10 Apr 2026

(point of order: this site is now provisionally compliant with IEEE 7012: MyTerms. See the end of this blog post for details.)

Previously: Suspicion and slop in the rugpull economy. I checked the Costco site and compared prices:

Both 90 oz. bottles. (11.59-9.99)/9.99 = 16% price premium for the big-time brand.

Back in 2012, Consumer Reports compared big brands to store brands and found an average of 25% in savings. which means that the big brands had an average 33% price premium then.

The peak surveillance advertising years have been terrible for the big, heavily advertised brands. Meanwhile we have seen growth in A-list store brands—Costco seems to be disciplined about not releasing a Kirkland contender unless they can do it at a comparable quality level to the leading brand in the category.

Maybe

  • other signals of quality (online reviews?) are relatively stronger compared to brand advertising?

  • investments in surveillance advertising have displaced R&D, resulting in less differentiated brands on average?

P&G did not come in to the surveillance advertising era with a data or IT disadvantage, but surveillance advertising has not been good to them. So now, what’s the plan here? (If it’s personalized/surveillance pricing that’s not going to work any better imho.

Myterms support (in progress)

This site now has a .well-known/myterms.json file that includes the effective date, along with a copy of the existing site ToS. I’ll update it to add all the other MyTerms agreements that I’m willing to enter into with a user. FIXME: download and add MyTerms agreements

From the user POV all you should have to do is save a copy of that JSON file: .well-known/myterms.json. This is a manual process for now, but a browser extension should be able to automate it.

There is a link tag in the head on this page to let you know the JSON file is there:

<link href="https://blog.zgp.org/.well-known/myterms.json"
      rel="terms-of-service"
      type="application/json">

see HTML attribute: rel for info on terms-of-service.

Right now this extremely basic MyTerms setup doesn’t displace “consent management” overhead for those who feel they need it (but most sites can get by without it, as the GitHub Blog pointed out a while ago.)

Add a browser extension to check and save MyTerms files and you should be able to get rid of “consent” dialogs too. But there’s still some record-keeping hassle from the site side.

So eventually a site—or a service provider— is going to have to extend the MyTerms JSON to include a URL that a user can POST to, with a record of the contract they accepted, or state that they they rejected all possible contracts available at the site, and request that the site should support a different contract. That would make record-keeping practical for the site, can scale up to more users.

Here’s the code:

If you want to accept my site ToS you should be able to grab the file and save it. (First person to do this could have a claim to the golden spike of MyTerms.)

03 Apr 2026

Eaon Pritchard writes,

By way of a short recap, a big part of the problem of tracking and targeting is information asymmetry. When a brand appears to know more about you than you’ve consciously shared, it triggers the same evolved instincts we use to detect threat, manipulation, or social imbalance. In evolutionary terms, that’s not a ‘conversion opportunity’. That’s a red flag to our stone-age minds.

What is designed as ‘relevance’ is not the same as trust (implicit as it is).

Personalization and trust tend to have a negative correlation. Rory Sutherland uses the example of a wedding ceremony. You don’t go around and tell people one by one that you’re together, you make a big deal of the celebration. And possibly the worst-personalized advertising medium, Little League sponsorships, is the best at trust building. Leagues keep photos and records, making team sponsorship a bad deal for a fly-by-night company and a good deal for a business that expects to offer win-win products or services in the long term.

Where did it all go wrong? Michael Farmer, in Why Have Most Advertisers Suffered From Slow Brand Growth Rates Since 2009? Ten Major Reasons, points out the problem of advertiser growth since 2009, when 2/3rds of major advertisers saw their sales growth rates fall to well below the nominal GDP growth rate of 4.7% (2.4% inflation plus 2.3% real growth).

A legitimate company like P&G (2009-2024 CAGR 0.6%) can, to use a polite expression for slop ads, create fast cycle content to drive traffic, but a scammer can always do it better. A scammer can use the best AI slop service and surveillance advertising available this minute, but P&G is always going to be a number of steps behind, because of the levels of approval needed to use some new AI slop service or ad personalization scheme. Often, by the time a big company can get on something, it has already been superseded or EOLed.

Any advertising medium that’s

  • worth paying for from the seller side and

  • worth paying attention to from the buyer side

has to be based on something that a legit seller can do better than a deceptive seller. Too often, legit companies are trying to compete with deceptive ones in a “move fast and break things” fight that they will lose. Christina Garnett writes,

Customers are more selective because we taught them to be. Their trust is thin because we diluted the very concepts that once signaled honesty and care. They can see when outrage is manufactured, when vulnerability is scripted and when belonging is offered only to drive metrics.

The tricks aren’t tricking anyone anymore. Consumers just feel manipulated.

P&G can make better dish soap than other companies, but they’re at a disadvantage in AI slop and surveillance advertising. Brian Jacobs writes,

If you believe everything you’re told, advertising is really very straightforward. Give your budget to META (insert the name of your favourite platform here). Send over your objectives and brief. META (or whoever) will deploy a magic AI tool, which will design a selection of ads. The alternatives will be pretested. They will then place the winning execution across their individual channels.

