I’ve said this many times - have a playbook for Advanced Persistent Teenagers, ransomware and extortion groups. Practice it.
It’s far more likely to need to be used than nation-state espionage playbooks - and these incidents are far more damaging if not well handled.
You need to flood the zone with messaging, put it on the front page of your website, be calm and upfront with customers. If you have 15 lawyers on a call debating legal risks, you’ll lose customer trust. Get the CEO on BBC News.
1427) Ogrebot. Grumpy, hulking henchbot. One up from Orcbot, one down from Giantbot. #SmallRobotsRemonstered #Halloween
I don’t care where you started out on the political spectrum.
If your kid comes out as trans & you don’t become a rainbow-clad, parade-cheering ally & rock-solid supportive girl/boy/enby dad/mom?
You were never a parent at all.
You were a doll collector furious they didn’t stay in their packaging.
If you can go every level of ham to support their travel hockey league, whether you like hockey or not, you can do it to support their deepest hearts & souls.
For fuck’s sake.
I had quite a sensible work day today. Since finishing I have put the finishing touches on a very silly parody film poster, and now I've put some googly eyes on some mushies. My evening may have peaked 😁
Thanks to @mock for the source photo:
https://social.cologne/@mock/117387200489844188
On me dit que ce texte signé Spencer Baggins @bigaiguy a fort probablement été créé par IA.
Fabrice Bellard
A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name.
He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping.
His name is Fabrice Bellard.
Here is the story, because almost nobody outside the systems programming world knows what one man has built.
Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code.
In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years.
Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it.
He was not done.
In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth.
He kept going.
In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real.
In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark.
Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory.
Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org
He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links.
A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet.
He is still shipping.
https://fr.wikipedia.org/wiki/Fabrice_Bellard
Spencer Baggins @bigaiguy
In this case, there is also a simple mathematical reason why mass surveillance works like shit.
You have three ingredients:
a very large population,
a tiny number of actual terrorists,
and a detection system with a measurable false-positive rate.
That combination is mathematically nasty.
Assume you monitor one million people and ten of them are actually terrorists. Now assume you have an extraordinarily good detection system: it identifies 90% of the terrorists and has a false-positive rate of only 0.1%.
It will correctly identify nine terrorists.
But among the 999,990 innocent people, a 0.1% false-positive rate produces roughly 1,000 false alarms.
So your supposedly excellent surveillance system gives you about 1,009 alerts, of which only nine are real. More than 99% of your alerts are false positives.
And this example is deliberately generous. A false-positive rate of just 0.1% is unrealistically low for a real-world system trying to infer something as vague and complicated as terrorist intent from communications, behavior, associations, travel patterns, social media activity and other surveillance data. At 1%, the same example would produce roughly 10,000 false positives for nine true positives. At 5%, it would produce nearly 50,000.
This is the base-rate problem. When the thing you are looking for is extremely rare, even a remarkably accurate detection system can produce vastly more false positives than true positives. In the real world, where detection is messy and the criteria themselves are ambiguous, the problem gets much worse.
And now you have created a second problem: alarm fatigue.
Someone has to investigate all those innocent people. Analysts learn that almost every alarm they see is bullshit. Attention becomes the scarce resource. The system designed to find the needle in the haystack responds to the difficulty of finding the needle by continuously adding more hay.
Mass surveillance therefore has a fundamental scaling problem: collecting more data is easy. Producing more alerts is easy. Producing more human attention is not.
Steve:
frequent overthinker, compulsive fixer, digester-then-explainer, "why?" question relishing father, minor-irritant partner, excessive disassembler, original-form hacker, high-efficiency googler, borderline-competent car-fixer, expert-level car-breaker, faster-by-qwerty communicator, indiscriminate photo-taker, Leatherman owner.