Chameth.com - posts not artisanal-docker-images, building-a-new-computer, debugging-beyond-the-debugger, moving-back-to-a-dynamic-website, why-you-should-be-using-https

Lego, ACME DNS-01, and negatively-cached surprises

2026-09-09T00:00:00Z

Recently a friend was deploying Centauri, my reverse proxy service that can obtain TLS certificates using ACME DNS-01 challenges. He asked a seemingly innocent question: “When Centauri is ‘waiting for record propagation’ is there an option to increase the time?” But that’s a question with a hidden, concerning XY problem. We both use the same DNS provider, and it definitely shouldn’t take more than a minute to see a DNS record after it’s been created. Plus, I don’t have issues with it timing out!

Centauri uses the excellent lego library to do the actual ACME dance, and I’ve dug into it before pretty extensively to debug other DNS issues. When I last looked, it used the local recursive DNS resolver to check for CNAMEs and find the authoritative server, then checked for record propagation there. So, naturally, I blamed Simon’s local resolver doing something weird. Turns out that was surprisingly close to correct, but not for the reasons I thought.

Unfortunately for my snap judgements, Simon had a perfect rejoinder: he’d deployed the exact same VM image before and Centauri worked fine. And also while we’d been speaking it had managed to get a certificate after waiting 58 seconds for DNS propagation. Simon suggested that maybe it was systemd-resolved caching something stale, but I dismissed that based on what I knew of how Lego worked.

Diving back into Lego

Of course, after I dismissed the idea, I immediately started doubting myself. Last time I was looking at DNS issues I traced the code all the way across the Lego codebase. This time I just had a coding agent explore and summarise for me. Turns out it DOES use the recursive resolver to check for the TXT challenge record.

The DNS functionality looks like this:

CNAME query on the _acme-challenge record using the recursive resolver.
Maybe an SOA query on the same, depending on the DNS provider, using the recursive resolver.
Actually create the challenge record using the DNS provider.
Query records recursively to discover CNAMEs using the recursive resolver. It doesn’t matter if this fails.
Query the TXT record on every configured recursive resolver, blocking until they all work.
Query the TXT record on the authoritative nameserver.

So yes, a stale response from the recursive resolver can indeed ruin the whole thing. Simon’s domain had a minimum TTL of 60 seconds, so that links in nicely with it working at 58 seconds and failing most of the time: the 1 minute timeout is racing the 1 minute TTL, somehow. But my domains use a much longer TTL and I can see renewals happening in my logs basically immediately. What gives?

NXDOMAIN caching and RFC fun

So I had a theory as to what was happening, but it still had some loose ends that I didn’t understand. I did get a pretty big hint when I started doing lookups from various locations, though. On my desktop if I do a CNAME query then a TXT query for a record that doesn’t exist, I get this:

$ drill CNAME nonexistent.chameth.com
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 12630
chameth.com.	3600	IN	SOA	chameth.com. root.chameth.com. 2026339162 7200 3600 86400 3600

$ drill TXT nonexistent.chameth.com
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 56402
chameth.com.	3590	IN	SOA	chameth.com. root.chameth.com. 2026339162 7200 3600 86400 3600

And from my server:

$ drill CNAME nonexistent.chameth.com
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 7807
chameth.com.	3600	IN	SOA	chameth.com. root.chameth.com. 2026339162 7200 3600 86400 3600

$ drill TXT nonexistent.chameth.com 
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 5069
chameth.com.	3600	IN	SOA	chameth.com. root.chameth.com. 2026339162 7200 3600 86400 3600

Notice how the TTL (the first number) decreases locally, but not on the server? That implies my local resolver is reusing the same result when I do the second query, and the resolver on the server isn’t. It turns out that on my desktop I use systemd-resolved, which sends requests to Tailscale, which passes them off to NextDNS. On the server they go straight to Tailscale and then onwards to NextDNS. So systemd-resolved is what’s causing the behaviour. Like Simon guessed right at the start.

But why is it actually doing that? It’s kind of annoying. Well, it’s doing what it’s meant to. RFC2308 says:

A negative answer that resulted from a name error (NXDOMAIN) should be cached such that it can be retrieved and returned in response to another query for the same <QNAME, QCLASS> that resulted in the cached negative response.

A negative answer that resulted from a no data error (NODATA) should be cached such that it can be retrieved and returned in response to another query for the same <QNAME, QTYPE, QCLASS> that resulted in the cached negative response.