Meta advertising works better for a random drop-shipper than for an established firm with an actual detergent research lab. Meta ads work fine for a while, if the point is to trick people into voting for crooks or buying crap. A recent Meta success story, the “fastest growing company in history”, is a weight loss scam that makes up physician testimonials and uses face-swapped patient photos. (See The back story behind the first “$1.8 Billion” dollar “AI Company” by David Marcus.)

Meta’s personalized advertising is auction-based, and we have known since 2006 that auction-based ad platforms eventually bid up rates to extract all the profits from the advertisers that use them (Jakob Nielsen’s analysis applies not just to search, but to other auction-based designs including RTB and social). If typical advertisers on Meta’s sites and apps were anywhere near as successful as the outliers that make the news, then The “Passive Income” trap ate a generation of entrepreneurs wouldn’t be a thing. And it’s not just the small-timers. Relying on auction-based advertising is showing up as a problem for well-funded firms too. Allbirds are canaries in the Meta coal mine, along with Oddity Tech, which went all in on personalized cosmetics on Instagram.

The winners in the surveillance advertising game are the Big Tech platforms that design for scams and the scammers they enable. In The Myth of the Unwanted Internet, Julian Morris asserts that the Internet “solved for trust” by adding user-tracking features. But that doesn’t describe the Internet as we currently experience it. In fact, we’re in an economy-wide trust collapse because of decisions to add surveillance features that give deceptive companies advantages over legitimate ones. A 2025 FTC report showed a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024—before the change of administration to one that’s more friendly to large, deceptive companies. Thanks to decisions by politicians to prioritize “innovation,” the scammers even have their own payment platform, “crypto ATMs” and music scene.

It’s time for a more market-aware approach to privacy legislation and regulation. Instead of making the unrealistic assumption that surveillance advertising has some kind of economic benefit that needs to be balanced with user privacy interests, we have to recognize that consumers and legitimate companies are not on opposite sides, but cooperating players in a game with the goal of making win-win deals. The opponents are the Big Tech companies and the scammers. And the problem isn’t specific data practices that could be replaced by clever but pointless math. Privacy people need to bring more and thicker PDFs to the privacy bill hearings. More: advertising personalization: good for you?

Bonus links

Targeted advertising in generative artificial intelligence chatbots: a new public health risk by Kathryn Backholer and Raffaele Ciriello. The window to act is narrowing. Unlike earlier digital platforms, norms and revenue models for AI chatbots are still forming, which presents a rare opportunity to embed health-protective governance before advertising-driven architectures become entrenched. (Meanwhile, the public health menace of existing surveillance advertising is already here—but it already has too many “entrenched” lobbyists to fix easily.)

Life Altering PostgreSQL Patterns by Ethan McCue. There is a set of things that you can do when working with a Postgres database which I have found made my and my coworker’s lives much more pleasant. Each one is by itself small, but in aggregate have a noticeable effect. (Ever notice you don’t see this kind of stuff for Oracle? IMHO the “AI” bullshit explanation for recent layoffs is not the whole story.)

How a flawed idea is teaching millions of kids to be poor readers by Emily Hanford. For decades, reading instruction in American schools has been rooted in a flawed theory about how reading works, a theory that was debunked decades ago by cognitive scientists, yet remains deeply embedded in teaching practices and curriculum materials.

Iran’s Revolutionary Guards just named 18 US tech firms as military targets. The age of the civilian data centre is over. by Allison Steffens Herrera. (Related: Iranian missile blitz takes down AWS data centers in Bahrain and Dubai by Jowi Morales.

01 Apr 2026

Would planning assumptions about the war on Iran have turned out to be so wrong if, say, the US government had gone whole hog for prediction markets instead of LLMs? Well, yes. If there’s enough pressure to get the “right” answer, any system can be leaned on to produce it. If the USA had dug up some old DARPA research on prediction markets and used it for war planning, we’d still be in the same situation, only the news would be about how prediction markets failed, not about how the Pentagon’s LLM frenzy did.

Instead, the big prediction market news is ‘Gamblers on POLYMARKET vowing to kill me if I don’t rewrite Iran missile story’… by Emanuel Fabian at The Times of Israel. Journalists were offered bribes and received threats over changing a news story that was key to resolving a prediction market contract. The big connection between news organizations and prediction markets is not competition, as Prof. Robin Hanson suggests, but dependency. A prediction market needs an outside source of information, or “oracle” to resolve contracts, which for most kinds of world events markets means a news site.

The Times of Israel situation is a much larger scale version of a problem that we ran into with bug futures. The cost of resolving a contract is high relative to the value of the contract. That applies to both really small incentivization market issues (does this patch fix this bug?) and big picture markets. Previous criticism of war markets, such as Gamblers can now bet on the outcome of wars – and that’s a problem, by Karoline Thomsen and Douglas Guilfoyle, focuses on the problems of corrupting decision makers and incentivizing leaks. But insider trading is a feature, not a bug. Prediction markets tend to blend into incentivization markets. Prof. Andrew Gelman writes,

To put it another way, the ideal for a prediction market is for it to have high stakes (so that it’s costly to try to manipulate the price) with bettors being people with no influence on the outcome. But such a market will be a ripe target for people who can influence the outcome and for insider trading.

