p>I learned more from this book’s pages about the early history of Upper and Lower Canada than all those elementary-school units had to offer, and had loads of fun doing so. I guess this is a fairly Canadian-specific Long Link, but I think anyone interested in the early history of Europeans in North America would find much to enjoy.</p> <h2 id='p-4'>Music</h2> <p>It’s rare these days that I discover interesting new musicians, but here are two of those rarities.</p> <p><a href="https://luciehorsch.com">Lucie Horsch</a> plays recorder, you know, the cheap plastic thing they use to introduce second-graders to music. It’s actually a lovely instrument and I wish we would switch to its German name, “Blockflöte”, which to my ear sounds a bit like the instrument does. Anyhow, check out this YouTube entitled only <a href="https://www.youtube.com/watch?v=LJyl2D16PZY&list=RDLJyl2D16PZY&start_radio=1">Lucie Horsch - Bach</a>, annoyingly omitting any mention of <em>which</em> Bach. Annoyance aside, it’s a pretty great performance, Ms Horsch is the real deal, full of virtuosity and grace.</p> <p>I got an unusual mid-week message from Qobuz, all excited about <a href="https://transgressiverecords.com/artist/the-new-eves/">The New Eves’</a> new record <cite>The New Eve Is Rising</cite>. So I played it in the car on a long crosstown drive and now I’m all excited too. The New Eves are talented, musically surprising, and above all, insanely brave.</p> <p>Their music doesn’t sound like anything else and flies in the face of all conventional wisdom concerning popular music. They take absurd chances and yeah, the album has klunkers amid the bangers, but when I got to its end I went back and started at the beginning again. I found myself smiling ear-to-ear over and over. Maybe I’m being a bit over-the-top here, but check them out: <a href="https://www.youtube.com/watch?v=l9Q9ge6j_O4&list=RDl9Q9ge6j_O4&start_radio=1">Mother</a> is live. <a href="https://www.youtube.com/watch?v=MovNWuNPXXE&list=RDMovNWuNPXXE&start_radio=1">Cow Song</a> is off the new album and strong albeit with forgettable video.</p> <h2 id='p-3'>Life online</h2> <p>Every Long Links has hardcore-geek threads and there is no harder core imaginable than Filippo Valsordi’s <a href="https://words.filippo.io/assembly-mutation/">Go Assembly Mutation Testing</a>. I have always admired (but never actually used) mutation testing, and Filippo offers a convincing argument that it moves catching certain classes of bug from nearly impossible to pretty easy. Good stuff!</p> <p>And of course we can’t ignore genAI and programming. Most of you are likely aware of <a href="https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/">Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity</a>, but I’m linking again to boost its visibility, because hard quantitative research on methodology is damn rare in our profession. I will confess to being a little (but just a little) surprised at the conclusions.</p> <p>It is apparently quite possible that Intel will exit the business of making high-end chips, leaving TSMC with a global monopoly: <a href="https://d2d.substack.com/p/d2d-contd-intel-and-the-wide-open">Intel and the Wide Open Barn Doors</a>. This is an unsettling prospect. Not, I have to say, surprising though. I’ve sneered at Intel leadership cluelessness for years and years, see <a href="/ongoing/When/200x/2006/01/14/On-Intel">here</a> and <a href="/ongoing/When/200x/2006/02/16/Viiv-Jive">here</a>.</p> <p>Finally, here’s the charmingly-titled <a href="https://www.raptitude.com/2025/06/how-to-surf-the-web-in-2025-and-why-you-should/">How to Surf the Web in 2025, and Why You Should</a>. I love this piece.</p> <h2 id='p-1'>Class Reductionism</h2> <p>The news keeps making me want to build something around the <code>classreductionist.org</code> domain name I’ve owned for years.</p> <p>The tl;dr on Class Reductionism is something like “In the best possible world it’ll take generations to disassemble the global tangle of intersectional oppression, but we could treat the symptoms effectively <em>right now this year</em> by sending money to the poor. I’m talking about Universal Basic Income or suchlike. I wrote a <a href="/ongoing/When/202x/2023/01/16/Class-Reductionism">couple thousand words</a> on the subject back in 2023, and there are complexities, and I probably won’t put up that site. But I still do maintain that a very high proportion of our societal pain is rooted in the egregious inequality, and consequent poverty, that seems a baked-in feature of Late Capitalism.</p> <p>Let’s start with Nobelist Paul Krugman, who’s been writing an “Understanding Inequality” series on his paywalled newsletter and then republishing a gratis version, start <a href="https://stonecenter.gc.cuny.edu/tag/focus-inequality/">here</a>. Very data-dense and educational. Hmm, that site is slow; there’s a livelier table of contents <a href="https://paulkrugman.substack.com/p/i-coulda-made-a-better-deal">here</a>.</p> <p>Don’t kid yourself that this is just an American problem, see <a href="https://www.nytimes.com/2025/06/23/business/china-upward-mobility-inequality.html?unlocked_article_code=1.cE8.Ptfc.XicZ0XVgHPsJ&smid=url-share">‘The Better Life Is Out of Reach’: The Chinese Dream Is Slipping Away</a>.</p> <p>Let’s pull the impersonal veil of facts and figures aside and focus on the human experience of what we used to call Class Struggle. <a href="https://macleans.ca/society/confessions-of-the-working-poor/">Confessions of the Working Poor</a> is beautifully written and opened my eyes to lifestyle choices that I didn’t even know some people have to make.</p> <p>But hey, there are people who are just fine with this: <a href="https://finance.yahoo.com/news/deltas-premium-play-is-taking-advantage-of-the-growing-economic-split-100044776.html">Delta's premium play is taking advantage of the growing economic split</a>.</p> <p>Look, being class-determinist-adjacent doesn’t mean you should ignore intersectional awfulness: <a href="https://www.newyorker.com/magazine/2025/08/04/the-plunder-of-black-america-calvin-schermerhorn-book-review">What We Miss When We Talk About the Racial Wealth Gap</a>.</p> <h2 id='p-5'>No more sections</h2> <p>The remaining Long Links refused to be organized so I had to turn them loose; call it the Long Tail.</p> <p><a href="https://articles.c-a-s-t.com/the-venetian-origins-of-roman-type-a856eb3f0cb">The Venetian origins of roman type</a>. You might think you don’t care about typography but still enjoy the pictures and descriptions here.</p> <!-- <p><a href="https://www.newyorker.com/magazine/2025/07/28/mary-had-schizophrenia-then-suddenly-she-didnt">Mary Had Schizophrenia—Then Suddenly She Didn’t</a></p>--> <p>This guy is a full-time <a href="https://urbancoyoteresearch.com/researcher/stanley-d-gehrt-phd">Coyote researcher</a>. What a great gig! I’m an admirer of those animals and how they’ve carved themselves a comfy niche in most of North America’s big cities. (Even if it means that you better not let your cat out at night.) They’re also remarkably attractive.</p> <p>Here’s another long list of Long Links, and many of you will wonder why anyone would choose to browse it: <a href="https://petapixel.com/2025/07/18/the-best-camera-stores-in-tokyo-the-ultimate-guide/">The Best Camera Stores in Tokyo: The Ultimate Guide</a>. Some of the interiors are remarkable.</p> <p>Oh, while we’re on the subject of photography: <a href="https://petapixel.com/2025/07/22/a-photojournalist-took-a-fujifilm-instax-camera-to-a-cartel-wedding/">A Photojournalist Took a Fujifilm Instax Camera to a Mexican Cartel Wedding</a>.</p> <p>GLP-1’s (i.e. Ozempic and friends) would probably dominate a large section of the news if weren’t for all the political craziness. Here’s one small example: <a href="https://www.glp1digest.com/p/how-glp-1s-are-breaking-life-insurance">How GLP-1s Are Breaking Life Insurance</a>.</p> <p>Science is hard. There are lots of largely-unsolved areas, and “gap-map.org” tries to organize them: <a href="https://www.gap-map.org/?sort=rank&utm_source=substack&utm_medium=email&fields=astrophysics">Fundamental Development Gap Map v1.0</a>. The UI is a little klunky but the thing still sucked me right in.</p> <p>I’m going to give the last word to Laurie Penny. I don’t know what we’d do without her. <a href="https://lauriepenny.substack.com/p/in-a-time-of-monsters-do-we-have">In a time of monsters: do we have any ideas for surviving the zombie apocalypse that aren’t nightmare patriarchy?</a></p></div></content></entry> <entry> <title>De-Google Project Update</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/29/DeGoogling' /> <link rel='replies' thr:count='20' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/29/DeGoogling#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/29/DeGoogling</id> <published>2025-07-29T12:00:00-07:00</published> <updated>2025-07-31T12:06:18-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Life Online/De-Google' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Life Online' /> <category scheme='https://www.tbray.org/ongoing/What/' term='De-Google' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>I <a href='/ongoing/When/202x/2024/03/09/DeGoogling'>introduced this family project</a> in the spring of 2024. I won’t reproduce those arguments for why we’re working on this, but in the current climate I feel like I hardly need to. Since that post, our aversion to Google dependency has only grown stronger. Progress has been non-zero but not fast</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>I <a href="/ongoing/When/202x/2024/03/09/DeGoogling">introduced this family project</a> in the spring of 2024. I won’t reproduce those arguments for why we’re working on this, but in the current climate I feel like I hardly need to. Since that post, our aversion to Google dependency has only grown stronger. Progress has been non-zero but not fast.</p> <p>Here’s the table, with progress notes below.</p> <table> <tr valign="top"><th>Need</th><th>Supplier</th><th>Alternatives</th></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-3">Office</a></td> <td class="unhappy">Google Workspace</td> <td>Proton?</td> </tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-17">Data sharing</a></td> <td class="happy">Dropbox</td> <td></td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-17">Photos</a></td> <td class="unhappy">Google Photos</td> <td>Dropbox?</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-16">Video meetings</a></td> <td class="unhappy">Google Meet</td> <td>Jitsi, Signal?</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-10">Maps</a></td> <td class="unhappy">Google Maps</td> <td>Magic Earth, Here, something OSM-based?</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-4">Browser</a></td> <td class="happy">Safari, Firefox, Vivaldi, LibreWolf</td> <td></td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-12">Search</a></td> <td class="unhappy">Google</td> <td>Bing-based options, Kagi?</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-5">Chat</a></td> <td class="happy">Signal</td> <td></td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-6">Photo editing</a></td> <td class="neutral">Adobe Lightroom & Nik</td> <td>Capture One, Darktable, ?</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-7">In-car interface</a></td> <td class="neutral">Google Android Auto</td> <td>Automaker software</td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-8">Play my music</a></td> <td class="happy">Plex, USB</td> <td></td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-9">Discover music</a></td> <td class="happy">Qobuz</td> <td></td></tr> <tr valign="top"> <td><a href="/ongoing/When/202x/2024/03/09/DeGoogling#p-13">TV</a></td> <td class="neutral">Roku, Apple, migration</td> <td></td></tr> </table> <p>Pink indicates a strong desire to get off the incumbent service, green means we’re happy-ish with what we’re using, and blue means that, happy or not, it’s not near the top of the priority list.</p> <p>I’ll reproduce the metrics we care about when looking to replace Google products, some combination of:</p> <ol> <li><p>Not ad-supported</p></li> <li><p>Not VC-funded</p></li> <li><p>Not Google, Microsoft, or Amazon</p></li> </ol> <p>The list used to include “Open Source” but I decided that while that’s good, it’s less important than the other three criteria.