Want to join in? Respond to our weekly writing prompts, open to everyone.
Want to join in? Respond to our weekly writing prompts, open to everyone.
from An Open Letter
Tomorrow I am going on a dating game show! How excited and I think it’s gonna be a fun time and my friends are gonna be there so it will be a lot of laughs one way or another. I just wanted to mention that.
I played tennis today with friends, the first time in a long time, and unfortunately, my tennis elbow came back in a very big way. It got so bad to the point where I had to sit down because it hurt too much to hold a racket, and I found in my bag a compression thing for that reason, and I almost couldn’t fit it over my forearm. I have been training my forearms a lot recently, and they are something that I get a lot of compliments towards, but at the same time is something where I look at them and I feel like I see them so small. I think it’s one of those things where it looks nice nice and vascular, and compared to the rest of my frame, it looks good or at least OK, but compared to my mental image of a random American dad, I am still a boy. And I guess all the considered I still am young. But when I tried putting that wrap on it somewhat short circuit, my brain and circumvented that dysmorphia, and I realized this circumference of them. It is a little bit sad how all the jokes about the Gym being a gateway to body dysmorphia have merit to them. But at the end of the day in the worst case, it is still OK if I am happy with myself for potentially delusional reasons, because other people view me the same.
from nguo lai
1941. La France métropolitaine avait perdu la guerre. Les Japonais commençaient à occuper l’Indochine. Mauvais moment assurément. Ils n’étaient pas drôles, les Japonais. En urgence, toute la famille, beaux-parents, enfants, gendre et même domestique s’embarqua sur un navire pour la France. Destination finale : Nantes, où la famille de mon grand-père possédait des biens et un logement disponible assez vaste pour abriter toute la tribu. Très vite, la cadette se trouva un prétendant, décidément on se mariait vite dans ma famille, qui l’aurait bien emportée vers Paris s’il n’y avait pas eu tant d’Allemands dans les rues. D’ailleurs, les deux gendres ayant bientôt des inquiétudes sur la nécessité de se plier aux obligations du STO, les deux couples se cachèrent quelque temps à la campagne. C’est là que fut conçue ma sœur. Éloignée la menace, le couple aîné repartit vers Nantes et un habitat plus confortable.
Nantes, 1943. Ma sœur avait quatre mois dans son landau, sa mère courait sous les bombes se mettre à l’abri dans la cave de la maison familiale. Le B17 dont on put suivre la trace dans les ruines largua sa toute dernière bombe de l’autre côté de la rue, écrasant à ras de terre la dernière maison du pâté, enterrant du même coup tous ses habitants. Miraculeusement l’immeuble familial fut épargné. Si souvent on m’a raconté cet épisode, je le connais comme si je l’avais vécu.
12 août 1944, Nantes est libérée de l’occupation allemande. On respire. On comptabilise les dégâts. Miraculeusement les biens familiaux n’ont pas souffert des bombardements, mais les affaires ont pâti grandement des évènements. Celui qui sera mon grand-père s’active à redresser les bilans et relancer les activités. Ce fut un peu lent. La guerre cependant continuait, le Japon venait de s’emparer purement et simplement de l’Indochine en mars 1945, jusqu’en août.
#nguolai
from
Joyrex
I have been enjoying watching @ninakalinina switch her primary workstation from MacOS to NetBSD. The various issues she’s hitting really remind me of the early days of Linux, and the (fun) frustration that comes with getting everything up and running. So, I decided to give it a shot, for fun. Unfortunately NetBSD has zero support for the wireless driver of the laptop I want to run (iwx), but OpenBSD did, so let’s see how it goes…
I dd’d the 7.9 install image to a USB key and booted. Going through the setup, it offered to let me set up wifi, but I didn’t have the firmware needed (and I couldn’t go online to let fw_update do its work), so I had to install from from the on-usb install media, then make a new usb key of vfat (not exfat) type, copy the firmware I needed from
from
Rafe’s Blog
On Mastodon, I’m running a poll-based role-playing game but it’s quickly becoming difficult to keep track of the posts, so I’m going to start putting the posts here, in order, with links.
Post 1: Pick your ancestry.
Post 2: A banging on your passenger cabin door jars you from restless slumber. “If y’aint dead, git up an’ off my ship!” a gruff voice shouts, their voice muffled through the thick wood. “If ye are, I got dibs on yer shite.” As his heavy footsteps recede, you sit up and light the small oil lamp next to your bunk. More than ready to say goodbye to the dingy, smelly, cramped quarters that have been your home for the past two weeks, you reach for your gear, which includes… (Pick your class.)
Post 3: Making your way up to the deck, you spend a moment at the top of the gangplank to take in your surroundings. Inhaling the cool, salty air, you watch as bustling dock workers unload the ship’s cargo while the town of Gilport awaits you, its weathered stone buildings seeming to stand in defiance of time and the elements. Beyond the town and rocky shore is the dense Titanswood and rugged Mirian Mountains, their towering peaks hidden by the gray clouds overhead. Why are you here?
Post 4: A short time later, after settling in to your rustic room at the Dropped Anchor, securing your chest of personal effects and research materials from the ship, and – having lived off little more than hardtack and water for a week – indulging yourself in a hearty mid-morning meal, you decide to…?
Post 5: Thankfully, the bathhouse isn’t far from the Dropped Anchor and an hour later you are lounging in a private, steamy, hot-spring-fed bath, cleaner than you’ve been in months. Suddenly, a kerfuffle erupts from down the hall, toward the public baths. Fearful shouts and splashing echo through your closed door.
Post 6: “Not my monkeys, not my circus…” you mumble to yourself as you bar the door then slip back into the warm water.
🎲+🧠=5 | A few minutes later, after the noise from outside has died down, a soft gurgling sound from the direction of the door grabs your attention. There, you see a puddle of water flowing into the room through the gap under the door. You leap out of your tub, butt nekkid, as it rises into a swirling column of water.
What do you do?
Post 7: 🎲 (Tie Break) = 2
🎲+🗣️ (Communicate) = 1 ❌️
“WHAT ARE YOU?” you shout over the now-roaring sound of the liquid vortex. “WHAT DO YOU WANT?!” Suddenly, a tentacle of water lashes out…
🎲+💪 (Avoid Damage) = 8 ✅️
You deftly jump out of its range.
