Blog | Ben Weston

The Linked List (9)

Ben Weston — Fri, 20 Feb 26 16:20:00 +0000

This week in my little collection of news and articles from the internet we have some classic creative methodology from John Cleese, an incredible new category of click-jacking exploit using SVG filters, and much more!

John Cleese on Creativity (Transcript): https://timotijhof.net/posts/2026/john-cleese-on-creativity-transcript/
SVG clickjacking: https://lyra.horse/blog/2025/12/svg-clickjacking/; Some great demos come alongside this write-up of a new type of click-jacking exploit using SVG filters.
The Enshittifinancial Crisis: https://www.wheresyoured.at/the-enshittifinancial-crisis/
The first this I did last year was run: https://henry.codes/writing/the-first-thing-i-did-last-year-was-run/; Henry Desroches takes you for a new year drive with this microsite.
Button elements offer attributes to change form behavior: https://www.stefanjudis.com/today-i-learned/button-elements-offer-attributes-to-change-form-behavior/

The Next Token

Find the latest fuel for my cynical evaluation of "AI" in this new section of The Linked List.

AI tribalism: https://nolanlawson.com/2026/01/24/ai-tribalism/
14 ways to supercharge your workflow with AI: https://bell.bz/14-ways-to-supercharge-your-workflow-with-ai/
Spurious Correlations: https://tylervigen.com/spurious/correlation/9632_ice-cream-consumption_correlates-with_violent-crime-rates; Tyler Vigen reboots his Spurious Correlations project, now with AI hypotheses.

It looks like a monthly list hits a pretty good cadence for me so check back here in March for some more reading from across the web.

The Linked List (8)

Ben Weston — Fri, 23 Jan 26 16:20:00 +0000

Welcome back to the second list of links this year!

The Ian Knot (Ian's Shoelace Site): https://www.fieggen.com/shoelace/ianknot.htm; I don't usually think much about tying my shoes but I found this great site after it featured in this article:; https://aftermath.site/ians-shoelace-site-is-still-the-best-destination-for-tying-your-shoes/
How Browsers Work: https://howbrowserswork.com/
Lies, damn lies and metrics: https://reach.crownandreach.com/posts/lies-damn-lies-and-metrics; When a metric matters, it will be gamed.
Rethinking "Pixel Perfect" Web Design: https://www.smashingmagazine.com/2026/01/rethinking-pixel-perfect-web-design/
Proton Spam and the AI Consent Problem: https://dbushell.com/2026/01/22/proton-spam/; Please choose the reason for unsubscribing: I don't remember signing up...
The Incredible Overcomplexity of the Shadcn Radio Button: https://paulmakeswebsites.com/writing/shadcn-radio-button/; "Keep It Simple, Stupid"
Prediction: Microsoft Is Going To Do The Funniest Thing Imaginable: https://gamesbymason.com/blog/2026/microsoft/; With Azure Linux already a thing I can easily see this coming true.
Stack Overflow in freefall: 78 percent drop in number of questions: https://www.techzine.eu/news/devops/137686/stack-overflow-in-freefall-78-percent-drop-in-number-of-questions/

The Linked List (7)

Ben Weston — Fri, 16 Jan 26 10:41:00 +0000

The first Linked List of 2026! The links haven't let up either so there's lots of interesting tidbits to look through.

