Tuesday, March 31, 2026

Movie and TV Reviews - March 2026

Short reviews of movies and TV shows I watched in March. 

Movies

  • War Machine: I was hoping for a bit more alien tech in this one than what we got: a steampunk version of a Star Wars walker. And I could have done without the jingoistic rah rah stuff. The only reason to watch is Alan Richson doing his Arnold Schwarzenegger imitation. (Netflix)
  • Project Hail Mary: A typical Hollywood sci-fi blockbuster with REALLY good special effects, but it's not in the same league as Dune or Arrival.  It's. enjoyable enough if you don't think about it too much. See it on the biggest screen you can, IMAX if at all possible. (IMAX)
TV Shows
  • Grace (season 3-5): Another British detective show. I'd rate this as middling; good acting and characterization, but the plots rely too much on big action sequences for resolution. (BritBox)
  • Wednesday (season 2): Big production values and quirky, Tim Burton-influenced humour. Not to be taken seriously, but fun. (Netflix)
  • Celebrity Antiques Road Trip (seasons 1 and 2): Another take on the original show's tried and true formula. 13 seasons will keep us going for a while. Most of the celebrities are unfamiliar to us. (PBS)
  • 3 Body Problem: A solid adaptation of a complex and somewhat difficult book. I think I prefer it to the novel, which I did read but which I didn't like enough to read the next two books in the trilogy. (Netflix)
  • Scarpetta (season 1): We were looking forward to this because it is based on a series of novels by Patricia Cornwall that we've read and enjoyed. We couldn't finish watching the first episode. What a disappointment and waste of some good actors. (Amazon Prime)
  • Deadloch (season 2): My review of the first season described it as a "seriously twisted dark comedy" and "totally over the top and sometimes very funny". All that applies to the second season, in spades. (BritBox)
  • The Puzzle Lady: A cozy mystery with a crowwwrod puzzle creator who helps the police to solve crimes, Light entertainment and not as good as Ludwig, which had a similar idea. (PBS)

Monday, March 30, 2026

The Peril of Tracking Pixels

I've known about tracking pixels for a long time but never figured that they were much of a problem. Of course, they do reveal that you read an email or accessed a web site, but there are riskier things to worry about reading emails or browsing the web. 

But things have changed, as Steve Gibson pointed out in the latest installment of his Security Now podcast. From page 8 of his show notes:

I just learned how far tracking pixels have evolved. They’re easy to miss because, much like cookies, the code their presence on any webpage allows to run is hidden from us. But last Wednesday the 18th, the security researchers at Jscrambler shared what they had recently learned about what TikTok and Meta are doing.

Their headline was: “Beyond Analytics: The Silent Collection of Commercial Intelligence by TikTok and Meta Ad Pixels”. As we’ll see, this writing is targeted at web merchants who are voluntarily adding these insidious tracking pixels to their sites’ own webpages without a full appreciation or understanding of the privacy implications for their visitors. 

It turns out that Meta and TikTok are grabbing both personal information (names, addresses, phone numbers, credit card information) and a log of just about everything that people are doing on sites with these tracking pixels. From the report, Gibson quotes this: 

Meta’s pixel includes a feature called Automatic Events, which is enabled by default. The feature automatically scans page elements and captures information such as checkout interactions and visible payment card details, including the last digits, expiration date, and cardholder name. Since this is the default behavior and not an opt-in, merchants may not be aware that the pixel is collecting this information. On separate sites, Meta captured recipients' full names and delivery addresses when users selected address options during checkout.

This information can be used by Meta to compile a huge database of behaviour that it can sell. It's also presents a risk to anyone using those sites in the case of a security breach at Meta and because the information being sent to Meta may not be encrypted, making it a vulnerability should the user be the target of an attacker. 

Both TikTok and Meta's pixel code can load and begin transmitting data before the website's consent management system has time to block it, meaning information can leave the browser before the user’s choice is applied. Even more concerning is that data may be transmitted in cleartext—occasionally within the request URL itself—exposing sensitive information to browser histories, server logs, intermediaries, and debugging tools.