</p> <p>Now let’s walk down the chart.</p> <h2 id='p-3'>Office</h2> <p>This is going to be a wrenching transition; we’ve been running the family on Google stuff forever, and I anticipate muscle-memory pain. But increasingly, using Google apps feels like being in enemy territory. And, as I said last time, I will not be sorry to shake the dust of Google Drive and Docs from my heels, I find them clumsy and am always having trouble finding something that I know is in there.</p> <p>While I haven’t dug in seriously yet, I keep hearing reasonably-positive things about Proton, and nothing substantive to scare me away. Wish us luck.</p> <h2 id='p-17'>Data sharing (progress!)</h2> <p>Dropbox is, eh, OK. It doesn’t seem actively evil, there’s no advertising, and the price is low.</p> <h2 id='p-21'>Photos</h2> <p>We’re a four-Android family including a couple of prolific photographers, and everything just gets pumped into Google and then it fills up and then they want more money. If we could configure the phones to skip Google and go straight to Dropbox, that would be a step forward.</p> <h2 id='p-16'>Video meetings</h2> <p>Google meet isn’t painful but I totally suspect it of data-mining what should be private conversations. I’m getting the feeling that the technical difficulty of videoconferencing is going steadily down, so I’m reasonably optimistic that something a little less evil will come along with a fair price.</p> <h2 id='p-10'>Maps</h2> <p>The fear and loathing that <a href="/ongoing/When/201x/2017/06/29/Fear-Google-Reviews">I started feeling in 2017</a> grows only stronger. But replacements aren’t obvious. It’s a pity, maps and directions and reviews feel like a natural monopoly that should be a public utility or something, rather than a corporate moat.</p> <h2 id='p-4'>Browser (progress!)</h2> <p>Chrome has seriously started making my flesh crawl; once again, enemy territory. Fortunately, there are lots of good options. Even people like us who have multiple lives we need to keep separate can find enough better browsers out there.</p> <p>Maybe I’ll have a look at one of the new genAI-company browsers ha ha just kidding.</p> <h2 id='p-12'>Search</h2> <p>The reports on Kagi keep being positive and giving it a try is definitely on the To-Do list.</p> <h2 id='p-5'>Chat</h2> <p>Signal is the only sane choice at this point in history for personal use.</p> <h2 id='p-6'>Photo editing</h2> <p>Adobe’s products are good, and I’m proficient and happy with Lightroom, but they are definitely suffering from bad genAI craziness. Also the price is becoming unreasonable.</p> <p>I’ve had a few Lightroom software failures in recent months and if that becomes a trend, looking seriously at the alternatives will move to the top of the priority list.</p> <h2 id='p-7'>In-car interface</h2> <p>It’s tough, Android Auto is a truly great product. I think I’m stuck here for now, particularly given that I plan to be driving a <a href="/ongoing/What/The%20World/Jaguar%20Diary/">2019-model-year car</a> for the foreseeable future. Also, it supports my music apps.</p> <h2 id='p-9'>Discover music and play mine (progress!)</h2> <p>Progress here. I’ve almost completely stopped using YouTube Music in favor of Plex and Qobuz. Really no downside; YTM has more or less completely lost the ability to suggest good new stuff.</p> <h2 id='p-13'>TV</h2> <p>Video continues morphing itself into Cable TV redux. We have an old Roku box that works fine and I think I’ve managed to find its don’t-spy-on-us settings. We’ll keep subscribing to Apple+ as long as they keep shipping great shows. I have zero regrets about having <a href="/ongoing/When/202x/2025/03/06/Canceled-Prime">left Prime behind</a>.</p> <p>As for the rest, we’ve become migrants, exclusively month-at-a-time subscriptions for the purpose of watching some serial or sports league, unsubscribe after the season finale or championship game. The good news is that I haven’t encountered much friction in unsubscribing, just a certain amount of earnest pleading.</p> <h2 id='p-20'>Looking forward</h2> <p>I have yet to confront any of the really hard parts of this project, but the sense of urgency is increasing. Let’s see.</p></div></content></entry> <entry> <title>QRS: Finite-state Struggles</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/21/Automaton-merge-war' /> <link rel='replies' thr:count='2' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/21/Automaton-merge-war#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/21/Automaton-merge-war</id> <published>2025-07-21T12:00:00-07:00</published> <updated>2025-07-22T09:10:25-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Quamina Diary' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Quamina Diary' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Software' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Software' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>I just posted a big <a href='https://github.com/timbray/quamina'>Quamina</a> PR representing months of work, brought on by the addition of a small basic regular-expression feature. This ramble doesn’t exactly have a smooth story arc but I’m posting it anyhow because I know there are people out there interested in state-machine engineering and they are my people</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>I just posted a big <a href="https://github.com/timbray/quamina">Quamina</a> PR representing months of work, brought on by the addition of a small basic regular-expression feature. This ramble doesn’t exactly have a smooth story arc but I’m posting it anyhow because I know there are people out there interested in state-machine engineering and they are my people.</p> <p>As far as I can tell, a couple of the problems I’m trying to solve haven’t been addressed before, at least not by anyone who published their findings. Partly because of that, I’m starting to wonder if all <a href="/ongoing/What/Technology/Quamina%20Diary/">these disorderly Quamina postings</a> might be worked into a small book or monograph or something. State machines are really freaking useful software constructs! So yeah, this is a war story not an essay, but if you like finite automata you’ll likely be interested in bits of it.</p> <h2 id='p-1'>The story thus far</h2> <p>Prior to beginning work on Regular Expressions, I’d already wired shell-style “<code>*</code>” wildcards into Quamina, which forced me to start working with NFAs and ε-transitions. The implementation wasn’t crushingly difficult, and the performance was… OK-ish.</p> <p>Which leads me to The Benchmark From Hell. I wondered how the wildcard functionality would work under heavy stress, so I pulled in a list of 12,959 five-letter strings from the Wordle source code, and inserted a “<code>*</code>” at a random position in each. Here are the first ten:</p> <blockquote><pre><code>aalii**aarghaar*tiabaca*a*bacia*backab*acsab*aftabak*a</code></pre></blockquote> <p>I created an NFA for each and merged them together <a href="/ongoing/When/202x/2024/07/28/Union-of-Finite-Automata">as described here</a>. Building and merging the automata were plenty fast enough, and the merged NFA had 46,424 states, which felt reasonable. Matching strings against it ran at under ten thousand per second, which is pretty poor given that Quamina can do a million or two per second on patterns encoded in a DFA.</p> <p>But, I thought, still reasonably usable.</p> <h2 id='p-2'>The cursed “<code>?</code>”</h2> <p>Last year, my <a href="/ongoing/When/202x/2024/12/12/Quamina-Regular-Expression-Series">slow grind through the regexp features</a> had led me to the zero-or-one quantifier “<code>?</code>”. The state machine for these things is not rocket science; there’s a discussion with pictures in my recent <a href="/ongoing/When/202x/2025/07/07/Epsilon-Wrangling#p-3">Epsilon Wrangling</a>.</p> <p>So I implemented that and fired off the unit tests, most of which <a href="/ongoing/When/202x/2024/12/12/QRS-Parsing-Regular-Expressions#p-1">I didn’t have to write</a>, and they all failed. Not a surprise I guess.</p> <p>It turned out that the way I’d implemented ε-transitions for the wildcards <a href="/ongoing/When/202x/2024/07/28/Union-of-Finite-Automata#p-9">was partially wrong</a>, as in it worked for the tight-loop state-to-itself ε-transitions, but not for more general-purpose things like “<code>?</code>” requires.</p> <p>In fact, it turns out that merging NFAs is hard (DFAs are easy), and I found precious little help online. <a href="https://en.wikipedia.org/wiki/Thompson%27s_construction">Thompson’s construction</a> does give an answer: Make an otherwise-empty state with two ε-transitions, one to each of the automata, and it’ll do the right thing. Let’s call that a “splice state”. It’s easy to implement, so I did. Splicing is hardly “merging” in the Quamina sense, but still.</p> <p>Unfortunately, the performance was hideously bad, just a few matches per second while pegging the CPU. A glance at the final NFA was sobering; endless chains of splice states, some thousands long.</p> <p>At this point I became very unhappy and got stalled for months dealing with real-life issues while this problem lurked at the back of my mind, growling for attention occasionally.</p> <p>Eventually I let the growler out of the cave and started to think through approaches. But first…</p> <h2 id='p-4'>Worth solving?</h2> <p>Is it, really? What sane person is going to want to search for the union of thousands of regular expressions in general or wild-carded strings in particular?</p> <p>I didn’t think about this problem at all, because of my experience with Quamina’s parent, <a href="https://github.com/aws/event-ruler">Ruler</a>. When it became popular among several AWS and Amazon teams, people sometimes found it useful to match the union of not just thousands but a million or more different patterns. When you write software that anyone actually uses, don’t expect the people using it to share your opinions on what is and isn’t reasonable. So I wasn’t going to get any mental peace until I cracked this nut.</p> <p>I eventually decided that three approaches were worth trying:</p> <ol> <li><p>Figure out a way really to merge, not just splice, the wildcarded patterns, to produce a simpler automaton.</p></li> <li><p>Optimize the NFA-traversal code path.</p></li> <li><p>Any NFA can be transformed into a DFA, says computer-science theory. So do that, because Quamina is really fast at DFA-based matching.</p></li> </ol> <h2 id='p-5'>Nfa2Dfa</h2> <p>I ended up doing all of these things and haven’t entirely given up on any of them. The most intellectually-elegant was the transform-to-DFA approach, because if I did that, I could remove the fairly-complex NFA-traversal logic from Quamina.</p> <p>It turns out that the Net is rich with textbook extracts and YouTubes and slide-shows about how to do the NFA-to-DFA conversion. It ended up being quite a pleasing little chunk of code, only a couple hundred lines.</p> <p>The bad news: Converting each individual wildcard NFA to a DFA was amazingly fast, but then as I merged them in one by one, the number of automaton states started increasing explosively and the process slowed down so much that I never had the patience to let it finish. Finite-automata theory warns that this can happen, but it’s hard to characterize the cases where it does. I guess this one of them.</p> <p>Having said that, I haven’t discarded the <code>nfa2Dfa</code> code, because perhaps I ought to offer a Quamina option to apply this if you have some collection of patterns that you want to run really super fast and are willing to wait for a while for the transformation process to complete. Also, I may have missed opportunities to optimize the conversion; maybe it’s making more states than it needs to?</p> <h2 id='p-6'>Faster NFA traversal</h2> <p>Recently in <a href="/ongoing/When/202x/2025/07/07/Epsilon-Wrangling">Epsilon wrangling</a> I described how NFA traversal has to work, relying heavily on implementing a thing called an ε-closure.</p> <p>So I profiled the traversal process and discovered, unsurprisingly, that most of the time was going into memory allocation while computing those ε-closures. So now Quamina has an ε-closure cache and will only compute each one once.