JapanBlogList retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
JapanBlogList retweeted
The end of software secrecy is almost upon us. The death of closed source, and the final triumph of open source.
I should have realized this a few months ago when I successfully decompiled the game of Firefighter from an ancient DOS shareware binary. My robot friend was able to tell it had been written in Borland Pascal from looking at the data layout; it gave me back very readable Pascal code with sensibly chosen function and variable names. I transpiled it to Rust and now ship it as part of my heritage games collection.
The thing is, I thought of this as a fun stunt but didn't have any confidence that the technique would scale up to large, real programs. I have since learned that people are now doing this sort of thing with entire AAA games, which are among the most complex software artifacts ever to be shipped as a binary. If they can be decompiled, anything can be.
This has implications. Massive implications. We need to think about what the world is like when, in general, there is no longer a secrecy moat around almost any software at all.
1/2
JapanBlogList retweeted
Experience gives perspective. Programming is not dead, and never will be.
It's late September 2026. Sometime in September 1976, just after I entered college, I wrote and ran my first serious program. I have now been a programmer for literally 50 years.
And man, I have seen it *all*. Punched cards to glass ttys on minicomputers to workstations to the earliest micros. I've written business software, communication programs, development tools, games, language implementations, kernel device drivers, graphics libraries, a few critical pieces of infrastructure, and all manner of odd programs for which there is no taxonomy. Coded in a score of languages some of which are now forgotten. I've run over 70 open-source projects and contributed to at least as many more.
Along the way I noticed a few things, and wrote about them, and that made me famous. But I'm not here to write about that today. I'm here to write about what it means to be a programmer and a technologist with the Singularity upon us.
I have lost count of the number of times I have been told "programming is over". You kids may think this is a new claim that came into the world with LLMs. Hah! There's been that kind of talk at every step function in the quality of our programming tools. I first heard it when compilers were replacing hand-hacked assembler in the early 1980s, and I wouldn't be a bit surprised if somebody said it earlier when in-memory code replaced plugboards.
One constant amidst all this change is that the intentions in a user's head do not magically turn into executable instructions that a computer can run. Another constant is the mindset of the people who specialize in bridging the gap between wish and algorithm. A programmer is a programmer is a programmer - the tools are secondary.
"But it's different this time!" some people will say, "AIs are superhuman now!" So? What did you think the optimization stage of a compiler was, chopped liver? We've been relying on tools that exceeded human capabilities all along - we built them precisely because our meatbrains could not otherwise keep up with the demands of the job.
It's been a hell of a ride, that 50 years. I've succeeded and failed and succeeded again. Done a lot of work I'm proud of. Built at least a few things that look like they're going to last. None of that goes away because, hypothetically, an AI might have made me faster.
The work is never done, even if the tools can talk to us now. Because intentions still have to be communicated; people who specialize in that and develop right mindset to do it still have a major advantage over people who don't.
If you're feeling depressed because you spent years or decades developing hand-coding skills that are obsolete now? Buck up. You still have the most important asset - a mind that knows how to think that way.
I'm facing the winds of the Singularity with a smile. Because 50 years and I'm still standing - still shipping code that people can use, still learning, still refusing to be paralyzed by the pace of change.
The best therapy for your uncertainty? Get to work on something.
JapanBlogList retweeted
A Japanese engineer invented the QR code for one job, tracking car parts on a Toyota line, then his company chose to give the patent away for free, which is the only reason it ended up on every restaurant table on Earth.
His name is Masahiro Hara. The company was Denso Wave, a parts supplier owned by Toyota.
In 1992 the problem landed on his desk, and it was not glamorous. Workers on the factory floor were drowning.
Every car part had a barcode, but a barcode can only hold about twenty characters, so to track one component they had to stick five or ten barcodes on it.
A worker would stand there scanning a single part ten times in a row. Some of them were scanning close to a thousand barcodes a day. The job had stopped being about building cars and turned into pointing a scanner at stickers all day long.
And there was a second problem nobody upstairs cared about. This was a factory. Oil got on everything. A smudge of grease across a barcode and the whole thing became unreadable, and the line stopped.