In general, the possibility of insider trading is a win for prediction markets—and a good argument for why there should be more prediction markets—because they could disincentivize people from forming the kind of large, untrustworthy organizations whose members are likely to participate in insider trading. But the oracle problem is a lot bigger. The solution we came up with has two parts.

First, pay the oracle, a lot. Reporting from a war zone is obviously costly and risky, but resolving any market is usually going to cost a pretty high fraction of the money at risk. So we imposed high oracle fees, which are paid by the winners and disclosed up front.

Second, make it easy for traders to avoid the oracle fees by getting out of their positions. So you end up with a market that trades in a narrower band of prices (there are no worthless positions. Even a bet on an impossible event is worth about the same as the oracle fee, because the holder of the winning side would rather get their 90% now than hold out for 100% minus a 10% oracle fee at maturity.)

Oracle fees are easy for an internal bug futures market or other internal corporate prediction/incentivization market, but for markets on news events, where the oracle is an outside source, markets need other options.

  • Public sector oracles. Government bodies such as United Kingdom Maritime Trade Operations and the Bureau of Labor Statistics already produce oracle-ready information. And prediction markets provide an anti-corruption and counterintelligence check on those. It’s hard to tell if a government agency has a foreign spy, but an insider trading problem will be more likely to show up in the market numbers. (For example, the current US administration is obviously leaky, and prediction market trading patterns help people decide whether to share information with it.) So there is a good case for the public sector to provide oracle-friendly event reports.

  • A copyright-like oracle right for news organizations. Article One, Section 8 of the United States Constitution just says securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries, so an oracle right would probably work here. Partnerships between news companies and prediction markets are a thing, but there’s still a free riding problem that an oracle right would help address. If a news site is not opposed to prediction markets on principle, it has lots of incentives to seek oracle deals, including because of the money talks bullshit walks effect. Total money at stake in contracts for which this site is an oracle could be a useful qualitative news metric, and a news site that can’t be a reliable oracle is probably unreliable in other ways too.

News site revenue is a hard problem, and diversifying revenue is a big deal. Although a lot of people like micropayments, and the ability of a site to get micropayments is a useful crowdfunded quality check, micropayments have a fundamental problem. Much of the value provided by a news site is the stories that didn’t happen. Nobody would pay to read “City Council Didn’t Steal Everything In Town Because a Reporter Was At The Meetings” but that (unwritten) story is worth more to the town than the alternative.

It seems like the viable options are either an actively enforced ban on prediction markets, which would limit the number of people with the resources and incentives to bribe or threaten reporters, or an enforceable oracle right, which would give the news organization additional money to keep reporters safe and honest, and an incentive to stay accurate and useful as an oracle in order to keep oracle deals. Otherwise, traders on free-riding prediction markets, whether legal or illegal and tolerated, have the ability to subvert the news sites they use, but the news sites have no funding for their defense.

Bonus links

‘Opening up air defense market’ — Defense Minister Fedorov reports 1st drone shootdown by ‘private sector’ air defense units by Kollen Post. At the same time, there is little public information on how private air defense units function and are funded, particularly in their early phases.

Solar is winning the energy race by Gero Rueter. Many early forecasts greatly underestimated the growth of the solar industry. In its annual global energy analysis in 2020, the International Energy Agency wrote that worldwide solar expansion would hit around 120 GW in 2024. In reality, a whopping 597 GW were installed that year, nearly five times as much as predicted.

Vitalik Buterin warns prediction markets risk sliding into ‘corposlop’ by Suswati Basu. In his view, platforms are drifting toward what he called an unhealthy product market fit. Rather than focusing on surfacing useful long-term insights, many have centered their offerings on short-term cryptocurrency price bets, sports betting, and other similar things that have dopamine value but not any kind of long-term fulfillment or societal information value.

28 Mar 2026

I think I said I would post here when it’s safe to turn off your ad blocker. The tl;dr is: no. Will update if that changes.

The long answer is that a dirty business has gotten dirtier. Not only have the ads gotten heavier (I went to the New York Times to glimpse at four headlines and was greeted with 422 network requests and 49 megabytes of data. It took two minutes before the page settled.) and added more aggressive data usage as they refresh on the page, the business side is all in on the low-trust economy, too.

Advertising’s hottest club is “principal buying” or “principal media”—big agency holding companies functioning not just as agencies to buy ad space on behalf of clients, but trading ad space for their own account before the client sees it. Nick Manning explains.

This has been going on for decades, especially in markets like Asia Pacific, Eastern Europe and Southern Europe. Broadly speaking, what’s happened over time is that those practices [were] imported into the U.S. around 2010-2011.

The thing that’s made it happen more recently is that the [agency] groups started to see their other revenues decline, and this is one way of arresting that decline — but it’s also easier to do this because you don’t have to win new clients, you don’t have to pitch, you don’t have to employ any more people. You just have to set up the financial machinery to do it.