Because the record doesn’t exist at all (there’s no other records for _acme-challenge: why would there be?) we get an NXDOMAIN response, and that “should” be cached for any query type. So when Lego queries for the CNAME record, we’re priming the cache with “_acme-challenge doesn’t exist” with a potentially huge TTL on that cache entry. When we then try and query the TXT record we created we get the cached NXDOMAIN back.

If the TXT record was created first then the CNAME query would get a NODATA response instead, which wouldn’t affect us as that is understandably cached per query type. But the point in Lego’s CNAME check is to decide where to put the TXT record, so it can’t just flip the ordering.

I apparently dodged this problem entirely on my servers, because nothing in that resolution path implements this particular caching behaviour.

But why now?

But Simon had this working before. It’s possible that his existing deployments are having this issue now, and are just retrying enough to win the race, but he would’ve noticed if they failed this much when he set them up.

So I did some archaeology. Here’s the timeline:

February 2016: CNAME check added to deal with, well, CNAMEs.
February 2016: Immediate follow-up making a failed CNAME check non-blocking.
September 2024: Option added to check propagation using custom recursive resolvers.
February 2026: That option now defaults to on.

And the mystery is solved: Lego v5 enabled the recursive check by default. That also handily explains why I thought its behaviour was different. It used to be! There were still two things I didn’t understand: why was it enabled, and why didn’t I realise when I upgraded to Lego v5? Looking back, I think this line of the changelog is meant to cover the behaviour:

[lib,dnsprovider] New approach of the DNS calls

The migration guide also mentions the flag being renamed, but not the fact that the default setting also flipped. Feels like burying the lede a little, but hey ho.

As for why, there doesn’t seem to be any documented rationale. Given the recursive resolver check was added to fix a fairly niche problem, it seems like an odd decision to me. The new defaults mean that any recursive resolver that caches NXDOMAIN responses across query types will delay the propagation check, and likely fail it entirely if the TTL is longer than the timeout. That’s… unfortunate to say the least. I opened a discussion suggesting the default gets flipped back but it doesn’t sound like that will happen before v6.

For Centauri, at least, I’ve fixed it by unconditionally disabling the recursive resolver check, taking it back to the Lego v4 behaviour. And after all this, Simon’s original hunch turned out to be spot on: it was systemd-resolved caching, but it was doing the correct thing. Pesky old-man Lego was the one responsible for dropping a rake on the ground then immediately stepping on it.

Monthly Meanderings: August 2026

2026-09-01T00:00:00Z

Another month, another edition of “What’s Chris been up to?”. Fun fact: I very nearly published this post with a “[intro]” placeholder here instead of this paragraph, despite proofreading it multiple times. “Yep, that’s where the intro will go, all good”. Now instead we have this weirdly meta introduction.

Website updates and other projects

A few website updates this month, and one of them neatly addresses the “other projects” bit too. First, I’ve added a new fitness page which has some stats and information about my cycling and running. I’ve also added some fitness-related widgets to support that page and these monthly summaries, and a new music one you can see a bit further down.

I’ve also added what I think is quite a fun new feature: a post feed builder that lets you build RSS feeds containing only posts that are semantically similar (or dissimilar) to other posts. So if you want to only hear about my fitness journey you can pin a few of those posts, or if you want to exclude posts that talk about LLMs you can exclude a few of those. It’s basically super-charged fuzzy tags, but it means I don’t have to actually tag things.

I blogged about building a family of single-user services which is where most of my coding energy went this month. Those projects were almost entirely authored by LLMs, and I’m not hating the process. The models have got a lot better at coding, and I enjoyed getting to focus on the bigger picture aspects rather than getting bogged down in details. Rest assured, all the writing on my website is still 100% me. I am the load-bearing seam, here.