BOIOIOING!: https://boing.greg.technology/
Fix Your robots.txt or Your Site Disappears from Google: https://www.alanwsmith.com/en/37/wa/jz/s1/; TL;DR: if a site doesn't have a robots.txt it will no longer be indexed by Google.
Free Software Scares Normal People: https://danieldelaney.net/normal/
Junior: https://www.junior.cards/; This is a card and game company from Louie Mantia. The cards and dice look great but the real treasure is in the games section that has great instructions for games to play with family and friends.
Memory is slow, Disk is fast: https://www.bitflux.ai/blog/memory-is-slow-part1/; https://www.bitflux.ai/blog/memory-is-slow-part2/
It's rude to show AI output to people: https://distantprovince.by/posts/its-rude-to-show-ai-output-to-people/
Drinking The Largest Beer At The Airport Makes Everything Better: https://airportbeer.selfhelpartpublishingempire.com/
Were classical statues painted horribly?: https://worksinprogress.co/issue/were-classical-statues-painted-horribly/
Uh Oh! The Infantilization of Failure: https://www.joanwestenberg.com/uh-oh-the-infantilization-of-failure/; The title phrase of this article has been going around in my head for months now. Its something we see everywhere, especially from larger companies, and it gets on my nerves.
What's in my HomeLab: 2026: https://romanzipp.com/blog/whats-in-my-homelab-2026; Loads of useful services in here. I'm definitely going to try out Owntracks so I can keep track of where I was without giving my location to Google.
My Postcode Lookup Library now Supports Partial Postcodes: https://computingthedetails.org/blog/my-postcode-lookup-library-now-supports-partial-postcodes/; Also on YouTube: https://www.youtube.com/watch?v=WkT7JeEV8X0; I'd definitely read/watch the first part if you haven't already. Although it's nice to get location from a postcode locally, I still think that most sites that implement this will just send that location to a 3rd party map API, yet again leaking your location.
Backing up Spotify: https://annas-archive.li/blog/backing-up-spotify.html; Anna's blog is now back up after being down for a few weeks after the Spotify archive was released. The data in this is really well presented and I find it crazy how much AI generated music people have submitted to Spotify over the last couple years.

Review of Token2 Security Keys

Ben Weston — Wed, 07 Jan 26 09:28:00 +0000

I've been using Token2 PIN+ security keys for a little over a year and a half now. They're a FIDO2 certified key that can hold Passkeys and generate OTP codes, often cited as a cheaper alternative to their main competition: Yubikeys. Unfortunately, I've had very poor luck with their durability.

If you want the short version of this review, I suggest you suck up the higher price and go for a Yubikey instead. Although Token2 keys function great, the durability of the PIN+ Type C series just isn't good enough and it can't stand life on a key chain.

The First Victim

The main reason for getting one of these keys was so that my one time passcodes and security keys were contained in a physical and distinct device. The whole purpose of OTPs is to prove that you know something and they often comprise the possession factor (something you have) of a security measure. The physical analogue of this are keys you keep on your keyring, so for me it makes most sense to put my digital keys there too. However, this is the location where my first Token2 security key fell victim.

The first key I bought from Token2 was a PIN+ Release 2 but I only had it on my keyring for 4 months before the hole on the top cracked, presumably from pressure against my keyring.

Fearing that further damage might occur to the electronics inside I bought a second one and transferred my secrets to it.

The Second Victim

That leads us to today where, once again, I've got a broken Token2 security key. For the second key I brought a PIN+ Release 3 which is almost identical the first one apart from the bigger number in the name. I thought I'd take greater care over this next key so I 3D printed a case so that I didn't have to directly attach the key to my keyring. That way, hopefully I'd avoid the immense crushing power of my pocket breaking the plastic casing again.

The 3D print included a pause so that I could insert the key into the case before the printer permanently cinched the key into it's new plastic home. The fit is very good so do give me a shout if you already have a Token2 key you'd like to protect and would like the files.

Although this new key didn't get crushed, after a year the USB-C port stopped working which made it useless for devices without NFC. A real shame because both of these keys worked so well when they were new. This leaves me only able to recommend the PIN+ Type C series if you're the sort of person who likes to keep their keys in an anti-static bag, away from hench pockets. Hopefully, their other mechanical designs are more robust but I've been stung twice too many and I won't be made a fool for a third time.

The Solution?

So what's going to be replacing my malfunctioning key? After two failed attempts, I've decided to take the "buy once, cry once" approach and get an expensive Yubikey after all. More specifically a YubiKey 5C NFC.

Hopefully, this works out a bit better.