Hara was asked to make the scanner faster. He looked at it for a while and realized the scanner was not the problem. The barcode itself was the ceiling. A line of black bars can only hold information going one direction, left to right.
He decided to build something that held information in two directions, up and down as well as across, so it could store hundreds of times more in the same little square.
Then came the part that sounds made up but is not.
Hara played Go on his lunch breaks, the old board game with black and white stones sitting on a grid. He was staring at the board one day and it clicked.
The grid of black and white stones was already a way to store information in two directions. That was the shape of his code.
But building the code was the easy half. The hard problem was speed, because the whole point was to be fast, and a scanner wastes most of its time just trying to figure out where the code is and which way it is turned.
The fix came to him on a train. He was looking out the window at buildings, and one building stood out from all the others because of its shape against the sky. That was the idea.
He put three little square targets in three corners of the code. The moment a scanner sees those three squares, it knows instantly where the code is and how it is rotated, even upside down, even at an angle.
Now here is the detail that shows how far he was willing to go. Those three corner squares only work if nothing else on the page looks like them.
If a magazine ad or a cardboard box happened to have the same black and white pattern nearby, the scanner would get confused and grab the wrong thing.
So Hara and his tiny two-person team went and surveyed printed material. Magazines. Flyers. Cardboard boxes. Piles of it, for days, reducing every picture down to its ratio of black to white area, hunting for the one ratio that almost never shows up in print anywhere. They found it. One to one to three to one to one.
That exact rhythm of black and white is baked into every corner square of every QR code on Earth, and it is there because it is the pattern the printed world almost never produces by accident.
Then he solved the oil.
He built the code so it carries a backup of its own information, spread mathematically across the whole square. You can tear off, smudge, or scratch out up to thirty percent of a QR code and it still scans perfectly, because the code rebuilds the missing piece from the copy it kept of itself.
A worker could get grease on a third of the label and the line would keep moving. This is the same math that lets a scratched CD still play and lets a spacecraft send data back across the solar system without asking to repeat itself.
He finished in 1994. He named it Quick Response, after what it does for the person using it, not after what it is.
And then Denso made the decision that actually mattered.
They held the patent. They could have charged a fee on every single scan, and given how many billions happen now, that would have made someone unimaginably rich.
Instead they announced they would not enforce their rights to collect royalties, and they published the specification openly so anyone could use it. Hara later said it was not even a big argument inside the company.
That one choice is the whole story. A code that costs nothing to use is a code everyone builds on. Airlines put it on tickets. Phone makers built readers into cameras.
Then a pandemic hit and the world needed a way to hand someone information without touching anything, and the free little square that a Toyota engineer built for greasy factory workers was suddenly on every menu, every payment, every door.
Hara still works there. He has said, more than once, that he never imagined it would spread this far, and that the part he is proudest of is that it got used to keep people safe.
The man built it to survive oil on a factory floor. It ended up surviving everything else too.
You have scanned his work a hundred times this year. Now you know whose it was.
JapanBlogList retweeted
A woman had Netflix for 6 years.
She opened the app. She scrolled. She picked something after 25 minutes. She fell asleep during episode 2. She repeated this every night.
Her friend, a former Netflix UI engineer, sat on her couch one evening and opened Settings on her account. He changed 9 things in under 15 minutes.
Her homepage transformed overnight. The autoplay trailers stopped. The "continue watching" list cleaned itself up. The recommendations got sharper. The buffering on her 4K TV disappeared. The categories multiplied from 30 to 2,200.
She said "it feels like a completely different app."
He said "it is. You've been using the factory settings for 6 years. Netflix ships the version that keeps you scrolling longest, not the version that helps you find something fastest."
Here's every setting he changed 🧵
JapanBlogList retweeted
japan rail ridership map!
see how many people ride each segment of rail. includes almost all japanese rail operators.
anita.garden/japanrail/
Japan has 4M+ vending machines, called jihanki.
In Tokyo they’re everywhere, but the interesting ones are weirdly hard to find.
So I made Jihanki Atlas, a map where people can discover, submit, and help verify Tokyo vending machines.