</p> <p>This helped a lot but not nearly enough, and the profiler was still telling me the pain was in Go’s allocation and garbage-collection machinery. Whittling away at this kind of stuff is not rocket science. The standard Go trick I’ve seen over and over is to keep all your data in slices, keep re-using them then chopping them back to <code>[:0]</code> for each request. After a while they’ll have grown to the point where all the operations are just copying bytes around, no allocation required.</p> <p>Which also helped, but the speed wasn’t close to what I wanted.</p> <h2 id='p-7'>Merging wildcard automata</h2> <p>I coded multiple ways to do this, and they kept failing. But I eventually found a way to build those automata so that any two of them, or any one of them and a DFA, can merged and generate dramatically fewer ε-transition chains. I’m not going to write this up here for two reasons: First of all, it’s not <em>that</em> interesting, and second, I worry that I may have to change the approach further as I go on implementing new regxp operators.</p> <p>In particular, at one point I was looking at the code while it wasn’t working, and I could see that if I added a particular conditional it would work, but I couldn’t think of a principled reason to do it. Obviously I’ll have to sort this out eventually. In the meantime, if you’re the sort of um special person who is now burning with curiosity, check out my branch from that PR and have a look at the <code>spinout</code> type.</p> <p>Anyhow, I added that conditional even though it puzzled me a bit, and now you can add wildcard patterns to Quamina at 80K/second, and my 12.9K wildcards generate an NFA with with almost 70K states, which can scan events at almost 400K/second. And that’s good enough to ship the <code>“?”</code> feature.</p> <p>By the way, I tried feeding that 70K-state automaton to the DFA converter, and gave up after it’d burned an hour of CPU and grown to occupy many GB of RAM.</p> <h2 id='p-8'>Next steps</h2> <p>Add “<code>+</code>” and “<code>*</code>”, and really hope I don’t have to redesign the NFA machinery again.</p> <p>Also, figure out the explanation for that puzzling <code>if</code> statement.</p> <h2 id='p-9'>And I should say…</h2> <p>Despite the very narrow not to say obsessive focus of this series, I’ve gotten a few bits and pieces of positive feedback. So there are a few people out there who care about this stuff. To all of you, thanks.</p></div></content></entry> <entry> <title>Memory in Saskatchewan</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/09/Saskatchewan' /> <link rel='replies' thr:count='9' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/09/Saskatchewan#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/09/Saskatchewan</id> <published>2025-07-09T12:00:00-07:00</published> <updated>2025-07-16T10:11:34-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World/Places/Saskatchewan' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Places' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Saskatchewan' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts/Photos' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Photos' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>I just came back from Canada’s <a href='https://en.wikipedia.org/wiki/Saskatchewan'>only rectangular province</a>. I was there to help out my 95-year-old mother while her main caregiver took vacation. It’s an unhappiness that my family has splashed itself across Canada in such a way that we have to get on an airplane (or take drives measured in days) to see each other, but that’s where we are. I came back with pictures and stories</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>I just came back from Canada’s <a href="https://en.wikipedia.org/wiki/Saskatchewan">only rectangular province</a>. I was there to help out my 95-year-old mother while her main caregiver took vacation. It’s an unhappiness that my family has splashed itself across Canada in such a way that we have to get on an airplane (or take drives measured in days) to see each other, but that’s where we are. I came back with pictures and stories.</p> <p>Let me set the stage with a couple of photos. Everyone knows that Saskatchewan is flat and brown and empty, right?</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/TXT55665.png" alt="Flowers, intensely colored in near-black purple and yellow" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/TXT55710.png" alt="Trees and lawns, behind a still body of water and somewhat reflected in it" /> <p>Mom lives in <a href="https://en.wikipedia.org/wiki/Regina,_Saskatchewan">Regina</a>, the provincial capital, a city built round a huge park that contains the Legislature (the flowers are from its front lawn), a sizeable lake, and an artificial mini-mountain (the water and trees are from its tip). Have no fear, I’ll get to some no-kidding prairie landscapes.</p> <h2 id='p-1'>Health-care drama</h2> <p>The night I arrived, after my Mom went to bed she got up again, tripped on something and fell hard. Her right arm was swollen, bruised, and painful. The skin and adjacent blood vessels of very old people become thin and fragile; her whole forearm was a bruise. I tried to get her to go to Emergency but she wasn’t having any of it: “You wait for hours and then they give you a pain-killer, which is constipating.” Since she could twist her wrist and wiggle her fingers and give my hand a firm grasp, I didn’t push too hard.</p> <p>A couple days later on Saturday she got her regular twice-a-week visit from the public <a href="https://www.saskatchewan.ca/residents/health/accessing-health-care-services/care-at-home-and-outside-the-hospital/home-care">HomeCare</a> nurse, a friendly and highly competent Nigerian immigrant, to check her meds and general condition. She looked at Mom’s wrist and said “Get her an appointment with her doctor, they’ll probably want an X-Ray.”</p> <p>I called up her doctor at opening time Monday. The guy who answered the phone said “Don’t have any appointments for a couple weeks but come on over, we’ll squeeze her in.” So we went in after morning coffee and waited less than an hour. The doctor looked at her arm for 45 seconds and said “I’m writing a prescription for an X-Ray” and there was a radiologist around the corner and she was in ten minutes later. The doctor called me back that afternoon and said “Your mother’s got a broken wrist, I got her an 8AM appointment tomorrow at Regina General’s Cast Clinic.”</p> <p>The doctor at the clinic looked at her wrist for another 45 seconds and said “Yeah, put on a cast” so they did and we were home by ten. I’d pessimistically overpaid a couple bucks for hospital parking.</p> <p>The reason I’m including this is because I notice that this space has plenty of American readers. Did you notice that the story entirely omits insurance companies and money (except parking)? In Canada your health-care comes with your taxes (granted, higher than Americans’) and while the system is far from perfect, it can fix up an old lady’s broken wrist pretty damn fucking quick without any bureaucratic bullshit. Also, Canada spends a huge amount less per head on health-care than the US does.</p> <p>And Mom told me not to forget that Saskatchewan is the birthplace of Canadian single-payer universal healthcare. <a href="https://en.wikipedia.org/wiki/Tommy_Douglas">Tommy Douglas</a>, the Social Democrat who made that happen, has been named <a href="https://en.wikipedia.org/wiki/The_Greatest_Canadian">The Greatest Canadian</a>.</p> <h2 id='p-2'>Gentle surface</h2> <p>Oh, did I say “flat and brown and empty”? Wrong, wrong, and wrong. The Prairies, in Canada and the US too, have textures and colors and hills and valleys, it’s just that the slopes are gentle. There are really flat parts and they make farmers’ lives easier, but more or less every square inch that’s not a town or a park is farmed. I took Mom for a drive out in the country southeast of Regina, from whence these views:</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/TXT55698.png" alt="A road leading slightly uphill, brilliant yellow canola on both sides" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/TXT55700.png" alt="Yellow canola flowers under a blue sky" /> <div class='caption'><p>Note that in both shots we’re looking up a gentle slope. In the second, there’s farm infrastructure on the distant horizon.<br/>Also consider the color of the sky.</p></div> <p>In Canada that yellow-flowering crop is called “Canola”, which Wikipedia claims refers to a particular cultivar of <i>Brassica napus</i>, commonly known as rapeseed or just rape, so you can see why when Canada’s agribiz sector wanted to position its oil as the thing to use while cooking they went for the cultivar not the species name. I’m old enough to remember when farmers still said just “rapeseed”. Hmm, Wikipedia also claims that the OED claims this: The term “rape” derives from the Latin word for turnip, <i>rāpa</i> or <i>rāpum</i>, cognate with the Greek word ῥάφη, <i>rhaphe</i>.</p> <p>Let’s stick with canola.</p> <h2 id='p-4'>Pixelated color</h2> <p>After I’d taken those two canola-field shots I pulled out my Pixel and took another, but I’m not gonna share it because the Pixel decided to turn the sky from what I thought was a complex and interesting hue into its opinion of “what a blue sky looks like” only this sky didn’t.</p> <p>Maybe it’s just me, but I think Google’s camera app is becoming increasingly opinionated about color, and not in a good way. There are plenty of alternative camera apps, I should check them out.</p> <p>In case it’s not obvious, I love photographing Saskatchewan and think it generally looks pretty great, especially when you look up. On the province’s license plates it says “Land of living skies”, and no kidding.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/PXL_20250704_032320050.png" alt="Saskatchewan’s living skies" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/PXL_20250704_032334240.png" alt="Saskatchewan’s living skies" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/TXT55717.png" alt="Saskatchewan’s living skies"/> <div class='caption'><p>The first two are from the park behind Mom’s place,<br/>the third from that mini-mountain mentioned above.</p></div> <h2 id='p-6'>Experience and memory</h2> <p>My Mom’s doing well for a nonagenerian. She’s smart. When I visited early last fall and we talked about the US election I was bullish on Kamala Harris’s chances. She laughed at me and said “The Americans won’t elect a woman.” Well then.</p> <p>But she’s forgetful in the short term. I took her to the Legislature’s garden and to the top of the mini-mountain and for a drive out in the country and another adventure we’ll get to; she enjoyed them all. But maybe she won’t remember them.</p> <p>“Make memories” they say, but what if you show someone you love a good time and maybe they won’t remember it the next day? I’m gonna say it’s still worthwhile and has a lesson to teach about what matters. There endeth the lesson.</p> <h2 id='p-5'>The gallery</h2> <p>Indigenous people make up 17% of Regina’s population, the highest share in any significant Canadian city. By “indigenous” I mean the people that my ancestors stole the land from. It’s personal with me; Around 1900, my Dad’s family, Norwegian immigrants, took over some pretty great farmland southeast of Edmonton by virtue of “homesteading”, such a <em>nice</em> word isn’t it?</p> <p>Regina tries to honor its indigenous heritage and my favorite expression of that is its <a href="https://mackenzie.art">Mackenzie Art Gallery</a>, a lovely welcoming space in the <a href="https://www.saskatchewan.ca/government/directory?ou=a8e54600-77d6-4b7e-9702-f07a3dac1b47">T.C.Douglas building</a> (for “T.C.” read “Tommy”. (Did I mention him?) Mom and I walked around it and had lunch in its very decent café.</p> <p>Every time I’ve been there the big exhibitions in the big rooms have been indigenous-centered, and generally excellent. I try to go every time I visit and I’ve never been disappointed.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/PXL_20250708_172437441.png" alt="Indigenous art at Regina’s Mackenzie Gallery" /> <p>In 2025, anything I have to say about this piece would be superfluous.