The Linked List (6)

Ben Weston — Fri, 28 Nov 25 14:10:00 +0000

Welcome back! This week I'm going to carry on the tactic of splitting all these juicy links into categories.

Career Insights

Even if I'm rather happy with my job, complaining about it is still pretty fun. I suppose these people think so too:

The hidden cost of shipping too fast: https://www.antonsten.com/articles/the-hidden-cost-of-shipping-too-fast/
I Work For an Evil Company, but Outside Work, I’m Actually a Really Good Person: https://www.mcsweeneys.net/articles/i-work-for-an-evil-company-but-outside-work-im-actually-a-really-good-person
Always Be Ready to Leave (Even If You Never Do): https://andreacanton.dev/posts/2025-11-08-always-ready-to-leave/
"Good engineering management" is a fad: https://lethain.com/good-eng-mgmt-is-a-fad/

From the Web

Understanding Unicode (from Longhorn PHP 2025): https://evanhahn.com/longhornphp2025/; Lots of cool built-in functions here from PHP. This is good knowledge to have for accommodating UTF-8 throughout our applications.
The EU made Apple adopt new Wi-Fi standards, and now Android can support AirDrop: https://arstechnica.com/gadgets/2025/11/the-eu-made-apple-adopt-new-wi-fi-standards-and-now-android-can-support-airdrop/
The Performance Inequality Gap, 2026: https://infrequently.org/2025/11/performance-inequality-gap-2026/; It's still especially important to save those bytes as the globe doubles down on mobile browsing. These reports are great for seeing what device and network conditions you should optimise for.
TinCan: https://tincan.kids/; Shipping to the US only for the moment but it's crazy that this exists.
2002: Last.fm and Audioscrobbler Herald the Social Web: https://cybercultural.com/p/lastfm-audioscrobbler-2002/; As an avid scrobbler, its great to read up on the history of the platform.
How Google Is Shifting AI From the Cloud to Your Browser: https://thenewstack.io/how-google-is-shifting-ai-from-the-cloud-to-your-browser/; Get ready for your device batteries to get slammed from all the on-device AI models in the near-future.

The Linked List (5)

Ben Weston — Fri, 21 Nov 25 13:26:00 +0000

(Fixed the link for "Signing Git commits and tags with SSH")

Cloudflare Outage Memes & Commentary

Lucky for me nothing I depended on went down the other day, not even this website! However, it is worrying how a large proportion of a distributed system like "The Internet" can be brought down by a single company.

Relevant XKCD: https://xkcd.com/3170/
A Teletext alternate reality: https://bsky.app/profile/jamienemeth.bsky.social/post/3m5y2d4cdns2e
The Fragile Web We Build: https://afranca.com.br/the-fragile-web-we-built

The Links

Open Source Power: https://blog.muni.town/open-source-power/; A great read with loads of great links to get lost in.
Busy Simulator: https://busysimulator.com/
Why Your Best Engineers Are Interviewing Elsewhere: https://codegood.co/writing/why-your-best-engineers-are-interviewing-elsewhere
Let's talk about AI art...: https://theoatmeal.com/comics/ai_art
Signing Git commits and tags with SSH: https://carlosbecker.com/posts/git-ssh-signing/; I currently sign my commits with a separate GPG key but this is far easier.

The Linked List (4)

Ben Weston — Fri, 14 Nov 25 16:46:00 +0000

AI is not a source - https://stopcitingai.com/
How I influence tech company politics as a staff software engineer - https://www.seangoedecke.com/how-to-influence-politics/
How to stand out when anyone can build anything https://www.antonsten.com/articles/how-to-stand-out-when-anyone-can-build-anything/
Pretend you're the PO in this terrifyingly realistic game - https://scope-creep.xyz/play
Running 1:1s for Engineers - https://justoffbyone.com/posts/how-to-run-11s/
The Majority AI View - https://www.anildash.com/2025/10/17/the-majority-ai-view
The Pilcrow - https://shadycharacters.co.uk/2011/02/the-pilcrow-part-1/
- A brief history of typography centred around this guy: ¶. I recommend all three parts.
You were asleep but swear you weren’t: what is paradoxical insomnia? - https://www.theguardian.com/wellness/2025/oct/27/paradoxical-insomnia-sleep
Your URL Is Your State - https://alfy.blog/2025/10/31/your-url-is-your-state.html

