Tag: tools

#0040: 1 Day Challenge Article: My opinion on AI technologies

Otto

#0040: 1 Day Challenge Article: My opinion on AI technologies

NOTE: This article may have used AI, but was definitely written by an ape.

Preamble

I should state that I have not written anything in a while. Predominately I blame busyness. (It is the most common form of laziness after-all.) However perfectionism is also a solid secondary as to why my output here is so low. I have strangled many articles that I found 80% satisfactory. But I just couldn’t press publish because I knew that if I just put a little more effort into them they could be great. One more read through, and rewrite, one more supporting paragraph. One more edit to trim the fat. This all adds on and exhausts me to the point that the draft gets put on ice… Citing that: “I’ll do it when I have a little more time later.”

Well. This exercise is a way of trying to kill both birds with one stone. I want to give myself a solid deadline for making an article. 1 day. From start to finish. Initial notes, media collection, 1st draft, revision edit, and publish. All in a single day. The topic I have chosen for this 1 day article is… AI. More specifically I’d like to generally opine on what I think about AI. As a technology, as a business, and its effects on our lives and culture. It’ll be a rough and ready article.

So without further ado let’s begin.

What is AI? (Or rather what do I mean when I say AI?)

AI stands for Artificial Intelligence. However (thankfully) as of 2026 we don’t yet have a True AI. Id est: a real sentient or sapient intelligence. A self aware entity capable of reflection and personal growth. What we do have is various data manipulation models and scripts that we refer to as AI. Such as Large Language Models (LLMs), or chat bots (e.g. Personal Digital Assistants). I am not going to pretend to know more about this subject than I do – which is not much.

However I am familiar with using generative AI. AI models that create a novel output. Such as text, images, and various other media. As I understand this they do this by creating internal models by copying media that is fed to them. For example ChatGPT collects information by scraping websites then reconstituting that information and passing it to a chat bot which engages the user in conversation. That’s how I broadly understand it. So if you ask it for restaurant recommendations, it will scrape Yell and Google Reviews, then present that information in conversation to the user according to their criteria. E.g. location, food-type, budget, hygiene rating, etcetera.

I will primarily continue to use ChatGPT as an example use case of AI, as it is the one that I am most familiar with by a fair margin, and it is a good generalist that does a little bit of everything. It searches like Google Gemini, it can create images like Mid-journey, it could create code like Claude-code, and so forth. It is a Jack of all trades.

Is AI good for us?

Yes, but mostly no. Hear me out.

Information veracity and reliability

Firstly AI information output can not be implicitly trusted, and hence should not be used in a professional setting. Or any setting where liability may be an issue. ChatGPT warns users of its inherit unreliability within the chat box itself. Observe their disclaimer. “ChatGPT can make mistakes. Check important info.” Basically they wash their hands of any liability. How the user uses this information of dubious veracity is entirely up them. As are the consequences. In my opinion this means that AI can not be used for anything of deep importance. At least not as a stand alone source. Think looking up health symptoms, or asking for legal advice.

Why is AI provided information considered unreliable?

Two main reasons pop to mind. One is “AI Hallucinations”. This is were an AI agent would just spew out inaccurate information that it just made up whole cloth, or tried to bridge disparate datums with faulty assumptions. In the YouTube example video, the AI used by these users made up reference cases that either did not exist, or did exist but the AI misrepresented the context and case law that was illustrated in the specific named case. Watch the video.

The second reason why information provided from AI agents shouldn’t be implicitly trusted is to do with its source(s). Where does ChatGPT get its information from? The Internet. Is the internet filled with bad/inaccurate/malicious information? Yes. If it is present in volume, or in publications that the AI considers authoritative. Then is at a real risk of regurgitating the bad information to its users. AI can act like a magnifier for any bad info that is already in circulation. Such as information presented by ideologically captured (once prestigious) institutions, information in a main stream media circular source loop, or information that is in such volume that it could be considered Vox Populi. This is especially dangerous when it is presented by a vocal minority speaking on behalf of the majority across multiple locations online.

AI hallucinating case law references (etcetera.)


https://www.youtube.com/watch?v=bGn1SZuhTys

How to use AI even though the information is unreliable?

I do find it rather funny, because when I was in school I was told not to use Wikipedia.org as a reference for my essays. This is because it is not considered a reliable source; due to its core nature of compiling information from the public with little in the way of information discernment and validation. Wikipedia has the same weakness as modern AI. It draws its information from the public who are inherently unreliable, and from official (e.g. main stream media) sources who have been known to selectively report/omit information in order to push agendas/narratives, based on their political affiliations.

However both can be used constructively when researching a topic. To put it bluntly: they are both a good jumping on point. They are both good for an initial orientation on a subject. As long as you can read and compartmentalise the information provided, attaching a mental asterisks to the information to flag it. So that it is not integrated into one’s world view naively. I genuinely think that many if not most people do not have the ability to do this reliably. (Myself included.) We are too prone to cognitive biases, logical fallacies, first movers advantage… etcetera.

Additionally following Wikipedia’s listed sources is very useful for learning more about a given topic, and finding more authoritative sources on information. For example a book written by the author being studied. ChatGPT likewise can be asked to list its sources. Example prompt: “Can you list and summarise Kuji-In for me please. List sources. Prioritise books as a source.”

AI’s core methodology of replacing people

AI at its core is a technology designed to supplant and replace people. It is marketed to businesses as a way to replace staff. And save money by not having to pay their wages. At least initially, it seems as of 2026 the marketing has shifted tenor from “replacing” staff, to “augmenting” staff in order to increase productivity. Marketing bullshit. At the end of the day it has the same results. The technology’s presence lowers the need/demand for staff in general.

This means that it is fundamentally bad for the economy. As it causes job losses. Especially in the white collar office worker sector. Who are usually from an upper-working to middle class background. People who constitute the largest population of people with significant disposable income. This disposable income fuels the economies of the West, especially the UK. Which is primarily in the tertiary sector. And this demographic is the primary consumer base. Who buys the daily Starbucks/Costa coffee on the way to work every day? Who buys lunch every day? Who spends the most on restaurant food delivery? Or taxi services? Or is remodelling their house every 7th year, or replacing their cars every 5th?

Is it the once in a while purchases (assuming fiscally responsible) of the lower working class or underclass (benefits people), or is it the upper classes who aren’t in significant numbers enough to drive public consumption trends. No. It’s the exact demographic of people most affected/displaced by AI. There will be negative down stream to service workers and the tradesmen that service this demographic. Damaging the purchasing power of the core consumer bulk in a service economy country like the UK, will have significant negative fallout on all sectors and people.

AI’s frivolous use cases

Whenever I see AI being advertised to consumers. (Not businesses like above.) The use case always seems to be frivolous and largely unnecessary. many times it is designed to help the user avoid putting in any effort into their own life. Consider the example official advertisements that I have cherry picked here. Look at the situations where the consumer find themselves in, and how they use the AI to get out of it, as well as their conduct and mentality. The people featured seem like low quality trash people. They lie to the people around them, they are lazy, and they are irresponsible: often leaving things to the last minute. AI is being presented here as a tool to enable idiots. Just my opinion.

Also look at the ChatGPT ad of “You can just finish the work”, notice how it cuts the user out of the loop. There is great danger in allowing a computer to remove you from the process. It aggregates all the information in the files provided, creates a presentation for upper management, and sends it. All without user oversight. Just liability/blame if anything goes wrong. I wonder what could go wrong with that? It’s all too easy to show one’s arse with this over-reliance on automation. Building habits that enable complacency.

Look at the below adverts. All for AI personal agents. ChatGPT, Meta AI, Adobe Acrobat AI, and HP AI. All different companies. However the core use case is the same. Offloading cognitive labour from the user’s brain to the machine. What people don’t realise about short cuts, is that they ultimately harm you more than they help. Offloading cognitive labour, enables laziness and is an opportunity lost at learning (and hence growing). This tech is a crutch, that will guarantee that the patient will never walk straight again.

“You can just finish the work” ChatGPT advert


https://www.youtube.com/watch?v=-vvGAKtV_Ek

Signing off on work that you did not review. What could go wrong?

Your personal AI. The new Meta AI app.


https://www.youtube.com/watch?v=2l_2k5KrXmo

Call your wife, control your cat, change tanks idiot.

Meet Kat Dennings’s newest personal assistant, Acrobat AI Assistant


https://www.youtube.com/watch?v=Xh2nsY9tQzs

Lie to your colleagues about work, and irresponsibly sign contracts base on summaries.

HP AI Companion


https://www.youtube.com/watch?v=qL7kr1ckgDE

Can’t be bothered to read the reference materials, yet somehow can write loads base off of a summary.

