Entries tagged 'lang:en'

1990s bootloader memories Entry created on 2026-04-17 author:steeph (372) cat:Computers (21) cat:Linux (36) cat:Operating Systems (24) lang:en (254)

When I was growing up I didn't have a menu to select which OS to boot. I had to use fdisk to change the active partition in order to switch from Unix* to DOS or back. (Or switch boot order in the BIOS when they were installed on separate HDDs. But I was rarely so lucky to be allowed on an expensive computer like that.)

When I first tried Linux I was thrilled by the fact that it came with a boot loader that would let you add other OSs. Dual-booting was so easy. Linux (developers) seemed so thoughtful, considering the possibility that you might want to use other OSs alongside it. And MS just blindly overwrote the MBR without even asking.

GRUB (legacy) was a great improvement over LiLo. But nowadays LiLo's simplicity is kind of attractive compared to the >1000 lines of GRUB 2 config that every distro ships nowadays.

Entry created on 2026-04-16 author:steeph (372) cat:Computers (21) cat:Software (53) cat:Thoughts (71) lang:en (254)

IT systems become more complex over generations. There's always something that could be made simpler by adding another abstraction layer. This can not go on indefinitely. But it will probably go on for longer than we all wish it would.

Sorry, this might be a totally stupid and banale thought. But it feels relevant right now and I don't know how to explain my point more concise. Let me know if you think I should. (Of if it's because I don't really have a point.)

When you think back about how computers were used in the 1960s, the 1970s, the 1980s, the people who used them back then really knew their systems, as it's often put. With each generation more people began using computers. So while some were still designing, improving and expanding circuits, others would work on inventing higher-level languages, operating systems. When you think a bit further, the 1990s, microcode became more complex, operating systems started to became more complex, software interfaces between applications were developed. But we still needed people who maintained OS kernels, worked on processor architectures and knew serial and parallel interfaces on a low level.

You can look at any small part of computers and will find that new abstraction layers have formed over time. E.g. Your fan speed controller. I bet you don't even know what processor it is utilising and what it's capable of. Even if you study an open source driver for it, you'll likely just see an imitation of some things a Windows driver is doing. There are probably only a handful of people in the world who really understand that tiny part of your computer.

Let's not get into networking, the internet and the complexity that was added to everything in the last couple of decades.

My point is: We will need people who understand every little thing of these hugely complex systems at least at some point. Otherwise systems will not run smoothly or reliably. In the silly little example of the fan speed controller, if that would not work with newer systems anymore for some reason, documentation would probably be good enough to find a workaround. If it would have to be replaced in future systems, that's also doable, or you can just run fans at full speed all the time. But there are so many other components (I'm mainly thinking of software) that don't just have to work reliably on their own but interact with other, evolving components.

Not every little thing can be maintained continuously with the amount of attention it deserves. Be it the often used example of a small open source software component that 90% of software somehow relies on, maintained by a single person at the risk of, well, anything that might happen to a human. Or a commercial product that's driven to make as much money as possible with next to no work hours. Or end of life of some software that still runs on millions of machines.

These are disruptions in IT that happen right now. With increasing complexity of systems, failures that have not been properly planned for will probably happen more and more often. It's not even unusual today that when a service goes down, the people responsible for keeping it up don't understand what has happened. They have to start a research into the matter; if they have the time or it's deemed important enough. Because there's a gap between the coders, who know the languages, frameworks and tools they're working with, and the system administrators, who know their OS, config, containers with other OSs, their config and somewhat the services that are running. But in between there are frameworks, huge libraries that depend on other libraries you don't even know about, cloud services you have no insight into. The code written, if it's still written by a coder at all, may be compiled into another language that's interpreted, at each layer adding Gigabytes of dependencies you have never read and can't possible stay updated on.

All of those components have bugs. The more we add, the more failures will occur. More projects will be kept hardly alive because they're still needed to delay another failure. Just as you – even as a computer enthusiast – likely don't know what physical signals are needed over your USB port to make it do what it does, people responsible for keeping a service you rely on running don't know how most of the systems work that they are keeping online.

