notes

Author: darthwalsh

apps/DayLightSavingsHeartAttacks.md

@@ -1,7 +1,7 @@
 [Daylight Saving Time Explained - YouTube](https://www.youtube.com/watch?v=84aWtseb2-4) claims:
->Sleep depravation can lead to heart attacks and suicides and the Daylight Saving Time Monday has a higher than normal spike in both.
+>Sleep deprivation can lead to heart attacks and suicides and the Daylight Saving Time Monday has a higher than normal spike in both.
 
 But [Humble Pi: When Math Goes Wrong in the Real World  by Matt Parker](https://www.amazon.com/dp/B07R8QSXYB) points out
 >It seems the clocks going forward and depriving people of sleep did cause extra heart attacks, but only in people who would have had a heart attack at some point anyway. The heart attack merely happened sooner. And likewise, the clocks going back gave people a rest and bought them a few more days until their heart turned on them. This could be relevant information for a hospital planning its staffing around when the clocks go forward, but it does not mean daylight saving time is net dangerous.
 
-So, daylight savings only decreases [[lifespan]] by a couple days (but decreasing [[healthspan]] of people's pre-heart-attack days too?)
+So, daylight savings only decreases [[lifespan]] by a couple of days (and decreases [[healthspan]] of people's pre-heart-attack days too)

apps/HardProblemOfConsciousness.md

@@ -0,0 +1,3 @@
+#stub 
+https://en.wikipedia.org/wiki/Hard_problem_of_consciousness
+>In the [philosophy of mind](https://en.wikipedia.org/wiki/Philosophy_of_mind "Philosophy of mind"), the **hard problem of consciousness** (or simply the **hard problem**) is to explain how and why [organisms](https://en.wikipedia.org/wiki/Organisms "Organisms") have [qualia](https://en.wikipedia.org/wiki/Qualia "Qualia"), [phenomenal consciousness](https://en.wikipedia.org/wiki/Phenomenal_consciousness "Phenomenal consciousness"), or [subjective experience](https://en.wikipedia.org/wiki/Subjective_character_of_experience "Subjective character of experience").[[1]](https://en.wikipedia.org/wiki/Hard_problem_of_consciousness#cite_note-Chalmers-1)[[2]](https://en.wikipedia.org/wiki/Hard_problem_of_consciousness#cite_note-Harnad-2) It is contrasted with the "easy problems" of explaining why and how physical systems give rise to the ability to discriminate, to integrate information, and to perform behavioural functions such as watching, listening, speaking (including generating an utterance that appears to refer to personal behaviour or belief), and so forth

apps/Internet adages and named laws.md

@@ -1,3 +1,10 @@
+- [ ] source from [Laws of Software Engineering](https://lawsofsoftwareengineering.com/), 
+	- [ ] couldn't find the source on GitHub, but somebody has helpfully scraped them a few hours ago: [https://github.com/pascalandy/dotfiles/blob/main/docs/refere...](https://github.com/pascalandy/dotfiles/blob/main/docs/references/ideas/references/2026-04-23-software-engineering-laws/md_pages/TOC.md)
+	- [ ] Also more listed in discussion https://news.ycombinator.com/item?id=47847179
+	- [ ] [globalcitizen/taoup: The Tao of Unix Programming (Ruby-powered ANSI colored fortunes)](https://github.com/globalcitizen/taoup)  
+	- [ ] [dwmkerr/hacker-laws: 🧠 Laws, Theories, Principles and Patterns for developers and technologists.](https://github.com/dwmkerr/hacker-laws)
+	- [ ] maybe contribute back
+
 - [ ] source many from https://twitter.com/G_S_Bhogal/status/1438972527838117895?s=09
 - [ ] https://newsletter.manager.dev/p/the-13-software-engineering-laws
 

apps/LLM AI are like System One thinking.md

@@ -23,6 +23,7 @@ From [Maps well to Kahneman's "Thinking Fast and Slow" framework system 1 thinki
 > system 1 = 4o/llama 3.1
 > system 1 + system 2 = o1/r1 reasoning models
 
+I think it's too ambitious to say Reasoning models are system 2... See [[ai.thinking]] for state-of-the-art models using scratchpads.
 ## Related Concepts
 