AI and Privacy

I know that the modern man seriously does not care a lick about their own privacy. Often citing a defeatist rhetoric to justify their inaction, or active participation against their best interests in this manner. However I would feel remiss if I did not state the privacy concerns regarding AI.

One. People tell these things way too much private/personal information. Thinking that these machines are a black box, where nothing dropped into it will ever comeback to them. What people don’t realise (or perhaps do but don’t care) is that the box has a hatch that opens up at the back. And its technicians and owners see all via that hatch. Now you have strangers holding your private, personal, or otherwise sensitive information. People don’t appreciate the leverage that the masters of the tool now have over the users that do these things. At the very least, it could be used for highly effective targeted advertisement, or selling the data to third parties.

Above refers to service like ChatGPT the phone app, or website. Positions where the data they have is the data that users gave them via prompts. However AI that has complete access to user’s OSes, completely compromises the entire PC. From a security standpoint. This one really shivered my timbers. Who the fuck would give another person (or their agent) complete access to their private computer?

I can envision a situation where a machine sifting through a user’s files for a task: finds a media files that it flags as illegal for whatever reason. Then due to mandatory reporting policy – one in the EULA that the user didn’t read – reports the user to the authorities. Suddenly police are in your home, your PC is being seized, and reports are being made. All over what could amount to nothing. Cartoonishly extreme I know, but not outside the realm of real possibility. A more mundane example would be that the AI attaches private files to emails, shared projects, or correspondence that you may have wished it did not. It is a security risk in this regard.

ChatGPT can now complete tasks on your computer


https://www.youtube.com/watch?v=dB6pOolO7io

What is Microsoft 365 Copilot and how to use it | Microsoft


https://www.youtube.com/watch?v=zqH-HtQbaeU

AI damaging its own ecosystem

This isn’t an environmental complaint, although there are plenty of those in regards to data centres, electricity consumption, and water use. I am not knowledgable, nor interested enough to talk on that. This is about the information ecosystem.

I would like to put forth the idea that AI products act as parasites. Hurting the very host they need to live. The specific AI product I want to example are AI summaries built into search engines. Like Google, and DuckDuckGo. (Note: I was surprised that Bing and Yahoo did not have AI search summaries.) Consider what an AI search engine summary actually does. It scrapes the information from third party websites to then present it to the user in an edited and easily digestible format. This process completely usurps the actual NEED for the user to visit the source websites themselves. This means that the user is satisfied without visiting and patronising the underlying websites from which the information was sourced. Usually by seeing third party adverts on these sites. This results in the business of running a website becoming less profitable, and even less viable.

Meaning that the presence of the AI summary actively damages the source that it itself uses to function. Like a parasite leaching off of a host. If the parasite gets strong enough or numerous enough it could even kill the host. Which would quickly cause the parasite to starve to death (assuming it couldn’t locate a new host). These AI summaries actively starve the very websites they use for information from the funding that keeps them alive. This means that the number and quality of source websites will diminish as AI summary use expands. A true example of the enshitification of the Internet.

Who is to blame for this? Is is the avaricious corporation, or the lazy convenience-addicted habitual path-of-least-resistance walking consumer? Why not both? My point is that the core financial incentive for people to put good information on the Internet, is actively damaged by the AI search summary tool. Which needs that good information to be of any use at all. It’s actually a sad situation. A starving snake eating its own tail out of necessity. Or maybe a better analogy would be a farmer who poison his own land by driving a leaking harvester.

I’ve herd people advocate for the idea of a revenue share with the source websites to offset this market usurpation. And it might work. Maybe if companies all of a sudden decide that they care about the future, and not about short term quarterly returns for shareholders. Unfortunately they are simply not structured in a way where they are incentivised to care about the future in any real respect. Obviously this is just my opinion on this.

Is AI a business fad?

I will say little on this for risk of really showing my ignorance. What I will say is that I have seen many people compare the “AI bubble” to the “Dot-COM bubble”. Apparently in the early 2000s there was a fad where every major business felt the need to incorporate web services into their business regardless of whether it made sense for them personally, or not. It was predominantly done to acquire share holder funds, by projecting the image of a forward thinking and growing business. Regardless of whether or not the website services that they advertised to prospective share holders actually had any value within them. I think the actual dot-com bubble was about primarily web businesses that did nothing but suck up share holder money, that is until the jig was upped.

I see an analogue in AI technologies today. It seems like every company in the technology sector has AI services which they advertise proudly. Regardless of use or relevance to their primary business model. And even outside of the tech sector, every other large corporation has some kind of AI service available — many of which are useless. Just there to tell prospective shareholders that your business has a foot in AI. And hence are a modern, forward looking, and growing company. It’s all surface level appearance based marketing to make their business more appealing to the cursory inspections of shareholders.

Is AI a bubble?

As a roll on from the fad conversation, I want to briefly discuss the future of the AI from a business prospective. I have heard rumblings of an AI bubble bursting. Once the naive investor money dries up that is. This is because AI products are largely not profitable. Id Est: they do not make more money, than they cost to develop and run day-to-day. In addition I have see an image circulating around the internet of how incestuous the funding actually is with big-tech companies and AI. Observe below. This implies that the money input (from outside sources) is fading, and instead companies are playing a game of hot-potato with debt and circular funding. A game that will eventually fail once one company defaults on a loan. Which would then cause a domino effect; that could then cause the collapse of the entire sector as a consequence.

The 7 Trillion AI Gamble Is Failing. Big Tech is TRAPPED Right NOW.


https://www.youtube.com/watch?v=OunJtLnyPT4

AI Bubble: Nvidia is looking desperate as circular financing gets dangerous | Ed Zitron


https://www.youtube.com/watch?v=_1vSlv32MWo

AI and social media

This is where I will throw around the term “Dead Internet Theory”. It is a theory that human users are becoming rarer and rarer on the Internet to the point that we could be drowned out by machines in the near future if we haven’t been so already. Bots communicating with bots en-masse. I personally think that it is not the case, at least not yet. However the presence of machines on the Internet is no longer something that could be denied.

Consider the YouTube comments sections. How many of those comments are from actual people? I have seen many that are obviously a chain of bot accounts replaying to each other trying to sell a product. Be it some no-name’s course, or a random shit-coin that someone wants to pump, or just some scammer’s Whatsapp. These comment chains usually come in the format of a comment that is tangentially related to the video content, that then mentions its product in passing, or asks for a solution. Then followed by reply accounts saying something like X product/service really helped me. Etcetera.

The scam adverting bots are easy to identify. However ones that are not are the political narrative bots. Let me ask you a question. Say that you are watching a politically divisive video. Then you scroll down to the comments section. How do you tell the difference between a bot and an NPC. A bot designed to mindlessly rattle off from a prescribed script. Compared to a human who is a tribally captured useful idiot online, rattling out buzz words, slogans, talking points, and rhetoric, as well as regurgitating statistics that they half remember from tribal sources. How do you tell the difference between a machine reading from a script, and a person reciting dogma? I personally don’t know. What I do see is the sheer volume of vitriol, or dare I say the word: “misinformation” on certain topics by suspect accounts.

“You are not immune to propaganda”


https://www.youtube.com/shorts/KzjHNSRgHJ8

What makes an account suspect of being a bot?

Account age, geographic location, topic under discussion, and account username formatting. That is typically what sets off flags for me. Say all the people with very strong opinions are all new accounts, with no history on the platform. Now consider that all the accounts are from areas known for having bot farms such as China or India. All commenting on a video exclusively discussing US politics. Perhaps the topic under discussing has political relevance/significance to either a national power, or group of interest who would have the resources and would benefit from shaping online discourse/discussion on the topic. And finally bot accounts tend to be made using scripts, hence they will typically have a rhyme and reason to them. A pattern, or template that they all use. For example “john-smith-8783hukhfs”. First name, hyphen, second name, followed by a random string of numbers and letters. There is no hard rules for spotting bots, it’s more of a loose criteria that increases classification confidence. Like I said earlier, it is very difficult to tell the difference between a brainless machine, and a genuine living idiot. Both are incapable of independent thinking.

Bots in the YouTube comments sections example images

(check the full size files linked at the bottom of the article)

AI, culture, marketing, and public opinion

In my view the public opinion of AI has soured across the board. With people becoming increasingly more aware of all the negative affects of AI. Exaggerated or otherwise, a cloud is gathering around the perception of AI in general. Everything from job losses, increased wealth disparity, shrinking middle-class, loss of privacy, increased sophistication of surveillance methods and software – such as facial recognition, to increased RAM and GPU costs. The blame of which is being placed at the feet of AI.

