The Lego Mirror

Do-the-work instead of proof-of-work, for Git hosting

2026-06-14T18:30:00+00:00

The insane rise in scrapers across the web has affected a number of websites, including Git repository hosters. The main response has been to set up software like Anubis, which uses a proof-of-work system to limit who can access the website.

While I don't fault overburdened sysadmins for enabling Anubis to protect their servers from overload, I think it's a pretty bad solution. It introduces a delay, wastes energy, and just makes the user experience worse.

We've spent so, so, so much effort and energy squeezing out milliseconds of performance and optimizing connection times that deliberately making performance worse feels like a giant step backwards.

And the work the client does is just thrown away! It's not actually anything useful; people rightfully critized Bitcoin and (formerly) Ethereum for being wasteful for the same reasons.

So I'd like to propose a different solution, which I call "do-the-work".

In a traditional setup, it is cheap for a client to send a request to a server, the server performs some potentially expensive computations/processing and sends back a response. With scraperbots, it becomes easy for those clients to very cheaply send thousands and millions of requests that overload a server.

With proof-of-work protection (i.e. Anubis), the client it must perform its own computations, and only once it's done sufficient work, then it gets permission to send a request to the server. The server does more or less the same amount of work, it's just that the client now also has to do some work.

Do-the-work aims to invert the client-server imbalance by making the server's job cheap and forcing the client to do the more expensive computations. In other words, if you want to see some information, you need to pay the costs of calculating it by... doing the work.

Because of the way Git is designed, I think it's a great fit for this approach.

As previously teased, on git.legoktm.com I am now serving an entirely client-side Git repository viewer (source code, README), which imitates the look of cgit (used by e.g. git.kernel.org). On the server-side, it is purely static hosting of bare repositories, requiring just Apache HTTPd and a few rewrite rules.

The only thing I really need to worry about is bandwidth, but since it's now static content, it would theoretically be straightforward to put it behind a CDN.

Since most of my personal projects are quite small, I've mirrored a few larger projects so you can better see how it works: SecureDrop and MediaWiki. All of these repositories are maintained in my private Forgejo instance and I rsync them over to git.legoktm.com.

Under the hood, Git stores everything in "objects", so as long as you have some way to fetch those, then you have all the information you need to calculate everything a Git viewer needs, like file contents, diffs, a log of changes, etc. In reality it's a bit more complicated with pack files, but at the end of the day everything is an object.

Most git clients expect this to be filesystem backed, but cyberia-ng's git-async library abstracts the backend out. So I created a new backend that fetches over HTTP and stores the data in IndexedDB in your browser.

Essentially you're performing a partial git clone and then automatically backfilling missing objects as needed.

There's probably a lot more room for performance improvements, but I think it's already usable enough for small-to-medium-sized repositories. This doesn't cover everything a forge does, but if you're just hosting cgit, this should be a drop-in replacement (aside from all the missing functionality).

I think this approach can be better for privacy too. After the initial load, a subsequent load when nothing has changed on the server doesn't require fetching any more data; it wouldn't take that much more work to behave fully offline.

For now this is mostly a proof-of-concept, but I think it's probably not too far off from turning into a real thing that's usable if there's interest in that.

Second semester of law school: done

2026-06-08T22:55:00+00:00

Previously: Fall 2025

I finished my second semester of law school a few weeks ago, only seven more semesters to go! I'm not yet technically done with my first year since we're required to take two summer classes this year (future summers we'll have off).

This past semester was contracts (officially "Law and the Market Economy"), legal research, and another lawyering seminar. Contracts was our only doctrinal class, and I managed to rack up 72 pages of notes.

There's a lot that goes into contract law!! It depends whether you're contracting over goods or services, and then if there's some provision of law you don't like, you can just override it in the contract, except for the ones you can't.

It was definitely overwhelming at the end, here's my graphical study guide:

Probably best viewed in a separate tab.

Notably this is quite incomplete, it's missing the entire seventh question of contracts ("When do people not party to a contract have contract law rights or contract law duties?") because I ran out of time to finish it. I also didn't include browsewrap, clickwrap, etc.

Legal research was easily my favorite class because I enjoy looking up things and perusing different sources to evaluate them, but gosh, in no just and fair world should it be legal for Westlaw and Lexis and all the other providers to lock up and put a paywall in front of the basic legal information that essentially every lawyer needs to be able to work.

Not that I ever had any doubt in what Aaron Swartz, Carl Malamud, et al. were fighting against, but I definitely have a much greater appreciation for it now that I've been on the inside of Westlaw and HeinOnline and seen what treasures of knowledge they've locked up. And how crucial they are to be able to practice law effectively.

Our lawyering seminar revolved around a hypothetical case in which a child is diagnosed with a psychiatric condition and the mother refuses to treat it, with the question being whether the mother has neglected the child. I enjoyed it more than last semester's simulation because this time we explicitly took sides — I represented ACS, arguing that she had neglected her child — and got to write persuasive briefs, followed by oral arguments on a motion to dismiss.

Summer term is torts (i.e. private right of action) and another lawyering seminar.