This growing complexity can be seen in almost every field. But I think it is growing especially fast in medical science and IT. Both will have negative effects on our lives. But with medicine it is a side effect of a science that's working to improve and prolong our lives. So it might be worth it. IT does not have that noble goal.

Talks from the 39th Chaos Communication Congress Entry created on 2026-01-01 (edited 2026-01-09) author:steeph (372) cat:CCC (3) cat:Talks (4) lang:de (41) lang:en (254) top:Events:Chaos:Congress (2)

Yet another year is over without me having been at one of teh big Chaos events. Congress stays one of my favouruite vents. Until I'll be there in person, again, I mostly consume it over the fediverse and look forward to watching interesting and entertaining talk recordings. I don't usually do this, but this time I felt like recommending the talks I got the best out of.

Die Känguru-Rebellion: Digital Independence Day

56 min - deutsch - CCC & Community - Marc-Uwe Kling and Linus Neumann

Die meiste Zeit Unterhaltung von Mark-Uwe Kling. Er liest sein Comics über Elon Musk und Jeff Bezos auf dem Mars. Das ganze ist Publikums-Lockmittel für die Vorstellung der Idee des Digitalen Unabhängigkeitstags (DUT)/Digital Independence Day (DID). Unter dem Hashtag #DUTgemacht bzw. #DIDit sollen Interessierte von nun an an jedem ersten Sonntag im Monat den Umstieg weg von geschlossenen Plattformen, von Millardären kontrollierten Diensten und gesellschaftsschädlichen Apps und Webseiten besprechen bzw. öffentlich mit dem Erfolgreichen Verzicht angeben. Dazu gäbe es eineiges zu sagen. Vielleicht werde ich das ja noch in einem eigenen Post darüber. Es ist aus unterschiedlichen Gründen gar keine so schlechte Idee und sie wurde öffentlichkeitswirksam vorgestellt. Der DUT hat jetzt schon viele Vertreter und kann als erfolgreich eingeführt betrachtet werden. Projektwebseite: di.day

The idea of a monthly Digital Independence Day (DID) on which many people draw attention to and discuss possibilities to remove power from billionaires and their corporations by choosing to use alternatives is a good one. There's a few things to talk about here. And maybe I will in a separate post.

All my Deutschlandtickets gone: Fraud at an industrial scale

60 min - Englisch - Security - Q Misell and 551724 / maya boeckh

Entertaining story of an investigation into fake and otherwise illegitimately sold German train tickets, a stolen signing key, communication with transport companies, a QR code that is illegal to scan. Just a good and entertaining story.

Hacking washing machines

56 min - Englisch - Hardware - Severin von Wnuck-Lipinski and Hajo Noerenberg

20 year old washing machines have interesting interfaces for analising and controlling their sensors and actuators. Software for service technitions, firmware dump of a controller, finding the reason why a machine is no longer spin-drying. Newer machines have even more interfaces. Custom apps for controlling and reading them would be interesting. A good insight into those things (not a comnplete overview) based on the speaker's experiences.

Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents

58 min - English - Security - Johann Rehberger

Demonstrating AI agent exploits, many of them surprisingly simple!

AI Agent, AI Spy

40 min - English - Ethics, Society & Politics - Udbhav Tiwari and Meredith Whittaker

In-depth introduction to the privacy-invading design and features of an OS-integrated AI agent (Microsoft Recall). This was quite interesting and reveiling to me because I have had hardly more information on it than the headlines conveyed and I have no experience with AI agents myself. The talk covers reliability, vulnerability, privacy-intruding design and functioning principle, and an appeal to the people creating agentic systems ("touch grass, press pause" and "stop reckless deployment"). I cocur with most of what's said in the talk, bt also learned some details about MS Recall. Apparently the negative hype wasn't exaggerated. This is an extraordinary bad design, made by combining bad ideas, resulting in software that antagonises the user more than anything MS has ever tried.