A decades-old practice is getting more attention now, because of two stories.

  • Paperwork that has come out in a lawsuit by a former WPP employee.

  • A beef between another large holding company, Publicis, and a “demand-side” adtech firm, The Trade Desk, with each company accusing the other of non-transparent practices (and IMHO they’re both right).

Covered in The Rise Of Principal Media And The End Of The Agencies As We Knew Them by James Hercher. Companies that are in a position to get a peek at principal buying from both sides—as both owners of ad-supported contexts and buyers of ads—aren’t sold on it.

WPP’s legal disclosures reveal that none of its top 20 biggest clients participate in principal media – despite the fact that many of WPP’s largest brand accounts are themselves the purveyors of principal media deals on the supply side, including Paramount, Comcast, Uber, Amazon, Google and Sony.

These brands stand to gain the most from principal media, which rewards pure volume. They’re also very knowledgeable about the practice, which is perhaps one reason they avoid it when they have their buy-side hat on.

More info in The Trade Desk-Publicis Fight Is Really a War Against Transparency by Jay Friedman and Publicis vs. The Trade Desk isn’t really about transparency – it’s about who gets the margin by Ronan Shields.

When something isn’t easy to measure, price becomes the proxy. So, the world’s largest agencies now essentially pitch for free and operate on razor-thin disclosed margins.

To survive, they have to generate profit from hidden fees and undisclosed arrangements.

Marketers, in turn, reward this by continuing to hire and rehire the agencies that play the game most aggressively.

This forces increasingly complex schemes and systems, which pulls time, energy, and talent away from the thing the agency was theoretically hired to do in the first place: drive brand growth.

Michael Farmer has more info on how big agencies have failed to keep the rates up for the legit side of their businesses: Price premiums are the ultimate measure of successful professional relationships. Holding Companies have failed to achieve them

Besides brands, the other big losers from this whole mess are the long-suffering legit ad-supported sites, whose business model is like selling fresh artisinal donuts to a market that makes a point of not being able to tell a donut from a turd. More on that problem in The SEO parasites buying, exploiting and ultimately killing online newsbrands by Rob Waugh. Sites typically go from being viable outlets, still valuable enough to be bought for large sums, to being filled with AI-written articles and casino links, before simply being abandoned.

The alternative is worse

Web adtech is a dirty business, but the real villainy gets started within the Big Tech platforms, where internal ad markets run inside the data center and not out on the web where competitors and researchers can watch them in browser dev tools.

Jack Benjamin asks, ‘Are we monetising addiction?’ Ad industry faces reckoning following social media addiction lawsuit verdict. Advertisers, it follows, are complicit in funnelling spend to platforms without demanding transparency into what specific content they are monetising against. (In the long run, this will be a problem for recruiting into marketing as an occupation. If a lot of the work is feeding some kind of central planning system that we all know has negative externalities, then qualified people will look for other career options. Related: Relax, It’s Only An Existential Threat by Brian Jacobs.)

And Karen Middleton, writes, in Why harmful content keeps reaching children online – and what advertising has to do with it, For people working inside advertising and technology industries, this moment may feel particularly significant. Greater public awareness means fewer opportunities to claim that online systems are too complex to understand or influence. The costs of participating in surveillance advertising keep going up.

And yes, there’s an alternative. Sunday Internet optimism

Bonus links

Elon Musk loses big in court; X boycott perfectly legal by Ashley Belanger. In her opinion, Boyle noted that Musk also failed to show that advertisers had worked together to boycott then-Twitter. Advertisers argued that they made independent business decisions based on their own brand safety concerns, and there was no evidence to suggest they were lying. Judge Tosses Musk’s WFA Ad Boycott Suit by Wendy Davis. The World Federation of Advertisers shuttered GARM in August, days after Musk sued. (Time for a GARM re-launch with a new host org? Musk’s politics are remarkably unpopular, so brands that get associated with them will be worse off on every timeline except some of the extreme dystopias where they will have a lot more to worry about anyway.)

Finding a Voice. by George Tannenbaum. There was a time in our business, at least at Ogilvy, where creative people weren’t just designers and writers. They cared about design and writing, but more than that, they were business people who could use creativity to advance a client and agency’s prospects, and therefore their career. (Anyone else remember the Universal Business Adapter?)

Marco d’Itri: systemd has not implemented age verification [T]he facts are simply that the systemd users database has gained an optional “date of birth” field, which the desktop environments may use or not as they deem appropriate. Of course there is no identity verification or requirements to provide any data, which in any case would not be shared beyond authorized local applications.

Google Has a Secret Reference Desk. Here’s How to Use It. by Hana Lee Goldin, MLIS. Good list of advanced search features that still work. The AI-generated summary at the top of many Google results is the feature most likely to be wrong and most likely to present that wrongness with complete confidence.

Staff at New Data Center Powered by Human Brain Cells Need to Swap Out Cerebrospinal Fluid Every Day by Frank Landymore. Though it remains highly experimental, Cortical Labs touts one key advantage over traditional computing: a far smaller energy draw. To Bloomberg, Chong claimed that each CL1 unit needs less power than a handheld calculator, further predicting that they will one day be faster than traditional computers, too.