This vulnerability stems not only from the pixel’s data-collection methods but also from misconfigurations during its implementation or from issues with the website's underlying architecture. Consequently, the attack surface is significantly broader than a surface-level analysis suggest

Using Firefox, which supports the full uBlock Origin, is probably a good idea. Google Chrome supports uBlock Origin Lite (which I am using), but it's not as effective as the original uBlock Origin in blocking tracking pixels, web beacons, and tracking scripts. 

Yet another item to add to my To Do list. 

Sunday, March 29, 2026

Photo of the Week - March 29, 2026

This week's picture is a follow up to last week's photo. This is the same yucca, but without any snow on top of it. I hope it recovers from the winter. Taken with my Pixel 8 Pro.

A yucca after the snow has melted, looking somewhat worse for the wear
A yucca after the snow melts


Saturday, March 28, 2026

Saturday Sounds - St. Vincent - Live in London

I haven't followed the musical career of St. Vincent (the stage name of Jules Buckley) closely though I have listened to some of her albums and enjoyed them. Live in London was performed at the Royal Albert Hall with a full orchestra as part of the BBC Pops series. 

Orchestral pop albums can be hit or miss but this one nails it. The arrangements perfectly suit her songs and the recording quality, as you might expect from the BBC, is outstanding. She's performing in Toronto with an orchestra on her current tour but unfortunately ticket prices are out of my league. 


Wednesday, March 25, 2026

The Bloated Web Page

I'm constantly annoyed and frustrated by the crap that websites are blasting my phone with when I try t o read an article or browse a web page. Popups, autoplaying videos that refuse to close, ads that jump out and shove the text I'm reading out of the way;; I'm sure you've seen it all.

If you want to get a better idea of what's happening and why, read The 49MB Web Page by Shumham Bose, a developer and user interface design expert. The article was triggered when they looked behind the scenes at what was happening when they opened an article from The New York Times website and found that the browser downloaded 49 MB of data. (That's roughly equivalent to an album of MP3s or 50 books in EPUB format). 

When you open a website on your phone, it's like participating in a high-frequency financial trading market. That heat you feel on the back of your phone? The sudden whirring of fans on your laptop? Contributing to that plus battery usage are a combination of these tiny scripts.

I don't usually see most of this on my PC because I run an ad blocker (uBlock Origin Lite) that blocks much of the crap that the article discusses.  I use Firefox with uBlock Origin as my default browser on the phone, despite the annoyance of having different browsers on my PC and phone. (I know, I know; it's just laziness that keeps me from using Firefox on my PC). Apps, where publishers seem to consider pushing ads their primary purpose in life, are also problematic. 

I should point out that there are real security problems inherent in the use of programmatic ad auctions and tracking pixels and their associated scripts. (I'll have another post about this tomorrow or Monday). 

This is the best article about web design that I've seen in a very long time. Even if you're not particularly technical, it's worth reading just to understand why your browsing experience is so unpleasant.

Featured Links - March 25, 2026

Things I was interested in but didn't want to do a full blog post about.

The beach at Bluffer's Park  on a cloudy day with sunlight from a break in the clouds reflecting ont he water
Bluffer's Park on a cloudy day

Sunday, March 22, 2026

Photo of the Week - March 22, 2026

This week's photo is of a hasta yucca in our front yard that has spent most of the winter buried under a waist-high mound of the snow. I hope this winter hasn't killed it off. Taken with my Pixel 8 Pro and edited in Google Photos to improve the contrast. 

Leaves of a yucca mostly buried in the snow
Leaves of a yucca mostly buried in the snow

Saturday, March 21, 2026

Saturday Sounds - Santana - 1970/08/18 - Live at Tanglewood

This week's musical treat jumps back to 1970 with a concert from Santana at the famous Tanglewood Music Festival. Santana had released their second album, Abraxas, and the set contains several songs from that album. Carlos Santana and his band are in fine form. This is a pro shot video with good sound and decent video for the era. Enjoy,