Entertainment

Back in March I said ‘I can’t do “what I listened to last month” stats until next month’, and then for the next four months completely forgot about it. Well, not any more! Now I come equipped with some stats about my monthly music habits:

	Album	Artist	Unique tracks played	Total tracks played
1	Fallen	Evanescence	8	40
2	Love, Drugs & Misery	Eva Under Fire	12	32
3	NEON VOID	Sumo Cyco	6	23
4	The Strange Case of…	Halestorm	11	21
5	Coming in Hot	DIAMANTE	9	20
6	Everest	Halestorm	7	20
7	Glory Days	Little Mix	5	20
8	From Zero	Linkin Park	9	19
9	KPop Demon Hunters (Soundtrack from the Netflix Film)	KPop Demon Hunters Cast	7	19
10	No Need to Argue	The Cranberries	6	19

I suspect I won’t show this every month, as it’s probably going to be quite same-y. I, shockingly, tend to play music that I like more than that which I don’t. I’ll usually either put on my “favourites” playlist, or my “daily mix” playlist which biases higher-rated tracks over lower ones. So effectively this just becomes a noisy view over how highly I’ve rated the tracks in an album. Maybe I can control for that, but then I’m not sure what it’d actually be showing… “Here are all the albums I played this month that I don’t usually play because I don’t like them as much as the other albums I’m not showing any more”? It’s a bit wordy. Back to the drawing board with that idea, I think.

I was away for a few weeks this month, including a few days at a small LAN event. Being at a computer gaming event meant that we, naturally, played some board games. Apparently I hit an h-index of 23 from these plays. That’s 23 games I’ve played at least 23 times each. I’ve been at 22 since December last year: obviously the higher the number goes, the harder it is to reach. I also go on and off games (and the whole hobby at times), which doesn’t help on that front. Anyway, here’s ~~Wonderwall~~ the plays for this month:

6 plays
3 plays
3 plays
1 play
1 play

No films this month, but my World of Warcraft habit has picked back up with the launch of the new season. They’ve made Mistweaver Monk, my previous specialisation, a lot less fun to play, so I’m focusing on one of my many alts: a Restoration Shaman:

Level 90

Female Dwarf

Restoration Shaman

315 average item level

Hirameth-Terenas

Professions

Midnight Blacksmithing		86/100
Midnight Inscription		78/100
Midnight Fishing		35/300

Mythic+

Altar of Fangs	+12	27:28	368
Den of Nalorakk	+12	28:10	369
Kings' Rest	+12	28:30	370
Murder Row	+12	28:37	371
Ruby Life Pools	+12	25:19	369
Temple of Sethraliss	+10	30:57	321
The Blinding Vale	+11	25:03	341
Voidscar Arena	+12	25:28	371
Total M+ rating	2880

View on blizzard.com View on raider.io

I don’t quite like it as much as Mistweaver in season 1, but it’s a lot nicer than Mistweaver in season 2. You can actually make health bars move when you press your healing buttons, rather than ignoring half of them because they’re not worth using.

Fitness

My running kick is still going. I’ve “officially” finished the couch-to-5k programme I was doing, and I actually hit 5k on the last day of the programme. I didn’t actually mean to do that: I was saving the 5k run for this week, but by the time I noticed I’d run “too far” it was close enough that I just kept going. I have an actual 5k race coming up this month, which is exciting. Once that’s over I’m planning to work my way up to 10k. I’ve added a few widgets to keep track of some stats:

activities

6h 5m

total time

103.6km

total distance

42.3km

longest distance

🏆️ New PB 1km 2:16 1:52
🏆️ New PB 2km 5:36 4:13
🏆️ New PB 5km 14:44 12:32
🏆️ New PB 10km 36:13 27:21
🏆️ New PB 20km 1:43:43 1:13:24
🏆️ New PB 30km no previous 1:54:25
🏆️ New PB 40km no previous 2:55:52

activities

6h 16m

total time

43.1km

total distance

5km

longest distance

🏆️ New PB 800m 6:20 6:02
🏆️ New PB 1km 7:44 7:36
🏆️ New PB 1 mile 12:43 12:16
🏆️ New PB 2km 15:48 15:16
🏆️ New PB 3km 24:38 23:05
🏆️ New PB 5km no previous 38:40

As well as the running, I did a couple of long (for me) cycle rides, clocking in at around 40 km. It’s a fun loop, but both times I did it I started flagging towards the end. The second time I made sure to eat and drink plenty along the way, and my legs still raised objections about halfway round. My next goal is 50 km which would let me get to the next town over and back but the route has a lot more elevation to go with its increased length, so it’s probably going to be quite a bit more taxing. I’m not sure when I’ll attempt that, as the weather is starting to turn. I was previously bemused when people mentioned “cycling seasons” and switching to indoor trainers. Then I wanted to go out when it was raining, and suddenly I understood. Running in the rain: surprisingly pleasant; cycling in the rain: no thank you.