Current favorites: Pokémon plushies, sriracha sauce, wagyu beef, edible insects, fresh-squeezed orange juice.
What’s the coolest one you’ve seen?
jihankiatlas.com
JapanBlogList retweeted
THIS GUY BUILT AN ENTIRE WIKIPEDIA THAT IS 100% AI HALLUCINATIONS AND IT'S OPEN SOURCE ON GITHUB
it's called Halupedia.
nothing on the site existed before you clicked. every article was generated the second you arrived.
the site has one rule: the universe only exists when you visit it.
it looks exactly like wikipedia. same fonts. same layout. same scholarly citations. same "stumble" button for random articles.
the only difference is none of it is real.
here are some actual articles currently in the encyclopedia:
> the great pigeon census of 1887
> the ministry of slightly wrong maps
> chaldic arithmetic — a branch of mathematics where subtraction is forbidden
> armund the river mapper — a cartographer who mapped 14,000 leagues of river without leaving his chair
> the society for the prevention of unnecessary tuesdays
every article page also tells you how many people are reading it right now. it says: "you alone are consulting this folio at present."
the creator's own tagline for the site is the most unhinged sentence i've read this year:
"an encyclopedia of a universe that does not exist until you visit it"
the entire backend is a single open source repo called vibeserver. one guy. one description on github: "a little webserver making things up just in time."
we built the largest knowledge base in human history and the very first thing a guy did with it was make a hallucinated mirror universe and put it on the open web.
the internet is healing.
JapanBlogList retweeted
March 11, 2011. 2:46 PM.
33 Shinkansen bullet trains were running through northern Japan.
Several were moving at 300 km/h.
Then the earthquake hit.
Magnitude 9.1. The 4th largest ever recorded.
Epicenter: off the Sanriku coast, 130 km ESE of the Oshika Peninsula.
Every single train stopped safely.
Zero passenger injuries.
Here's what happened.
12 to 22 seconds before the violent shaking reached the tracks,
a seismometer on Kinkazan — a small island off Japan's Pacific coast —
detected the quake and sent a signal inland.
The signal traveled faster than the earthquake itself.
Power to the tracks was cut.
Every train in the zone automatically braked.
By the time the ground started shaking violently,
the trains were already slowing down.
One empty test train derailed at Sendai Station.
Not a single train in service derailed.
The Shinkansen has been running since 1964.
In 60 years, it has killed zero passengers —
not in a collision, not in a derailment.
Zero.
Most people stop reading here.
The real story starts now.
Japan built this safety system in two layers, for two different problems.
First: UrEDAS — the Urgent Earthquake Detection and Alarm System.
Invented in the early 1980s, deployed on the Tokaido Shinkansen in 1992.
The world's first operational P-wave warning system for trains.
Its seismometers sit along the coast, listening for earthquakes out at sea.
When one hits, the system reads the first 3 seconds of P-wave motion,
estimates the magnitude and location,
and sends a warning inland to the tracks.
Second: Compact UrEDAS.
Built after the 1995 Kobe earthquake,
which struck directly beneath a city with almost no warning.
When the earthquake happens directly under the train,
there's no time to calculate anything.
So Compact UrEDAS asks one question:
"Is this shaking dangerous?"
It answers in about 1 second.
Both systems end the same way.
They cut the power.
The Shinkansen is built so that the moment it loses power,
emergency brakes engage automatically.
The driver makes no decision.
There's no time to.
A 300 km/h Shinkansen takes about 90 seconds to stop.
No warning system in the world buys you 90 seconds.
The goal isn't to stop the train before the earthquake arrives.
The goal is for the train to be slowing down when it does.
This is the part foreign coverage misses.
The goal isn't to prevent the accident.
The goal is to make the accident survivable.
In-service Shinkansen have derailed twice in 60 years.
2004. Niigata Chuetsu earthquake.
A trackside Compact UrEDAS detected the P-wave.
Power was cut one second later. Emergency brakes engaged 1.5 seconds after that.
But the earthquake was directly beneath the train,
which was moving at 204 km/h.
8 of 10 cars derailed.
The train skidded 1.6 km before stopping.