24 Mar 2026

Spotted this over the weekend, an error message that somehow went live.

Article Cannot Be Produced - Source Material Does Not Exist error message, formatted as a news story

The same site refers to stories on Phoronix and others, too. At least they link to their source material. The sad part is that even though this site is missing an ads.txt file, it does have ads showing up for at least one real consumer electronics brand and one real business event.

TechCrunch does have the story that the error message seems to be about, so maybe either there was an error in the crawler, or TechCrunch was able to block the crawler, or I happened to visit while TechCrunch was in the process of catching this site doing this.

I’m not going to name the site because first of all, the company that runs it has a lot of domain names, and second, now that they have their automatic slop CMS going, they can always get more. The point of writing this is not, look, I found a slop site, everybody add it to your blocklist. The point is that the advice to use a blocklist to keep your ad from showing up on crap sites was always bogus—even before widespread use of LLMs, editing a blocklist for one brand or agency was always a losing race against all the crap site makers in the world registering domains.

Looking back at advertising history, getting ads into legit contexts is the original role of an ad agency. Back when the advertising options were basically signs and newspapers, a manufacturer couldn’t read all the local newspapers, so they needed a trusted set of eyes to keep up with which newspapers really reach the people they claim to, and handle the process of placing insertion orders and paying invoices. Agencies only started making the actual ads later. Yes, sellers of ads space tried to subvert agencies, and sometimes succeeded, but the expectation was that the agency works for the advertiser. (Part of the reason for the crisis that big agencies are in now is the shift from agency agency to inventory flipper.)

The slop situation should be an opportunity for agencies. (Not an opportunity to make slop—a dedicated platform tool will do it better.) The Forum on Information and Democracy has details, in the new report The online advertising market needs urgent, structural reform to support democracy and journalism.

Advertisers lack control over where their ads appear and what exactly it funds. This leads to significant resource wastage on platforms that promote low-quality or misleading AI-generated “made for advertising” (MFA) websites that would otherwise reach news publishers.

Legit sites are more effective than slop as an advertising medium (FIXME: add link to a piece about that, coming soon) but slop is the default.ICYMI: Google is Robbing You… and You Can’t Stop Them by Collin Slattery If the default is running on slop, then a brand or agency can get attention by doing the opposite.

Just announced: the new Navigator Award. They’re looking for ad-supported sites to nominate brands and agencies.

The Navigator Award gives publishers a way to recognize the brands and agencies that have made a real, intentional effort to show up in trusted news and publisher environments, especially where blanket approaches to brand safety and suitability would have made it easier to stay away.

Who is successfully avoiding the slop mongers and making a real impact?

Update

Embattled startup Delve has ‘parted ways’ with Y Combinator by Anthony Ha. (There’s probably a vibe CMS version of this one, too, but TechCrunch has the original story.)

22 Mar 2026

Delve Accused of Fraud by Anthony Ha. Delve responded to the accusations by saying it does not issue compliance reports at all. Instead, it’s an automation platform that ingests information about compliance, then provides auditors with access to that information. (What if Silicon Valley’s hottest startup trend is half-assing as a service (HAaaS))

Groups of Unknown Drones Spotted Over US Base Housing B-52 Bombers by Dmytro Shumlianskyi. These drones did not resemble commercially available models—they were high-tech, had a significantly greater range, and were resistant to electronic countermeasures. (Related: Surveillance risks and the TIDALWAVE report)

Pakistan’s solar boom is helping it save billions during the ongoing energy crisis by Adele Peters. Pakistan gets almost all its oil and gas from the Middle East, where U.S. and Israeli bombing of Iran have caused crude prices to blow past $150 a barrel and tankers can’t get through the Strait of Hormuz. But it has one edge in the crisis: a rapid, recent shift to solar power.

Germany Mandates ODF for Public Administration in Sovereign Digital Stack by Bobby Borisov. Germany has mandated the Open Document Format (ODF) as the standard for public administration documents within its new sovereign digital infrastructure framework, the Deutschland-Stack. Published by the Federal Ministry for Digital and State Modernisation, the framework sets technical standards for a unified, interoperable digital environment across all government levels. It explicitly requires ODF and PDF/UA as document formats, excluding proprietary alternatives from official use.

Lina Khan was right by Victoria Song. The FTC’s Meta lawsuit was often framed as an abstract attempt to rein in Big Tech. But in the end, the acquisition’s human cost was obvious—and an example of precisely why antitrust law matters.

90% of crypto’s Illinois primary spending failed to achieve its objective by Molly White. The cryptocurrency industry super PACs dumped $14.2 million into the Illinois primaries. 90% of that – $12.8 million – was wasted, in that it went to opposing Democratic candidates who won their primaries.

How China Aligned Itself with Saudi Arabia’s Vision 2030 by Hesham Alghannam. As for the localization of the renewable energy industry in Saudi Arabia, in July 2024, China’s Envision Energy entered into a joint venture with the PIF and the Saudi manufacturer Vision Industries, a private company, to build a turbine factory in the kingdom….Saudi Arabia also signed two other joint ventures with Chinese companies to manufacture and assemble equipment and components for solar power.