🎲+🧠 (Identify) = 8 ✅️
Then it comes to you, it's a water elemental—just a minor one, too, easily dispatched with a simple incantation! You quickly weave the words, then the elemental burbles—almost joyously?—and vanishes.
What do you do?
from
SmarterArticles

The selfie arrived before the match did. Weeks before a fan reached a turnstile at Gillette Stadium outside Boston, or Hard Rock Stadium in Miami Gardens, or Mercedes-Benz Stadium in downtown Atlanta, a small ritual of enrolment had already taken place: open the ticketing app, hold the phone at arm's length, look into the lens, submit. The image became a template, a mathematical abstraction of the geometry of a face — the distances between eyes, the contours of cheekbones, the proportions that distinguish one human countenance from another. When that fan finally approached the gate, a camera read their face again, in real time, and the system asked a single question with an answer measured in fractions of a second: does the live face match the stored one? If yes, the gate opened. The face had become the ticket. The body had become the credential. This was the experience organisers described as frictionless, and it is now possible to say precisely how many people passed through it. FIFA's final figures put attendance at 6,810,966 across 104 matches at sixteen stadiums in the United States, Canada, and Mexico — an average of 99.7 per cent of available seats filled, the highest-attended World Cup ever staged, and a total that beat the record set by the 1994 finals in the United States by roughly 90 per cent. WIRED confirmed in June 2026 that biometric readers were already active at multiple US venues, and Mexican authorities announced that World Cup matches in their country would be, in their phrasing, “100 per cent digitised” through biometric turnstile access. Analysts called it the largest deployment of facial recognition technology in the history of professional sport. They were almost certainly right, and the more important point is that almost nobody who walked through those gates between the opening match on 11 June and the final on 19 July meaningfully decided to be part of it.
It is worth being precise about what the technology actually does, because the marketing language — “frictionless,” “seamless,” “your face is your ticket” — is engineered to obscure the mechanism. The “Go-Ahead Entry” model, a version of which had already spread through American professional sport from Major League Baseball stadiums housing the Phillies, the Astros, and the Nationals into the World Cup venues themselves, depends on a two-stage process. First, enrolment: the fan supplies a reference photograph, the selfie, which the system converts into a biometric template. Second, verification: at the point of entry, a camera captures a live image and a matching algorithm compares it against the enrolled template, or in some configurations against a gallery of templates belonging to everyone expected at the venue that day. The first is a one-to-one comparison, which is the easier and more accurate task. The second, when the system is identifying a face against a crowd rather than confirming a single claimed identity, is one-to-many, and one-to-many is where the trouble historically begins.
The convenience is genuine. Anyone who has stood in a snaking queue outside a stadium understands the appeal of walking through an access corridor while a camera resolves your identity in under a second, the bottleneck dissolved, the bag-check accelerated, the turnstile reduced to a formality. Vendors describe dynamic recognition systems that identify and validate attendees as they walk, cutting entry times to seconds per person. This is not a fantasy; it works, often well, and it is precisely because it works that the deeper questions got waved through alongside the crowds. The promise of speed did an enormous amount of political labour. It converted a profound change in the relationship between a person and the institutions that watch them into a customer-experience upgrade, a line item in the same category as cashless concessions and mobile parking. The frame was consumer convenience. The reality was biometric enrolment at civilisational scale.
To understand why the scale matters, return to the precedent that digital rights advocates kept invoking: the 2017 UEFA Champions League final in Cardiff, where Real Madrid played Juventus before roughly 170,000 people gathered in and around the Principality Stadium and the city's central railway station. South Wales Police deployed automated facial recognition to scan those crowds against a watchlist of custody images. The system generated 2,470 alerts identifying individuals as potential matches against the police database. Of those, according to figures the force later published on its own website, just 173 were genuine matches. The remaining 2,297 — fully 92 per cent of all the people the system flagged as possible criminals — were false positives. Innocent spectators, attending a football match, algorithmically marked as suspects.
South Wales Police defended the deployment, noting reasonably enough that no system is one hundred per cent accurate, that the false alerts led to no wrongful arrests, and that the technology had contributed to hundreds of arrests across its wider use. The force blamed the Cardiff failure rate partly on poor-quality watchlist images supplied by agencies including UEFA and Interpol, and partly on the fact that this was an early, immature deployment. All of that may be true. None of it dissolves the underlying lesson, which is mathematical rather than anecdotal. When you apply a classifier with even a small false-positive rate to an enormous population, the absolute number of false positives becomes large, and because the genuine targets are rare, the false positives can swamp the true ones entirely. This is the base-rate problem, and it does not go away when the engineering improves. It is a property of running probabilistic matching across crowds of tens or hundreds of thousands. A system can perform exactly within its specified error tolerances and still misidentify thousands of people, simply because thousands is what a small percentage of a vast crowd looks like.
The arithmetic deserves to be made concrete, because it is the single most misunderstood feature of crowd-scale biometrics, and the misunderstanding is what allows reassurances about accuracy to land. Imagine a system advertised as 99.9 per cent accurate — a figure that sounds, to a lay ear, like near-perfection, the kind of number that is supposed to end an argument rather than begin one. Now run it against a stadium crowd of one hundred thousand people, of whom, say, a hundred genuinely appear on a watchlist. A false-positive rate of even one in a thousand, the inverse of that gleaming accuracy claim, produces a hundred false alerts from the ninety-nine thousand nine hundred innocent attendees — a hundred ordinary spectators flagged as suspects, roughly matching the number of genuine hits, every one demanding a human decision about whether to intervene. Push the crowd higher, or the watchlist accuracy lower, and the false alerts overwhelm the real ones entirely, which is exactly what Cardiff demonstrated in the field rather than on a whiteboard. The point is not that the technology is broken. The point is that the technology working as specified is itself the problem, because “working as specified” at the scale of a World Cup means thousands of innocent people miscategorised as a matter of routine, and each miscategorisation is a moment in which a human operator, or an automated escalation, decides what to do with a person the machine has wrongly accused. Convenience, again, conceals the stakes: the fan who sails through the gate never sees the fan two corridors over being drawn aside because an algorithm produced a number above a threshold.