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/PXL_20250708_173041377.png" alt="Every American Flag Is A Warning Sign" /> <p>I love modern-art galleries, especially with big rooms full of big pieces, even if I don’t like all the art. Because it feels good to be in the presence of the work of people who are pouring out what they have to offer, especially at large scale. If the task wasn’t hard enough that failures are common then it wouldn’t be worthwhile, would it?</p> <p>They’re especially great when there’s someone I love there enjoying it with me. Here’s Mom.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/09/PXL_20250708_172836385.png" alt="Jean Bray considers indigenous art" /> <p>These days, any visit might be the last. I hope this wasn’t.</p></div></content></entry> <entry> <title>QRS: Epsilon Wrangling</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/07/Epsilon-Wrangling' /> <link rel='replies' thr:count='0' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/07/Epsilon-Wrangling#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/07/Epsilon-Wrangling</id> <published>2025-07-07T12:00:00-07:00</published> <updated>2025-07-09T19:41:00-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Quamina Diary' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Quamina Diary' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Software' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Software' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>I haven’t shipped any new features for <a href='https://github.com/timbray/quamina'>Quamina</a> in many months, partly due to a flow of real-life distractions, but also I’m up against tough performance problems in implementing <a href='/ongoing/When/202x/2024/12/12/Quamina-Regular-Expression-Series'>Regular Expressions at massive scale</a>. I’m still looking for a breakthrough, but have learned things about building and executing finite automata that I think are worth sharing. This piece has to do with <a href='https://en.wikipedia.org/wiki/Nondeterministic_finite_automaton#NFA_with_ε-moves'>epsilons</a>; anyone who has studied finite automata will know about them already, but I’ll offer background for those people to skip</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>I haven’t shipped any new features for <a href="https://github.com/timbray/quamina">Quamina</a> in many months, partly due to a flow of real-life distractions, but also I’m up against tough performance problems in implementing <a href="/ongoing/When/202x/2024/12/12/Quamina-Regular-Expression-Series">Regular Expressions at massive scale</a>. I’m still looking for a breakthrough, but have learned things about building and executing finite automata that I think are worth sharing. This piece has to do with <a href="https://en.wikipedia.org/wiki/Nondeterministic_finite_automaton#NFA_with_ε-moves">epsilons</a>; anyone who has studied finite automata will know about them already, but I’ll offer background for those people to skip.</p> <p>I’ve written about this before in <a href="/ongoing/When/202x/2024/06/17/Epsilon-Love">Epsilon Love</a>. A commenter pointed out that the definition of “epsilon” in that piece is not quite right per standard finite-automata theory, but it’s still a useful in that it describes how epsilons support constructs like the shell-style “<code>*</code>”.</p> <h2 id='p-2'>Background</h2> <p>Finite automata come in two flavors: Deterministic (DFA) and Nondeterministic (NFA). DFAs move from state to state one input symbol at a time: it’s simple and easy to understand and to implement. NFAs have two distinguishing characteristics: First, when you’re in a state and an input symbol arrives, you can transfer to more than one other state. Second, a state can have “epsilon transitions” (let’s say “ε” for epsilon), which can happen any time at all while you’re in that state, input or no input.</p> <p>NFAs are more complicated to traverse (will discuss below) but you need them if you want to implement regular expressions with <code>.</code> and <code>?</code> and <code>*</code> and so on. You can turn any NFA into a DFA, and I’ll come back to that subject in a future piece.</p> <p>For implementing NFAs, I’ve been using <a href="https://en.wikipedia.org/wiki/Thompson%27s_construction">Thompson's construction</a>, where “Thompson” is <a href="https://en.wikipedia.org/wiki/Ken_Thompson">Ken Thompson</a>, co-parent of Unix. This technique is also nicely described by Russ Cox in <a href="https://swtch.com/~rsc/regexp/regexp1.html">Regular Expression Matching Can Be Simple And Fast</a>. You don’t need to learn it to understand this piece, but I’ll justify design choices by saying “per Thompson”.</p> <p>I’m going to discuss two specific issues today, ε-closures and a simpler NFA definition.</p> <h2 id='p-3'>ε-closures</h2> <p>To set the stage, consider this regexp: <nobr><code>A?B?C?X</code></nobr></p> <p>It should match “X” and “BX” and “ACX” and so on, but not “CAX” or “XX”. Thompson says that you implement <code>A?</code> with a transition to the next state on “A” and another ε-transition to that next state; because if you see an “A” you should transition, but then you can transition anyhow even if you don’t.</p> <p>The resulting NFA looks like this:</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/07/AcmBcmCcmX.png" alt="NFA matching A?B?C?X" /> <p> In finite-automaton math, states are usually represented by the letter “q” followed by a number (usually italicized and subscripted, like <i>q<sub>0</sub></i>, but not here, sorry). Note <code>q4</code>’s double circle which means it’s a goal state, i.e. if we get here we’ve matched the regexp. I should add that this was produced with <a href="https://draw.io">draw.io</a>, which seems to make this sort of thing easy. </p> <h2 id='p-5'>Back to that NFA</h2> <p>So, here’s a challenge: Sketch out the traversal code in your head. Think about the input strings “AX” and “BCX” and just “X” and how you’d get through the NFA to the Q4 goal state.</p> <p>The trick is what’s called the ε-closure. When you get to a state, before you look at the next input symbol, you have to set up to process it. In this case, you need to be able to transition on an A or B or C. So what you do is pull together the start state <code>q0</code> and also any other states you can reach from there through ε-transitions. In this case, the ε-closure for the start state is <code>{q0, q1, q2, q3}</code>.</p> <p>Suppose, then, that you see a “B” input symbol. You apply it to all the states in the ε-closure. Only <code>q1</code> matches, transitioning you to <code>q2</code>. Before you look at the next input symbol, you compute the ε-closure for <code>q2</code>, which turns out to be <code>{q2, q3}</code>. With this ε-closure, you can match “C” or “X”. If you get a “C”, you”ll step to <code>q3</code>, whose ε-closure is just itself, because “X” is the only path forward.</p> <p>So your NFA-traversal algorithm for one step becomes something like:</p> <ol> <li><p>Start with a list of states.</p></li> <li><p>Compute the ε-closure of that list.</p></li> <li><p>Read an input symbol.</p></li> <li><p>For each state in the ε-closure, see if you can traverse to another state.</p></li> <li><p>If so, add it to your output list of states.</p></li> <li><p>When you’re done, your output list of states is the input to this algorithm for the next step.</p></li> </ol> <h2 id='p-6'>Computation issues</h2> <p>Suppose your regular expression is <code>(A+BC?)+</code>. I’m not going to sketch out the NFA, but just looking at it tells you that it has to have loopbacks; once you’ve matched the parenthetized chunk you need to go back to a state where you can recognize another occurrence. For this regexp’s NFA, computing the ε-closures can lead you into an infinite loop. (Should be obvious, but I didn’t realize it until after the first time it happened.)</p> <p>You can have loops and you can also have dupes. In practice, it’s not that uncommon for a state to have more than one ε-transition, and for the targets of these transitions to overlap.</p> <p>So you need to watch for loops and to dedupe your output. I think the only way to avoid this is with a cookie-crumbs “where I’ve been” trail, either as a list or a hash table.</p> <p>Both of these are problematic because they require allocating memory, and that’s something you really don’t want to do when you’re trying to match patterns to events at Quamina’s historic rate of millions per second.</p> <p>I’ll dig into this problem in a future Quamina-Diary outing, but obviously, caching computed epsilon closures would avoid re-doing this computation.</p> <p>Anyhow, bear ε-closures in mind, because they’ll keep coming up as this series goes on.</p> <h2 id='p-7'>And finally, simplifying “NFA”</h2> <p>At the top of this piece, I offered the standard definition of NFAs: First, when you’re in a state and an input symbol arrives, you can transfer to more than one other state. Second, you can have ε-transitions. Based on my recent work, I think this definition is redundant. Because if you need to transfer to two different states on some input symbol, you can do that with ε-transitions.</p> <p>Here’s a mini-NFA that transfers from state <code>q0</code> on “A” to both <code>q1</code> and <code>q2</code>.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/07/Splice-1.png" alt="An NFA transferring to two different states on an input symbol" /> <p>And here’s how you can achieve the same effect with ε-transitions:</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/07/07/Splice-2.png" alt="Transferring to two destinations using ε-transitions" /> <p>In that NFA, in <code>qS</code> the “S” stands for “splice”, because it’s a state that exists to connect two threads of finite-automaton traversal.</p> <p>I’m pretty sure that this is more than just a mathematical equivalence. In my regexp implementation, so far at least, I’ve never encountered a need to do that first kind of dual transition. Furthermore, the “splice” structure is how Thompson implements the regular-expression “<code>|</code>” operator.</p> <p>So if you’re building an NFA, all the traversal stuff you need in a state is a simple map from input symbol to next state, and a list of ε-transitions.</p> <h2 id='p-8'>Next up</h2> <p>How my own implementation of NFA traversal collided head-on into the Benchmark From Hell and still hasn’t recovered.</p></div></content></entry> <entry> <title>The Real GenAI Issue</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/06/AI-Manifesto' /> <link rel='replies' thr:count='10' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/06/AI-Manifesto#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/06/AI-Manifesto</id> <published>2025-07-06T12:00:00-07:00</published> <updated>2025-07-06T12:06:43-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/AI' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='AI' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Last week I published a <a href='/ongoing/When/202x/2025/07/01/First-AI-Code'>featherweight narrative</a> about applying GenAI in a real-world context, to a tiny programming problem. Now I’m regretting that piece because I totally ignored the two central issues with AI: What it’s meant to do, and how much it really costs</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Last week I published a <a href="/ongoing/When/202x/2025/07/01/First-AI-Code">featherweight narrative</a> about applying GenAI in a real-world context, to a tiny programming problem. Now I’m regretting that piece because I totally ignored the two central issues with AI: What it’s meant to do, and how much it really costs.</p> <h2 id='p-1'>What genAI is for</h2> <p>The most important fact about genAI in the real world is that there’ve been literally <a href="https://finance.yahoo.com/news/how-nvidia-played-a-central-role-in-the-306-billion-ai-startup-boom-195741749.html?guccounter=1">hundreds of billions</a> of dollars invested in it; that link is just startups, and ignores a comparable torrent of cash pouring out of Big Tech.</p> <p>The business leaders pumping all this money of course don’t understand the technology. They’re doing this for exactly one reason: They think they can discard armies of employees and replace them with LLM services, at the cost of shipping shittier products. Do you think your management would spend that kind of money to help you with a quicker first draft or a summarized inbox?