Then add to that the AI tools that actively hurt the ecosystems that they draw from such as image creation tools that use artists work to create their own renders, only to then compete with them for customers. This sentiment is especially pronounced in nerd spaces. I often see YT videos denouncing any AI use, and pointing out AI channels as inferior in quality as well as morally. AI channels are often portrayed as artistically bankrupt thieves in these circles. And within the documentary space, they are known to be rife with unchecked misinformation and historical/factual errors.

Now from the customers perspective AI products are often looked upon as being of inferior quality. Hence use of terms such as “AI slop”. Poor quality videos whose target audience are gullible, easy to dupe people. Such as AI posts on Facebook for older audiences who may lack the discernment to identify and dismiss them. Consider the reactions to large corporations when they produce AI adverts, it genuinely hurts their reputation. At least in the short term — although it could be a storm in a teacup. Genuinely hard to tell with online outrage.

Big company AI adverts that have hurt their reputations


https://www.youtube.com/watch?v=Yy6fByUmPuE


https://www.youtube.com/watch?v=eWnP9f-ceqE

AI and technical debt

I see AI tools that create code and honestly I have never seen the purpose of these. Outside of hobbyist artists who want to create a video-game while avoiding the technical side of the creation. For example a visual novel game, or a narratively driven walking simulator. For serious companies/businesses I see little reason for them to use code generation tools, because they create as many problems as they solve. what is the reason a company would want products made by a machine with no oversight. With no one in the company who has intimate knowledge of the product. Hence incurring a huge degree of technical debt making the business dependant on the AI product/service. Because without it, they’d have to fight with an undocumented code-base that is alien in formatting, styling, and structure. And the bigger the codebase, the deeper the hole. The more AI is used the more AI needs to be used to keep the cobbled together boat afloat long enough to ship deliverables.

AI personal use

I am running out of time here so I have to move on. I want to discuss AI in my life. How I use it. I use ChatGPT, Duck.AI (which uses ChatGPT), and that’s about it. The funny thing is that I have not paid a penny to use these services. Typically I either use ChatGPT as a search engine, a first call for finding information quickly. Or I use it as for basic image generation.

Yes. Gasp! Despite all the moral grandstanding that it may have seemed like I was taking up against AI use in general; I use AI every day… I just don’t value it enough to pay for it. All my use cases are rather shallow, I either use it to search and sum things up, usually things of low stakes. Or I use it to generate images for my Dungeons and Dragons campaign — something that I would not pay money for. For example commission artwork. AI use in my opinion is in a similar vein to piracy. It is not theft, not does it represent a loss of a legitimate sale. A pirate is not a lost customer. Nor is a pirate a thief. A pirate is a pirate.

I use a free ChatGPT account. Which gives around 3 free image generations a day before it paywalls me. It took around 7 to 11 generations to create a Myconid Warrior wielding Soul Edge (From “Soul Calibur 2”), and a poisoned boomerang. This was done over days because the thing kept generating it wrong. Adding in details that I did not stipulate, or taking away things that I did state on an earlier iteration. It is an annoying process, and one has to learn to accept something that is 70% good-enough, rather than wasting time, energy, and tokens, additionally prompting for decreased returns.

Look at the image of the Myconid Warrior. It took several iterations to get the sword to not be held upside-down in it’s hand. I even had to create a mock up reference image for it to use as a template. I just don’t see a reason to give them any money. Additionally if ChatGPT went away, or terminated this service. Then I would just use another free image creation to make these reference images. And if they went away too (likely because they used ChatGPT under the bonnet), then I would do without. Using official artwork or random Google images to illustrate what I am describing to my players. It is not a big loss. I think I will elaborate more on this in a dedicated article, when I do I will link it below.

Acronyms used

AI – Artificial Intelligence
ChatGPT – Chat Generative Pre-trained Transformer
EULA – End User Licence Agreement
GPU – Graphics Processing Unit
HP AI – Hewlett-Packard AI
LLMs – Large Language Models
NPC – Non Player Character
OS – Operating System
PC – Personal Computer
RAM – Random Access Memory
US – United States
YT – YouTube

Closing thoughts

I am wrapping this article up as of 18:50 2026-08-15. Considering that I started this challenge at 14:00 on 2026-08-14. Already past midday for a 1-day challenge… It is safe to say that this challenge has been failed. Initial writing of article 1st draft at 12:00 2026-08-15 and published 22:16. However failed successfully. I do have an article done. Only it is a day late, and a dollar short.

This isn’t my greatest work I’ll admit. However it has revelled to me how little I actually know about this subject. Any one of the subject paragraphs above could be expanded into an essay of their own. With an equal exertion of research (an time) necessary. However this article has broadly outlined my current understanding of AI in general, as well as demonstrated my attitude towards the technology… Reading it back: I may actually be an AI Luddite. I seem to have the general depth of knowledge of a Luddite. The lack of differentiation between different technologies illustrates this well. It’s all AI baby — especially the tech that isn’t. 😉

Anyway. I’ll leave you with a relevant quote.

“I would have written a shorter letter, but I did not have the time.” – Blaise Pascal

Thank you for reading.

Links, references, files, and further reading

YouTube_comments_bots_example_1_960x2102
YouTube_comments_bots_example_2_960x1553
Screenshot from 2025-10-19 14-50-02_bot_example
AI_summary_yes_google
AI_summary_yes_duckduckgo
AI_summary_no_bing
AI_summary_no_yahoo
ChatGPT Chimpanzee Thinking Bubble
notes_1DC
ChatGPT_log_2026-08-16_analysis_of_my_1-day_AI_article_and_counter-arguments
2026-08-16_ai_article_summary_and_counterarguments_PDF_export

Personal Blog: Entry 2025-01-18 – 2025 Year-end review and 2026 New Years resolution

Otto

Personal Blog: Entry 2025-01-18 – 2025 Year-end Review and 2026 New Years Resolution

Preamble

Another year has come and gone, and with that: it is time to reflect upon it. What I did well, and what I did not. How I handled life’s challenges, and what decisions did I make within them and why? I have written a private end-of-year personal review document for this purpose. This is not that. This document is an extension of that one however, albeit only pertaining to project work. (I.e. hobby activities.)

A brief on Tinkerer’s Blog activities within 2025

As far as this website is concerned I did very little during the 2025 year. I do not believe this is the actual case. However it is true that I have very little to show here for that year. Just two personal blog posts, not even articles. One personal log entry in February in a similar vein to this document: a reflection on project progress. And the other entry consisted of another personal log. One pertaining to witnessing the March 29th partial solar eclipse. All in all. Not much.

Needless to say I have failed my 2025 goal of posting 12 articles. I believe this failure is due to a combination of factors. The main is simple busyness: I have been working 6 day, 60 hour weeks for a lot more than expected this year. It really helped with my monetary goals. However the time loss had an opportunity cost for every other goal. That’s my plausible excuse out of the way. Heck. Its not even really a good one, once critically examined. As unproductive busyness can be considered a form of laziness. This is because it enables procrastination. The postponement of difficult yet important tasks.

Now for the real reason for my failure. Discipline. I have been undisciplined with the time that I did have. Evidentially I didn’t have time for productive tasks, yet I had time for mindless recreation. Like playing videogames or vegetating in front of the television (YouTube) after a day’s work. I think I fell into the bad habit of putting off project work to the weekend. This weekend unfortunately is within the mystical future that never comes. Because come the weekend (usually just Sunday): there’d be another excuse for not working. Usually it comes in the form of the 3 perpetuals that I mentioned briefly here before. Time, Money, and Energy. Add head-space to that. Although I guess that’s a type of energy. Alongside: brain plasticity, mood, sleep, etcetera…

Article link: personal_blog_entry_2025_02_22

Going forward into 2026

Somewhere along the way I started stating themes for my years. A theme is something that encapsulates my general attitude for the year. It governs my general modus operandi and orients me (and my actions) towards my top two to three objectives. If not only number one. Last year’s theme was “Grind Gold”. Like in videogames. I wanted to expand my wealth by improving my primary income, adding an auxiliary income, as well as gaining knowledge of money in order to be a better custodian of the resource. So focus on money first and foremost.

With this theme I volunteered for overtime whenever it came up. Which (un)fortunately happened considerably more than expected. Especially when I became known at work as ‘the guy who does overtime on short notice’ guy. Additionally, I setup my eBay shop to declutter and liquidate value. And listened to many (many) financial audiobooks while at work. I learned a lot, the most important being how ignorant I am on the subject of proper money management. For example I opened my first brokerage account in 2024 at the tender age of mid-thirties. To this day I still haven’t learnt to utilise the trading functionalities available, other than the absolute basics. So there is still much work to be done in 2026 for this goal.

2026 theme: “Do! Not Buy.”