The Linked List 🎃 (3)

Ben Weston — Fri, 31 Oct 25 12:54:00 +0000

Henry Ford's horse problem wasn't about imagination - https://www.antonsten.com/articles/henry-ford-horse-problem
- How we can build right by listening to stakeholders problems rather than asking for solutions?
Scripts I wrote that I use all the time - https://evanhahn.com/scripts-i-wrote-that-i-use-all-the-time
How to Increase Your Luck Surface Area - https://www.codusoperandi.com/posts/increasing-your-luck-surface-area
- A bit of an older one that's making the rounds again.
Build Your Own Database - https://www.nan.fyi/database
- A really impressive page. I can see this being Alex's next Bash project.
How to split JavaScript strings into sentences, words or graphemes with "Intl.Segmenter" - https://www.stefanjudis.com/today-i-learned/how-to-split-javascript-strings-with-intl-segmenter
Advertising Platforms, and the War for My Attention - https://farrant.me/posts/advertising-platforms-and-the-war-for-my-attention
- I relate far too much to the first half of this post. YouTube shorts are seriously addictive.

The Linked List (2)

Ben Weston — Fri, 10 Oct 25 15:19:00 +0100

A bit of a slower one this week in the link rings. Hopefully there'll be a bumper crop next week!

"Workslop" was the logical outcome of productivity maxxing - https://productpicnic.beehiiv.com/p/workslop-was-the-logical-outcome-of-productivity-maxxing
- I like to look at this one through the lens of re-evaluating all tools that you're currently using and seeing if they're really worth the headache they cause along the way.
The "broligarchs" don't speak for me - https://ratfactor.com/tech-nope
Cookie banners are going away but what will replace them? - https://www.politico.eu/article/europe-cookie-law-messed-up-the-internet-brussels-sets-out-to-fix-it/

The Linked List (1)

Ben Weston — Fri, 26 Sep 25 13:50:00 +0100

Hosting a site on a disposable vape: https://bogdanthegeek.github.io/blog/projects/vapeserver/
- Read it from the vape: http://ewaste.fka.wtf/
The annual Tom7 video dropped! https://www.youtube.com/watch?v=QH4MviUE0_s
Against the protection of stocking frames: https://ethanmarcotte.com/wrote/against-stocking-frames/. Is AI a failed technology?
Building DOOM in Pure SQL: https://cedardb.com/blog/doomql/
Heather loves post and thought this was cool: https://www.postcrossing.com/. Get a pen-pal without the hassle of writing more than a postcard.

Ben's Reading Club

Ben Weston — Fri, 19 Sep 25 16:24:00 +0100

A super short thought about what AI is good for:
- https://simonwillison.net/2025/Aug/29/lossy-encyclopedia/
\r\n or \n? Is Windows really the best when it comes to line endings:
- https://aresluna.org/the-day-return-became-enter/
Josh’s articles are always fun to play with. This one is about writing SVG:
- https://www.joshwcomeau.com/svg/interactive-guide-to-paths/
An interesting way to think about solving problems:
https://www.smashingmagazine.com/2025/07/core-model-start-from-answer-not-solution/
Vibe code is legacy code:
- https://blog.val.town/vibe-code

Home Assistant Automated Blinds Build Log

Ben Weston — Tue, 03 Jun 25 14:57:00 +0100

Living in a flat in the middle of a city has its perks but having neighbours within throwing distance of all your windows is not one of them. For better or worse, opening and closing blinds is an essential part of my day but one which can be automated!

The goals of this project are as follows:

Integrate with my existing Home Assistant instance for easy remote control and scheduling.
Make use of the stepper motor drivers that have been sitting in my parts drawer for too long.
Have as many parts 3D printable as possible.