PRÜF

38 min - deutsch - Ethics, Society & Politics - Nico Semsrott

Nico Semsrott stellt die PRÜF-Kampagne vor. Inklusive Gemeinschaftsrituale (naja, nur Singen). Aber gute Vorstellung und Erklärung der Kampagne.

Wer liegt hier wem auf der Tasche? - Genug mit dem Bürgergeld-Fetisch. Stürmt die Paläste!

56 min - deutsch - Ethics, Society & Politics - Helena Steinhaus

Über die aktuelle Bürgergelddebatte, armenfeindliche Politik, grubndgesetzwidrige Sanktionen, Bestrafung von Schwäche. Parteiische, oft polemisch, manchmal u7nsachlich. Aber ich denke das ist erkenn-und einortenbar. Trotzdem eine intere4ssante Dartstellung einer wichtige Sichtweise und mangels sozialerer Gesetze und Politik leider notwendiger zuvilgesellschaftlicher Hilfe.

51 Ways to Spell the Image Giraffe: The Hidden Politics of Token Languages in Generative AI

38 min - English - Art & Beauty - Ting-Chun Liu and Leon-Etienne Kühr

Really interesting insight into how artificial neural neutworks convert between text tokens and images (generating images from text prompts).

CSS Clicker Training: Making games in a "styling" language

39 min - English - Art & Beauty - Lyra Rebane

I love this talk because it's about a topic I've been interested in for years without ever taking the time to learn much about it. Lyra presents examples of CSS crimes (tricks that abuse features of CSS). Using checkboxes or details elements to influence arbitrary elements on a page are relatively well known crimes and can be used to create complex GUIs that look like they are probably built with JS. But there are many more tricks that allow for surprising GUI features. Just a few examples: A card game, random choice buttons, movable "windows", a 2D grid map with Zelda style character movement, binary operator implementation. Apparently people take this to the extreme (as I could have expected) and there is a CPU implemented in CSS that executes binary code. Lots to check out if I wanted to spend time getting into this topic. Check out her blog.

Von Fuzzern zu Agenten: Entwicklung eines Cyber Reasoning Systems für die AIxCC

52 min - deutsch - Security - Mischa Meier (mmisc) and Annika Kuntze

Den hier möchte ich hier erwähnen, weil zur Zeit überwiegend die einseitige Sichtweise geteilt wird, dass KI-generierte Bug-Reports bzw. Reports über durch KI gefundene Bugs unbrauchbar und durch die extreme Zeitverschwendung schädlich für ehrenamtlich entwickelte Software ist. Dieses hauptsächlich durch die Talks einer Person verbreitete Sichtweise habe ich keine eigene Erfahrung und keinen Widerspruch entgegenzusetzen. Aber die hier präsentierte Arbeit legt nahe, dass es stark auf die Qualität der Bugsuche mit KI ankommt und darauf, wie Agenten zur Bugsuche und Fehlerquotenverringerung eingesetzt wird. (Das hat auch Daniel Stenberg mittlerweile erfahren/eingestanden.)

I Hated All The Cross-Stitch Software So I Made My Own: My Deranged Outsider Software Suite For Making Deranged Outsider Art

36 min - English - Art & Beauty - yomimono

This isn't really a topic I'm interested in getting into. I won't try cross stitching because I have enough topics I don't spend any time actually doing anything in. But I liked the talk and it was and interesting insight into the hobby that is suited for newbs and not only about the software. This is actually one of two cross stitching talks at 39c3. The other one has some interesting bits as well for somebody who doesn't really care about stitching and is well worth watching if you do.

There is NO WAY we ended up getting arrested for this (Malta edition)

54 min - Endlish - Security - mixy1, Luke Bjorn Scerri and girogio

Three students from Malta enthusiastically tell their side of their incredible story of being arrested for responsibly disclosing a vulnerability they found in a mobile app. It's a story about Maltese law, police, politics and media representation.

