8 Followers
146 Following
214 Posts
Working at the CSIRT of ETH Zurich, mostly doing threat hunting and incident response

The hidden beauty of vibe coding

"It passed all the unit tests, the shape of the code looks right," he said. It's 3.7x more lines of code that performs 2,000 times worse than the actual SQLite. Two thousand times worse for a database is a non-viable product. It's a dumpster fire. Throw it away. All that money you spent on it is worthless."

https://www.theregister.com/2026/03/17/ai_businesses_faking_it_reckoning_coming_codestrap/

AI still doesn't work very well, businesses are faking it, and a reckoning is coming

interview: Codestrap founders say we need to dial down the hype and sort through the mess

The Register

“1. You don't know what to build

This is the one nobody wants to talk about because it's embarrassing. Your PM hasn't talked to a real user in two months. Your requirements arrive as a Jira ticket with three sentences and a Figma link to a design that was approved by someone who's never used the product. Your engineers are making fifty micro-decisions a day about behaviour, edge cases, and error handling that nobody specified, because nobody thought about them.”

https://andrewmurphy.io/blog/if-you-thought-the-speed-of-writing-code-was-your-problem-you-have-bigger-problems

If you thought the speed of writing code was your problem - you have bigger problems | Debugging Leadership

AI coding tools are optimising the wrong thing and nobody wants to hear it. Writing code was already fast. The bottleneck is everything else: unclear requirements, review queues, terrified deploy cultures, and an org chart that needs six meetings to decide what colour the button should be.

Debugging Leadership

In 2015 I was on a beach in Hawai'i helping build the prototype of what became Signal. I argued that the app needed pseudonyms because abusers know their victims' phone numbers. I lost the fight that day. History proved me right, and Signal would move to usernames under @Mer__edith's stewardship.

In this new essay, I trace the line from Barlow's Declaration of Independence of Cyberspace through smart-home forensics, metadata killings, and Archive Team's non-consensual Tumblr scrape to ask: when did we decide that a jpeg is a photograph, that a profile is a person, that storage is memory?

The answer involves a boat off Honolulu, the early days of Signal, Iran's missiles over Amazon's Dubai AWS facilities, and the communities already building for a world where the server goes dark. This is an essay about infrastructure, memory, archiving without consent, and what we lose when we mistake the filesystem for memory.

It is also the angriest and most personal text I've ever written. I'm furious, and you should be too. We bet an entire civilisation on a brutal and unreliable stack. Now, fate has come to collect that wager.

California has a lot to fucking answer for.

https://newdesigncongress.org/en/pub/who-will-remember-us-when-the-servers-go-dark/

Welche Gemeinden welche Mailprovider haben...Die Karte müsste aber viel mehr rot sein. Denn es ist davon auszugehen, dass sehr oft Gateways von Schweizer Unternehmen "dazwischengeschaltet" werden für Filterung...bevor die Mail dann auf den Microsoft Servern landen.

https://mxmap.ch/

MXmap — Email Providers of Swiss Municipalities

Interactive map showing where Swiss municipalities host their official email. DNS analysis of all ~2,100 municipalities, color-coded by provider.

MXmap

I'm writing this in English.

Not because English is my first language—it isn't. I'm writing this in English because if I wrote it in Korean, the people I'm addressing would run it through an outdated translator, misread it, and respond to something I never said. The responsibility for that mistranslation would fall on me. It always does.

This is the thing Eugen Rochko's post misses, despite its good intentions.

@Gargron argues that LLMs are no substitute for human translators, and that people who think otherwise don't actually rely on translation. He's right about some of this. A machine-translated novel is not the same as one rendered by a skilled human translator. But the argument rests on a premise that only makes sense from a certain position: that translation is primarily about quality, about the aesthetic experience of reading literature in another language.

For many of us, translation is first about access.

The professional translation market doesn't scale to cover everything. It never has. What gets translated—and into which languages—follows the logic of cultural hegemony. Works from dominant Western languages flow outward, translated into everything. Works from East Asian languages trickle in, selectively, slowly, on someone else's schedule. The asymmetry isn't incidental; it's structural.

@Gargron notes, fairly, that machine translation existed decades before LLMs. But this is only half the story, and which half matters depends entirely on which languages you're talking about. European language pairs were reasonably serviceable with older tools. Korean–English, Japanese–English, Chinese–English? Genuinely usable translation for these pairs arrived with the LLM era. Treating “machine translation” as a monolithic technology with a uniform history erases the experience of everyone whose language sits far from the Indo-European center.