The Mock-up

Electronics

To get things started I laid out some components on a breadboard so I could get the stepper motor moving. The brains of the project is a Raspberry Pi Pico W running ESPHome. This is connected up to a cheap A4988 stepper motor driver powered by a 24v supply.

To step down the 24v to 5v, for the Pico, I used a simple L78 linear regulator. This method of stepping down voltage is terribly inefficient as the difference between the supply and output voltage is bled off as heat.

P_{waste} = (V_{in} - V_{out}) \cdot I_{out}

This means that given a peak power draw of maybe 100mA for the Pico and A4988 combined, the little regulator would be dissipating 1.9 Watts. The regulator has protections to ensure that is doesn't overheat but it would definitely require a heat sink for the final build.

Software

Next is configuration to enable ESPHome and Home Assistant to interact with the motor. ESPHome provides a Docker container that can generate firmware for your microcontroller based on yaml files for configuration. After some hacking I had something like this:

The stepper component makes it super easy to use stepper motors with ESPHome by only defining a couple of GPIO pins. However, Home Assistant can't directly control stepper motors so we need to expose it as a cover:

cover:
  - platform: template
    id: blinds_cover
    name: "Roller Blind"
    device_class: shade
    ...
    position_action: 
      then:
        - stepper.set_target:
            id: blinds_stepper
            target: !lambda 'return (int)((1 - pos) * id(max_steps));'
    ...

Here I'm using a template to expose a function that Home Assistant can run on the microcontroller. More specifically I'm using the cover template. This allows Home Assistant to show a nice interface to allow precise control of the blind, including buttons to open, close and stop the thing too.

Gearing

My blinds are huge and heavy, even with the maximum current the A4988 can provide they won't budge under just the power of the stepper motor. To get an output with enough torque to move them I'm using this 5:1 planetary gearbox that a co-worker recommended when he got earshot of my issues.

It wasn't a long print and after assembling using the parts list in the description, the operation is smooth and quiet. With the new gearbox mounted the blinds are moving just fine and it's not such a strong reduction that it can't be back driven.

The Installation

To attach the assembly to the wall I remixed this mount designed to motorise bead blinds to fit where the plastic loop holding the blind beads was screwed to the wall. However, once again my very heavy blinds strike back! The beads don't have enough grip against the gear from the model, so I further modified the design to fit a gear that completely surrounds each bead to grip it. With that the mechanical interface to the blinds is complete, but a breadboard isn't permanent enough for something I want to leave plugged in 24hrs a day.

This is the schematic for the final circuit which I built up onto some strip board I had lying around:

I did contemplate having a PCB made up, but for a one-off prototype I prefer the convenience of having it made in an evening. It certainly brought back some school memories of using a drill bit to break the strips.

I measured up the board and designed a small box that can hide everything out the way. It's all well and good being able to automate your blinds or control them through your phone but that isn't so intuitive if we have people round. To that end I configured a SOMRIG Zigbee button and printed off a custom face place to give some hints for what it is for. A few people have made some excellent resources and I used an existing faceplate model in combination with Aasikki's button template to create a reasonable design using Autodesk Fusion.

With that I'm rather pleased with how the whole installation came out. The only remaining issue is that the whole system operates by dead-reckoning. Occasionally the stepper motor slips or there's some delay in ESPHome which causes the position of the blind's open and closed states to drift out of sync with reality. I've made a number input, in Home Assistant, that allows me to trim the blinds back into position if it becomes an issue but after several months I haven't had to use it often enough to be a problem. The only real problem now is that I've got a project shaped hole in my evenings that will inevitably be filled with Clarkson's Farm and Taskmaster. I'll just have to wait until another idea crosses my mind.

Models & Configuration

You can access the configuration required to make this project work on my GitHub. I haven't posted the 3D models yet but if you want them before they're up, give me a nudge on blinds@bweston.uk.