Live, Die, Repeat - The fight against data retention and boundless access to data

40 min. - English - Ethics, Society & Politics - Klaus Landefeld

The tiresome topic of data retention laws is one that I almost didn't want to include on this list here. But it is not only an important issue (The fight against them is not going well if we stop talking about it because it is exhausting to repeat the same points against the same kind of misinformation for generations.) but also a good (re-)intoduction and summary of the concept of data retention, it's problems and the political history of such laws.

Not an Impasse: Child Safety, Privacy, and Healing Together

45 min. - English - Ethics, Society & Politics - Kate Sim

On proposed technological and legal pseudo-solutions for increasing child safety on the internet, the alleged divide between privacy and safety, real and practical dangers of sexual exploitation of children on the internet and what we can do to actually improve child safety.

Entry created on 2025-12-21 author:steeph (372) cat:Crystals (1) cat:Gem Stones (1) cat:Macro (3) cat:Photos (29) lang:en (254)

And I like macro photos. And crystals are very photogenic.

File Attachments (4 files)
gemmacro-1.jpeg (image/jpeg, 432020 B)
gemmacro-1.jpeg (image/jpeg, 432020 B)
gemmacro-2.jpeg (image/jpeg, 312135 B)
gemmacro-2.jpeg (image/jpeg, 312135 B)
gemmacro-3.jpeg (image/jpeg, 754944 B)
gemmacro-3.jpeg (image/jpeg, 754944 B)
gemmacro-4.jpeg (image/jpeg, 258434 B)
gemmacro-4.jpeg (image/jpeg, 258434 B)
A Document-centric Web Entry created on 2024-11-01 (edited 2025-11-27) author:steeph (372) cat:#100DaysToOffload (41) cat:Search Engines (1) cat:Web Browsers (5) cat:Web Sites (8) cat:World Wide Web (10) lang:en (254)

I've been thinking about what exactly it is that is wrong with the WWW and what to do about it. It feels like it became worse over the years. It's easy to make out individual reasons: Walled gardens, ad-centric web sites, bad mass-generated and LLM-generated content at the top of all web searches, the lack of search results from small, personal web sites without an SEO budget or the malicious will to implement all the SEO tricks for the sake of it, egoistic algorithms (that push harmful and hateful content because it makes them feel good). Thinking about how these things became the way they are is sometimes interesting and may help by teaching a lesson. But it doesn't really bring us closer to a solution. I've had a few thoughts about what does, though. It's not as complicated as I make it sound here. It's just that I needed to think about it to be sure what I even want. And that is for the web to be made of documents with hyperlinks. If it is a text document, a searchable database, a set of image, a list of things, an article with pictures and audio samples, a video file that I can download and play, a tree of links to other documents or something similar to those, then it is something for the world wide web. If it is an application, it's not a document for the web. It's impossible to draw an exact line here. But that's the general rule for me now. It's not that web apps shouldn't exist. People make them and people like using them. So that's fine. But that's not what the web was made for and not what I personally want when browsing the web. It's one thing that photo editors, t-shirt designers, CAD software, action games and all those things exist. You can use them or not. But it has become so normal that web sites are huge and require JavaScript to even load that sites started being huge and require JS even though it's not necessary to serve their purpose. And that has become normal, too, by now. A page that in essence should be a simple document often is blown up do be a collection of applications in which

What can you do?

I've came to believe that there is no route to turning the web into the web that resembles my vision of a good web. It's not even just that I don't think that I (together with similar-mimded people) can't obtain the power to force the usage of certain software or to form habits in others. I don't think it would be a sustainable way with a lasting positive effect on the web. That doesn't mean that there aren't ways to bring others to use better alternatives to walled gardens, closed networks, sites with lots of ads and only 10 % content, sites that use dark patterns and search engines of the oligopositic type. You can promote small projects, share links to useful and interesting sites, talk about how you use the web, make it normal to use a search engine that doesn't only find bloated, commercial, SEO optimised sites. You can start your own projects, enrich the market with libre and other non-commercial software, submit pages to search engines with a curated index, create good content for alternative search engines to crawl. In this entry I'd like to talk about what I do to change my own experience of the web to the better, though, not about making the web better for everybody.