There's also something uncomfortable in the framing of the button-press thought experiment: “I would erase LLMs even if it took machine translation with it.” For someone whose language has always been peripheral, that button looks very different. It's not an abstract philosophical position; it's a statement about whose access to information is expendable.

I want to be clear: none of this is an argument that LLMs are good, or that the harms @Gargron describes aren't real. They are. But a critique of AI doesn't become more universal by ignoring whose languages have always been on the margins. If anything, a serious critique of AI's political economy should be more attentive to those asymmetries, not less.

The fact that I'm writing this in English, carefully, so it won't be misread—that's not incidental to my argument. That is my argument.

Wir haben zusammengetragen, was zum #eVoting-Debakel in Basel-Stadt momentan bekannt ist.

eVoting: So sicher, dass niemand deine Stimme kennt #dnip https://dnip.ch/2026/03/09/evoting-so-sicher-dass-niemand-deine-stimme-kennt/

Kollege @nohillside hat das #eVoting-Desaster von Basel-Stadt wunderbar analysiert. Wieder mal fehlt hier der Aufschrei.

https://dnip.ch/2026/03/09/evoting-so-sicher-dass-niemand-deine-stimme-kennt/

eVoting: So sicher, dass niemand deine Stimme kennt - Das Netz ist politisch

Am Wochenende haben in der Schweiz mehrere nationale Abstimmungen stattgefunden. In verschiedenen Kantonen kam dabei im Rahmen des laufenden Versuchsbetriebs

Das Netz ist politisch

Palantir Sues Swiss Magazine For Accurately Reporting That The Swiss Government Didn’t Want Palantir
https://www.techdirt.com/2026/02/27/palantir-sues-swiss-magazine-for-accurately-reporting-that-the-swiss-government-didnt-want-palantir/

Please note that Palantir would rather that you didn't share this story, it makes them look even more stupid if you do...

Palantir Sues Swiss Magazine For Accurately Reporting That The Swiss Government Didn’t Want Palantir

If you run a company whose entire value proposition is the ability to see patterns, predict outcomes, and connect dots that others miss, you’d think someone in the building might have flagged…

Techdirt

just READ THIS.

"So how does a sophisticated data intelligence company respond to well-sourced investigative journalism based on official government documents?

By suing the journalists, of course.

But here’s the thing that makes this even more absurd: Palantir isn’t even claiming the articles are false. The company isn’t suing for defamation. It isn’t seeking damages. Instead, it’s invoking a Swiss “right of reply” statute, alleging that Republik didn’t give the company a sufficient opportunity to respond. Palantir wants the court to force the magazine to publish lengthy counter-statements to each article.

(....)

Now, thanks to the lawsuit, the story has gone international. The Financial Times is covering it. The European Federation of Journalists is covering it. A UK member of parliament has already cited the Republik investigation during a debate on British defense contracts with Palantir, using the story to suggest that the British government “pivot away” from Palantir.

The Republik investigation itself is genuinely worth reading, and not just because Palantir desperately doesn’t want you to.

It paints a picture of a company that spent seven years working every angle to get Swiss federal agencies to buy its products—approaching the Federal Chancellery during COVID, pitching the Federal Office of Public Health on contact tracing, presenting anti-money laundering software to financial regulators, making repeated runs at the military—and getting turned away at every door. Sometimes embarrassingly, such as the Federal Statistical Office director apparently just ignoring Palantir’s outreach entirely.

For a company that brags about its ability to “optimize the kill chain” and whose CEO once told investors that “Palantir is here to disrupt… and, when it’s necessary, to scare our enemies and occasionally kill them,” getting politely rejected by the Swiss statistical office has to sting a little.

But suing the journalists who reported on it? When the entire basis of your lawsuit is “we want you to publish our talking points” rather than “anything you published was wrong,” it makes pretty clear you don’t actually have a substantive response to the reporting. If Palantir thinks the picture is false, the remedy is to demonstrate that the documents are wrong—not to drag a small magazine through expensive litigation until it capitulates or goes broke."

https://www.techdirt.com/2026/02/27/palantir-sues-swiss-magazine-for-accurately-reporting-that-the-swiss-government-didnt-want-palantir/

Palantir Sues Swiss Magazine For Accurately Reporting That The Swiss Government Didn’t Want Palantir

If you run a company whose entire value proposition is the ability to see patterns, predict outcomes, and connect dots that others miss, you’d think someone in the building might have flagged…

Techdirt