The Cardiff case did not end with the published statistics. It became the basis for the first successful legal challenge to police facial recognition anywhere in the world. Edward Bridges, a civil liberties campaigner from Cardiff who had been scanned by the technology, brought a judicial review supported by the human rights organisation Liberty. In August 2020, the Court of Appeal of England and Wales ruled in R (Bridges) v Chief Constable of South Wales Police that the force's use of the technology had been unlawful. The court found that the deployment was not “in accordance with the law” under Article 8 of the European Convention on Human Rights, because existing legislation and the force's own policies left too much unconstrained discretion over who could be placed on a watchlist and where the technology could be deployed. It found the force's data protection impact assessment deficient. And, crucially for what follows, it found that South Wales Police had failed to discharge their public sector equality duty by neglecting to investigate whether the software exhibited bias on grounds of race or sex. The judgment did not ban the technology. It said, in effect, that deploying it without an adequate legal framework, a serious assessment of risk, and a genuine reckoning with demographic bias was not lawful. Hold that tripartite requirement — legal framework, risk assessment, bias reckoning — because it maps almost perfectly onto everything that was missing from the World Cup deployment.
The Court of Appeal's concern about racial and gender bias was not speculative hand-wringing. It rested on a body of empirical research that has only hardened since. In December 2019, the United States' own National Institute of Standards and Technology — a federal agency, not an advocacy group — published the most comprehensive study of demographic differentials in facial recognition then attempted, evaluating 189 algorithms from 99 developers against more than eighteen million images of more than eight million people. The findings were unambiguous. For one-to-one matching, the algorithms produced false positives for Asian and African American faces at rates ranging from ten to one hundred times higher than for white faces, depending on the algorithm. For one-to-many matching — the crowd-scanning configuration — the highest false-positive rates fell on African American women, a group that sat at the intersection of the two axes along which the systems failed most badly.
NIST was careful to note that the best-performing algorithms showed undetectable demographic differentials, and the security industry has seized on that caveat to argue that bias is an engineering problem already being solved. There is something to this; the technology has improved, and the gap between the best and worst systems is enormous. But it was precisely the wrong lesson to draw in the context of a multi-venue, multi-vendor, multi-national tournament. The reassurance applies only if every venue, in three countries, under no common procurement standard, happened to deploy a top-tier algorithm, tuned correctly, on well-lit and well-positioned cameras, validated against the actual demographic composition of a global football crowd. No public evidence was produced that this condition held. There was, in fact, no public evidence about which algorithms were running at which gates at all, and the tournament has now ended without that evidence appearing. The demographic stakes were not abstract: a World Cup draws one of the most racially and nationally diverse crowds on earth, precisely the population on which the worst systems fail hardest, and the consequence of a false match at a stadium gate in 2026 was not merely an awkward delay. With Department of Homeland Security personnel and US Immigration and Customs Enforcement agents present at venues, a misidentification carried the potential to escalate from inconvenience into detention.
The escalation is not hypothetical, and the people who have documented it most carefully are not technophobes. The ACLU, through senior policy analyst Jay Stanley, has spent years cataloguing what happens when probabilistic facial matches collide with the machinery of law enforcement, and the organisation has tracked multiple cases of Americans wrongfully arrested on the strength of a bad facial recognition match — a disproportionate number of them Black, which is exactly what the NIST differentials predict. Stanley's argument, sharpened across a decade of writing on the subject, is that the danger is not the technology in isolation but its fusion with state power and the human tendency to over-trust a machine's output: an operator presented with a name and a confidence score is psychologically primed to treat the flagged person as guilty until the person proves otherwise, inverting the burden a free society is supposed to place on the accuser. Now transpose that dynamic to a stadium concourse during a World Cup, with armed officers, immigration agents, the adrenaline of a crowd, a foreign visitor who may not speak the local language and may not understand why they have been pulled aside, and an algorithm that the venue cannot or will not name. The false positive that Cardiff produced 2,297 times in a single evening stops being a statistic and becomes a person, frightened and detained, on the wrong side of a threshold they never knew they had crossed.
The enforcement half of that fusion did not remain theoretical either. Human Rights Watch had already set out the danger in December 2025, documenting the case of an asylum seeker detained by ICE near MetLife Stadium during the Club World Cup final that July, after local police questioned him about a small drone he had used to photograph his family and then asked about his immigration status; he spent three months in detention and was deported. In the same report, Human Rights Watch calculated that between January and October 2025, ICE had arrested at least 92,392 people in cities due to host 2026 World Cup matches, 65.1 per cent of whom had no criminal convictions. During the tournament itself, local advocacy groups in Kansas City reported that at least thirty residents were arrested by ICE while the city was hosting matches, with the sharpest concentration between 15 June and 3 July, and comparable patterns were reported across other host cities. Members of Congress had tried to head this off: Representatives Nellie Pou, Eric Swalwell, and LaMonica McIver introduced three bills — the Save the World Cup Act, the Safe Passage to the World Cup Act, and the Protect World Cup Attendees Act — variously prohibiting civil immigration enforcement near match sites and fan festivals, banning it on public transit in host cities during the tournament, and barring homeland security grant funds from being used for enforcement at game sites. None reached the statute book before the opening match. No documented case links any of these arrests to a facial recognition misidentification, and it would be dishonest to claim otherwise. The honest point is narrower and quite bad enough: the enforcement apparatus that critics warned would sit beside the biometric apparatus did in fact operate, at scale, in the host cities, throughout the weeks the cameras were running.
The legal architecture surrounding all of this is best described as a patchwork that failed at exactly the seams where the tournament crossed borders. Consider the three host nations in turn, because the differences are not pedantic — they determined whether a fan had any rights at all over the data extracted from their face.
The United States has no federal biometric privacy law. None. The protection a fan enjoyed depended entirely on which state they happened to be standing in. Illinois, through its 2008 Biometric Information Privacy Act, offers the strongest regime in the country: private entities must obtain written, informed consent before capturing a biometric identifier, must publish a retention-and-destruction schedule, are forbidden from selling biometric data, and — uniquely — individuals harmed by violations can sue directly, recovering statutory damages of one thousand or five thousand dollars per violation. That private right of action is what gave BIPA teeth, and it is why the most consequential biometric privacy litigation in America, including the case that ended with Clearview AI surrendering a 23 per cent equity stake valued at roughly fifty-two million dollars to a class of plaintiffs, was litigated in Illinois. Texas, through its Capture or Use of Biometric Identifier Act, also requires informed consent and limits retention, but enforcement rests solely with the state attorney general; there is no private right of action, only civil penalties of up to twenty-five thousand dollars per violation pursued at official discretion. And the great majority of US states — including most that hosted World Cup matches — have no specific biometric statute at all. A fan at a match in a state without such a law enjoyed essentially no statutory protection over the biometric template generated from their face.