What I do for now

I needed to think about web things a lot before I realised how much of my own web experience I can change by making certain choices and how viable it can be to simply not use certain services. It's not a new idea to me. I don't do Windows, I use alternative front-ends to YouTube, I've used various unconventional operating systems on PCs and phones. But in regards to the web I thought that it's not that simple. Web sites are how they are and even nice web sites link to bloated pages with megabytes of unhelpful CSS and megabytes of maliscious JavaScript. If I use a browser that is fast and doesn't do JavaScript, my web experience is worse than it is with Firefox (I prefer LibreWolf, btw). Whenever I tried Dillo, Nersurf or something similar, or when I disabled JavaScript in Firefox, I didn't get along with at least some pages. It doesn't appear to be easy to simply decide to accept that some pages don't work and just go on to the next one. There surely are use cases where this is not acceptable. But for the usual uses - everyday browsing and casual research - that shouldn't be a problem considering I already accept that some pages aren't accessible because I don't want to register with them. In a sense it's my fault that I don't like how the web is today. It's me who keeps visiting web sites that are like that. And I can stop that by doing some simple changes: Disable JavaScript and use a search engine that prefers non-commercial web sites in its search results.

Really? That simple?

Don't get me wrong: I doesn't feel like an improvement to disable JavaScript entirely. There are browser extensions that let you control which pages are allowed to serve scripts and which scripts you want to execute. I've tried that, but it's complicated to get it right and frustrating because you always have to configure stuff while browsing and that never stops. But maybe it is an improvement despite not feeling like one at first. I mean, quitting to take drugs to which your brain has developed a strong chemical dependency also is often a worse experience than continuing to take them. But also often it's worth getting used to not taking them anymore. It also doesn't seem like an improvement to only use search engines with tiny indexes that rarely return with the ideal search result you hoped for. Maybe this isn't a viable choice. I think there is no search engine of that type with a large enough index to recommend it for daily use. Those projects just aren't there, yet. But that may just be one more reason to use and support them more. And since they do get rid of all the sites that do things that I don't like, it could be an improvement to get used to using them.

What does that mean in practice?

Some web sites don't have any images anymore, some web sites only load ads and recommendations, but not the actual article, modern closed-platform chat apps don't work, just as most other sites that can be called web apps, keyboard focus doesn't start at the main input field, some sites aren't readable because all their styles are missing, burrying the content between or under thousands of things that should have started out hidden or resized, on some sites certain links aren't working anymore, many audio and video players don't work because of attempts to prevent permanent file downloads and there are pretty much no ads. If you use a browser with a less than very popular rendering engine, add misaligned elements on many to almost all web sites, unreadable elements on some sites with unconventional styling and missing elements if they use unusual positioning options. If you only use a search engine that doesn't do commercial sites or whitelists desirable sites, add to that the feeling of trying out the web in 1995 unless you navigate to specific sites that you know contain what you are looking for. The web feels relatively small with a search engine like that. But even then it's huge. Maybe it's a quiestion of what you expect. If you really don't know what site you are looking for, use a universal search engine. If you have an idea where to find the information you are looking for, start at that site. It might be Wikipedia, Slashdot, Toms Hardware, an Invidious instance. The web is totally usable if you don't enter everything in the same search engine as a refrex. I thought it was great at a time where we didn't do that. And for the rest (missing content, non-working sites): Those tend to be the sites that I wanted to filter out in the first place. So the endeavour seems to work as intended.

