Jon – Page 2 – Complaint Hub

Boycott Bike to Work Day 2025

The main Bike to Work Day (BTWD) pit stop in DC, Franklin Park, is not served by any bike infrastructure of any kind. Unless and until this is remedied, all cyclists and all vendors should avoid this pit stop completely.

This was my 12th BTWD. Ok, 11th if you don’t count Boat to Work Day where it rained so much they had to park a Circulator Bus at Freedom Plaza to give out t-shirts.

I ride a few thousand miles a year, mostly in DC. I’m okay riding in traffic. But the point of BTWD is not to get cyclists like me a new cheap t-shirt and a water bottle with some vendor name on it. The point is to show regular people that they can bike to work. It’s lunacy to expect inexperienced or hesitant cyclists to brave lower 14th St NW. I certainly wouldn’t send my friends and family there.

I can’t imagine sending someone to that stop who wasn’t already an experienced city cyclist. And not all stops are like this. The main Virginia stop at Rosslyn is well-served by bike infrastructure (and the Intersection of Doom is better-ish, I haven’t been nearly killed there in years). The old spot at Freedom Plaza in DC shows off the lanes on 15th St NW and PA Ave NW (and to a lesser extent 11th NW, which is still WAY better than 14th NW).

But Franklin Park has none of this. The lanes on 13th NW and 14th NW end before the park. I St and K St are absolutely not bikeable for an inexperienced cyclist. And you can’t even bike on the sidewalk (legally) because it’s in the weird CBD trapezoid.

We need to demand better.

Before LLMs were cool

Back in 2015 I wrote a Tumblr to try to earn commissions on wine sales on Amazon. That was a thing you could do then, in 2015. I guess I should say “wrote” because the only thing I wrote was code. I certainly didn’t write the wine reviews.

What I did, before anyone had ever said “Language Learning Model” (ok maybe some nerds had said it, whatever), was download the text of about 800 Wine Spectator “Daily Picks”. This was pretty easy because they used integers as keys in their URL so you could just go to /page/1 then page/2, etc etc, and Beautiful Soup just dumped the words into a text file.

I fed this download into markovify, a Markov chain generator written in Python. Someone may come “well, actually” me on this but Markov chains are essentially early LLMs that could run on your basic laptop in 2015.

Then I wrote a script that took a referral link to an Amazon wine and spat out a review and (and this might be my favorite part) a rating that was a random number between 77 and 94.

It then posted these reviews to Tumblr. They’re still there, you can go see them in all their glory. The name, Andrey Wines, sounds like a fancy winery, right? I would totally buy a nice cab from them. It’s named for Andrey Markov, who invented the Markov chain. I thought that was SO clever.

I mean look at that (click the image for the post, I’m not sure how to do alt-text on WordPress. I should figure that out). It had no idea the difference between a red and a white and I didn’t try to explain.

I giggle to myself knowing that OpenAI paid Tumblr to let them train their AI on Tumblr posts, and some of those posts are going to be this.

Cross Site Scripting is not the same as CSS

In my previous life as a coder, I worked for a while in the DHS Office of the CIO with the accountants. We wrote and managed a website to let the DHS components (Secret Service, CBP, etc) submit their monthly accounting files.

First, some background on building websites. Skip this if you’ve ever built a website. To build a page, all you need is HTML. Think of it like your docx file – your word processor reads a docx file and shows you a pretty document. Your web browser reads an html file and shows you a pretty web page. This is a massive oversimplification but we’re moving on.

One optional thing you can have in your HTML file is CSS. You know how links in pages are blue and underlined most of the time? Let’s say you want them all to be orange. You can add CSS to your HTML page that says “make all the links orange”. It uses different syntax but that’s not important. Now your browser knows to make all the links orange.

Nearly every website you have ever visited uses CSS to make things look pretty. It’s like how nearly every car you’ve ever seen uses paint. It’s POSSIBLE to have a car without paint, but it looks dumb and breaks if it goes through a carwash.

Tesla Cybertruck — A bug stupid truck with no paint

So there’s something else called Cross Site Scripting. This is bad. It’s complicated if you don’t understand it already but all you need to know is that this is one method people use to try and steal your credit card or whatever.

You’ll note that Cross Site Scripting could also be written as CSS. To keep people from getting confused, we use XSS for Cross Site Scripting.