Canada operates under the federal Personal Information Protection and Electronic Documents Act, which governs the commercial handling of personal information but, as the Office of the Privacy Commissioner and outside counsel have both noted, does not explicitly classify biometric data as sensitive nor mandate privacy impact assessments before a facial recognition system is switched on. The Privacy Commissioner issued fresh guidance on biometrics in 2025 attempting to raise the bar within PIPEDA's existing language, but it remains guidance layered atop a statute not designed for the problem. Quebec is the conspicuous exception across the entire continent: under Law 25, the reform also known by its origin as Bill 64, organisations must conduct privacy impact assessments for biometric systems, obtain explicit opt-in consent, and — strikingly — notify the provincial regulator before creating a biometric database at all. It is the closest thing in North America to the European model.
Mexico regulates through the Federal Law on the Protection of Personal Data Held by Private Parties, the LFPDPPP, which requires consent for the collection of personal data and grants individuals rights of access, rectification, cancellation, and objection. Yet Mexico is also the country whose authorities declared World Cup access “100 per cent digitised” through biometric turnstiles, having already normalised stadium biometric registration across its domestic leagues since the 2022-23 season. The gap between a statute that grants cancellation rights on paper and a tournament that made biometric submission a precondition of entry is the gap in which this entire story lives.
The result was a single tournament — a single ticketing system, a single fan experience marketed under a single brand — running across three irreconcilable legal regimes. A fan's rights over their own face changed the instant they crossed a border to follow their team. In Quebec, a regulator had to be told before their biometric data was pooled. In a non-BIPA US state, no one need be told anything. This is not harmonisation with rough edges. It is the absence of a floor.
What a floor looks like was visible the whole time, on another continent. Since 2 February 2025, the EU's AI Act has prohibited real-time remote biometric identification of people in publicly accessible spaces for law enforcement purposes, subject only to narrowly drawn exceptions requiring enabling national legislation, a fundamental rights impact assessment, registration in an EU database, and a bar on any adverse decision taken solely on the system's output. Remote biometric identification is, moreover, the first item in the Act's Annex III catalogue of high-risk systems. Two weeks after the World Cup final, on 2 August 2026, the Act's transparency obligations became applicable across the Union, including a duty on deployers of biometric categorisation and emotion recognition systems to inform the people exposed to them — the bare disclosure no fan at a North American turnstile could obtain. The comparison carries a sobering wrinkle. On 27 July 2026, eight days after the final, the EU's digital omnibus reform entered into force and postponed the full high-risk regime for Annex III systems, remote biometric identification included, to 2 December 2027. The only jurisdiction with a binding, comprehensive floor for this technology spent the summer of the largest facial recognition deployment in sporting history deciding to defer part of it. That is not an argument against the European model but an argument about the pressure a floor comes under even where one exists — and a reminder that in North America there was nothing to defer, because there was nothing there.
Into this gap arrived the finding that ought to have stopped the deployment in its tracks. Reviewing the deployment at 2026 World Cup venues, the French Compliance Institute concluded that no clear policy governed when biometric data collected during the tournament would be deleted, and that a fan using facial recognition to enter or pay at a venue had no viable means of discovering how long their facial data would be retained, where it would be stored, who would have access to it, or what would become of it once the tournament was over. It set out six core compliance risks running through the deployment: biometric collection without a clear legal basis, failures of transparency, excessive and undefined retention, cross-border data transfers, exposure through third-party vendors, and algorithmic bias producing false positives. Read that plainly: a system extracting biometric templates from the faces of millions of people, and the most basic governance question — how long is my face kept, and when is it destroyed — had no answer a fan could actually reach.
The distinction between an absent policy and an unreachable one matters less than it might appear, because from the position of the person at the turnstile they are the same object. Retention is not a technicality. It is the entire game. A biometric template that exists only for the few seconds required to open a gate, and is then irreversibly deleted, is a fundamentally different object from one that persists in a database for days, months, or indefinitely. The first is a transient convenience. The second is a permanent record of where a person was, when, and in whose company — a record that can be queried, breached, subpoenaed, sold, or repurposed long after the final whistle. The difference between these two architectures was invisible to the fan at the turnstile; the gate opened identically in both cases. The fan could not tell, by looking, whether their face was held for a heartbeat or enrolled forever, and could not find out by asking either. That asymmetry — the user experiencing only the frictionless moment while the consequential decision happens out of sight and without disclosure — is the precise mechanism by which consent is hollowed out. You cannot meaningfully consent to a retention policy you are not permitted to read.
This is also where the EFF's framing becomes essential. Matthew Guariglia, the senior policy analyst at the Electronic Frontier Foundation who studies surveillance and policing and who holds a doctorate in the history of policing in New York, has described stadium surveillance as “infrastructure” that “will outlast the current World Cup.” The cameras, the readers, the matching pipelines, the relationships between venue operators and law enforcement — these are capital investments, and capital investments are not dismantled when the tournament leaves town. They become the new baseline. The World Cup was the justification, the budget line, the public-safety rationale that made the build-out politically possible. The infrastructure is the thing that remains.
The scale of that capital investment is now a matter of public record, and it is the argument made concrete: the United States government allocated more than one billion dollars to World Cup security infrastructure and equipment upgrades, a sum that flowed largely into private hands through government-industry partnerships and bought hardware with a service life measured in decades rather than weeks. The receipts are already visible. Camera-equipped robot dogs patrolled venues in Dallas, East Rutherford in New Jersey, and Monterrey in Mexico. Multiple states, New York conspicuously among them, used federal tournament money to expand the number, capability, and deployment of police drones — aircraft capable of city-wide observation that will still be airworthy long after the trophy has been handed over. And in the single sharpest illustration of the whole phenomenon, the mayor of Seattle reactivated a major closed-circuit television network that the city had previously switched off precisely because of biometric privacy concerns. Read that sequence again, because it is function creep in its purest form: a system a democratic process had switched off for stated privacy reasons was switched back on under a tournament rationale, and no equivalent process is scheduled to switch it off again. Reporting after the final, notably in Foreign Policy on 17 July 2026, framed the tournament exactly this way — as an occasion on which the United States tested new surveillance technology at scale, with ICE's own fiscal year 2026 congressional budget justification drawing the link between the World Cup and federal law enforcement explicitly, and with a Department of Homeland Security definition under which a stadium the public can freely enter counts as a public place, so the surveillance network inside it requires no warrant at all. Function creep is not a risk to be guarded against; it is the predictable, observable life cycle of every surveillance system that has ever been installed for an event and then quietly kept.