</p> <p>Adobe said the quiet part out loud: <a href="https://petapixel.com/2024/05/03/adobe-throws-photographers-under-the-bus-again-skip-the-photoshoot/">Skip the Photoshoot</a>. </p> <p>At this point someone will point out that previous technology waves have generated as much employment as they’ve eliminated. Maybe so, but that’s not what business leaders think they’re buying. They think they’re buying smaller payrolls.</p> <p>Maybe I’m overly sensitive, but thinking about these truths leads to a mental stench that makes me want to stay away from it.</p> <h2 id='p-2'>How much does genAI cost?</h2> <p>Well, I already mentioned all those hundreds of billions. But that’s pocket change. The investment community in general and Venture Capital in particular will whine and moan, but the people who are losing the money are people who can afford to.</p> <p>The first real cost is hypothetical: What if those business leaders are correct and they can gleefully dispose of millions of employees? If you think we’re already suffering from egregious levels of inequality, what happens when a big chunk of the middle class suddenly becomes professionally superfluous? I’m no economist so I’ll stop there, but you don’t have to be a rocket scientist to predict severe economic pain.</p> <p>Then there’s the other thing that nobody talks about, the massive greenhouse-gas load that all those data centers are going to be pumping out. This at a time when we we blow past one atmospheric-carbon metric after another and David Suzuki says <a href="https://www.ipolitics.ca/2025/07/02/its-too-late-david-suzuki-says-the-fight-against-climate-change-is-lost/">the fight against climate change is lost</a>, that we need to hunker down and work on survival at the local level.</p> <h2 id='p-3'>The real problem</h2> <p>It’s the people who are pushing it. Their business goals are quite likely, as a side-effect, to make the world a worse place, and they don’t give a fuck. Their technology will inevitably worsen the onrushing climate catastrophe, and they don’t give a fuck.</p> <p>It’s probably not as simple as “They’re just shitty people”<span class='dashes'> —</span> it’s not exactly easy to escape the exigencies of modern capitalism. But they are people who are doing shitty things.</p> <h2 id='p-4'>Is genAI useful?</h2> <p>Sorry, I’m having trouble even thinking about that now.</p></div></content></entry> <entry> <title>My First GenAI Code</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/07/01/First-AI-Code' /> <link rel='replies' thr:count='3' type='application/xhtml+xml' href='/ongoing/When/202x/2025/07/01/First-AI-Code#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/07/01/First-AI-Code</id> <published>2025-07-01T12:00:00-07:00</published> <updated>2025-07-01T11:38:00-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/AI' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='AI' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Software' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Software' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>At the moment, we have no idea what the impact of genAI on software development is going to be. The impact of <em>anything</em> on coding is hard to measure systematically, so we rely on anecdata and the community’s eventual consensus. So, here’s my anecdata. Tl;dr: The AI was not useless</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>At the moment, we have no idea what the impact of genAI on software development is going to be. The impact of <em>anything</em> on coding is hard to measure systematically, so we rely on anecdata and the community’s eventual consensus. So, here’s my anecdata. Tl;dr: The AI was not useless.</p> <h2 id='p-1'>The problem</h2> <p>My current work on <a href="/ongoing/What/Technology/Quamina%20Diary/">Quamina</a> involves dealing with collections of finite-automata states, which, in the Go programming language, are represented as slices of pointers to state instances:</p> <blockquote><p><code>[]*faState</code></p></blockquote> <p>The problem I was facing was deduping them, so that there would be only one instance corresponding to any particular collection. This is what, in Java, the <code>intern()</code> call does with strings.</p> <p>The algorithm isn’t rocket science:</p> <ol> <li><p>Dedupe the states, i.e. turn the collection into a set.</p></li> <li><p>For each set of states, generate a key.</p></li> <li><p>Keep a hash table of sets around, and use the key to see whether you’ve already got such a set, and if so return it. Otherwise, make a new entry in the hash table and return that.</p></li> </ol> <p>I’m out of touch with the undergrad CS curriculum, but this feels like a second-year assignment or thereabouts? Third?</p> <h2 id='p-2'>Enter Claude</h2> <p>So I prompted Claude thus:</p> <blockquote><p>I need Go code to provide a "intern"-like function for lists of pointers. For example, if I have several different []*int arrays, which may contain duplicates, I want to call intern() on each of them and get back a single canonical pointer which is de-duplicated and thus a set.</p></blockquote> <p>Claude did pretty well. It got the algorithm right, the code was idiomatic and usefully commented, and it also provided a decent unit test (but in a <code>main()</code> stanza rather than a proper Go test file). I didn’t try actually running it.</p> <p>The interesting part was the key computation. I, being lazy, had just done a Go <code>fmt.Sprintf("%p")</code> incantation to get a hex string representing each state’s address, sorted them, joined them, and that was the key.</p> <p>Claude worked with the pointers more directly.</p> <pre><code> // Sort by pointer address for consistent ordering sort.Slice(unique, func(i, j int) bool { return uintptr(unsafe.Pointer(unique[i])) < uintptr(unsafe.Pointer(unique[j])) })</code></pre> <p>Then it concatenated the raw bytes of the map addresses and lied to Go by claiming it was a string.</p> <pre><code> // Create key from pointer addresses key := make([]byte, 0, len(slice)*8) for _, ptr := range slice { addr := uintptr(unsafe.Pointer(ptr)) // Convert address to bytes for i := 0; i < 8; i++ { key = append(key, byte(addr>>(i*8))) } } return string(key)</code></pre> <p>This is an improvement in that the keys will be half the size of my string version. I didn’t copy-paste Claude’s code wholesale, just replaced ten or so lines of key construction.</p> <h2 id='p-3'>Take-away</h2> <p>I dunno. I thought the quality of the code was fine, wouldn’t have decomposed the functions in the same way but wouldn’t have objected on review. I was pleased with the algorithm, but then I would be since it was the same one I’d written, and, having said that, quite possibly that’s the only algorithm that anyone has used. It will be <em>super</em> interesting if someone responds to this write-up saying “You and Claude are fools, here’s a much better way.”</p> <p>Was it worth fifteen minutes of my time to ask Claude and get a slightly better key computation? Only if this ever turns out to be a hot code path and I don’t think anybody’s smart enough to know that in advance.</p> <p>Would I have saved time by asking Claude first? Tough to tell; Quamina’s data structures are a bit non-obvious and I would have had to go to a lot of prompting work to get it to emit code I could use directly. Also, since Quamina is low-level performance-critical infrastructure code, I’d be nervous about having any volume of code that I didn’t really <em>really</em> understand.</p> <p>I guess my take-away was that in this case, Claude knew the Go idioms and APIs better than I did; I’d never looked at the <a href="https://pkg.go.dev/unsafe">unsafe</a> package.</p> <p>Which reinforces my suspicion that genAI is going to be especially useful at helping generate code to talk to big complicated APIs that are hard to remember all of. Here’s an example: Any moderately competent Android developer could add a feature to an app where it strobes the flash and surges the vibration in sync with how fast you’re shaking the device back and forth, probably in an afternoon. But it would require a couple of dozen calls into the dense forest of Android APIs, and I suspect a genAI might get you there a lot faster by just filling the calls in as prompted.</p> <p>Reminder: This is just anecdata.</p></div></content></entry> <entry> <title>Qobuz and Mac</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/06/22/Qobuz-and-Others' /> <link rel='replies' thr:count='0' type='application/xhtml+xml' href='/ongoing/When/202x/2025/06/22/Qobuz-and-Others#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/06/22/Qobuz-and-Others</id> <published>2025-06-22T12:00:00-07:00</published> <updated>2025-06-26T13:13:08-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts/Music' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Arts' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Music' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Back in March I offered <a href='/ongoing/When/202x/2025/03/27/Music-Plus-Qobuz'>Latest Music (feat. Qobuz)</a>, describing all the ways I listen to music (Tl;dr: YouTube Music, Plex, Qobuz, record player). I stand by my opinions there but wanted to write more on two subjects: First Qobuz, because it suddenly got a lot better. And a recommendation, for people with fancy A/V setups, that you include a cheap Mac Mini</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Back in March I offered <a href="/ongoing/When/202x/2025/03/27/Music-Plus-Qobuz">Latest Music (feat. Qobuz)</a>, describing all the ways I listen to music (Tl;dr: YouTube Music, Plex, Qobuz, record player). I stand by my opinions there but wanted to write more on two subjects: First Qobuz, because it suddenly got a lot better. And a recommendation, for people with fancy A/V setups, that you include a cheap Mac Mini.</p> <h2 id='p-1'>Qobuz</h2> <p>That other piece had a list of the reasons to use Qobuz, but times have changed, so let’s revise it:</p> <ol> <li><p>It pays artists more per stream than any other service, by a wide margin.</p></li> <li><p>It seems to have as much music as anyone else.</p></li> <li><p>It’s album-oriented, and I appreciate artists curating their own music.</p></li> <li><p>Classical music is a first-class citizen.</p></li> <li><p>It’s actively curated; they highlight new music regularly, and pick a “record of the week”. To get a feel, check out <a href="https://www.qobuz.com/ca-en/magazine">Qobuz Magazine</a>; you don’t have to be a subscriber.</p></li> <li><p>It gives evidence of being built by people who love music.</p></li> <li><p>They’re obsessive about sound quality, which is great, but only makes a difference if you’re listening through quality speakers.</p></li> <li><p>A few weeks ago, the mobile app quality switched from adequate to excellent.</p></li> </ol> <h2 id='p-2'>That app</h2> <p>I want to side-trip a bit here, starting with a question. How long has it been since an app you use has added a feature that was genuinely excellent and let you do stuff you couldn’t before and didn’t get in your way and created no suspicion that it was strip-mining your life for profit? I’m here to tell you that this can still happen, and it’s a crushing criticism of my profession that it so rarely does.</p> <p>I’m talking about <a href="https://www.qobuz.com/ca-en/connect">Qobuz Connect</a>. I believe there are other music apps that can do this sort of stuff, but it feels like magic to me.</p> <p>It’s like this. I listen to music at home on an audiophile system with big speakers, in <a href="/ongoing/What/The%20World/Jaguar%20Diary/">our car</a>, and on <a href="/ongoing/When/201x/2019/08/06/Jeanneau-795">our boat</a>. The only app I touch is the <a href="https://play.google.com/store/apps/details?id=com.qobuz.music">Qobuz Android app</a>. The only time it’s actually receiving and playing the music itself is in the car, with the help of Android Auto. In the other scenarios it’s talking to Qobuz running on a Mac, which actually fetches the music and routes it to the audio system. Usually it figures out what player I want it to control automatically, although there’ve been a couple times when I drove away in the car and it got confused about where to send the music. Generally, it works great.