2026’s theme is “Do” as in “do things, not buy things” in order to progress. I bought a lot of unnecessary stuff in the year of 2025. Much of it was for projects that I intended to do later. And before I knew it I ran out of “later”, and the year concluded. As it is I am buried in materials (and just a sheer crap-load of things) that are awaiting being used in projects. Resources that could’ve otherwise stayed liquid as money and furthered my pursuit of wealth. Not to mention give me more living space.

I have given much thought to my actions in this regard; this is in order to understand why I do the things I do (or did). I bought a lot of materials for projects that I never got around to doing. Why? I think its because it made me feel like I was legitimately progressing along these projects. It was a cheap (effort wise) way to literally buy the positive feeling of progress. Accomplishment. However it is ultimately farcical. Because the moment labour-effort was necessary to keep the project going: the project’s relevance in my day-to-day life suddenly faded. And the next project became what I was enamoured with. Complete with a new (novel and exciting) shopping list of materials. I was essentially hobby hopping on a smaller scale.

A summary on my 2025 purchases (i.e. the roll of shame)

In December 2024 to January 2025 I bought lots of camping gear and bicycle parts. Taking advantage of the January price slumps and deals. Also my new year’s zeal for the outdoors. February consisted of philosophy and chess books. Which I did not read. In March and April: I bought a (spares & repair) Tassimo Vivy 2 pod coffee machine, as well as £50 in pods, £50 in reusable pods (for myself and the household), and an extra broken machine to part out. Which I did fix, and use, and wrote 2 good articles on. One on repairing the machine, and the other on creating Americano drinks from espresso pods. Did not publish either.

May purchases consisted of more books. This time on religion, Stoicism, and a Dostoevsky box-set. Equally unread. Tool kits for working on mobile phones. I believe my Blackview A100 decided to break around now. Still broken. I also purchased a lot of first aid materials for the household as well as cases and boxes to stow them in. Got the prepper itch, and felt “unprepared”.

June I discovered an interest in better coffee. This was prompted by running out of Tassimo pods, coupled with an unwillingness to buy more expensive single-use landfill. Started watching James Hoffmann (amongst others) on YouTube. And consequently purchased a fancy grinder (£100 KinGrinder K6), pour over kettle, and drip coffee set. I have yet to use the pour over equipment, as I only use the grinder and a thermal French press. Still success. Also more books: this time a Friedrich Nietzsche box-set and several Albert Camus books. Introduced to me by watching YouTube channel “Unsolicited Advice”. Unread.

July to August: I bought multiple (cheap) solar charge controllers. Used them for making use of the large 250W solar panel I purchased the year before. Multiple USB plug kits for fashioning and repairing data cables. Two different screwdriver kits, because I just wanted them. RCD plugs, plural. Oh, and LEGO. LEGO friends sets: Mia and Olivia’s tree-house, as well as some LEGO city bundles. Stuff for the game that I was working on at the time called Toy Tactics. A basic tabletop tactics game that uses toys that the child already owns as units/pieces. It was designed as a gateway drug to tabletop games like Warhammer 40K. Unfinished.

September October. I bought parts and accessories to repair an air fryer. Fixed! Then broke again a week later. I bought plenty of Raspberry Pi stuff. Multiple computers for different tasks that I envisioned. A retro games console, a Pi-hole, a seed box, a stack of Pi’s functioning as a single “supercomputer”, etcetera. As well as various necessary accessories for them. Pi camera, micro-SD cards, micro-HDMI adapter, etcetera. I also bought a £300 E-ink monitor because the opportunity arised to get one at such a bargain price. Didn’t use any of the RPi stuff; my interest waned. Nor the monitor; as I bought it for programming and reading — and I didn’t do much of either this year. Also more LEGO, although this time it was robot sets. Two older LEGO Mindstorms NXT boxes at £40 quid a pop.

Finally November December. Here I continued the robot theme by buying accessories that allows a Raspberry Pi to interface with the LEGO Mindstorms peripherals. As well as around 10 PlayStation 2 games (for the collection). More LEGO in the form of a set of Bohrok Va (for the collection). More RPi/microcontroller peripheral boards (wanted to learn about I2C and SPI). Books (plural) on computers (found a bargain – not read). An RPi kit called the Pimoroni Scroll Bot. Got it cheap in an auction. Haven’t opened it to date. And finally a joblot of broken Casio watches and a used working unit for spares. Untouched.

Well. That was 2025. (Albeit somewhat inaccurate time-wise.) A year of mimetic desire, lifestyle cope spending, and opportunist purchases. To break that cycle I have a rule for 2026. And that is to only buy what is strictly necessary. So no more whimsical purchases fuelled by a temporary mimetic interest. Monkey see, monkey want. No book purchases either! I have a huge backlog, and one of this year’s goals is to get a library card. I want to become a book reader, not stay a book buyer. A card will help the transition along, as I can just borrow any book that catches my interest instead of buying it. Additionally the two week borrow window will incentivise actually reading the damn thing. Real deadlines tend to incentivise action like nothing else.

While I am mentioning ‘huge backlogs’: no new Steam game purchases also. I mean I write this as I am tempted to buy an ant based RTS game called “Empires of the Undergrowth”. Guess why? Watching another Youtuber. This time it’s my favourite Civ 5 Pole: Marbozir. I do not need any new computer games, I literally have hundreds available to me, and not time for them.

Going into 2026

Going forwards I have a significantly stricter budget than the previous year’s. This is to stop the silliness of these needless dopamine purchases. And to save the money for more fruitful endeavours. And considering how much crap I bought last year: I have more than enough for this year’s projects (and entertainment), and then some. I have one exception where I can purchase for a project – and that is that it has to be for an active project. The device is on my workbench and needs to get done ASAP. In addition to fitting into the budget. It can’t be for something fun that I want to work on a little “later”. Maybe this weekend. I have seen where that leads.

Do things, do not buy things.

That’s all well and good. Its a nice sentiment. However how will it actually be enacted in real life? Well, its via the day-to-day decision making. Do X, over buying Y. This is something that I have already taken on; as my mentality has changed on how I approach project/hobby work. The change coming from a keen awareness of all the wasteful spending of 2025 on projects that went nowhere.

I’ll give you two examples. A trivial case of doing X over buying Y is that I was going to buy a new calendar. Instead of dropping £2.50 to £9.99 on a calendar for my room; I opted to look online, print a free one off, and use that instead. See it’s the small day-to-day moment-to-moment decisions that matter here. Not an ideal that never really makes it’s way to daily life. Its a small effort, its trivial, but its also a single step of genuine progress.

Now the second example. I am still planning on cobbling together a working watch from the Casio spares and repairs joblot that I have. Then later doing more invasive watch mods. Think backlight LED swaps and LCD tints. However I need some specialised tools for working with watches. Things like a mini-forked pry-tool to remove the watch straps’ spring-bar (without damaging anything); and to a lesser extend other tools such as a jeweler’s hammer and pin to remove a metal strap’s link bars; or the various jigs to hold the watch parts secure.

The kit I was leaning into buying was going for £12 and had everything that I would need going forwards. However strictly speaking: I did not actually need this kit. Although it does look cool. And right now – not the mods that I’d like to do in the future – right now I do not need it to get done what I need to get done. A simple strap replacement, partial disassembly, internal cleaning, and battery replacement. And since I am not sure when (if ever) I will get round to doing the more involved mods which will require these specialised tools – I can’t justify their purchase as an honest need (right now), since I do not need them to get this immediate project finished.

Additionally my current eclectic mix of tools can be cobbled together to form a decent substitute kit. I could even go further and modify some cheap tools to specialise them for working on watches. For example sharpening a nylon plastic pry-tool – one of many I own – to make it thinner, then cut a notch into it to allow it to better encompass the watch straps’ spring-bar.

See I am trying to change my mentality from going to the store as my default primary action, to going to my store. And seeing how I can get done what I want to get done, using the resources I already have. In gaming terms, this would be min-maxing my resources. Getting the most out of what I already have. And it is only when my resources/tooling is insufficient for a given task, should I buy more.

What to expect on Tinkerer’s Blog come 2026

Lots of smaller one-session projects. Projects from my backlog. That are done and 80% written up. I am taking making pixel-art more seriously this year. Look at the title image. That is my base line ability as of today. I wonder where I will be for the 2027 post? And some programming stuff. I need to brush up on Python and C++ in order to make use of all the computers I am sitting on. Then some robotics projects. If I am shooting for the stars: they’ll even be the occasional book review. That’s the plan anyway. Y’know what they say about plans: they never survive first contact with the enemy. Anyway, consider this post 1 of 12 done for 2026.