Defenders of the deployment reached, inevitably, for consent. The fan downloaded the app. The fan submitted the selfie. The fan agreed to the terms. Nobody held a gun to anyone's head. This argument deserves to be taken seriously and then dismantled, because it is the load-bearing wall of the entire enterprise, and it does not hold weight.
European data protection law, which has thought about this longer and harder than any American regime, sets the bar that exposes the problem. Under the GDPR, biometric data processed to uniquely identify a person is “special category” data, subject to heightened protection, and consent to process it must be — in the regulation's words — freely given, specific, informed, and unambiguous, with a genuine ability to withdraw. The operative phrase is “freely given.” European regulators have repeatedly found that consent extracted under a power imbalance is not free. The most instructive example comes from Sweden, where the data protection authority fined a school that had used facial recognition to track student attendance. The school had obtained parental consent. The regulator ruled that consent invalid anyway, because the imbalance of power between an institution and the families dependent on it meant the agreement was effectively coerced. The principle that follows is that biometric processing may not be a precondition of accessing a service unless it is strictly necessary to that service — and a retail customer, or a football fan, must be offered a genuine alternative that does not involve surrendering their biometrics.
Apply that principle to a World Cup gate. Was facial recognition strictly necessary to admit a ticket-holder to a football match? Plainly not; the turnstile predates the algorithm by a century. Was there a power imbalance between a fan who had spent a small fortune on tickets, travel, and accommodation and the tournament that controlled the only door? Plainly there was. Was a fan, having arrived at the stadium on the day of the match, in any practical position to refuse the biometric pathway and demand a non-biometric one? Only if such an alternative was offered, clearly, without penalty or delay or relegation to a slower queue — and the burden of proving that alternative existed, and worked, and was genuinely equivalent, fell on the organisers, who did not demonstrate it before the tournament and have not demonstrated it since. Consent that you cannot refuse without forfeiting something you have already paid for is not consent. It is a tollbooth wearing the costume of a choice. The selfie submitted weeks in advance, bundled into the act of buying a ticket, was consent in the most degraded sense the word can bear: technically obtained, practically compelled, and informed about everything except the things that mattered — retention, sharing, the identity of the algorithm, the presence of immigration enforcement at the other end of the match. It is worth noting that more than 120 civil society organisations, the ACLU and Amnesty International among them, thought the risks serious enough to issue a joint travel advisory before the tournament, warning prospective visitors of invasive social media screening, searches of electronic devices, racial profiling, arrest, detention, and deportation. That is an extraordinary document to have to publish about a football tournament, and it tells you what informed consent would actually have had to disclose.
If the fans are the broad base of this pyramid, the players sit at its sharp and surveilled apex, and their predicament reveals how little the convenience narrative explains. When FIFPRO, the international federation of professional footballers, surveyed players through ten national player unions spanning its four divisions — Africa, the Americas, Asia and Oceania, and Europe — eighty per cent said they wanted access to their own performance data in order to improve how they perform on the pitch. The same players reported that they were concerned about how that data is collected and used, that they were often unsure of their rights and how to protect them, and that clear, practical, enforceable information about those rights was lacking. What mattered to them was not merely access but control over who else reached it. These are not anonymous fans swept up incidentally in a crowd. They are the most scrutinised athletes on the planet, the direct subjects of an entire industrial complex of performance data, and even they struggle to see, retrieve, or comprehend the record being made of their bodies.
That survey is why the union launched its Charter of Player Data Rights in September 2022, ahead of the Qatar World Cup and after two years of development alongside FIFA: it foresaw that new technologies — performance monitoring, in-game tracking, health and biometric measurement, fan-engagement systems — were generating intimate data about players that the players themselves did not control and often could not access. FIFPRO's subsequent published work on volumetric and biometric player data documents the same governance gap from the other end, arguing that the processing of special categories of data, including personal health and biometric information, requires the direct agreement of the player concerned together with collective safeguards, and that the industry still lacks agreed standards governing how such data is collected, protected, and used. The pace of technological development, on the union's own account, continues to outrun the protections meant to constrain it. If the people with the most resources, the most representation, a dedicated global union, and a published charter negotiated with the game's governing body still find themselves arguing for access to and control over the data generated from their own bodies, the proposition that an ordinary fan gave meaningful, informed consent at a turnstile collapses entirely. The players are the canary. Their struggle to reach their own data tells you, with brutal clarity, what the ordinary spectator's rights were actually worth: the system was not built to be legible to the people it measures.
The final piece of the argument is a question of imagination, and the honest answer is that we do not need to imagine. We can look at what venue operators have already done with facial recognition when no World Cup, no terrorism threat, and no security rationale was anywhere in sight.
In late 2022, Madison Square Garden Entertainment used facial recognition to identify and eject lawyers from its venues — not for any crime, not for any threat, but because the lawyers worked at firms engaged in litigation against the company. The most widely reported case involved Kelly Conlon, an attorney who was removed from Radio City Music Hall while attending a Rockettes show with her daughter's Girl Scout troop. Conlon was not personally working on the case against an MSG-owned business; her firm's involvement was enough. The company had built an “attorney exclusion list,” fed it into its facial recognition system, and used the technology to enforce a corporate grudge against members of the public who had bought tickets. Courts subsequently allowed the practice to continue.