</p> <p>The app’s music experience is rich and involving.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/22/Screenshot_20250622-230116.png" alt="Qobuz Android app screenshot" /> <p>It has New Releases and curated playlists and a personalized stream for me and a competent search function for those times I absolutely must listen to Deep Purple or Hania Rani or whoever.</p> <p>I get a chatty not-too-long email from Qobuz every Friday, plugging a few of the week’s new releases, with sideways and backward looks too. (This week: A Brian Wilson stream.) The app has so much stuff, especially among the themed streams, that I sometimes get lost. But somehow it’s not irritating; what’s on the screen remains musically interesting and you can always hit the app’s Home button.</p> <p>Qobuz has its own musical tastes that guide its curation. They’re not always compatible with mine<span class='dashes'> —</span> my tolerance for EDM and mainstream Hip-hop remains low. And I wish they were stronger on Americana. But the intersection is broad enough to provide plenty of enjoyable new-artist experiences. Let me share one with you: <a href="https://kwashibu.bandcamp.com/album/love-warrior-s-anthem">Kwashibu Area Band</a>, from Ghana.</p> <p>Oh, one complaint: Qobuz was eating my Pixel’s battery. So I poked around online and it’s a known problem; you have to use the Android preferences to stop it from running in the background. Huh? What was it doing in the background anyhow?! But it seems to work fine even when it’s not doing it.</p> <h2 id='p-3'>A Mac, you say?</h2> <p>The music you’re listening to is going to be stored on disk, or incoming from a streaming service. Maybe you want to serve some of the stored music out to listen to it in the car or wherever. There are a variety of audio products in the “Streamer” category that do some of these things in various combinations. A lot of them make fanciful claims about the technology inside and are thus expensive, you can easily spend thousands.</p> <p>But any reasonably modern computer can do all these things and more, plus it also can drive a big-screen display, plus it will probably run the software behind whatever next year’s New Audio Hotness is.</p> <p>At this point the harder-core geeks will adopt a superior tone of voice to say “I do all that stuff with FreeBSD and a bunch of open-source packages running on a potato!”</p> <p>More power to ’em. But I recommend a basic Apple Silicon based Mac Mini, M1 is fine, which you can get for like $300 used on eBay. And if you own a lot of music and video you can plug in a 5T USB drive for a few more peanuts. This will run Plex and Qobuz and almost any other imaginable streaming software. Plus you can plug it into your home-theater screen and it has a modern Web browser so you can also play anything from anywhere on the Web.</p> <p>I’ve been doing this for a while but I had one big gripe. When I wanted to stream music from the Mac, I needed to use a keyboard and mouse, so I keep one of each, Bluetooth-flavored, nearby. But since I got Qobuz running that’s become a very rare occurrence.</p> <h2 id='p-4'>You’re forgetting something</h2> <p>Oh, and yeah, there’s the record player. Playing it requires essentially no software at all, isn’t that great?</p></div></content></entry> <entry> <title>Long Links</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/06/21/Long-Links' /> <link rel='replies' thr:count='6' type='application/xhtml+xml' href='/ongoing/When/202x/2025/06/21/Long-Links#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/06/21/Long-Links</id> <published>2025-06-21T12:00:00-07:00</published> <updated>2025-06-21T11:56:27-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <category scheme='https://www.tbray.org/ongoing/What/' term='The World' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>“Wow, Tim, didn’t you do a <a href='/ongoing/When/202x/2025/05/06/Long-Links'>Long Links</a> just last month? Been spending too much time doomscrolling, have we?” Maybe. There sure are a lot of tabs jostling each other along the top of that browser. Many are hosting works that are both long and good. So here they are; you probably don’t have time for all of ’em but my hope is that one or two might reward your visit</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>“Wow, Tim, didn’t you do a <a href="/ongoing/When/202x/2025/05/06/Long-Links">Long Links</a> just last month? Been spending too much time doomscrolling, have we?” Maybe. There sure are a lot of tabs jostling each other along the top of that browser. Many are hosting works that are both long and good. So here they are; you probably don’t have time for all of ’em but my hope is that one or two might reward your visit.</p> <p>Let’s start with a really important subject: Population growth oh actually these days it’s population shrinkage. For a short-sharp-shock-flavored introduction I recommend <a href="https://www.youtube.com/watch?v=Ufmu1WD2TSk">South Korea Is Over</a> which explains the brick wall societies with fertility rates way below the replacement rate of 2.1 children per woman per lifetime are hurtling toward. South Korea, of course, being the canonical example. But also Japan and Taiwan and Italy and Spain and so on.</p> <p>And, of course, the USA, where the numbers aren’t <em>that</em> much higher: <a href="https://www.macrotrends.net/global-metrics/countries/usa/united-states/fertility-rate">U.S. Fertility Rate (1950-2025)</a>. Even so, the population still grows (because of immigration), albeit at less than 1% per annum: <a href="https://www.macrotrends.net/global-metrics/countries/usa/united-states/population-growth-rate">U.S. Population Growth Rate</a>. If the MAGAs get their way and eventually stop all non-white immigration, the US will be in South Korea territory within a generation or two. </p> <p>A reasonable person might ask why. It’s not really complicated, as you can read here: <a href="https://www.nytimes.com/2025/06/15/opinion/birth-rate-parenting-natalism.html?unlocked_article_code=1.Pk8.OBam.dOi0UpP-8-DV&smid=url-share">A Bold Idea to Raise the Birthrate: Make Parenting Less Torturous</a>. From which I quote: “To date, no government policies have significantly improved their nation’s birthrates for a sustained period.” The essay argues convincingly that it’s down to two problems: Capitalism and sexism. Neither of which offers an easy fix. </p> <p>Speaking of the travails of late capitalism, here’s how bad it’s getting: <a href="https://www.nytimes.com/2025/03/01/opinion/crisis-working-homeless.html?unlocked_article_code=1.Qk8.jsTO.aUBSAMHw7Op2&smid=url-share">America Is Pushing Its Workers Into Homelessness</a>.</p> <p>For a refreshingly different take on the business world, here’s Avery Pennarun, CEO of Tailscale: <a href="https://apenwarr.ca/log/20250530">The evasive evitability of enshittification</a>. Not sure I buy what he’s saying, but still worth reading.</p> <p>Most people who visit these pages are geeks or geek-adjacent. If you’re one of those, and especially if you enjoy the small but vibrant genre of Comical Tech War Stories, I recommend <a href="https://yeet.cx/blog/lock-free-rust/">Lock-Free Rust: How to Build a Rollercoaster While It’s on Fire</a></p> <p>And here’s write-up on an AWS product which has one of the best explanations I’ve ever read of the different flavors modern databases come in: <a href="https://www.redshift-observatory.ch/white_papers/downloads/introduction_to_the_fundamentals_of_amazon_redshift.html">Introduction to the Fundamentals of Amazon Redshift</a></p> <p>Of course, the geek conversation these days is much taken up with the the impact of genAI as in “vibe coding”. To summarize the conversation: A few people, not obviously fools, are saying “This stuff seems to help me” and many others, also apparently sensible, are shouting back “You’re lying to yourself, it can’t be helping!” Here is some of the testimony: Kellan on <a href="https://laughingmeme.org//2025/05/25/vibe-coding-for-teams.html">Vibe coding for teams, thoughts to date</a>, Armin Ronacher on <a href="https://lucumr.pocoo.org/2025/6/12/agentic-coding/">Agentic Coding Recommendations</a>, Harper on <a href="https://harper.blog/2025/05/08/basic-claude-code/">Basic Claude Code</a>, and Klabnik on <a href="https://steveklabnik.com/writing/a-tale-of-two-claudes/">A tale of two Claudes</a></p> <p>I lean to believing narratives of personal experience, but on the other hand the skeptics make good points. Another random piece of evidence: Because I’m lazy, I tend to resist adopting technologies that have steep learning curves, which genAI currently does. On many occasions, this has worked out well because those technologies have turned out not to pay off very well. Am I a canary in the coal mine?</p> <h2 id='p-2'>*cough*</h2> <p>Since I introduced myself into the narrative, I’ll note that today is my 70th birthday. I am told that this means that my wisdom has now been maximized, so you’re safe in believing whatever you read in this space. I don’t have anything special to say to commemorate the occasion, so here’s a picture of my neighborhood’s network infrastructure, which outlines the form of a cathedral’s nave. I’m sure there’s a powerful metaphor lurking in there.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/21/TXT55659.png" alt="Many electrical and data wires festoon a back alley" /> <p>Oh, and here’s a photography Long Link: <a href="https://www.lux.camera/what-is-hdr/">What is HDR, anyway?</a> It’s actually a pitch for a nice-looking mobile camera app, but it offers real value on things that can affect the quality of your pictures.</p> <p>Regular readers will know that I’m fascinated by the many unsolved issues and open questions in cosmology, which are by definition the largest problems facing human consciousness. The ΛCDM-vs-MOND controversy, i.e. “Is there really dark matter or does gravity get weird starting at the outer edges of galaxies?”, offers great entertainment value. And, there is news!</p> <p>First of all, here’s a nice overview on the controversy: <a href="https://arxiv.org/pdf/2505.21638v1">Modified Newtonian Dynamics: Observational Successes and Failures</a>.</p> <p>Which points out that the behavior of “wide binary” star systems ought to help resolve the issue, but that people who study it keep coming up with contradictory findings. Here’s the latest, from Korean researchers: Press release <a href="http://www.sejongpr.ac.kr/sejongnewspaperview.do?currentPage=1&searchField=&searchValue=&boardType=3&pkid=73549&utm_source=beehiiv&utm_medium=newsletter&utm_campaign=mediamobilize&_bhlid=3e40dce99e536f4015a1dd2c6afd193a465d17ea">New method of measuring gravity with 3D velocities of wide binary stars is developed and confirms modified gravity</a> and peer-reviewed paper: <a href="https://iopscience.iop.org/article/10.3847/1538-4357/adce09">Low-acceleration Gravitational Anomaly from Bayesian 3D Modeling of Wide Binary Orbits: Methodology and Results with Gaia Data Release 3</a>. Spoiler: They think the gravity gets weird. I have a math degree but cosmology math is generally way over my head. Having said that, I think those South Koreans may be a bit out over their skis; I generally distrust heroic statistical methods. We’ll see.</p> <p>Let’s do politics. It turns out that the barbaric junta which oppresses the people of China does not limit its barbarism to its own geography: <a href="https://www.cbc.ca/news/politics/china-targets-dissidents-canada-1.7543745?cmp=rss">Followed, threatened and smeared — attacks by China against its critics in Canada are on the rise</a>.</p> <p>More politics: The MAGAs are always railing against “elites”. Here are two discussions of what they mean: <a href="https://www.theatlantic.com/ideas/archive/2025/04/class-money-finances/682301/">What the Comfort Class Doesn’t Get</a> and <a href="https://siderea.dreamwidth.org/1865048.html">When They Say Elites, They Mean Us</a>.</p> <p>The world’s biggest political issue <em>should</em> be the onrushing climate crisis. When Trump and his toadies are justly condemned and ridiculed by future historians, it is their malevolent cluelessness on this subject that may burn the hottest. Who knows, maybe they’ll pay attention to this: <a href="https://www.bloomberg.com/news/newsletters/2025-06-18/insurers-want-businesses-to-wake-up-to-costs-of-extreme-heat">Insurers Want Businesses to Wake Up to Costs of Extreme Heat</a>.