Except DHS IT Security. They use CSS for both, and ban both from all DHS computer systems. Or they did in 2012, I haven’t worked there in a while. But know that this was at least as stupid then as it is now, it’s not a new thing. You would think the agency tasked with protecting US computer systems, among other things, would be knowledgeable about those computer systems.

Secure DMs on ActivityPub

I’ve been up and down on ActivityPub – the concept is fantastic, I’ve been wanting something like this for decades. You’d just have this online identity and you could use it to blog or post pictures or do whatever across any platform that supported the protocol – it’s like far-future magic.

But federation is HARD. You can’t just click a button and have a federating website. And there are scalability issues – for example, if you run a small Mastodon server, and some of your users follow high volume accounts, it gets to be a lot on your server. There are ways to deal with this but they’re not as robust or easy as one might like (though I expect them to get there).

As the protocol develops and as more people start building stuff with it, I’m getting more and more optimistic.

And I’ve just heard there are multiple independent projects working on secure messaging. My immediate family uses WhatsApp a lot, which is lovely to use but comes with a lot of baggage. It’s particularly nice because it sidesteps the Apple/Google war of incompatibility and lets you send high quality images and video even if your recipient uses a different phone OS. And Signal is nice but I’ve had no luck getting anyone in my family to use it.

If we can get secure DMs on ActivityPub, that might be an easier pill to swallow. I’m particularly interested in Sup from Daniel Supernault, who built Pixelfed, because Pixelfed is a pleasure to use and I suspect Sup will be as well.

Riding the bus

It was warm out today, one of the first really warm days we’ve had this summer. I was walking up 14th St NW and noticed a vehicle in the bus lane.

“I think I’ll take the bus the rest of the way’, I thought.

I got into the vehicle and greeted the driver politely. The air conditioning was a great relief. I didn’t see a place to tap my Metro card but maybe the reader was broken.

“What the [EXPLETIVE DELETED] are you doing in my car?” The driver said, rudely.

“Oh!” I exclaimed. “I think you’re mistaken. See the red paint underneath us? This is a bus lane, so this must be the bus.”

Am I the only one who regularly fantasizes about this? It’s normal, right?

Spam problems

I’m having a little trouble with spam comments. Not that they’re getting through, but that the plugin I was using was ALSO blocking replies to posts through ActivityPub. They only take support requests if you have accounts at various forums and I’m kinda grumpy today and that was a bridge too far.

A friend built a bot

A friend built a Mastodon bot that well, actuallys any conversation you tag it into. It uses an LLM, and I think this is the best use of an LLM I’ve seen so far.

Actually, building a bot is fun

He used one of my toots as the example in his post.

Why are rats visiting my free rat buffet?

I like tagging along with the pest control guys when they do the exterior rat treatments. Bugs I don’t find that interesting, but rat control really is. I’m increasingly not a fan of poison and much more a fan of taking away their food sources and entry points. It’s more effective AND better environmentally.

Today I was letting the pest guy into a locked garage and one of the building unit owners came out and we chatted. He showed me their neighbor who had rats get into his Porsche SUV and cause all sorts of damage to the engine. He showed me the rat poison boxes in the backyard, and the kennel for the feral cat from the city.

And then we looked at the guy’s curbside compost bin with the lid half off, and his trash bin, which was so overfilled it couldn’t close.

Rats like food. Do you know why they eat the poison we leave out? Because they think it’s food. If you leave ACTUAL food out, they will eat that instead, and then they will snack on the delicious plastic in your SUV engine for dessert.

I’m sure the feral cat will do wonders for the population of songbirds in the alley, though, congrats on that.

Crypto is garbage

Cryptocurrency is really good for:

Fraud
This unregulated pseudo-stock-market where one type of digital magic bean is worth five figures despite having no basis in reality

That’s it. If it had any real use or value as a currency, Paypal, Venmo, Zelle, CashApp, the entire ACH industry, and every other way we transfer money between people or businesses without using a credit card would be on the way out. The fact that there is no competitor to these products that a normal person can use proves that crypto is useless.

This morning, I walked into a bank and withdrew cash. I then walked down the street to another bank and deposited the cash. Then I sent that cash via Zelle to a vendor who is going to do a painting project for one of my clients. This was an incredibly stupid process (again, that crypto could have done for me if it worked like the advocates said).

At least the teller wished me a happy birthday after looking at my ID.