Around the web

Hacker News In Uncompromised Detail

When I first read the title my gut reaction was “I know everything I need to know about Hacker News, right?”. The title is accurate though. There’s so much interesting stuff, presented really cleanly. It’s a good read.

A proposal for new Netflix content rating icons

Another dry sounding title, another fun article. It starts with a treatise on rating systems and ends with a lovely satirical list of rating ideas.

Find Git commits by commit message text

I like to think I’m relatively well versed in how to use Git. I can do an interactive rebase and everything! This tip from Ham was new to me, though, and is incredibly useful.

Novice Marathon Training Plan

Hal Higdon has a whole bunch of training plans. He literally wrote the book on marathon training. I’ll hopefully be following this plan next year, assuming I manage the 5k, 10k and half-marathon training! This would be the perfect plan for someone who’s run a half marathon a while ago, and is tempted to join me in my “marathon before I’m 40” goal…

Monthly Meanderings: July 2026

2026-08-01T00:00:00Z

Another month, another roundup post. This month has been very… exercise-y. Which is, for the record, not normal for me. For the previous year my only source of exercise has basically been walking, but that’s not a great fitness activity for me. When my regular walks entered the 10-15km territory it got more and more annoying to find the time and/or an interesting route.

I also managed to injure my knee while walking through a particularly muddy field, and spent a few months going slightly stir crazy. Coming out of that I started running three times a week, bought a bicycle, and added in some strength exercises along with the ones the physio recommended. If you told me a few months ago that I’d be annoyed at not being able to exercise too much on rest days I’d think you were mad.

Website updates and other projects

Before we talk even more about exercise, let’s do the usual topics I cover in these posts. The only website update this month has been a post about… exercise. Maybe I have a problem. Anyway, in Tracking PBs without the dark patterns I talk about building a slimmed-down, single-player Strava to track my personal bests, without all the nonsense that annoys me.

Other than the PB tracker, I’ve not been working much on personal projects. I’ve not really had any other itches that need scratching, just the usual background noise of dependency updates and other project maintenance.

Entertainment

Behold, the section where I normally talk about the films, TV programmes, and board games that have kept me entertained this month: […]. Yep, not a single one.

I have played a few games, though. A friend and I finally got around to trying out Escape Simulator 2, and it’s just as good as the original. The rooms feel a bit more detailed, and there are a few cool interactions that probably wouldn’t be possible in the old version. There’s also a hard mode for all the rooms which we’ve not yet tried, but sounds like it’ll keep us amused for a bit longer.

I’ve also been playing a bit of World of Warcraft, but it’s now in the awkward stage where I’ve done most things I can reasonably do this season, and there’s not really any point in doing anything else. All the gear will become mostly irrelevant in a few weeks when season two releases, and we’ve hit the major milestone achievements for Mythic+. Feels a bit anticlimactic to get to a fairly good stage and then just… not play for a bit.

Fitness

Given how much exercise I’ve done, it probably deserves its own section in these monthly posts. I have the vague idea of aiming to run a marathon before I turn 40 (i.e., within around 15 months). That’s both scary and yet not completely impossible. I’m going to work up through the distances and see how it goes. A 5k at the start of September, 10k in November, half marathon around Easter next year, then a full marathon just before my birthday in October. That way even if it gets too tough or something goes wrong I’ll have accomplished something.

New hobbies mean new toys. My bike is nothing particularly special: a hybrid from Halfords that’s about one step up from entry-level. But it gets the job done, and has helped me remember how much I enjoy cycling. The infrastructure around here is pretty terrible, though. There are lots of little bits of multi-use paths and a few dedicated bike lanes, but they’re not joined up or signed well in the slightest. In most cases it’s easier to just stay on the road and deal with the traffic. It’s a bit sad that they’ve spent time and money to do something and it’s not very useful.

On the running side, I picked up a Garmin Forerunner 165 watch. I’ve been wearing an Apple Watch for a little over a year now, but using the touchscreen to navigate screens and start/stop activities while running is annoyingly fiddly. The digital crown keeps getting gummed up with sunscreen and requiring cleaning, too. The Forerunner has physical buttons, and is much better at showing the data I want to see in a clear format, and letting me set things up like target pace or distance on the watch itself, instead of via a phone app. Oh, and the battery seems like it’s going to last for a week rather than a day, which is a nice change of pace.