IBM and Ogilvy end 32-year creative partnership by Luz Corona. (All the Linux advertising I remember from the Linux boom was for IBM.)

‘New era for street vendors’: Mamdani names top advocate as NYC’s vendor czar by Arya Sundaram. Our street vendors are not a problem to solve — they are a community to support, the mayor said in a statement.

How Brazil’s innovative ‘Pix’ payment system is angering Trump and Zuckerberg by Vitoria Barreto. [Paul Krugman] emphasised that Pix is achieving what cryptocurrency boosters claimed, falsely, to be able to deliver through the blockchain—low transaction costs and financial inclusion.

Outpost Moved its Servers to the E.U. by Ryan Singel. Just to be clear, Outpost has never had a data request, subpoena or National Security Letter dropped on us for our data or any member publisher’s data. But we still thought this was a prudent step given the current political environment.

Beavers can turn streams into carbon stores – we measured how much by Joshua Larsen, Annegret Larsen and Lukas Hallberg. So when beavers dam rivers, they can also fundamentally change how carbon is stored in river landscapes.

Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway. by Renee Dudley, with research by Doris Burke. For years, reviewers said, Microsoft had tried and failed to fully explain how it protects sensitive information in the cloud as it hops from server to server across the digital terrain. Given that and other unknowns, government experts couldn’t vouch for the technology’s security.

How Can Governments Pay Open Source Maintainers? by Terence Eden. When I worked for the UK Government I was once asked if we could find a way to pay for all the Open Source Software we were using. It is a surprisingly hard problem and I want to talk about some of the issues we faced.

Bogdan’s Blog – Windows 8 Was Peak Microsoft and I will die on this hill I know it’s a hot take, and some of y’all might already be reaching for your keyboards, but I don’t care. I used Windows 8 on my desktop, used it on a janky 2-in-1 laptop, and had a blast with both. Dare I say, it might’ve been the snappiest, most responsive version of Windows ever released.

15 Mar 2026

Augustine Fou writes, in How Brands DIDN’T Grow—The Need for Digital Rebalancing

The analysis of 86 public companies across 17 sectors, using 15 years of public revenue data from 2009-2024 reveals a striking disconnect between modern marketing theory and actual revenue performance. Massive digital spending has failed to drive meaningful revenue expansion for most brands over the 15 year time span.

Some brands that spend a lot on modern advertising are growing more slowly than the economy as a whole. In Holding Companies Need High Level Strategic Plans, Not Just Announcements of New Structures and Cost Reduction Targets. Independent Agencies Will Take Advantage…, Michael Farmer writes,

Public data tells us that the 2009-2024 sales growth rate of 40 out of 60 major advertisers has been very depressed, averaging (as a group) only 2% per year for 15 years.

By contrast, the market had real GDP growth of 2.4% per year plus inflation of 2.3% per year — so the benchmarked nominal GDP growth rate was 4.7% per year.

Imagine! The group of 40 out of 60 big-spending advertisers grew at less than half of the nominal GDP growth rate for 15 years.

Dr. Fou suggests adfraud and under-investment in brand-building advertising as contributing factors. Another problem may be that money spend on surveillance advertising tends to crowd out investments in product improvements, or require disinvestment in products and services, much as sports betting tends to crowd out investments by households. Trader Joe’s peanut butter cups have milk chocolate, no ads, and no ingredients list drama.

Ingredients list for Trader Joe’s peanut butter cups

The future timeline in which the role of marketing decision-makers is reduced to, effectively, interacting with an “AI”-based central planning system is already partly here. In Orwellian “Doublethink” and Programmatic Advertising, Farmer writes,

Programmatic is successful in generating income for Big Tech, particularly for Google, Meta, Amazon, data providers and martech infrastructure owners. Anyone beholden to or involved with Big Tech sees programmatic advertising as “good.” (What must be ignored is that the publishers and agencies are being starved of revenue by Big Tech…and agencies will be eventually squeezed out by Big Tech.)

Eventually could be soon. According to some documents that came out in discovery, at least one of the major agency holding companies is disturbingly reliant on “proprietary media trading” as their pricing power declines. Tom Denford writes, in 3 Things Marketers Must Do After the WPP Disclosures,

At the same time, the leaked “Project Claridges” presentation, released in ongoing litigation, shines a light on $1bn of what WPP calls a “non‑product related income” engine built on rebates, content deals and, most significantly, proprietary media trading. That disclosure doesn’t just affect WPP, it validates what many CMOs have long suspected about the wider holding‑company model.

Maybe surveillance advertising is working, and working so well that the Big Tech companies are capturing all the value created by it?