</p> <h2 id='p-1'>The list of Long Links is too long</h2> <p>So I’ll try to end cheerfully.</p> <p>A graceful essay about an old camera and a dreamy picture: <a href="https://petapixel.com/2025/05/27/a-bridge-across-time-for-sebastiao-salgado/">A Bridge Across Time: For Sebastião Salgado</a></p> <p>Latin Wikipedia has 140,000 articles; consider the delightful discussion of <a href="https://la.wikipedia.org/wiki/Equus_asinus"><cite>Equus asinus</cite></a>.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/21/equus-asinus.png" alt="Asinus in opere tesselato Byzantino" /> <div class='caption'><p>Asinus in opere tesselato Byzantino</p></div> <p>Here’s a lovely little song from TORRES and Julien Baker: <a href="https://www.youtube.com/watch?v=TurU_Jn-LEg">The Only Marble I’ve Got Left</a>.</p> <p>Finally, a clear-eyed if lengthy essay on why and how to think: <a href="https://www.newyorker.com/culture/open-questions/should-you-question-everything">Should You Question Everything?</a></p></div></content></entry> <entry> <title>June 2025 C2PA News</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/06/17/More-C2PA' /> <link rel='replies' thr:count='1' type='application/xhtml+xml' href='/ongoing/When/202x/2025/06/17/More-C2PA#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/06/17/More-C2PA</id> <published>2025-06-17T12:00:00-07:00</published> <updated>2025-06-19T09:20:16-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/Identity' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Identity' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>Things are happening in the C2PA world; here are a couple of useful steps forward, plus cheers and boos for Adobe. Plus a live working C2PA demo you can try out</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>Things are happening in the C2PA world; here are a couple of useful steps forward, plus cheers and boos for Adobe. Plus a live working C2PA demo you can try out.</p> <p>Refresher: The <a href="https://c2pa.org/">C2PA</a> technology is driven by the <a href="https://contentauthenticity.org/">Content Authenticity Initiative</a> and usually marketed as “Content Credentials”. I’ve written before about it, an <a href="/ongoing/When/202x/2023/10/28/C2PA-Workflows">introduction in 2023</a> and a <a href="/ongoing/When/202x/2024/10/29/Lane-Provenance">progress report</a> last October.</p> <p>Let’s start with a picture.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/17/TXT55648.png" alt="A dark picture full of vague swirls and jiggly lights" /> <div class='caption'><p>I was standing with the camera by the ocean at dusk and accidentally left it in the “B” long-exposure setting, so this isn’t really a picture <em>of</em> anything but I thought it was kinda pretty.</p></div> <h2 id='p-1'>Validating Content Credentials</h2> <p>As I write this, there are now at least two C2PA-validator Chrome extensions: the <a href="https://chromewebstore.google.com/detail/contentlens-c2pa-validato/gdejpnjeepoffhkbcgnjdbkgpohdhmln?hl=en">ContentLens C2PA Validator</a> from <a href="https://www.contentlens.ai/">ContentLens</a> and <a href="https://chromewebstore.google.com/detail/c2pa-content-credentials/mjkaocdlpjmphfkjndocehcdhbigaafp?hl=en">C2PA Content Credentials</a> from <a href="https://www.digimarc.com/">Digimarc</a>.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/17/cc-readout.png" alt="C2PA verifier display" class="inline" /> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/17/cc2-readout.png" alt="C2PA verifier display" class="inline" /> <p>If you install either of them, and then you click on that picture just above in Chrome to get the larger version, then you right-click on the larger picture, the menu will offer Content-Credentials validation.</p> <p>Doing this will produce a little “CR” logo at the top right corner, meaning that the C2PA data has been verified as being present and signed by a trusted certificate issuer, in this case Adobe.</p> <p>Then there’s a popup; the two extensions’ are on the right. They’re different, in interesting ways. Let’s walk through the second one.</p> <p>The little thumbnail at the top of the popup is what the image looked like when the C2PA was added. Not provided by the other verifier.</p> <p>The paragraph beginning “Displaying credentials…” says that the C2PA manifest was embedded in the JPG as opposed to stored out on the cloud; The cloud works fine, and is perhaps a good idea because the C2PA manifest can be quite large. I’m not clear on what the “watermark” is about.</p> <p>“Issued by Adobe” means that the Chrome extension verified the embedded C2PA against Adobe’s public key and can be confident that yes, this was really signed by them.</p> <p>“<b>Produced by</b> Timothy Bray” is interesting. How can it know? Well, it turns out that it used LinkedIn’s API to verify that I am <a href="https://www.linkedin.com/in/timbraysoftwareguy/">timbraysoftwareguy</a> over on LinkedIn. But it goes further; LinkedIn has an integration with <a href="https://www.clearme.com">Clear</a>, the airport-oriented identity provider. To get a Clear account you have to upload government-issued ID, it’s not trivial.</p> <p>So this short sentence expands to (take a deep breath) “The validator extension verified that Adobe said that LinkedIn said that Clear said that the government ID of the person who posted this says that he’s named Timothy Bray.”</p> <p>Note that the first extension’s popup also tells you that Adobe has verified what my LinkedIn and Instagram accounts are. This seems super-useful and I wonder why the other omits it.</p> <p>“<b>App or device used</b>…” is simple enough, but I’m not actually sure how it works; I guess Adobe has embedded a keypair in my Lightroom installation? If I’d taken the picture with a C2PA-equipped camera this is where that history would be displayed.</p> <p>“<b>AI tool used</b> None”. Interesting and useful, since Adobe provides plenty of genAI-powered tools. Of course, this relies on Lightroom telling the truth, but still.</p> <p>The “View More” button doesn’t currently work; it takes you to the interactive <a href="https://contentcredentials.org/verify/">contentcredentials.org/verify</a> page, which seems to fail in retrieving the JPG. If you download the picture then upload it into the verify page (go ahead, it’s free) that seems to work fine. In addition to the info on the popup, the verify page will tell you (nontechically i.e. vaguely) what I did to the picture with Lightroom.</p> <h2 id='p-3'>What’s good about this?</h2> <p>Well, it’s here and it works! There’s all this hype about how cool it will be when the C2PA includes info about what model of camera and lens it used and what the shutter speed was and so on, but eh, who cares really? What matters to me (and should matter to the world) is <em>provenance</em>: Who posted this thing?</p> <p>As I write this, supporters of Israel and Iran are <a href="https://www.404media.co/the-ai-slop-fight-between-iran-and-israel/?ref=daily-stories-newsletter">having an AI Slop Fight</a> with fake war photos and videos. In a C2PA-rich world, you could check; If some clip doesn’t have Content Credentials you should probably be suspicious, and if it does, it matters whether it was uploaded by someone at <a href="https://www.idf.il/en/">IDF.il</a> versus <a href="https://www.bbc.com">BBC.co.uk</a>.</p> <h2 id='p-2'>What’s wrong with this?</h2> <p>Look, I hate to nitpick. I’m overwhelmingly positive on this news, it’s an existence proof that C2PA can be made to work in the wild. My impression is that most of the money and muscle comes from Adobe; good on ’em. But there are things that would make it more useful, and usable by more Web sites. These are not listed in any particular order.</p> <h2 id='p-7'>Identity!</h2> <p>Adobe, it’s nice that you let me establish my identity with LinkedIn, Instagram, and Clear. But what I’d <em>really</em> like is if you could also verify and sign my Fediverse and Bluesky handles. And, Fediverse and ATProto developers, would you please, first of all, stop stripping C2PA manifests from uploaded photo EXIF, and secondly, add your own link to the C2PA chain saying something like “Originally posted by @timbray@cosocial.ca.”</p> <p>Because having verifiable media provenance in the world of social media would be a strong tool against disinformation and slop.</p> <p>Oh, and another note to Adobe: When I export a photo, the embed-manifest also offers me the opportunity, under the heading “Web3”, to allow the image “be used for NFT creative attribution on supported marketplaces” where the supported marketplaces are Phantom and MetaMask. Seriously, folks, in 2025? Please get this scammy cryptoslime out of my face.</p> <h2 id='p-4'>Browsers please…</h2> <p>This was done with Chrome extensions. There are people working on extensions for Firefox and Safari, but they’re not here yet. Annoyingly, the extensions also don’t seem to work in mobile Chrome, which is where most people look at most media.</p> <p>I would love it if this were done directly and automatically by the browser. The major browsers aren’t perfect, but their creators are known to take security seriously, and I’d be much happier trusting one of them, rather than an extension from a company I’d never previously heard of.</p> <h2 id='p-8'>… or maybe JavaScript?</h2> <p>The next-best solution would be a nice JS package that just Does The Right Thing. It should work like the way I do fonts: If you look in the source for the page you are now reading, the splodge of JS at the top includes a couple of lines that mention “typekit.com”. Typekit (since acquired by Adobe) offers access to a huge selection of excellent fonts. Those JS invocations result in the text you are now reading being displayed in <a href="/ongoing/When/201x/2011/07/17/Tisa">FF Tisa Web Pro</a>.</p> <p>Which<span class='dashes'> —</span> this is important<span class='dashes'> —</span> is not free. And to be clear, I am willing to pay to get Content Credentials for the pictures on this blog. It feels exactly like paying a small fee for access to a professionally-managed font library. Operating a Content-Credentials service wouldn’t be free, it’d require running a server and wrangling certs. At scale, though, it should be pretty cheap.</p> <p>So here’s an offer: If someone launches a service that allows me to straightforwardly include the fact that this picture was sourced from tbray.org in my Content Credentials, my wallet is (modestly) open.</p> <p>By the way, the core JavaScript code is already under construction; here’s <a href="https://github.com/microsoft/c2pa-extension-validator">Microsoft</a> and the <a href="https://opensource.contentauthenticity.org/docs/introduction">Content Authority Initiative</a> itself. There’s also a Rust crate for server-side use, and a “c2patool” command-line utility based on it..</p> <h2 id='p-6'>Open-Source issues</h2> <p>You’ll notice that the right-click-for-Content-Credentials doesn’t work on the smaller version of the picture embedded in the text you are now reading; just the larger one. This is because the decades-old Perl-based <span class='o'>ongoing</span> publishing software runs the main-page pictures through <a href="https://imagemagick.org/index.php">ImageMagick</a>, which doesn’t do C2PA. I should find a way to route around this.</p> <p>In fact, it wouldn’t be rocket science for ImageMagick (or open-source packages generally) to write C2PA manifests and insert them in the media files they create. But how should they sign them? As noted, that requires a server that provides cert-based signatures, something that nobody would expect from even well-maintained open-source packages.</p> <p>I dunno, maybe someone should provide a managed-ImageMagick service that (for a small fee) offers signed-C2PA-manifest embedding?</p> <h2 id='p-9'>What’s next?</h2> <p>The work that needs to be done is nontrivial but, frankly, not that taxing. And the rewards would be high. Because it feels like a no-brainer that knowing who posted something is a big deal. Also the inverse: Knowing that you <em>don’t</em> know who posted it.