Thank you for reading. You’ve officially read more than I have this year. 😉

Acronyms used

ASAP – As Soon As Possible
HDMI – High-Definition Multimedia Interface
I2C – Inter-Integrated Circuit
LED – Light-Emitting Diode
LCD – Liquid-Crystal Display
RCD – Residual Current Device
RPi – Raspberry Pi (a single board computer)
RTS – Real-Time Strategy (game genre)
SD card – Secure Digital card
SPI – Serial Peripheral Interface

Links, sources, references, and further reading

#0024: Preparing a Helping Hands tool for effective use

Otto

#0024: Preparing a Helping Hands tool for effective use

Preamble

This article covers the modifications necessary to get a box fresh Helping Hands tool ready for service. The specific version of this tool being the pictured unit. A version that consists of a small horizontal metal bar that is mounted onto a weighted base. The bar then has three adjustable arms attached to it. Two terminating in metal crocodile clips, and the third in a magnifying glass. This unit although useful and good quality for it’s price, it is also cheaply made, and mass produced. As such it requires some preparations before it can be used to good effect.

What is a Helping Hands tool

At its core a Helping Hands is a tool that consists of an adjustable jig with arms that terminate in spring loaded grabber clips. These clips are designed to hold materials and workpieces in place. This is in order to assist the user when working on them; for example: holding wires in place for tinning, or in preparation for a soldered connection.

Helping Hands are also known as “Third hands” or “X-tra Hands” depending on marketing. Although there are likely to be variants in design due to marketing, the basic tool is the same. It consists of some form of adjustable jig, with two or more grabber clips attached to it. Many variants also have adjustable arms that terminate with either a magnifying glass, or a light source of some description. They may also come with things that are specialised for a specific task: such as a soldering iron holder, or a mini microscope mount. However these are outside of the scope of this article. We will only be discussing the rather cheap and generic example unit that is pictured.

Modifications

Mod #1: Padding the crocodile clips’ jaws

The first necessary modification is rather obvious when you have a new unit in your hands. The actual clips that hold the various workpieces and materials: are crocodile clips. Crocodile clips complete with serrated teeth and a fairly powerful spring ready to push those teeth into anything that comes between it’s jaws. These needless to say leave noticeable teeth marks on anything softer than the clips’ steel when in use.

I recommend using several layers of heat shrink tubing to pad the teeth. This is because heat shrink tubing is generally tough enough to make it resistant to being pierced by the teeth’s serrations. Apply a layer of heat shrink to each jaw in turn. Then heat it so that the heat shrink, shrinks into a fitted profile on the teeth. Keep adding and heating layers in this manner until you are satisfied that the serrations of the teeth are sufficiently padded and will no longer damage anything that the clip holds. At this point, you may wish to trim off any excess tubing with a side cutter.

In my opinion heat shrink tubing is a good candidate for this application due to the fact that it does hug the profile of the teeth so well, while still padding the biting edge off of the metal. This clinging to the peaks and troughs the teeth is important because it allows the clip to still have an effective mechanical grip on the workpiece.

Additionally the rubber material that heat shrink is made from also assists in effectively gripping the held object using friction. This is useful when it comes to holding metal objects, especially cylindrical ones like telescopic radio antennae. A mechanical grip alone is likely to slip, coupled with the springs: I can see the jaws throwing out objects. A friction grip is necessary to hold low friction hard-surfaces such as metals.

Other reasons why heat shrink tubing is well suited to this particular application, consist of: firstly, the rubber material it is made of is relatively heat resistant (i.e. it takes continuous high temperatures, or a direct flame to effectively melt it). This means that the user can use solder irons and hot air around it without worrying about having to either clean or refit their Helping Hands tool. As would be the case if they used electrical tape for example.

Secondly, it is also a mild insulator of heat, this prevents heat from easily conducting into the metal clip and into the larger frame of the tool. Why is this important? It means that the user can use a soldering iron with a lower thermal mass effectively. Whereas without insulating off the greater frame of the Helping Hand tool, it will conduct away the thermal energies from the point of application. e.g. whilst soldering a joint on a metal object such as an antenna terminal.

This will require either a higher temperature setting (as a bid to compensate for the leeched energies), and deal with the associated risks and drawbacks; or having to simply use another soldering iron with a higher thermal mass. Alternatively it should be said that, insulating the metal clips in this manner really might not even have a significant effect on for example soldering performance, it largely depends on use case specifics. If you are for example using a 10 Watt USB soldering iron, well then you’ll need all the help that you can get; including this. Whereas for a more average setup, you may not be noticeably affected either way.

Mod #2: Hot glue in the clips connecting arm joints

This is an often overlooked modification that you can make to effectively extend the working life of the product. It simply involves getting a hot glue gun and pumping hot glue into the connecting joint that attaches the crocodile clips to the main jig. This is needed because the out-of-the-box setup only has those joints held in place using a friction fit between the metals of the clip and the jig arm. Unfortunately as you use the tool and rotate the clips, it will loosen the metal’s spring pressure that holds it in place until the clips just slide off. Repeatedly.

Additionally, re-tightening the friction fit using a pair of pliers will not keep the clip in place for long, just delay it falling out for a little while. Unfortunately in my case the entire clip arm kept falling out and no amount of tightening made the clip arm stay in it’s cradle, as effectively as the initial friction fit did. Hot gluing them in place however fully prevents the clip arm from sliding out of it’s cradle. It really made a very strong bond. One that is better than the original friction fit. The only trade off is that the crocodile clip can no longer rotate at the wrist joint where the friction fit connection was. Instead all rotational adjustments need to be made at the arm’s elbow joint from now on.

You might’ve wondered as to how exactly does this laughably simple modification actually extend the working life of the tool. Well, I will endeavour to answer this question with another question (or more). Have you ever had a tool that kept falling apart on you when you needed it to just work? Falling apart in moments where you might already be somewhat stressed trying to fix something broken? Maybe even whilst on a time limit? In that moment, have you ever grabbed the offending tool cursed it out, then promptly threw it into the trash? That’s how pumping those annoying joints with hot glue will extend this tools working lifespan. It’ll help this tool effectively keep it’s head down and just do it’s job.

Closing thoughts

These are simple enough modifications and are rather ubiquitous with regards to this particular tool. Even the image of the ‘dabbing’ Helper hands on the Wikipedia page for this tool, has the same teeth mod. Although they used electrical tape. Which in my opinion is an inferior material to use. Firstly its a less permanent solution due to the material’s general strength, meaning that sooner or later the teeth are going to poke through it. Additionally, it is also more susceptible to heat; meaning that if the user solders a wire for example too close to the clip they run the risk of melting the electrical tape.

That being said, small mods like these are most definitely better than nothing, and worth mentioning in order to help people not overlook them due their rather trivial nature. This is because little mods like this are easy to implement and can help the user make the most of their cheaper tools in general. Even if you are half-arsing it by using electrical tape, says the out-of-touch heat shrink tubing elite.

Thanks for reading.

Dabbing Helping Hands image from Wikipedia.org

Reference, links, and further reading

https://en.wikipedia.org/wiki/Helping_hand_(tool)

#0022: Equipment recommendation list for a hobbyist repair technician

Otto

#0022: Equipment recommendation list for a hobbyist repair technician

behold mein craphouse

Preamble

This is a quick and dirty list of the equipment (tools, and consumables) I use, specifically with regards to repairing devices. Hopefully, this list proves useful to any other hobbyist repair technicians or people interested in electronics in general. The equipment list is split into three categories based on need: Necessities, Nice-to-haves, and Useless dreck. Each item has a quick summary explaining it’s use relative to it’s category. Other than the broad categories, the items are in no particular order.

Quick list

Necessities:

  • Temperature controlled soldering iron
  • Leaded solder
  • Lead-free solder
  • Tweezers
  • Bench power supply
  • A good vacuum desoldering pump
  • Desoldering braid
  • Pry tools
  • Isopropyl alcohol
  • Rosin flux
  • Multi-bit screwdriver set / screwdriver set
  • A cheap multimeter
  • PPE: safety glasses
  • PPE: gloves
  • Spares and parts
  • LCR component tester
  • Side cutter
  • Digital camera
  • Portable computer
  • Helping hands
  • Hot air SMD rework station
  • Kapton tape
  • Shrink wrap
  • Lighter
  • Pen and pad
  • Small containers
  • Work mat
  • Mobile light source
  • Cleaning supplies

Nice-to-haves:

  • Soldering iron tip tinner
  • A good wire stripper
  • Solder mask and UV curing torch
  • Oscilloscope
  • Hot glue gun
  • Soldering gun
  • PCB board holder
  • Precision screwdriver set
  • Desktop fan
  • Filter mask
  • Temperature sensor module
  • Isolation transformer

Useless dreck:

  • Cheap vacuum desoldering pump
  • Cheap wire stripper
  • Flux pens
  • Alcohol based liquid flux
  • Heated vacuum desoldering pump
  • Soldering iron sponge

Necessities

Temperature controlled soldering iron

A variable temperature setting is needed to work effectively with materials with different melting points and thermal mass conductivity.