I’m going to need to make a nice widget to show off my monthly runs and bike rides, but for now here’s some artisanal stats:

I went out for 14 runs, totalling 48km, although a significant portion of that was walking for warmup, cooldown or recovery.
My longest actual run was a 20 minute straight run covering 2.5km.
My average running pace is 8min/km, which is a “conversational” pace for me right now.
I went for 9 cycle rides: 2 on rented mountain bikes, then the rest on my own bike. They covered 128km.
When cycling I made 8 coffee shop stops, which works out to exactly one every 16km on average.

Next month I’m hoping to ramp the running up to hit 5k by the very end. I’m mostly following the NHS Couch to 5k plan but I’m tweaking it a little bit as otherwise I’d finish on 3.75km at my current pace. I guess “Couch to 30 minutes of running” isn’t quite as catchy. I made a Couch to 5k page to track my progress and adjustments.

Around the web

Blogging Can Just Be Stating The Obvious

I often look at my own posts and think, “There’s nothing novel, or important, or deep in here at all — is this even worth saying?”

I’ve written before about The Curse of Knowledge and Blogging, and this is a very similar take from Jim Nielsen, but it’s still super interesting to see a similar idea expressed in another way by another person.

I Built a Voice Opening Door to Moria (My Garage)

A YouTube video documenting a really cool project. What grabs me is the amount of disciplines he dabbles in: he’s part blacksmith, part carpenter, part electrician, part programmer, and so on. It’s one of the best examples of maker culture I’ve seen in ages.

There’s one bit in particular that sticks in my mind: he tried to find a rendering of the door online, and realised all the existing ones were gibberish or illegible, so he downloaded a font and worked out the exact inscription himself. It makes my inner perfectionist feel validated.

Linus Torvalds on AI in the Linux kernel

LLMs are very divisive, and there are a lot of unsettled moral and ethical issues. But at the end of the day they’re a tool that’s not going to go away any time soon. There are people on crusades to try and ban LLM tools in projects, boycott any projects that accept contributions, and so on. It’s a bit like militant veganism. I can understand where they’re coming from, but also please stop shouting at me. Anyway, this take from Linus seems pretty spot on to me.

Buttons

An interactive, graphical history of how buttons have been rendered in various operating systems and desktop environments over time. Maybe it’s just my age and nostalgia, but it really does feel like they peaked around the late 90s/early 2000s. I’m not quite sure why we went from elegant skeuomorphic buttons to ugly plain squares with weird accent colours when you click them.

Rotating sandwiches

For some reason I expected this to be static pictures of sandwiches which spun in a circle, but it’s actually recordings of sandwiches rotating on a turntable. It’s oddly mesmerising. I wonder why I’ve never seen a restaurant menu with gifs like that?

Tracking PBs without the dark patterns

2026-07-23T00:00:00Z

I’ve recently been bitten by some kind of strange exercise bug. I’ve gone from being mostly sedentary to struggling to not go out for a cheeky bike ride on a day that’s meant to be a rest day. Maybe this is what a midlife crisis feels like?

Anyway, one of the things I’ve enjoyed about this development is seeing my personal best efforts gradually go up. There’s something incredibly rewarding about doing a run, and then seeing a nice little gold medal because as part of that you ran your fastest 1km ever. Unfortunately the only software I’ve found that does that is Strava, and boy do I not get on with it.

The many shortcomings of Strava

Strava is basically the app for running and cycling. Everyone talks about it. It sounds like they like it. But I really, really don’t. It’s like someone went through a catalogue of user-hostile behaviours and said “we’ll take them all!”.

The problems started in the setup wizard: it touts a load of privacy features, but doesn’t offer any way to enable them. All your activities are public by default, and you have to spelunk around in the settings to turn that off. I wasn’t actually sure if I wanted my activities to be public or not, and ended up flip-flopping around a bit. There is a clunky workflow to bulk change past activities, but it’s arbitrarily time-gated so you can’t use it too often…

The bulk operations are extremely limited, too: you can set the activity visibility, and your heart rate visibility, and that’s it. Want to bulk delete things? You’re out of luck. Bulk rename? No chance. You either do them one-by-one or use some janky third-party script. I think I pressed around 300 little ‘delete’ links in the course of trying to get my activity history imported in a way I liked.