But it doesn’t look that way. Meta and Google are taking the kinds of high-profile risks of doing obvious crimes that a legitmately growing company shouldn’t have to. IAB Sweden just voted to expels Meta over crime issues, which is not the kind of thing that industry organizations just do to a major member. If we were on the timeline where Big Tech were making sustainable revenue from their advertising oligopoly, they would have been able to reverse fraud-friendly decisions and smooth this kind of thing over. Instead, because the companies are forced to juice their stock prices without enough legit revenue to justify it, the tricks continue. For example, they’re consolidating ownership of how ads are measured by putting obfuscated ad reporting into web browsers.The surprising part is that Apple is still going along with that one. It seems like they would have taken the opportuntity to squeeze Meta and Google, like they’re squeezing the laptop business by releasing a bargain-priced but good Mac OS laptop right when everyone else is dealing with the RAM shortage.

Surveillance advertising hasn’t been good for brands, agencies, or the people it tracks. (Even the literature that proponents cite doesn’t really support it, if you read the body copy.) It’s going to be harder and harder to justify the risks. Oh well, see you in the comment files for the next state privacy law.

Bonus links

The Broken State of Mobile Marketing: How Attribution Theft Created a $100B Fraud Scheme by Jason Fairchild. By awarding 100% of the credit to the final interaction, a few key measurement providers have built a system that incentivizes “Attribution Theft” and perpetuates the industry’s most pervasive fraud problem.

Disrupting 59M Malicious Impressions: Inside D-Shortiez Testing Infrastructure and Campaign Management by Confiant and Michael Steele. (See screenshots for examples of “Google-branded gift card scams” and “Amazon-branded giveaway scams”. If the web ad business is so good at AI, why do obvious trademark-infringing ads even run?)

13 Mar 2026

Meta (the company) has done way too many crimes and needs to be shut down. Even one of their own industry organizations has kicked them out over their ongoing fraudulent ads problem. And the “IG is a drug” trial isn’t going too well for them either. Time to wrap it up.

The problem is that there are way too many people who are currently only in touch with each other on the Meta sites and apps. So how will a future monitoring trustee manage the process of putting an orderly end to Meta, without imposing unacceptable costs on the people who have gotten into a situation where they depend on Meta’s shenanigans?

This is how I would handle it if they wanted to appoint me to the monitoring trustee position. I have other stuff going on, but this will help out legit companies like [redacted], and will be a productive step toward ending the problematic attribution cartel thing so I think I can do it fairly. If you need a lawyer to be the monitoring trustee I can recommend some, lmk

So here’s how to do the shutdown. Borrow an idea from airline overbooking.

  1. No more new accounts.

  2. Update the sites and apps to require every Meta user to put in a price for which they would quit. Nobody gets booted off involuntarily, they’ll get an amount of money that they would prefer to their Meta account. Some people, infrequent users or those who were planning to quit anyway, would put in a low amount. Some people, such as Meta advertisers, people who want to work for Meta advertisers, and those who can’t reach their friends and family any other way, would put in a high amount. Users would be able to change their price at any time until it is accepted.

  3. Every month, under the monitoring trustee’s supervision, Meta buys out the 50 million users who have asked the lowest prices. Those 50 million people lose access to Meta. When they log in to the sites or launch the apps, they only get a screen with info on the status of their payment, an option to download their photos and other info, and a way to put in to recover their account in case it was compromised. But each user is already better off overall, because they each get some amount of money that they already said is more than Meta is worth to them. As groups of people leave, the network effects for staying on Meta become less powerful, so remaining users would likely choose to adjust their prices downward. Yes, the monitoring trustee would have to set up a support operation to handle problems with people’s payments, but as Meta develops less new code, employees can be transferred to work on support and keep their health insurance. (Remember we’re going for minimum disruption here and that includes employees’ families.)

  4. Eventually, Meta runs out of money and can’t buy out the next 50 million, so the remaining user database (containing info on those who named the highest prices) gets sold in bankruptcy. Those people never get paid to shut down their accounts. So everyone has an incentive to state a fair price and look for alternative communication methods, but nobody gets a sudden shock.

After step 4, whoever acquired the database can start making new accounts again. But in the meantime the users who left would have gone and made accounts on other services (will Microsoft start LinkedIn for Families? Can Google flip a feature flag to turn Google Plus back on? Or maybe Bluesky or the Fediverse will add enough features to become a contender?).

Bonus links

Virginia to become second state that allows balcony solar by Elizabeth Ouzts. (IMHO the biggest impact will be in a few years, after solar nerd vs. HOA beefs have resulted in unpredictable but valuable political strength training.)

MASSIVE WIN FOR PLAINTIFFS: Federal Court Keeps Wiretap And FCRA Claims Alive In Allstate/Arity Software Development Kit Tracking Class Action—Right On The Heels Of The Texas AG Lawsuit by Tori Guidry. The federal court’s decision in Illinois shows that using third-party app SDKs to gather consumer location data for insurance pricing creates massive legal exposure under the FCRA and wiretap statutes. (Yes, the compliance industry will try to sell you a bunch of software and services to deal with this stuff, but there is a better way.

California’s Age Assurance Lacuna If the California Attorney General decides to go all-in on enforcing this law as written, it will objectively suck for open source; no two ways about it. The amount of coordination, hacks, and new development required for compliance will likely be beyond the capacity of many projects. (My prediction: Valve will have to implement this for SteamOS, the slick mainstream distributions will copy Valve, and a lot of the small-timers will update their ToS with specific language about California.)