Leaded solder

More versatile and friendly to work with than the lead-free variant due to it’s lower melting point and better flow. Necessary to perform maintenance on a soldering iron tips (tip tinning).

Lead free solder

If you have leaded solder, then lead free solder is largely redundant if all you primarily care about is solder effectiveness. Lead-free solder does however have it’s use cases. The main trade off between them is that leaded solder is more effective as a solder, however lead-free doesn’t contain lead, which is toxic. Any use case where you definitely do not want lead in the device, lead-free would be the way to go. A good example of this, is any device that comes in contact with foodstuffs such as kitchen appliances.

Tweezers

Tweezers are needed to manipulate tiny components, such as surface mounted components. They are also useful for holding materials affected by heat. Get a firm pair of metal tweezers, the cheap ones bend when you exert force on them, meaning that you lose control on the object you are gripping. It also means that you cannot grip the object tightly, otherwise the tweezer will start to bend. I recommend having multiple tweezers, an L-bend pair of tweezers for comfortably interfacing with SMD components, and a larger (stronger) pair of straight tweezers (with teeth/grips) for general use.

Bench power supply

Necessary for powering a range of devices and components under test. It needs to have variable voltage outputs and a current limiter. It also needs to be able to provide enough power for powering the devices under test.

A good vacuum desoldering pump

Although generally less effective at removing solder from a joint than a length of flux infused desoldering braid would be, it is still very useful due to it’s reusability. It helps me keep my recurring materials cost down.

Desoldering braid

This is probably the best way to actually remove solder from a solder joint. Works best when infused with additional rosin flux.

Pry tools

A small collection of pry tools will assist in opening the various plastic clips that you will encounter when opening consumer devices.

Isopropyl alcohol

An excellent cleaning agent and light solvent. Useful for effectively removing many materials, from adhesive, to rosin flux, and even good for removing water (moisture) from devices.

Rosin flux

Necessary agent for assisting solder to flow effectively. Additional flux is necessary in many cases where the flux that comes within flux core solder is insufficient, or in cases of desoldering a joint without first applying additional (flux core) solder to the joint.

Multi-bit screwdriver set / screwdriver set

A good set of screwdrivers (including security bits) is basically mandatory for a repair tech of any stripe. They facilitate the access and disassembly of devices, necessary for repair.

Cheap multimeter

A multimeter is an absolute necessity. At the most basic level, a multimeter is used to test suspect components to gage their health and functionality. They have many functions that a very useful, such as continuity, voltage, current, and resistance testing. However they also have some gimmicky functions (at lest in the cheaper models), such as NCV testing, or transistor testing (which is not very good on multimeters in general).

Generally cheaper multimeters are fine for low voltage applications, such working on battery operated consumer devices. Their core functions are accurate enough that it shouldn’t become an issue. However if you are wanting to work on higher voltage devices. Such as mains powered devices, than a more expensive notable name brand multimeter (e.g. Fluke) is necessary at that point due to it’s safety feature set.

PPE: Safety glasses

You will use some form of safety glasses sooner or later. The only question is whether it happens before or after something either sharp or hot flies straight into your eyeballs.

PPE: Gloves

Very useful for handling hot materials, and/or isolating your skin form various toxic, corrosive, or abrasive materials. This could include anything from lead metal, to battery acid, to liquid plastic. Get gloves appropriate to the materials you’ll be handling.

Spares and parts

How can you call yourself a repair tech, if you don’t have at least some spare parts or devices either laying around; or stuffed into boxes somewhere. Either bought or salvaged, it really doesn’t matter. What matters is that there are many discrete parts in devices that are virtually irreparable. Basically this includes every small component from passives, such as: resistors, diodes, and capacitors; to active componentry such as integrated circuits and transistors. They’ll all need replacing once they’ve fried.

LCR component tester

This is a good addition to a multimeter. It’s typically used to test various components’ inductance (L), capacitance (C), or resistance (R). I however predominantly use mine to gauge the health of electrolytic capacitors, by testing their equivalent series resistance. I personally bought mine when I got into recapping old monitors. However, you can also us an LCR meter to identify various unlabelled components, such as SMD (surface mounted device) capacitors, resistors, and transistors.

Side cutter

A nice little sharp side cutter is invaluable when it comes to performing various tidying up jobs around a PCB circuit. These little clippers are great for trimming the leads of through hole components, and cutting smaller gage wires that are nestled deep in a device. It also functions as a good as wire stripper, however user’s will have to carefully strip the insulation from cables.

Digital camera

I use a digital camera to document my exploration through a device. That way I have evidence of how it looked before I started messing with it’s insides. An example use case would be documenting which random coloured wires were soldered where. By the time the user finds and fixes a fault within a device, details such as the specific configuration of wires connecting to any given board may slip their mind. So it helps in such circumstance to have documented evidence.

Computer

I typically use my small old (intel atom) laptop computer. I use it to host tutorials (both video and textual), datasheets, schematics, and for use as a typewriter to jot down notes if I don’t want to use a pen and pad for whatever reason. One could also load on the thing various entertainment media for getting through long sessions of laborious work. Basically music and audio books. Additionally, I also use it to store catalogues of the photographs I take when assessing devices.

When it comes to work bench computers, I have a general preference for computers that are inexpensive and that use very little power to operate. Inexpensive, because they are likely to get damaged in one way or another. Either by off-spray, a slip with a blade, a drop, melt damage, anything really. And low power, because the computer is also most likely going to be powered on for extended periods of time, most likely just displaying documents whilst playing music in the background. Essentially, not really doing much in terms of processing computations. So an older small portable with a lower power processor is ideal for this use case.

On the other hand a desktop for example is likely unsuitable for this task, both due to it’s power consumption, and due to the desk space that it will require. Additionally, there is also the temptation with a more powerful rig, to ‘take a short break’ by playing video games, or rabbit holing youtube videos. Such distractions are painful experiences on an intel atom processor, hence its likely to keep a person on task easier.

Helping hands

Helping hands hold workpieces in place securely, enabling the user to work on them confidently. They may initially seem like a ‘nice-to-have’. However I find that for many things, such as soldering wires together, or connecting various cables to plugs; helping hands that can hold all these small fiddly components are exceptionally helpful.

Hot air SMD rework station

An SMD rework station is just a fancy name for hot air station. It has a nozzle that outputs air hot enough to melt solder. If you are working with miniscule surface mounted devices or components, then an SMD rework station is something that you really aught to have. Especially when it comes to installing or removing larger surface mounted devices such as IC (integrated circuit) chips.

Kapton tape

A great companion to a hot air station is the Kapton tape. This is a heat resistant adhesive tape. It is useful in that it allows an operator to localise any heat from the hot air station, by applying the insulative kapton tape to the surrounding componentry. Kapton tape is especially useful in preventing many tiny components from accidentally falling off a PCB when the user applies heat to a large neighbouring component. This happens a lot when dealing with any larger logic ICs, because they tend to be surrounded with many tiny surface mounted ceramic capacitors. Which are needed to provide them with apt power.

Shrink wrap

A great step up from using electrical tape to insulate connections in wires is by using shrink wrap. Shrink wrap is more water resistant and offers a more permanent and professional looking insulation to connections.

Lighter

A lighter is a great cheap alternative to a hot air station or heat gun, when you want to shrink heat shrink.

Pen and pad

Good for taking on the fly notes and sketching schematics, diagrams, or what have you. I think that nothing beats the convenience of using a pen and pad to jot down whatever pops into mind.

Small containers

A couple of small containers on the desk are an absolute must for working continuously in an organised manner. I have several knocking about; including a long metal tray for holding screws, a small pot for holding small garbage like solder from a vacuum pump or wire and tape trimmings, and a glass ashtray for holding various components. It’s good to have several little containers like this with dedicated uses.

Work mat

A good mat is necessary to protect your work table from any damage. I personally use a small cutting mat for everything, including soldering. Although a silicon heat map would be more appropriate for that, but a cutting mat has more general applications. Mats are especially useful for tables with multiple uses, such as writing or drawing. Tables that are better left unscratched and flat.

Mobile light source

Mobile light sources include devices like: torches or desk lamps. These are necessary for seeing small details, such as silkscreen on an IC chip, and especially useful for photography which often requires higher levels of light for the camera to capture details properly.