Those problems give a bit of a signal about Strava’s priorities, but I could live with them. Once I’ve stopped faffing with the initial import I’m not really going to want to change the privacy settings or bulk edit things. Alas, the problems didn’t end there.

Look at me! Look at me! GIVE ME ENGAGEMENT!

The most obvious one is that everything is an upsell. Vast swathes of the app are premium-only, and they don’t ever get out of your way: they stick around acting as adverts. We’re all used to freemium apps that try to hawk upgrades, but the sheer amount of screen real estate taken up by these is egregious. I started a premium trial, expecting things to get a lot better, and… they didn’t really. All the premium features are still branded as such, so now instead of “look at what you could have if you paid us” it’s “look at what you’re getting for paying us (don’t even think about cancelling)”. Subscribing also makes your avatar get a premium outline, and there’s no way to disable it. I really hate that. Now I’m an advert myself. I don’t want to be part of their weird dark patterns, thank you very much.

And while we’re talking about dark patterns: there’s so much engagement bait that I physically cringe at it. You get a notification for logging an activity with a vague call to action to check it out. You get a separate notification when you break or come close to one of your PBs, but it doesn’t tell you which; there’s plenty of space in the notification for it, but they want you to hit the app instead. It all just feels so slimy to me. I don’t know whether it doesn’t bother other people as much, or if they’re desensitised to it, or just don’t realise how pleasant things could actually be.

Making a replacement

I realised pretty early on that if I only want automatic PB tracking, I could just write something myself to do it. I already use Health Auto Export to exfiltrate data from Apple Health, including workouts. I can just make a service that receives that data, crunches some numbers, and activates the dopamine receivers in my brain when I set a new record. But I didn’t really want to bother doing that if I could avoid it. I tried a whole slew of different apps and none of them did the thing, at least not without a subscription. And Strava had soured me on fitness subscriptions. I finally resigned myself to making something.

And by “myself” I mean “an LLM”. This is one of the first projects where I’ve not written a single line of code, and I’ve barely even reviewed anything produced by the LLM. I gave it an overall architecture and some sample data, and had it write a plan. I critiqued the plan, had it broken down into a few different phases, and then had it work through them. I occasionally stopped it when I saw it doing something stupid, and gave it a couple of technical steers, but my feedback has mostly been functional. I’m probably not going to be releasing it publicly any time soon for that reason — I don’t want to publish it under my name when I’ve not even looked at the code. I also wouldn’t be comfortable making software this way if other people were going to rely on it, but for non-critical, personal-use-only software I’m happy with the approach.

Anyway, I called it “Pompei Band”. Project names are hard. One of my common techniques is to put a term into an anagram finder; in this case “PB dopamine” anagrams to “Pompei Band”, and it even abbreviates to PB. Weird, but I like it. This is how it shows recent activities on the homepage:

Dashboard entry for a recent run in PB

You can click through to see the standard activity details most tracking apps show: a map, heart rate, pace, gradient, and heart rate zones. You can also click on each effort to see a history of them, which gives a nice overview of progress:

1 mile run PB history

It pretty much does exactly what I want, and has none of the annoying behaviours that Strava leans into. When I first drafted this post I wrote “there’s a few more bits I’d like to add at some point, but I can happily prompt them into existence when I want them”, but in the time I spent procrastinating before taking screenshots I ended up implementing them all. My favourite is this little history widget I added to the homepage, shown here next to Strava’s:

Recent activity calendar in Pompei Band and in Strava

The Strava one just confuses me. I’m not sure what the scale of the circles means. I’m guessing it’s time, which in effect means it just highlights my bike rides which are longer than runs. The colours for the line charts don’t work for me, and I’m not sure what three zig-zag lines are meant to represent. Pompei Band’s version uses distinct, obvious colours for different activities, and scales the brightness independently for each type of activity based on length (so long cycle rides don’t affect the short runs). I also flipped the axes so it looks more like a GitHub activity timeline, because that’s how my brain works. Nothing groundbreaking, but also none of the paper-cuts the Strava version inflicted on me.

Software doesn’t have to be awful

This blog post has been rattling around in my head for a few days. I didn’t want it to just be a litany about Strava being bad, and I didn’t want to sound like an LLM hype piece, which made it tricky to figure out what I was actually trying to say. I think the core of it is: software doesn’t have to be awful.