This is the demonstration that dissolves every reassurance about purpose limitation. A biometric system installed and justified as a tool for security and convenience was repurposed, by a private entity, to settle scores — to exclude people from public entertainment on the basis of their professional associations. No new law was broken, because in New York no specific law forbade it. The capability, once built, found new uses that its architects never advertised, because that is what capabilities do. Now scale that logic across sixteen World Cup stadiums, three countries, 6.8 million faces, no federal floor in the host nation, no retention policy a fan could locate at any venue, immigration enforcement agents on site and arresting people in the host cities throughout, and a documented history of law enforcement data-sharing that the ACLU warned foreign fans about explicitly. The question was never whether the database could be misused. The question is what plausible mechanism now exists to stop it, and the answer, across most of this tournament's footprint, is none.
The closing question — what obligations organisers, governments, and technology providers bear to the people whose bodies have been converted into data — does not admit a both-sides shrug, because the asymmetries here are too stark to balance. Nearly seven million people were enrolled into a cross-border biometric system whose retention policy no fan could locate; whose error characteristics fall hardest on the racial and gender groups most heavily represented in a global football crowd; whose architecture sat beside an immigration enforcement operation that arrested people in host cities while the matches were being played; and whose consent mechanism was a selfie bundled into a ticket purchase that could not be refused without forfeiting an expensive, often once-in-a-lifetime journey. Against this, the affirmative case is speed at the turnstile. That is not a balance. It is a category error dressed as a trade-off.
The obligations, then, are specific and heavy, and the tournament's ending makes them more urgent rather than less, because the templates still exist and the cameras are still mounted. Technology providers owe transparency about which algorithms ran where, validated against the actual demographic composition of the crowds they scanned, with published, independently audited false-match rates — the bias reckoning that the Bridges court demanded and that NIST showed is non-negotiable. They owe data minimisation by design: templates that exist for the seconds required to open a gate and are then irreversibly destroyed, with deletion that can be verified rather than merely promised, and they owe an account, now, of whether the templates taken this summer have in fact been destroyed. Organisers — FIFA and the host venues — owed a genuine, frictionless, non-penalised non-biometric pathway at every gate, because consent that cannot be refused is not consent, and they owed a single, published, comprehensible retention-and-deletion policy that a fan could read before arriving, rather than one that a compliance review could not locate afterwards. They owe the players the access and control FIFPRO's members have been asking for and have not been given, because a system that cannot show its most scrutinised subjects their own data has no business scanning the rest. And governments owe the floor that still does not exist: the United States, conspicuously, owes a federal biometric standard, because a constitutional democracy that leaves the protection of its visitors' faces to the accident of which state line they stand behind has abdicated rather than legislated. Where a continental tournament crosses three regimes, the obligation runs to the strictest of them — Quebec's prior notification, the GDPR's freely-given consent, the AI Act's prohibition on scanning publicly accessible spaces without authority — not the weakest, because rights cannot be allowed to evaporate at a border the fan crosses to follow a match.
There is a deeper obligation underneath all of these, and it is the one the convenience narrative was designed to make us forget. A face is not a barcode. It cannot be reissued when it leaks, revoked when it is abused, or changed when it ends up in a database its owner never knew existed. A password compromised in a breach can be reset by lunchtime; a credit card cancelled and reissued within a week; even a stolen passport replaced through a tedious but finite bureaucratic ordeal. A facial template, once extracted and exfiltrated, is the person, permanently, in every future system that learns to read it. When attending a public event becomes a mechanism for enrolment into a permanent, cross-national biometric record — invisible, unconsented in any meaningful sense, and ungoverned at the points that matter most — the people running that event have not sold a ticket. They have taken something that cannot be given back, and offered a faster queue in exchange. The least they owed, before 6,810,966 people walked through those gates, was to say so out loud, in language a fan could understand, before the selfie was taken rather than after the data was gone. They preferred the language of frictionlessness, which is the language of a transaction in which only one party knows what is being traded. The tournament is finished; the trophy has been lifted and the temporary seating taken down. The cameras, the templates, the drones, the reactivated CCTV network in Seattle and the robot dogs in Dallas are still here, and nobody has been asked whether they should be.

Tim Green UK-based Systems Theorist & Independent Technology Writer
Tim explores the intersections of artificial intelligence, decentralised cognition, and posthuman ethics. His work, published at smarterarticles.co.uk, challenges dominant narratives of technological progress while proposing interdisciplinary frameworks for collective intelligence and digital stewardship.
His writing has been featured on Ground News and shared by independent researchers across both academic and technological communities.
ORCID: 0009-0002-0156-9795 Email: tim@smarterarticles.co.uk
Listen to the free weekly SmarterArticles Podcast
from Nightjar
Dogs are present, non-moralizing creatures. They tend to imply “oh we're doing this now,” — but in tones. Most of their dreams are of running
soft long whimpers in tall wheat
The world is waking, and a dog is already barking — greeting sounds and smells. It does not wear shoes, but goes barefoot on the lawn.
from Douglas Vandergraph | Quiet Christian Reflection

Chapter 1: The Memory That Still Knows Your Name
There are nights when you remember the version of yourself you hoped nobody else remembered. The room is quiet, the phone is face down, and nothing dramatic is happening, but your mind goes back to one decision. Maybe you quit too soon. Maybe you disappointed someone. Maybe you were afraid and made a choice that still bothers you. That kind of memory can feel strangely alive long after the moment itself has passed.
That is one reason I keep coming back to Mark. The companion about Mark, his life, and the Gospel connected to his name gives one way into the subject, while the complete 500,000-word Who Was Mark? master guide opens the larger study. But underneath all the history is something deeply personal: Mark was not introduced to us as a flawless man. His story includes a point where he left a mission journey, and that choice mattered enough to become part of a later dispute between Paul and Barnabas.
I do not know what Mark felt when he left, and Scripture does not tell us enough to pretend that we do. I only know what it is like to look back at something and wish I had handled it differently. Most people do. Sometimes we carry an old moment so long that we stop saying, “I failed there,” and start saying, “That is who I am.”
Mark’s story does not allow that sentence to stand.
Later, Paul speaks of him very differently. Mark appears among trusted workers. In 2 Timothy 4:11, Paul asks for Mark because he is useful to him in ministry. The Bible does not give us the full conversation between those two points. There is no scene where every misunderstanding is explained. We simply see that time passed, service continued, and Mark’s usefulness became greater than the memory of his earlier departure.
That feels important to me because most restoration happens quietly. It happens when nobody is clapping. It happens when you answer the call, keep the promise, return the message, show up for the person who needs you, or stay steady in a place where an older version of you might have walked away.