Cleaning supplies

Every repair will need a good clean at some point. This is a bit of a catch all category for the general cleaning stuff that I use. I keep a fair range of stuff close to hand. Firstly, I have a couple of dirty rags or shop towels, these are for either really dirty devices, or devices that are contaminated with something that means I’ll have to chuck the rag after use. Secondly I have some clean microfibre cloths for wiping down display screens and the like. These are for light dusting and polishing jobs essentially. Thirdly, I have a paintbrush which I use for cleaning dust out of difficult areas on devices, such as from between the fins of a heatsink or from a populated PCB board in general. Essentially for removing the bulk of dust from uneven and crowded surfaces.

I also carry cleaning solutions. In addition to the solvents like isopropyl alcohol, I also carry two spray bottles. One is filled with tap water and the other is filled with a 10:1 tap-water and washing up liquid mix. The dilute washing up liquid, I use as a catch all cleaning agent. Its good as a basic emulsifier, allowing me to remove oils from a device. It is also generally good for removing random sticky stains and substances from a device without damaging it. For example as an initial wet wipe down of a filthy monitor screen. The clean water bottle is used to aid the removal of any sticky residue that may linger after the application of the washing up solution. I keep cleaning with just water until the device chassis (or screen, or whatever) has no residue of any cleaning agent left on it.

Additionally I also use cue tips or earbuds. These are very effective at cleaning in very localised areas. I mostly couple these with some isopropyl alcohol; by soaking the earbud’s head in alcohol it can very effectively remove both caked on dry thermal paste or wet paste from CPUs without leaving any residue or contaminants.

Nice-to-haves

Soldering iron tip tinner

This is a specialised tool that just cleans soldering iron tips. It’s more convenient to use than tinning a soldering iron manually using leaded solder. But the results are basically the same.

A good wire stripper

A good wire stripper is a tool that will quickly and reliably strip insulation from wire. Its a tool of convenience, enabling a user to strip wire in a fraction of the time that it would take to do so with a side cutter or knife.

Solder mask and UV curing torch

If you work a lot with PCBs. For example repairing water damaged PCBs that have violently short-circuited to the point that they incurred burnt out sections. After scraping out all potential conductors such as the burnt out materials. A solder mask paste, is useful for sealing and insulating the damaged sections afterwards. It is what I consider a permanent and professional repair. The accompanying UV torch, assists the solder mask in drying quickly. A hacky alternative to filling blown holes in PCBs with solder mask, would be to use hot glue.

Oscilloscope

Oscilloscopes are useful if you get into analysing and repairing devices that deal with a lot of logic or sound signals. Things like computers and audio amplifiers. Where you’ll need to measure the signal outputs of various ICs in order to track down where the fault lies.

Hot glue gun

This is the hacks best friend. I use it a lot in in prototypes and as a way to make “temporary” repairs to various devices. Its great for filling in gaps in repaired plugs, and chassis, and even for setting electronics into a box.

Soldering gun

A powerful (~200 Watt) soldering gun is useful in any instance where you need a significant jump from the everyday soldering iron. It has the thermal mass and watt output to effectively solder to large heatsinks, such as a metal chassis. Soldering guns are also useful for effectively melting/welding plastics when coupled with a wide tip and low temperature setting.

PCB board holder

Useful for securing a workpiece. It is as useful as the helping hands, but more specialised due to it’s design being specialised for holding PCB boards only.

Precision screwdriver set

If you already have a screwdriver kit or the multi-bits kit you may either encounter screws that are too small for your screwdriver set, or screws that are deeply recessed into a device. The thin channel of the screws recession may be too deep and/or too thin for the larger screwdrivers.

Desktop fan

Its just a fan. It blows the fumes away from your face as you work, and helps cool workpieces down quicker. It’s nice to have when you want it, but in most cases it is unnecessary.

Filter mask

Necessary if you work with any really toxic fumes. I am not talking about rosin flux fumes when I say toxic. I’m referring to using a filter mask when melting/welding plastics.

Temperature sensor module

A largely single use tool that is good for calibrating a temperature controlled soldering iron (which has the function of temperature calibration).

Forceps

This is good for reaching deep into larger devices and clipping to and pulling specific objects around.

Isolation transformer

If you intend to work on any mains powered devices, then an isolation transformer is a must for safety concerns. Its another line in defence between you and death by electricity.

Useless dreck

Cheap vacuum desoldering pump

They don’t generally have the suction necessary to be worth using.

Cheap wire stripper

They tend to cut deeper than the insulation and cut strands within the wire. They are not better than a set of clippers or even a knife. There is no reason to use this type of wire stripper above more general tools.

Flux pens

They tend to contain diluted low quality rosin flux that lost the majority of it’s effectiveness of helping solder flow, in return for being in a true liquid form. Which allows it to wick in the pen. If you want a low quality flux in pen form. This is for you. It may useful for applications of SMD soldering. However it doesn’t make a notable difference over soldering with just flux core solder.

Alcohol based liquid flux

The flux is less effective due to being diluted in alcohol. Its effectiveness is reduced to the point that it doesn’t have a notable difference over using a flux core solder alone. The flux itself however is much easier to apply because it is a liquid. Rather than the pure rosin flux which is an amber like solid, or flux paste. This type of flux tends to be marketed as a no mess or no residue flux, that claim is true. However it is not a very effective flux.

Heated vacuum desoldering pump

The one I have, had a fragile tip that cracked due to the heat and use. It is also a thermoregulated unit; that has no way for the operator to control the actual temperature output. It outputs heat that can easily damage a work piece if held on it too long, at the same time it may not melt the solder in a timely manner. The actual vacuum pump mechanism however is serviceable.

Soldering iron sponge

I generally do not like soldering iron sponges due to the fact that they require watering first, and when you actually use it to clean solder off of the soldering iron, the cold moisture of the sponge causes a sudden thermal loss in the iron. Meaning that the user will have to wait for the iron to reheat after each cleaning. I just find that the iron wool tip cleaners are just superior as they do not require prep to clean the soldering iron, nor do they cause thermal loss in the iron, and finally they even clean the tip better than the sponge does. Tip cleaners can scrape oxidation from the iron’s tip, which the wet sponge can not.

Closing thoughts

I should mention that the categories of tools are based on my particular use cases, skill set, and preferences. Yours may and likely will vary. I have categorised the tools according to my general needs; putting the core list of tools that I use with most projects in ‘necessities’, the specialised tools that I seldom use but enjoy having in ‘nice to haves’; and finally the tools that I either did not enjoy using or had other tools (including general use tools) that did their jobs better, into the ‘useless dreck’.

Just because I categorised the various tools as such does not mean necessary that others would do the same. A lot of it is based on taste and personal priorities as well. The various rosin flux products come to mind as a good example of this. The ones in the ‘useless dreck’ categories are not without merit, it’s just that I did not care for them.

I hope this crude little list is of some value (if not then at least entertaining) to you.

Thank you for reading.

#0016: Software recommendation: Firefox Monitor and haveibeenpwned?

Otto

#0016: Software recommendation: Firefox Monitor and haveibeenpwned?

https://monitor.firefox.com/

https://haveibeenpwned.com/

Preamble

In a bid to make more immediately useful content, I’d like to start recommending some of the various tools that I use. In this case it is an online service. Namely Mozilla’s Firefox Monitor; or more to the point, it is actually the website: haveibeenpwned.com (HIBP), which Firefox Monitor uses to enable it’s service.

What do they do?

In essence Firefox Monitor and HIBP are used to check whether or not an email address is associated with a recorded data-breach. Keyword: “recorded”. It does this by using a database of known breaches provided by haveibeenpwned.com.

The purpose of this service is to allow people to ascertain whether or not, an online account (and the user information there in) associated with the email address: has been compromised in a known data breach; and thus in need of immediate remedy. Things like: changing passwords, recovery phrases, and generally being aware that any potentially sensitive information associated with that account, such as: full name, mother’s maiden name, GPS location, education, birth date, telephone, city, school, or business information has now circulated within the hacker community.

Additionally, it helps to know which company is to blame for the spike in volume of spam and phishing emails, that will most certainly accompany said breach. I don’t know about yourself, but that’s something I’d certainly like to know.

Why is this service important?

It is my belief that every solution begins with awareness, the awareness of the problem. Only then can we move to better the situation. This tool gives you exactly that.

In my opinion, the main reason why I think this tool is important is because the companies involved in the data breaches themselves are loath to make their customers aware of them. Even though it is in their user’s best interests; it is not in the businesses best interests to advertise any breaches beyond the legally mandated/enforced minimum. Furthermore, who knows what that actually even is when dealing with global or multinational companies that operate over many legal jurisdictions. This is especially true when dealing with larger companies with entire legal teams at their disposal.

This service is important because (still just my opinion): companies in general tend to quietly patch any security vulnerabilities as they find them, and move on hoping no-one has noticed. This is especially true when there is no internally confirmed security breach.