154 passengers on board.
Zero injuries.
2022. M7.4 off Fukushima.
A Shinkansen traveling at 320 km/h detected the first tremor and began braking.
As the train decelerated toward a stop,
a second, stronger quake (M7.4) hit.
16 of the 17 cars derailed.
75 passengers. 3 crew.
Zero deaths. No serious injuries.
Two other derailments involved empty trains.
2011, Sendai Station, a test train.
2016, Kumamoto earthquake, a transit train.
In every case, the warning system had already cut the power
before the shaking reached its peak.
The system does not stop earthquakes.
It does not always stop derailments.
It just makes sure the earthquake arrives after the train is already slow.
Japan's earthquakes and Japan's trains grew up in the same country,
watching the same ground.
Somewhere in Japan right now,
a Shinkansen is moving at 300 kilometers per hour.
Far away, on a quiet coast,
a sensor is listening to the rock beneath it.
It has been listening since 1992.
Every time it was needed, it worked.
JapanBlogList retweeted
🇯🇵 Kansai International Airport in Japan reached its 30th year of service without having ever lost a single piece of luggage.
JapanBlogList retweeted
maybe some of you internationals in Japan are familiar with fantastic website project Atlas Obscura. community editor is in Tokyo (sadly not the "rest of Japan" :-)) looking for tips for unique/hidden/odd/ obviously obscure places. So far pretty pedestrian list so lend a hand
JapanBlogList retweeted
Wise words
“My name’s Frank. I’m 64, a retired electrician.
Forty-two years I spent running wires through houses, fixing breakers, making sure people had light in their kitchens and heat in their winters. Never once did anyone ask me where I went to college. Mostly, they just wanted to know if I could get the power back on before their ice cream melted.
Last May, I was at my granddaughter Emily’s school career day. You know the drill — doctors, lawyers, a software guy in a slick suit talking about “scaling startups.” I was the only one there with a tool belt and work boots.
When it was my turn, I told the kids, “I don’t have a degree. I’ve never sat in a lecture hall. But I’ve wired schools, hospitals, and your principal’s house. And when the hospital generator failed during a snowstorm in ’98, I was the one in the basement with a flashlight, keeping the lights on for newborn babies upstairs.”
The kids leaned forward. They had questions — real ones. “How do you fix stuff in the dark?” “Do you make a lot of money?” “Do you ever get zapped?” (Yes, once, and it’ll curl your hair.)
When the bell rang, one boy hung back. Small kid, freckles, hoodie too big for him. He mumbled, “My uncle’s a plumber. People laugh at him ’cause he didn’t finish high school. But… he’s the only one in the family who can fix anything.”
I looked that boy in the eye and said, “Kid, your uncle’s a hero. When your toilet overflows at midnight, Harvard ain’t sending anyone. A plumber is.”
Here’s the thing nobody told me when I was young — the world doesn’t run without tradespeople. You can have all the engineers you want, but if nobody builds the house, wires the power, or lays the pipes, those blueprints just sit in a drawer.
We’ve made it sound like trades are what you do if you can’t go to college, instead of a path you choose because you like working with your hands, solving problems, and seeing your work stand solid for decades.
Four years after high school, some kids walk away with diplomas. Others walk away with zero debt, a union card, and a skill they can take anywhere in the world. And guess what? When your furnace dies in January, it’s not the diploma that saves you.
A few weeks ago, that same freckled kid’s mom stopped me at the grocery store. She said, “You probably don’t remember, but you told my son trades are important. He’s shadowing his uncle this summer. First time I’ve seen him excited about anything in years.”
That’s the part we forget — for some kids, knowing their path is respected changes everything. It’s not about “just” fixing wires or pipes. It’s about pride. Purpose. The kind that sticks with you long after the job’s done.
So next time you meet a teenager, don’t just ask, “Where are you going to college?” Ask, “What’s your plan?” And if they say, “I’m learning to weld,” or “I’m starting an apprenticeship,” smile big and say, “That’s fantastic. We’re going to need you.”
Because we will. More than ever. And when the lights go out, you’ll be glad they showed up.”