 - [[📝Consciousness_flashcards_2026-01-22_163913]] - Fluid reasoning, metacognition, abstract reasoning

apps/Quantifying Risk with Micromort or Microlives.todo.md

@@ -1,8 +1,13 @@
+---
+aliases:
+  - Lifespan
+  - healthspan
+---
 [Micromort](https://en.wikipedia.org/wiki/Micromort) quantifies the "risk of dying during an activity" and helps you quantify the immediate risk of death
 - [ ] read this, take notes, try out some basic calculation
 
 [Microlife](https://en.wikipedia.org/wiki/Microlife) is 30 minutes, and `30min * 1e6 = 57years` so unless you live to 114 it's a decent approximation of 1 millionth of a life.
-Compared to micromort, this is a much better way to think about cumulative health negative/positive changes (but still focuses Lifespan, not to Healthspan)
+Compared to micromort, this is a much better way to think about cumulative health negative/positive changes (but still focuses Lifespan, not to [[healthspan]])
 - [ ] Healthspan lifespan from mudd https://healthylifecalculator.org/ useful once you're 65 🛫 2058-04-20 
 
 

apps/RenovateDefaultConfig.md

@@ -19,7 +19,7 @@ Then look for the log line `DEBUG: packageFiles with updates (repository=local)`
 To see upgrades, look for `.kind.[].deps[].updates`
 ## My suggestion
 ### Reduce chance of supply-chain attack
-*If you have access to a virtual package feed (socket.dev, artifactory, etc.) then this might not be an issue.*
+*If you have access to a virtual package feed (socket.dev, artifactory, etc.) **configured with a delay** then this might not be an issue.*
 With the constant news of malicious NPM packages getting uploaded, a tool that blindly upgrades to latest is not the best idea!
 
 For OSS projects, you probably don't have budget for a premium, validated virtual package feed. It would be nice to use Socket.dev as a required github check for PRs, but that also seems to be a premium feature.

apps/RocksAreConscious.md

@@ -95,7 +95,7 @@ Two minor stress points:
 
 **The falsifiability problem:**
 
-Without observable, measurable qualia — without some instrument that can detect "what it is like to be X" — the question of whether a thermostat, a rock, or a connectome simulation is conscious is not falsifiable. This is the [[Meta-Problem of Consciousness]]: not "how does consciousness work?" but "why do systems report having subjective experiences at all?" If we find the neural mechanism that compels us to report "I feel things," we may dissolve the Hard Problem entirely — or we may find it is forever inaccessible from the outside.
+Without observable, measurable qualia — without some instrument that can detect "what it is like to be X" — the question of whether a thermostat, a rock, or a connectome simulation is conscious is not falsifiable. This is the [[Meta-Problem of Consciousness]]: not "how does consciousness work?" but "why do systems report having subjective experiences at all?" If we find the neural mechanism that compels us to report "I feel things," we may dissolve the [[HardProblemOfConsciousness]] entirely — or we may find it is forever inaccessible from the outside.
 
 The line between "rock with no awareness" and "rock taught to think with awareness" may be as arbitrary as the line between a heap and a non-heap.
 