Picture someone sitting at a kitchen table after making a difficult phone call to repair a damaged relationship. Nothing is fixed all at once. There is no dramatic breakthrough. There is only a small beginning and the decision to keep being honest tomorrow. That is often what change looks like.
When I read Mark with that in mind, I do not just see an ancient writer attached to a familiar Gospel. I see someone whose life reminds me that God does not need a spotless past in order to build faithfulness in the present. Mark still had history, but history did not get the final word.
Chapter 2: Learning to Stay When Leaving Would Be Easier
A man stands in the hallway outside a hospital room, holding a paper cup of bad coffee and trying to decide whether he can handle one more conversation. He is tired, scared, and already thinking about everything waiting for him tomorrow. Part of him wants to go home, turn off the phone, and let somebody else carry the weight. There are moments when staying feels harder than leaving.
That is where Mark’s story becomes more than an old lesson about failure. His earlier departure from Paul and Barnabas matters, but so does the life that came after it. Somewhere between the man who left and the man Paul later called useful, Mark learned how to remain present.
We are not told every step. Scripture does not give us a diary of his growth. That absence can actually make the story more relatable. Most of our own change happens without a record too. Nobody writes down the morning you decide to stop avoiding responsibility. Nobody preserves the text message where you finally apologize without defending yourself. Nobody sees every ordinary day when you choose to keep going.
But those days matter.
There is a kind of faithfulness that is built quietly through repetition. You show up again. You keep your word. You become someone others can depend on. You do not erase your past by doing this. You simply stop letting your past make every decision for you.
That is one reason Mark’s Gospel feels different when we know something about the man behind it. Jesus repeatedly calls people to follow Him through uncertainty. The disciples are often confused, but the road keeps moving. They do not get every answer before the next step. Faith is not presented as perfect understanding. It is often presented as staying close enough to keep learning.
That can be hard when life has made you tired. Maybe you are caring for someone who needs more from you than you think you have. Maybe you are trying to rebuild trust in your marriage. Maybe work has become heavy and you are tempted to detach from everyone around you. Sometimes the next faithful step is not dramatic. It is simply refusing to disappear.
Mark’s later usefulness suggests that this kind of change is possible. A person can become steadier than they used to be. They can grow into responsibilities they once avoided. They can learn to remain where love, service, and obedience require them to stay.
And sometimes that is what grace looks like from the inside: not forgetting who you were, but discovering that you are no longer required to live as that person.
Chapter 3: When Your Life Stops Needing to Defend Itself
A woman sits alone in her parked car after church, hands still on the steering wheel, thinking about someone she used to be. She has spent years trying to prove she has changed. She notices how tiring that is. Every conversation feels like a chance to explain herself. Every old memory feels like evidence she has to answer. At some point, a person has to decide whether they will spend the rest of life defending the past or living faithfully in the present.
Mark’s story gives us permission to choose the present.
The New Testament does not show Mark arguing his way back into respect. It shows him becoming useful. That is a quieter kind of victory. He did not need history rewritten. He needed a life that kept moving toward faithfulness.
That is also where his Gospel points us. Mark keeps bringing the reader back to Jesus instead of to human image management. The disciples misunderstand Him. They become afraid. They fail. Yet Jesus remains the center. He is the One moving toward the cross, serving people, confronting darkness, and calling imperfect people to follow.
There is relief in that. You do not have to make your life impressive enough to cancel every old mistake. You do not have to keep presenting evidence that you are different now. If God has changed you, then live from that change. Let the apology be real. Let the new choices be real. Let the years of steadiness speak in their own time.
Maybe you are still waiting for someone to see you differently. Maybe they never will. Mark reminds us that usefulness does not depend on unanimous approval. A life can become faithful even while some people remember an older version of it.
That may be one of the most beautiful things about Mark. His story does not end with him explaining himself. It ends with his life pointing away from himself and toward Jesus.
And maybe that is enough for us too.
Your friend, Douglas Vandergraph
Explore the complete Douglas Vandergraph Master Index: https://douglasvandergraph.com/douglas-vandergraph-master-index/
Watch Douglas Vandergraph’s faith-based videos on YouTube: https://www.youtube.com/@douglasvandergraph
from
Roscoe's Story
In Summary: * Finally! The last little bit of the day's (the week's) laundry is folded and put away. That particular chore is over until next Monday.
Spent an hour this afternoon doing yard work, cutting branches in the back yard and stuffing the big green organics bin for Thurday moning's collection.
Opening pitch for tonight's Rangers game is less than half an hour away. It's good to have the boys back in Texas. Last week when they were on an extended road trip to the left coast, all their games were scheduled too late for me to follow. Now that they're playing at home, I'm confident I'll be able to stay awake for at least the first half of every game. Heck, I may be able to last the full nine innings.
Prayers, etc.: * I have a daily prayer regimen I try to follow throughout the day from early morning, as soon as I roll out of bed, until head hits pillow at night.
Health Metrics: * bw= 228.51 lbs. * bp= 139/79 (73)
Exercise: * morning stretches, balance exercises, kegel pelvic floor exercises, half squats, calf raises, wall push-ups, BP breathing exercises, pilates
Diet: * 04:24 – 1 banana * 05:15 – 1 peanut butter sandwich * 10:00 – steak with mushroom gravy * 12:00 – 3 yeast donuts * 17:47 – dish of ice cream
Activities, Chores, etc.: * 03:20 – wake * 04:00 – bank accounts activity monitored. * 04:15 – read, write, pray, follow news reports from various sources, surf the socials, nap * 09:25 – start a load of laundry * 10:00 – listen to Oldies, Hits from 1965 * 12:15 to 14:15 – watch old game shows and eat lunch at home with Slvia * 14:30 to 15:30 – yard work, cutting branches in back yard, stuffing the green organics bin * 18:15 – listening to 105.3 The Fan, DFW's #1 Sports Station, while folding laundry and waiting for tonight's MLB game to start.
Chess: * 18:10 – moved in all pending CC games
from Dallineation
Last week Twitch announced that it had automatically opted all of its user accounts into using all content for training Amazon's generative “AI” models. They didn't send their users an email or notify us within Twitch. They posted about it on X, a platform I don't use, acting like they were doing us a favor by allowing us to opt out. Furthermore, they made it opt-out knowing most of us are skeptical about “AI” and would never opt in – and they clearly don't care. This is a gross violation of privacy and betrayal of trust. Therefore, because they clearly do not respect their users, I am quitting Twitch both as a streamer and viewer.