There are also sites that I would like to read that just happen to use a CSS trick or JavaScript that isn't supported by all browsers. Those are sites that don't pay a lot of attention to accessability design guides but don't have any bad intentions. I've made sites like this myself before. This article is being posted to sites that fall in this category if you will. Feel free to contact makers of those sites to let them know that you would appreciate being able to read the pages. I know I should test a site in text browsers before publishing them. I never do. Nowadays I don't even test in any other browser than the main one that I'm using (except when using engine-specific style rules). We came to accept that it just looks the same in all browsers. That is something that web designers always wished for. And when Microsoft's browsers improved in this regard it felt like we were there. But it is also true that most users of the web use a browser with one of two/three engines (depends on where you make the cut and call it a new engine after a fork). I think it does still make sense to test a web site in different browser engines. It doesn't have to look great in a text browser (although that would be the best), but maybe Dillo and NetSurf. If you cover those two, you cover pretty much everybody and you don't even have to test the site in Firefox or Chromium.

So, what did I change? For work: Nothing. Corporate dictates what software I use for what. On my private laptop, I currently use NetSurf as my main web browser. I use LibreWolf for two purposes: Copying individual bookmarks or URLs from open tabs, and going to sites that don't work in NetSurf when I don't have the time to find an alternative solution. For chat apps I use their "native apps" although I suspect that they are all just the web apps shipped with their own browser. For social media I'm trying out different Mastodon/fediverse clients for Linux, which I wanted to do for a while anyway. For search I'm currently using various Searx/SearXNG instances. (I know, not that alternative. I don't want to ruin everything at once for me.) More than recently I deliberately navigate to a specific site instead of using a search engine and ending up on a site that I already knew. When looking for something on eBay, I don't find as many interesting things like before because the pictures are missing and I don't needlessly buy things as much now. When searching for some random information or doing some curiosity research I close many search results directly or very soom after opening them because they aren't displayed properly. So far that doesn't bother me much. I'm already used to having to close tabs again right away because of cookie banners and other popups that make it impossible to get to the content without finishing a maze and reading a bunch of things for at least a minute. Now I open and close more search results, but get my ansers anyway. On video platforms, I open the video in an external player. It's nicer to have the player of my choice with my prefered UI and my custom configuration anyway. Some sites simulaniously look worse and better at the same time. I may have to scroll a bit to the content and it is obvious that the page wasn't designed to look exactly like that. But at least I don't get any grafical animations, lots of side-loaded unrelated content or ads. For shopping my options are very narrow. I already stopped using Amazon for other reasons a while ago. It's really not as much of a hassle as people seem to think. But much more shops than I expected rely on JavaScript for purchasing or logging in nowadays. (Probably at least for a CAPTHA.) It's pretty much all, actually. According to my rule from earlier, those are apps though, and there would be better ways to implement those. So, I don't have a solution other than switching back to LibreWolf or an app on my phone when I need to buy something online. So far, I didn't actually need anything, though. For online banking, sending a message to my insurance, using the Wayback machine and I predict much more, it is the same. For some things I will try to find alternatives. For others I will realise I don't have to. For some sites that I want to consume for enternainment it's disappointing when they don't work. There are so many alternaives for entertainment in all categories. I have so many ebooks, web books, audio books, lecture recordings, podcasts, … that I would like to consume when I get the time and energy to, I really don't need whatever interesting thing I've just found or somebody has just recommended. But now that I know it's there, I don't want to miss out. So far, this has been largest part of my negative experience after switching. But I haven't been at it for long. I'm curious to see how this will go for me.

Edited in November 2025 (one year later) to add: This endeaver has not worked out for long. More and more I switched bach to LibreWolf and more and more I felt I had to use a site without wanting to look for alternatives. I also completely gave up using alternative search engines and when I started using a new PC I didn't even install any other browser than LibreWolf. I made several attempts at getting used at some of the aspects of a less complex and less commercial web experience. But it didn't stick, for the reasons you may have expected and not done the same experiment yourself. But there will be more attempts from me to get used to search engines with less commercial results. And I did get used to some things. Apart from exclusively using alternative Youube frontends and sometimes trying small search engines first, I more often in the past visit blogs, aggregators or web directories for browsing instead of social media feeds. And that is a great thing to get used to, I think.

Go To Navigation Page
Show/Hide Navigation