apps/Sapir-Whorf Hypothesis--does language limit thought.md

@@ -1,4 +1,11 @@
+#stub
+
 https://old.linguistlist.org/ask-ling/sapir.cfm
 >The Sapir-Whorf hypothesis is the theory that an individual's thoughts and actions are determined by the language or languages that individual speaks. 
 >The **strong** version of the hypothesis states that **all human thoughts and actions are bound by the restraints of language**, and is generally less accepted 
 >than the **weaker** version, which says that **language only somewhat shapes** our thinking and behavior. 
+
+https://en.wikipedia.org/wiki/Linguistic_relativity
+>**Linguistic relativity** asserts that [language](https://en.wikipedia.org/wiki/Language "Language") influences [worldview](https://en.wikipedia.org/wiki/Worldview "Worldview") or [cognition](https://en.wikipedia.org/wiki/Cognition "Cognition"). One form of linguistic relativity, [linguistic determinism](https://en.wikipedia.org/wiki/Linguistic_determinism "Linguistic determinism"), regards peoples' languages as determining and influencing the scope of cultural [perceptions](https://en.wikipedia.org/wiki/Perception "Perception") of their surrounding world.
+>
+> the term _Sapir–Whorf hypothesis_ is sometimes considered a [misnomer](https://en.wikipedia.org/wiki/Misnomer "Misnomer") for several reasons. [Edward Sapir](https://en.wikipedia.org/wiki/Edward_Sapir "Edward Sapir") (1884–1939) and [Benjamin Lee Whorf](https://en.wikipedia.org/wiki/Benjamin_Lee_Whorf "Benjamin Lee Whorf") (1897–1941) never stated their ideas in terms of a hypothesis. The distinction between a weak and a strong version of this hypothesis is also a later development; Sapir and Whorf never used such a dichotomy, although often their writings and their opinions of this relativity principle expressed it in stronger or weaker terms.[[6]](https://en.wikipedia.org/wiki/Linguistic_relativity#cite_note-FOOTNOTEHillMannheim1992-6)[[7]](https://en.wikipedia.org/wiki/Linguistic_relativity#cite_note-:1-7)

apps/Slack.md

@@ -1,10 +1,20 @@
-Communication tool that we use.
-## Changing Status
-- [ ] [A command line utility for changing your Slack status.](https://gist.github.com/AGresvig/ff269904abdb7826be9f54c9ab4d7d71)
-- [ ] Create webhook: [[strava]] run -> change status to run. end -> clear status
 ## Webhooks
-It's very easy to create a Slack App, pick a channel, and get a URL you can POST messages to.
+Easiest integration: create a Slack App, pick a channel, get a URL to POST messages to. No OAuth needed.
+
+More complex actions (replies per thread, DMs) require OAuth.
+
+## Changing Status
+- [ ] [CLI utility for changing Slack status](https://gist.github.com/AGresvig/ff269904abdb7826be9f54c9ab4d7d71)
+- [ ] Webhook: [[strava]] run → change status to "running"; end → clear status
+
+## Calling Slack from a CLI script
+Slack's [search API](https://api.slack.com/methods/search.messages) supports `is:saved` to query saved-for-later items.
+[[mcp#Auth|`mcptools` auth]] is not supported!
 
-Doing anything more complicated seems to require OAuth so I haven't looked into it:
-- Sending reply messages per topic
-- Sending DMs
+|                  | AI Option A: Slack MCP like Cursor                                         | AI Option B: REST API                              |
+| ---------------- | -------------------------------------------------------------------------- | -------------------------------------------------- |
+| App registration | None — reuse Cursor's public client ID `3660753192626.8903469228982`       | Register own Slack app with `search:read:*` scopes |
+| Client secret    | Not needed — uses [PKCE](https://docs.slack.dev/authentication/using-pkce) | Needed (or PKCE if you enable it)                  |
+| Endpoint         | `https://mcp.slack.com/mcp` (MCP JSON-RPC)                                 | `https://slack.com/api/search.messages`            |
+| Enterprise risk  | Low — same app Cursor already authorized                                   | Enterprise may block new app installations         |
+| My next steps    | related to [[withings.py]]                                                 | See [[Tasks#Slack]]                                |

apps/ThreatModel.md

@@ -16,11 +16,11 @@ The primary goal is to balance strong cryptographic security with developer prod
 
 ## Security Priorities
 
-| Priority | Description |
-| :--- | :--- |
+| Priority               | Description                                                                                                                                                               |
+| :--------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | **Non-extractability** | Private keys must never be stored in a way that they can be easily copied or exported from the secure storage (e.g., hardware token, Secure Enclave, or encrypted vault). |
-| **Anti-impersonation** | Remote attackers should not be able to authenticate or sign operations without physical access to the key or the specific authorized session. |
-| **Origin Binding** | Protection against phishing via mechanisms like WebAuthn that bind credentials to specific domains. |
+| **Anti-impersonation** | Remote attackers should not be able to authenticate or sign operations without physical access to the key or the specific authorized session.                             |
+| **Origin Binding**     | Protection against phishing via mechanisms like WebAuthn that bind credentials to specific domains.                                                                       |
 
 ## What is Deprioritized