jasper spaans

rust curious / emacs user / python coder / rocket scientist / pgp adept [ 5DD7 47D6 27FC 17E0 D54A 8ACD 8ABA 5B33 9695 B6B1 ] / slayer of infopolies

Signal: jap.171

Last Notes

2026-10-24 12:10:13 UTC

Foly huck. A small story about LLMs.
For historical reasons, I have a spare cassette for road bikes and it is not compatible with any of my own bikes so I want to sell it. Decided it would be helpful for buyers to include the teeth count of the smallest and largest sprocket in the ad, and was in a lazy Saturday afternoon mood so took a picture, gave that to #chatgpt and asked it to do the counting for me. Answer: 36 teeth.
That sprocket size doesn't exist in the Shimano universe.
So I tried to verify its count by asking it to add an increasing number next to every tooth. It complied, and the numbers ran from 1-36. That pictures is included below. You can stop reading now, look at the picture and count along.
If your ADD is not too bad, you'll notice it skipped 18, so we have 35 teeth. Not 36.
However that also doesn't exist in the Shimano universe.
Being as confused as the average republican, I demanded a #recount! It told me 36 again.
Sigh. Decided to do a manual recount while holding the sprocket in my hand. 28. That is a valid size.
Then I looked at the photo with counts again. Turns out the clanker took my original photo as inspiration, and fabricated a photo of a sprocket with 35 teeth. I am not sure what triggered it to do that and I do not want to know.
Your average #LLM is still as bad at counting as they were a year ago. Maybe worse.
Also, do not invest in that stuff ok?
https://mastodon.nl/system/media_attachments/files/117/495/812/040/660/810/original/632b40806eb0021d.jpeg
https://mastodon.nl/system/media_attachments/files/117/495/812/118/013/810/original/fbc7c3417aa6e975.png

2026-09-16 07:58:02 UTC

Today, while writing some tooling that emits CSV containing data from untrusted sources, I learned about CSV injection (https://community.owasp.org/attacks/CSV_Injection) where the risk lies in the fact that Excel will happily evaluate cells that look like formulas after importing a CSV file.
Note the casual “This attack is difficult to mitigate, and explicitly disallowed from quite a few bug bounty programs." followed by “The above techniques [for escaping] are not reliable in Microsoft Excel after saving and re-opening the CSV file.” on that OWASP page.
Computers were a fucking mistake.
(At least #LibreOffice does the right thing and makes this an opt-in vulnerability)

2025-06-10 17:35:22 UTC

- reply

dat klinkt als de winnende verklaring voor waarom beide fijnstofsensoren hier in huis opeens helemaal uitsloegen - zelf was ik nog op zoek naar een plausibele reden daarvoor...
https://mastodon.nl/system/media_attachments/files/114/660/259/737/871/661/original/97c4559d4df78724.png

2025-01-01 00:16:08 UTC

All the best for 2025 for you and your loved ones. Let's hope normality gets restored.
https://mastodon.nl/system/media_attachments/files/113/750/185/804/488/014/original/fcb6c3b7f6043188.mp4