Everyone’s heard of enshittification, and it’s so prevalent that it’s easy to accept it as a fact of life. That’s just how late-stage capitalism works, right? But we can just make better software. And as LLMs slowly become more and more capable, that “we” grows to a broader and broader group. It’s easy to be negative about that: we’re going to drown in vibe-coded products, much like we’re already drowning in written LLM slop. On the other hand, a future where you can just say “make me single-player Strava without all the dark patterns” and get something that works just how you want it is pretty exciting.

The one thing I can’t decide: if everyone can whip up their own individual software, will the existing platforms actually improve? If Strava didn’t have all the dark patterns and engagement bait I would have just have paid for it. Will they realise that? Or will they double down even harder, try to lock you into their platform, and build moats around user data? Now I’ve said it, it seems pretty obvious they’ll try to do that. But I hope they won’t.

Monthly Meanderings: June 2026

2026-07-01T00:00:00Z

Writing these monthly posts is making me very aware of how quickly the year is going. I’m not sure I like that at all. June saw some truly horrible hot weather in the UK; it’s almost like murdering the planet with CO₂ emissions was a terrible, terrible idea.

My dodgy knee that I mentioned way back in the April post feels like it’s finally back to normal. I had low expectations of the physio service, and I’m glad to find I was utterly wrong. When I self-referred I got an e-mail the same day with some tailored exercise suggestions, and I’ve had two in-person sessions since. I managed to get some longer walks and a jog in this month, when I wasn’t camped in front of a fan to try and keep cool.

Website updates

Another month with no new posts. I’m just in one of those slumps where nothing quite takes my fancy. It’s a bit upsetting that the three most recent posts are all going to be monthly meanderings, though.

I did spend some time adding standard.site metadata and records for blog posts. In theory that means it’ll show up a bit nicer when presented on Bluesky, but I’ve not actually tested it in anger yet. As well as pretty embeds, having a standard schema for describing publications and posts feels like it could enable a lot of cool discovery/directory uses.

Other projects

Centauri, my reverse proxy, got a whole bunch of new features in response to some requests and problem reports from a friend. Mostly the changes were exposing more options for finer control over how certificates are obtained. Providers other than Let’s Encrypt require extra account details, have different rate limits, and so on.

The only other project of note this month is a new World of Warcraft addon called Who’s Got the Keys? that shows on-screen who has a keystone for the dungeon you’re currently waiting to start. I really like being able to scratch itches like that.

Entertainment

I mentioned my wax-and-wane hobby cycle last month. This month apparently films are back in for me:

There were some big surprises for me in both directions: films I expected to like such as Disclosure Day and Good Luck, Have Fun, Don’t Die absolutely missed the mark; meanwhile Midsommar I didn’t have any particular expectations of and it ended up stealing the top spot on my watched films ranked list.

Most of my other entertainment is still coming from World of Warcraft. I’m now reasonably comfortable with my spec, and my regular group of friends is well on the way to reaching a Mythic+ score of 3400 before the end of the season. Amusingly I’m currently in the top 20 for my spec on my realm, but that says more about the low population of the server than it does about my skill, I think!

My character is now about as fully geared as they’re going to get this season. There are some minor upgrades I could make but it’s not really worth it with only weeks remaining. I now also don’t get any real benefit from doing the standard open world weekly activities, so I’ve been spending a bit more time farming mounts and transmog in old content. I’ve also levelled a whole bunch of alts, but I’ve failed to find a single DPS spec I actually like. I’m now trying alternative healers just to get some variety when we do runs where we’re not pushing keys.

Around the web

Suspicious discontinuities

An old article by Dan Luu that recently resurfaced on Hacker News. It’s an interesting look at various series that have discontinuities and the reasons for those. I’m easily won over by cool graphs, so it’s not a surprise I saved this link.

Incident Report: CVE-2026-LGTM

A very funny spoof vulnerability disclosure that pokes fun at all the failure modes of LLM security tooling and the possible consequences of that.

Help I accidentally a wigglegram

Fun article where the author describes how they automatically made a bunch of “wigglegrams” (stereoscopic animated gifs) from their iCloud photo library. It’s interesting how just taking multiple versions of a photo can result in something novel like this.

Finding the Best Dog Treat with Statistics

I’m pretty sure this is actually some devious attempt to make me learn statistics, but it features a dog called Bebop, so I’m going to allow it.