</p> <p>Where is it an especially big deal? On social media, obviously. It’s really time for those guys to start climbing on board.</p></div></content></entry> <entry> <title>AI Angst</title> <link href='https://www.tbray.org/ongoing/When/202x/2025/06/06/My-AI-Angst' /> <link rel='replies' thr:count='14' type='application/xhtml+xml' href='/ongoing/When/202x/2025/06/06/My-AI-Angst#comments' /> <id>https://www.tbray.org/ongoing/When/202x/2025/06/06/My-AI-Angst</id> <published>2025-06-06T12:00:00-07:00</published> <updated>2025-06-08T15:39:49-07:00</updated> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology/AI' /> <category scheme='https://www.tbray.org/ongoing/What/' term='Technology' /> <category scheme='https://www.tbray.org/ongoing/What/' term='AI' /> <summary type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'>My input stream is full of it: Fear and loathing and cheerleading and prognosticating on what generative AI means and whether it’s Good or Bad and what we should be doing. All the channels: Blogs and peer-reviewed papers and social-media posts and business-news stories. So there’s lots of AI angst out there, but this is mine. I think the following is a bit unique because it focuses on cost, working backward from there. As for the genAI tech itself, I guess I’m a moderate; there is a there there, it’s not all slop. But first…</div></summary><content type='xhtml'><div xmlns='http://www.w3.org/1999/xhtml'> <p>My input stream is full of it: Fear and loathing and cheerleading and prognosticating on what generative AI means and whether it’s Good or Bad and what we should be doing. All the channels: Blogs and peer-reviewed papers and social-media posts and business-news stories. So there’s lots of AI angst out there, but this is mine. I think the following is a bit unique because it focuses on cost, working backward from there. As for the genAI tech itself, I guess I’m a moderate; there is a there there, it’s not all slop. But first…</p> <h2 id='p-5'>The rent is too damn high</h2> <p>I promise I’ll talk about genAI applications but let’s start with money. <em>Lots</em> of money, big numbers! For example, venture-cap startup money pouring into AI, which as of now apparently adds up to <a href="https://finance.yahoo.com/news/how-nvidia-played-a-central-role-in-the-306-billion-ai-startup-boom-195741749.html">$306 billion</a>. And that’s just startups; Among the giants, Google alone <a href="https://www.ciodive.com/news/google-cloud-generative-ai-data-center-capacity-buildouts/739357/">apparently plans $75B</a> in capital expenditure on AI infrastructure, and they represent maybe a quarter at most of cloud capex. You think those are big numbers? McKinsey offers <a href="https://www.mckinsey.com/industries/technology-media-and-telecommunications/our-insights/the-cost-of-compute-a-7-trillion-dollar-race-to-scale-data-centers">The cost of compute: A $7 trillion race to scale data centers</a>.</p> <p>Obviously, lots of people are wondering when and where the revenue will be to pay for it all. There’s one thing we know for sure: The pro-genAI voices are fueled by hundreds of billions of dollars worth of fear and desire; fear that it’ll never pay off and desire for a piece of the money. Can you begin to imagine the pressure for revenue that investors and executives and middle managers are under?</p> <p><a href="https://cosocial.ca/@timbray/114572118905328515">Here’s an example</a> of the kind of debate that ensues.</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/06/Anil-MCP.png" alt="Anil Dash on Mastodon, on MCP vs the Fediverse" /> <div class='caption'><p>“MCP” is <a href="https://en.wikipedia.org/wiki/Model_Context_Protocol">Model Context Protocol</a>, used for communicating between LLM software and other systems and services.<br/>I have no opinion as to its quality or utility.</p></div> <p>I suggest that when you’re getting a pitch for genAI technology, you should have that greed and fear in the back of your mind. Or maybe at the front.</p> <h2 id='p-7'>And that’s just the money</h2> <p>For some reason, I don’t hear much any more about the environmental cost of genAI, the gigatons of carbon pouring out of the system, imperilling my children’s future. Let’s please not ignore that; let’s read things like <a href="https://www.eesi.org/articles/view/data-center-energy-needs-are-upending-power-grids-and-threatening-the-climate">Data Center Energy Needs Could Upend Power Grids and Threaten the Climate</a> and let’s make sure every freaking conversation about genAI acknowledges this grievous cost.</p> <p>Now let’s look at a few sectors where genAI is said to be a big deal: Coding, teaching, and professional communication. To keep things balanced, I’ll start in a space where I have kind things to say.</p> <h2 id='p-2'>Coding</h2> <p>Wow, is my tribe ever melting down. The pro- and anti-genAI factions are hurling polemical thunderbolts at each other, and I mean extra hot and pointy ones. For example, here are 5600 words entitled <a href="https://blog.glyph.im/2025/06/i-think-im-done-thinking-about-genai-for-now.html">I Think I’m Done Thinking About genAI For Now</a>. Well-written words, too.</p> <p>But, while I have a lot of sympathy for the contras and am sickened by some of the promoters, at the moment I’m mostly in tune with Thomas Ptacek’s <a href="https://fly.io/blog/youre-all-nuts/">My AI Skeptic Friends Are All Nuts</a>. It’s long and (fortunately) well-written and I (mostly) find it hard to disagree with.</p> <p>it’s as simple as this: I keep hearing talented programmers whose integrity I trust tell me “Yeah, LLMs are helping me get shit done.” The probability that they’re all lying or being fooled seems very low.</p> <p>Just to be clear, I note an absence of concern for cost and carbon in these conversations. Which is unacceptable. But let’s move on.</p> <p>It’s worth noting that I learned two useful things from Ptacek’s essay that I hadn’t really understood. First, the “agentic” architecture of programming tools: You ask the agent to create code and it asks the LLM, which will sometimes hallucinate; the agent will observe that it doesn’t compile or makes all the unit tests fail, discards it, and re-prompts. If it takes the agent module 25 prompts to generate code that while imperfect is at least correct, who cares?</p> <p>Second lesson, and to be fair this is just anecdata: It feels like the Go programming language is especially well-suited to LLM-driven automation. It’s small, has a large standard library, and a culture that has strong shared idioms for doing almost anything. Anyhow, we’ll find out if this early impression stands up to longer and wider industry experience.</p> <p>Turning our attention back to cost, let’s assume that eventually all or most developers become somewhat LLM-assisted. Are there enough of them, and will they pay enough, to cover all that investment? Especially given that models that are both open-source and excellent are certain to proliferate? Seems dubious.</p> <p>Suppose that, as Ptacek suggests, LLMs/agents allow us to automate the tedious low-intellectual-effort parts of our job. Should we be concerned about how junior developers learn to get past that “easy stuff” and on the way to senior skills? That seems a very good question, so…</p> <h2 id='p-10'>Learning</h2> <p>Quite likely you’ve already seen Jason Koebler’s <a href="https://www.404media.co/teachers-are-not-ok-ai-chatgpt/?ref=daily-stories-newsletter">Teachers Are Not OK</a>, a frankly horrifying survey of genAI’s impact on secondary and tertiary education. It is a tale of unrelieved grief and pain and wreckage. Since genAI isn’t going to go away and students aren’t going to stop being lazy, it seems like we’re going to re-invent the way people teach and learn.</p> <p>The stories of students furiously deploying genAI to avoid the effort of actually, you know, learning, are sad. Even sadder are those of genAI-crazed administrators leaning on faculty to become more efficient and “businesslike” by using it.</p> <p>I really don’t think there’s a coherent pro-genAI case to be made in the education context.</p> <h2 id='p-11'>Professional communication</h2> <p>If you want to use LLMs to automate communication with your family or friends or lovers, there’s nothing I can say that will help you. So let’s restrict this to conversation and reporting around work and private projects and voluntarism and so on.</p> <p>I’m pretty sure this is where the people who think they’re going to make big money with AI think it’s going to come from. If you’re interested in that thinking, <a href="https://docs.google.com/presentation/d/1Der8WWGeVxdOWx37bMV_nj9N1tUAVcvSSRa6qxKx75g/edit?slide=id.p1#slide=id.p1">here’s a sample</a>; a slide deck by a Keith Riegert for the book-publishing business which, granted, is a bit stagnant and a whole lot overconcentrated these days. I suspect scrolling through it will produce a strong emotional reaction for quite a few readers here. It’s also useful in that it talks specifically about costs.</p> <p>That is for corporate-branded output. What about personal or internal professional communication; by which I mean emails and sales reports and committee drafts and project pitches and so on? I’m pretty negative about this. If your email or pitch doc or whatever needs to be summarized, or if it has the colorless affectless error-prone polish of 2025’s LLMs, I would probably discard it unread. I already found the switch to turn off Gmail’s attempts to summarize my emails.</p> <p>What’s the genAI world’s equivalent of “Tl;dr”? I’m thinking “TA;dr” (A for AI) or “Tg;dr” (g for genAI) or just “LLM:dr”.</p> <p>And this vision of everyone using genAI to amplify their output and everyone else using it to summarize and filter their input feels simply perverse.</p> <p>Here’s what I think is <a href="https://infosec.exchange/@codinghorror/114606355212363074">an important finding</a>, ably summarized by Jeff Atwood:</p> <img src="https://www.tbray.org/ongoing/When/202x/2025/06/06/Dare-Jeff.png" alt="Dare Obasanjo and Jeff Atwood on how to survive AI" /> <p>Seriously, since LLMs by design emit streams that are optimized for plausibility and for harmony with the model’s training base, in an AI-centric world there’s a powerful incentive to say things that are implausible, that are out of tune, that are, bluntly, weird. So there’s one upside.</p> <p>And let’s go back to cost. Are the prices in Riegert’s slide deck going to pay for trillions in capex? Another example: My family has a Google workplace account, and the price just went up from $6/user/month to $7. The announcement from Google emphasized that this was related to the added value provided by Gemini. Is $1/user/month gonna make this tech make business sense?</p> <h2 id='p-13'>What I can and can’t buy</h2> <p>I can sorta buy the premise that there are genAI productivity boosts to be had in the code space and maybe some other specialized domains. I can’t buy for a second that genAI is anything but toxic for anything education-related. On the business-communications side, it’s damn well gonna be tried because billions of dollars and many management careers depend on it paying off. We’ll see but I’m skeptical.</p> <p>On the money side? I don’t see how the math and the capex work. And all the time, I think about the carbon that’s poisoning the planet my children have to live on.</p> <p>I think that the best we can hope for is the eventual financial meltdown leaving a few useful islands of things that are actually useful at prices that make sense.</p> <p>And in a decade or so, I can see business-section stories about all the big data center shells that were never filled in, standing there empty, looking for another use. It’s gonna be tough, what can you do with buildings that have no windows?</p></div></content></entry> </feed> If you would like to create a banner that links to this page (i.e. this validation result), do the following:
Download the "valid Atom 1.0" banner.
Upload the image to your own server. (This step is important. Please do not link directly to the image on this server.)
Add this HTML to your page (change the image src attribute if necessary):
If you would like to create a text link instead, here is the URL you can use:
http://www.feedvalidator.org/check.cgi?url=http%3A//www.tbray.org/ongoing/ongoing.atom