I have been streaming on Twitch for three years, but have been considering quitting as early as March 2025 when I drafted – but never published – a blog post about my reasons for leaving. I have come close to publishing that post and quitting several time since then. Yet I had always managed to stop myself and feel like the good outweighed the bad when it came to Twitch. But this incident has tipped the scales unfavorably.
Here are some of the other reasons I am leaving Twitch.
I block ads almost everywhere else on the web, but I chose to not block them on Twitch to support streamers I don't subscribe to in some small way.
Some months ago, related to the point about toxic content, I was repeatedly shown an ad on Twitch for a lingerie brand that was pornography by most definitions of the word. I do not want to view pornography. I do not seek it out. I strive to avoid it.
There was no way to skip this ad. I had to minimize my browser or look away. There was no way to block it aside from using ad-blocker browser extensions or paying for a subscription to Twitch Turbo, which removes ads across all streams. I found a way to provide feedback, and I did so. But there is no guarantee I wouldn't be shown such ads in the future.
I've also noticed I have to watch an increasing number of pre-roll ads, sometimes 7, 8, 9 pre-roll ads at a time, before I can even tune into some streams. This is at least partially due to the streamer's own ad schedule settings. But it seems like Twitch is ratcheting up ads, in general.
Ads are getting out of control everywhere, not just on Twitch. But now every time I stream, it's not just increasingly more ads my non-subscribed viewers have to watch, but now I'm potentially exposing them to pornography and other questionable content. Even if I block ads for myself, there's no way I can personally justify streaming on Twitch or continue to use it as a viewer knowing that other viewers who can't afford to pay are drowning in ads and potentially blindsided by inappropriate ones.
And as I mentioned earlier, subscribing to Twitch Turbo to get rid of ads site-wide is an option (if you can afford it), but that would be funneling even more money to Amazon and Jeff Bezos. And, as I will explain in the next section, I don't want to do that any more than I have to.
Amazon is the parent company of Twitch. Reasons not to support Amazon would be a blog post unto itself. But there already many articles and blog posts out there explaining reasons to avoid or actively boycott Amazon. The “Criticism of Amazon” article on Wikipedia is a good place to start.
Here's a quick bullet list of some of the most common, well-documented problems with Amazon:
Suffice it to say, the less money I make for Amazon and Bezos, the better I'll feel.
And now we can add:
At some point, we have to not only speak out and declare that this kind of behavior is unacceptable, we have to take action. And one of the best actions we can take against companies with terrible business practices is to boycott them.
I'm done being taken for granted by Twitch and Big Tech. Done being tracked, manipulated, exploited, and monetized. Done being opted into all of this without my consent.
Despite the bad, my experience streaming as a music selector (DJ) and interacting with good people on Twitch has been a mostly positive one and I will miss it dearly.
I have always loved music and have enjoyed listening to it in some form or fashion. But I had forgotten how wonderful and enjoyable it was for me to sit and intentionally listen to music – particularly entire albums – rather than just have it playing in the background while I did other things.
I had also forgotten how fun it is to collect and listen to music on physical media. The experience of going to record stores and losing all sense of time as I discovered musical treasures. Getting lost in the stacks. Taking those LPs, CDs, and/or cassettes home, listening to them for the first time. It's an intentional experience that brings me a tremendous amount of joy.
Sharing music in this way is also a joyful experience, one I will always cherish. It breathes new life and fresh perspective into music I've loved for a long time because it's like I'm hearing it for the first time when I introduce it to others.
And being able to discover brilliant music that I couldn't have discovered any other way has been one of the reasons I found the Twitch experience so compelling in the first place. I will have to work hard to find other ways to discover human-curated music outside of algorithms and playlists.
It's been wonderful meeting and getting to know people from different parts of the world and diverse backgrounds, nerding out over music together. I have met kindred spirits and made good online friends through a shared love of music. I've even met one of them in-person and I was delighted to discover that he is as authentically himself online as he is in real life.
I have always tried to make people feel better for having tuned into my stream. Whenever a viewer said something like “I really needed this today” or “you've helped me through a bad day” or “I'm glad I found this stream”, it made it all worth it. This is what gave me the greatest sense of fulfillment as a streamer, and I will miss those points of connection and bright spots the most.
I have learned how to create fun and interactive live streams and how to configure and use the technology to make it all happen.
And I've learned what really matters to me, what is most important. I've been reminded that, although it can bring some momentary pleasure, money really cannot buy enduring happiness. And joy that comes from material possessions is shallow and fleeting.
Relationships and shared experiences provide much deeper, richer, and more enduring happiness. Real relationships with fellow human beings, and especially, with God.
If I went deaf tomorrow, my music collection would no longer be a source of entertainment or joy. But my relationships with loved ones and with God would continue to provide joy, comfort, strength, and meaning.
Until last week, I felt like the good outweighed the bad when it came to Twitch.
In my own small way, I hoped that I could do with Twitch what Fred Rogers did with television. He lamented the mindless, crude content on TV, yet he saw the great potential of the medium to be a tool not only for education, but for spreading goodness, truth, and beauty throughout the world. And he made it happen.
But given the present controversy and legitimate concerns about “AI” as it stands today, I don't believe Fred Rogers would have allowed any company to use his program to train generative “AI” models, either, especially without his consent.
And I also realize now that Twitch is really not like television as a whole, it is merely one “channel” among many. And when my stream is live on Twitch, it is just one “program” on that channel buried amongst hundreds of thousands.
So it's time for me to change the channel.
I will have to use other live streaming platforms besides Twitch if I wish to continue to refine and share the social and musical experience I have so enjoyed. Platforms that treat users like human beings are not nearly as popular as Twitch (yet), but they exist.
I have already done a few streams on a platform called PeerTube, a decentralized, federated video hosting/streaming platform with no ads, no algorithms, and no mega-corp baggage.
I am also testing my own Owncast instance, which I think will be a closer experience to Twitch.
It's possible, though, that this might be the end of my live-streaming adventures. It might be time for me to pursue a different hobby and other ways of connecting with others over shared interests.
#100DaysToOffload (No. 164) #Twitch #tech #AI