12 Mar 2026

Some of the posts on here get updated. For example, I change effective privacy tips as the available services and settings change. (If you’re in California, go do DROP which I added recently.) And sometimes I add a “More” link to the end of a post I wrote more about later, or just fix an error.

Previously every post just had the blog date, from the yaml_metadata_block at the top of the source file. (more info: Metadata blocks) But that’s the date I originally wrote something, so it’s the wrong date to use for an XML sitemap or for the RSS feed of recently changed pages. Since I build sitemaps and RSS from the generated HTML, I need to put two dates in each HTML page. The meta tags for that look something like this.

<meta content="2024-01-01" name="dcterms.date">
<meta content="2024-01-01" property="article:published_time">
<meta content="2026-02-27" property="article:modified_time">

The dcterms.date and article:published_time are the original date from the metadata block, in YYYY-MM-DD format. The modified_time has to be obtained from git, using git log, like this:

That’s gitdate.sh that runs in order to populate the Pandoc command line. I’m using UTC here because the server is on UTC and it would be confusing for a crawler to have HTTP Date headers in one time zone and meta tags populated from a different one. Besides, I’m from Indiana originally so time zones make my brain hurt.

Bonus links

The MacBook Neo By John Gruber. 8 GB of RAM is not a lot….But just using the Neo, without any consideration that it’s memory limited, I haven’t noticed a single hitch. I’m not quitting apps I otherwise wouldn’t quit, or closing Safari tabs I wouldn’t otherwise close. (He did say Safari tabs, not certain other browsers. But still, I’m saving this in case I need an argument against adding complicated crap to a site. Have we tried that on an 8GB laptop with other stuff running?)

Grammarly Is Facing a Class Action Lawsuit Over Its AI ‘Expert Review’ Feature by Miles Klee. Contrary to the apparent belief of some tech companies, it is unlawful to appropriate peoples’ names and identities for commercial purposes, whether those people are famous or not.

Europeans are dangerously reliant on US tech. Now is a good time to build our own by Johnny Ryan. (If you’re waiting for the government to come around and tell you to protect yourself, I don’t know if even the biggest, most ambitious government program can help you. Ask your grandparents or great-grandparents: would they wait for the government to send someone to tell them to turn the lights off during an air raid? Or do you check your own lights and help your neighbors if needed? This is up to every IT decision maker, at every level, from corporate and public sector CIOs, to development project leaders. For “Europe must” it makes sense to substitute “An IT decision maker who wants to protect their users must”. Anyone making an IT choice can either accept the manageable risks of filling in technical gaps in open source or responsibly hosted software—or choose some solution that might look more feature-complete today, but holds unpredictable risks when it starts working against you. More: you can’t spell #Eurostack without U)

A Take-Down of the Take-Down by Brian Shearer. Banks’ average Return on Assets (ROA) across all activities is consistently around 1.1%. But the ROA for credit cards is 6.24%, reaching as high as 10.82% for subprime customers, but still a high 2.56% for even super-prime customers. Investors are consistently happy with 1.1% returns from banks, so the credit card profits are much higher than they need to be.

11 Mar 2026

Get uBlock Origin from the Firefox add-ons site. That’s about it.

Some other extensions technically work for most of the random adtech, but the most important ads to block are the ones on Google Search (where the FBI warns that you are likely to click on a fraudulent ad) and YouTube.

Every once in a while YouTube tries some anti-adblocker trick, but you can check the uBlock Origin subreddit for status updates. Usually they fix it pretty quickly.

Firefox also has some built-in advertising features, which can be turned off.

And you can test how well you are protected using Cover Your Tracks from EFF.

More info

uBlock Origin works best on Firefox

Bonus links

Google’s Ad Tech Litigation Defense Grows as Publishers Pile on by Katie Arcieri. Publishers including Vox, The Atlantic, Business Insider, McClatchy Media Co., Slate, and Advance Publications in recent months sued Google in the US District Court for the Southern District of New York, which consolidated the cases. They are pursuing unspecified damages on top of the millions of dollars sought by the other publishers—including Gannett Co., Mail Media Inc., and Emmerich Newspapers—that are already part of the multidistrict litigation that began in 2021. (The Federal antitrust case found Google guilty, so most of the legal work for these has been done already. Finally the publishers get to be the ones to free ride instead of the other way around.)

The one science reform we can all agree on, but we’re too cowardly to do by Adam Mastroianni. We can satisfy both the scientists and the scalpel-wielding politicians by ridding ourselves of the one constituency that should not exist. Of all the crazy parts of our crazy system, the craziest part is where taxpayers pay for the research, then pay private companies to publish it, and then pay again so scientists can read it.

I dumped Windows 11 for Linux, and you should too by Sam Medley. Installing Linux not only saved three machines in my house (my laptop, desktop, and our media PC); it resurrected the joy of using a computer.

A Hack is Not Enough by Gio. Just because something is morally right doesn’t mean that institutional power will never be able to kill it, and just because enforcing regulation would be technically difficult doesn’t mean it won’t be done.