JapanBlogList retweeted
IF I GET DEMENTIA…..
I’d like my family to hang this wish list up on the wall where I live. I want them to remember these things.
1a. Every time you enter the room announce yourself. “Hi Dad - it’s Amanda.”
NEVER ask- Do you know who I am??? That causes anxiety.
• If I get dementia, I want my friends and family to embrace my reality.
• If I think my spouse is still alive, or if I think we’re visiting my parents for dinner, let me believe those things. I’ll be much happier for it.
• If I get dementia, don’t argue with me about what is true for me versus what is true for you.
• If I get dementia, and I am not sure who you are, do not take it personally. My timeline is confusing to me.
• If I get dementia, and can no longer use utensils, do not start feeding me. Instead, switch me to a finger-food diet, and see if I can still feed myself.
• If I get dementia, and I am sad or anxious, hold my hand and listen. Do not tell me that my feelings are unfounded.
• If I get dementia, I don’t want to be treated like a child. Talk to me like the adult that I am.
• If I get dementia, I still want to enjoy the things that I’ve always enjoyed. Help me find a way to exercise, read, and visit with friends.
• If I get dementia, ask me to tell you a story from my past.
• If I get dementia, and I become agitated, take the time to figure out what is bothering me.
• If I get dementia, treat me the way that you would want to be treated.
• If I get dementia, make sure that there are plenty of snacks for me in the house. Even now if I don’t eat I get angry, and if I have dementia, I may have trouble explaining what I need.
• If I get dementia, don’t talk about me as if I’m not in the room.
• If I get dementia, don’t feel guilty if you cannot care for me 24 hours a day, 7 days a week. It’s not your fault, and you’ve done your best. Find someone who can help you, or choose a great new place for me to live. With a bus and activities!!
• If I get dementia, and I live in a dementia care community, please visit me often.
• If I get dementia, don’t act frustrated if I mix up names, events, or places.
Take a deep breath. It’s not my fault.
• If I get dementia, make sure I always have my favorite music playing within earshot.
• If I get dementia, and I like to pick up items and carry them around, help me return those items to their original place.
• If I get dementia, don’t exclude me from parties and family gatherings.
• If I get dementia, know that I still like receiving hugs or handshakes.
• If I get dementia, remember that I am still the person you know and love.”
ᴄᴏᴘʏ ᴀɴᴅ ᴘᴀsᴛᴇ in Honor of someone you know or knew who has dementia. In Honor of all those I know and love and lost who are fighting Dementia/Alzheimer’s.
JapanBlogList retweeted
Ever wondered what true mastery looks like in train ticketing? Check out this viral video from @tetsudo_yameru showing a Japanese railway agent working the MARS terminal like a skilled artisan. The rapid taps and rhythmic sounds are mesmerizing. It is not just speed, but the result of decades of practice. Here is a deep dive into why this is so impressive. Thread: 1/8 🧵
JapanBlogList retweeted
My latest piece on Takanawa Gateway City, one of Tokyo’s largest redevelopment projects (link in comments)
JapanBlogList retweeted
On March 11, 889, a 22-year-old Japanese emperor wrote in his diary about his new black cat.
"On the oth Day of the 2nd Month of the First Year of the Kampo era. Taking a moment of my free time, I wish to express my joy of the cat. It arrived by boat as a gift to the late Emperor, received from the hands of Minamoto no Kuwashi.
The color of the fur is peerless. None could find the words to describe it, although one said it was reminiscent of the deepest ink. It has an air about it, similar to Kanno. Its length is 5 sun, and its height is 6 sun. I affixed a bow about its neck, but it did not remain for long.
In rebellion, it narrows its eyes and extends its needles. It shows its back.
When it lies down, it curls in a circle like a coin. You cannot see its feet. It's as if it were circular Bi disk. When it stands, its cry expresses profound loneliness, like a black dragon floating above the clouds.
By nature, it likes to stalk birds. It lowers its head and works its tail. It can extend its spine to raise its height by at least 2 sun. Its color allows it to disappear at night.
I am convinced it is superior to all other cats."