Whenever a confirmed breach does happen, the first thing that the company responsible does is downplay the scope and severity of it. This may (and probably does) include: not even publicly reporting the breach until it is already made public elsewhere, often at a much later time. In many cases there is even resistance to acknowledge fault after the breach is made public. This is most likely a bid to exonerate themselves of any potential legal liabilities involved.

At the very least acknowledgement of fault could be seen as weakness. Weakness that will shake public confidence in the company and/or service. Therefore it is in their best interest to maintain the general illusion of control and/or competence. It’s corporate PR 101. It’s just a shame that the company and it’s users’ interests don’t align within this circumstance.

Why should people use these tools?

Both Mozilla Firefox Monitor and HIBP are free to use publicly available tools. Both tools come from reasonably trusted sources. Firefox Monitor is the product of an open-source community driven effort, giving it a certain level of transparency. And HIBP was developed by Troy Hunt, an authority on the topic of digital security. Even if you don’t know who Mr Hunt is (and I didn’t prior to this post), the fact that the Mozilla team decided to use his HIBP database for Firefox Monitor means that they are vouching for it.

More importantly, the tools themselves can assist an individual with regards to protecting their personal information online. They do this by allowing the individual that exact thing that I mentioned earlier: awareness. Awareness of whether or not that person’s email associated account information has been circulated, and which company is at fault for it.

For example: if you used the tool and because of it now know that, an account associated with your email with company X has been breached; and along with that breach your “security questions” were revealed. Then now you know to both remove, and not to use those particular security questions, with any future account … ever. As they are basically permanently compromised. Forewarned is forearmed.

taken from https://github.com/mozilla/blurts-server

Difference between Firefox Monitor and haveibeenpwned?

Firefox monitor is a very slimlined version of the HIBP tool that gives the lay user just what they need, without overwhelming or putting off said lay user. It is rather idiot proof; merely requiring user’s to input their emails and press enter. That’s it. Firefox monitor also has been bundled in with a few basic articles on good security protocol, that may be helpful to the average user. Common sense stuff a lot of it, but you know what they say about common sense.

Although Firefox is the simpler tool to use, it must be said that HIBP is a far more robust tool. And the one that I recommend. This is because in addition to searching email addresses, it allows searching via: passwords, and domain names. The website also allows users to browse a catalogue of breached websites without running a search. Extracts below.

Ever wondered how many accounts have been breached because they used the password “love”? Wonder no more. According to HIBP, its 356006 times.

I have also perused a nice little selection of companies from HIBP’s catalogue of known breaches that you may find interesting.

Personal experience with a data breach.

Just an aside if anyone is interested. From reading the above “Why is this service important?” section, you might have gotten the idea that I may be ever so slightly cynical about the companies involved in security breaches like these.

Frankly speaking, whenever data breaches do happen, I do not consider the corporations involved to be “victims” of cybercrime, as many others seem to do. It is a nauseating sentiment. One that condones bad behaviour. This is because it is my personal belief that the vase majority of the cases are due to one core thing: a dereliction of duty. Them failing in their duty to protect the data that they collected. Little more.

In addition to consuming the various news articles about data breaches over the years. Ones that had the general themes of corporate incompetence. Like for example: employees carrying around sensitive data on unencrypted thumb-drives, only to lose them on the train. I also have a few examples of companies that leaked my very own personal information. All of this has coloured my opinions thus.

The most memorable is the online virtual tabletop gaming website roll20.net. The thing that rubbed me the wrong way about them is that at no point during the process did they ever take any accountability for allowing it to happen. They did eventually outline what information was taken, but they never offered an apology for their lax in security. Instead they covered it up with boiler plate (legal friendly) corporate speak.

Example: “The investigation identified several possible vectors of attack that have since been remedied. Best practices at Roll20 for communications and credential cycling have been updated, with several code library updates completed and more in development.” Assuming that is indeed true, the same could literally be said by any company involved in a similar data breach – just change the names.

Although from what I understand by reading the article that they linked in their post, technically (purely technically) this appears as though it’s not their fault. But rather it was due to the underlying technology that they used. At least that is the implication presented. I’d argue that they still made the decision to use said tech, and thus vouched for it by doing so. Making them responsible, at least tangentially. At least enough for a simple sorry. The closest their customers got to an apology was a “Frankly, this sucks.” Writing it in an official company blog post that they passed for a conclusive public report; authored by Jeffrey Lamb, the Data Protection Officer.

I remember thinking at the time that whoever was writing this was good at the bland formalities of corporate speak, but otherwise is (and excuse my French): a fucking dickhead. You have to keep in mind reader, that they only knew of their own data breach because of a third party report. One that was published months after the fact. The report was published in February of 2019, and the breach happened (according to Mr Lamb) sometime late 2018. No apology warranted, not even for missing the hack, until a third party told you about it months after the fact. They then go on write their conclusive report in august of 2019. So nearly a year, between data breach and the final public debrief, where they outline exactly what data was exposed. I call that incompetence. “Data Protection Officer” more like resident salary sucker.

The ultimate lack of accountability is what really rubbed me up the wrong way here. And why would they be accountable, there is little in the way of consequence it seems for these messes. There are even examples of customers defending roll20 in the comments, referring to them as “victims” of cybercrime. They aren’t the victims here idiot, you are! I’ll include some choice examples of this for your entertainment. Its customers like that, that make businesses feels like they don’t have to be accountable either for their actions, or in this case general inaction with regards to proactively protecting customer data. Please read through the example comment thread.

You really can’t reason with people like that. They have too much emotional stock in a corporation to admit to themselves that they got screwed by it. There were even people actually praising roll20 for it’s meagre efforts. A sum total of 2 blog posts, some notice tweets/emails, and for patching a hole in their own boat. Thanks roll20, stellar job. Shame about all my cargo sinking to the seafloor for the bottom feeders to enjoy. I mean you only lost my full name, my IP address (so my physical location), my password, oh and some of my credit card data. Don’t worry about that roll20 (not like you would), that’s my problem. Fuck those types of customers. Wankers.

Moving on. Another example of a gormless entity losing my data is ffshrine.org. A final fantasy fan site that I registered with in 2010 I believe; and haven’t used that account since 2010. Ideally, they would have flagged the account as non-active and deleted it after a couple of years. But alas, instead they just kept whatever details I gave them for the five years until their 2015 data breach. Where they lost subscriber passwords and email addresses. No warning email post event, nothing. Radio silent. I had a similar experience with tumblr back in the day. Radio silent. No accountability. Are you sensing a theme here, dear reader?

Closing thoughts.

I have written far more here then I initially wanted to, so I will keep this summary short. Tools like haveibeenpwned and Firefox Monitor are things that you as an individual can use to help protect yourself in cyberspace. They can help you take proactive measures to safeguard your own data. They can also show you evidence that the large corporations really aren’t as professional or as infallible as they like to appear.

And that when, they make mistakes; mistakes such as losing your data. It is often you that has to bare the brunt of the repercussions, with little if any repercussions to them. Maybe they incur a temporary stock dip. But the fact of the matter is, they’ll recover from it. However whatever data you provided them for safe keeping, well that’s now permanently out there. Enjoy.

For example. To this day I still get phishing emails that say something like: “hey MY_FULL_NAME, YOUR_BANK has detected multiple login attempts using PASSWORD_FROM_FFSHRINE.ORG to login. We have frozen your account because we suspect fraudulent activity. Follow the obviously dodgy link provided and give us your security questions to fix this.” Although I can recognise a phishing scam when I see one, many technology illiterate users can not.

And make no mistake, the companies that were lax in their security. The one’s that have the attitude that breaches happen; are the exact ones to blame for the perpetuation of the black market information economy. An economy that preys on people; the real victims. The people who trusted these corporations with their data, thinking it in safe hands. Not the corporations themselves whose lack of diligence and general incompetence allowed for the data that they were trusted with to be exposed.

Jeez… that got a bit preachy towards the end. Didn’t it? Sorry about that. It’s just seeing companies fobbing off their responsibilities, and then seeing customers with Stockholm syndrome defending these same companies against criticism – really ruffles my feathers.

Anyway, thanks for reading.

References, links, further reading.

https://github.com/mozilla/blurts-server

https://monitor.firefox.com/

https://monitor.firefox.com/breaches

https://monitor.firefox.com/security-tips

https://haveibeenpwned.com/

https://haveibeenpwned.com/About

https://feeds.feedburner.com/HaveIBeenPwnedLatestBreaches

https://blog.roll20.net/post/182811484420/roll20-security-breach

https://blog.roll20.net/post/186963124325/conclusion-of-2018-data-breach-investigation

Hacker who stole 620 million records strikes again, stealing 127 million more