Interview with Brooke Vibber (2021)

2026-06-01T13:00:00+00:00

I had the pleasure of interviewing Brooke Vibber back in January 2021 for my story in the Wikipedia Signpost, The people who built Wikipedia, technically, which looked back at the technical history of Wikipedia to celebrate the 20th birthday.

I was not able to use all of the responses Brooke sent me for the article, but after re-reading them in light of current events, I feel it's still worth publishing five years later. Hopefully after reading this, you'll celebrate Brooke Vibber day with us today. Dankon Brooke!

What was it like getting started? Today we have a process of signing up to get a Gerrit account, a vote to give out +2 powers, NDAs for server access...what was it like then? How did you convince the powers that be (Was it Jimmy?) to give you server access?

It was all pretty loosey-goosey; if you showed up and put in good work helping out, you might well hear "yes" to getting some fairly direct access to things because that was the only way we were going to get anyone to do it!

In the earliest days I think Wikipedia ran on one of Bomis's servers so we usually would partner up with one of Jimmy's employees as an intermediary, but once we grew to dedicated servers, and then the Tampa-based hosting starting 2003-2004, it was really a core group of a few of us, many of whom are senior employees at WMF today.

As far as commit access and code review, that was very different in the early days -- we had CVS (before going SVN in 2006 or so) which meant no built-in system for local commits and pull requests, so "commit" meant roughly "merge/+2" and everyone else had to e-mail patches and me or Tim would personally review them and apply them. A lot of work!

Then in SVN times we started giving out commit access like candy, and I had to create an on-wiki code review system to help manage post-commit review...

I'm not super fond of gerrit's UI, but any flavor of pull request is a step up. ;)

My understanding is that you dropped out of film school to work on Wikipedia/MediaWiki full time - is that a fair characterization? (Or would you not prefer to be called a dropout?)

That sounds about right! :D I never quite finished my degree, and instead of taking the few more classes I needed I pivoted into work for Wikipedia which lead me into working at WMF. So, score another one for the dropouts, but I never struck it rich because we're a non-profit. ;)

What kind of programming experience did you have beforehand?

I actually grew up around programming -- my father is a software engineer and made sure my brother and I had the tools at home to learn if we were interested (8-bit Ataris when we were little, graduating up into the PC DOS/Windows/Linux worlds later). My brother and I both took well to it... though we craved that arts in high school and college -- he did some years in theater, and I worked on that film degree for a while. ;)

So when I fell back into computers, it was a world I'd never really left, but I'd also never been formally trained in it. Working on a massively-scaling-up project like early Wikipedia was a crash course in algorithmic complexity even if I didn't get all the flowerly language of big-O notation from textbooks. ;)

In February 2002, you suggested adding a WYSIWIG editor - did you ever imagine it would take as long as it did for us to get VisualEditor?

I always suspected it would be much harder to do full WYSIWIG while keeping complete compatibility with the old markup language, and I think I was proven right. :) That said, a lot of people still like the markup, so if we've succeeded at bringing it, hey! Nice.

Superprotect aside, should the rollout of MediaViewer have been as controversial as it was?

I think it should've been less controversial by far, but it also was a good example of the messaging around a rollout, and the communication between the developers, project managers, and users, was just not good. MediaViewer is great for many uses for casual readers -- its primary target audience -- but falls down in a particular way for editors who need to maintain images, not just look at them. This feedback could've been better dealt with and resolved, I think.

There's a trope that Wikimedians today are reluctant to any software change. Can you talk about some of the large software changes from the early days? How was communication with non-technical editors handled? What would be the thinking on whether to revert or leave it in a buggy state?

Honestly I think our change-conservativism issues were in full swing even in the early 2000s. We didn't make many markup changes after 2003, and only a few before that. We're now paying for that by continuing to be conservative in refusing to change things that are weird, confusing, and inconsistent because we didn't quite think through those changes and now refuse to change them again at all.

I believe you, Magnus and Tim were all college students when you got involved with Wikipedia. Do you think that was a coincidence or is there something about Wikipedia that appeals to students?

I definitely think there's an affinity between the college experience -- getting into a medium-sized world outside your house but before the big wide world and learning new fascinating things in a community of peers who want to learn and share knowledge -- and getting into the world of Wikipedia as a casual (or hardcore) editor or other contributor. :)

Today the WMF is a very professional (for lack of a better term) organization, in terms of defined processes, policies. There's an on call SRE team, etc. In the early days the servers were run by Bomis - was it like that? What kind of support did they provide? Were there power struggles between editors/volunteers and Bomis?

Bomis was very hands-off; when we ran on Bomis servers we just had some limitations in what we could access directly, and eventually I think they started encouraging Jimmy to buy separate servers when they started to become a large part of capacity. ;)

In 2012 you told the Signpost that your initial paychecks came from building "content-feed support for some third-party indexers" - I assume this was the Wikimedia update feed service? What parallels, if any, do you think this kind of API and funding model have with the new Wikimedia Enterprise project?

I think there's a direct parallel, and I'm glad to see us getting explicitly back into the business of checking in with folks who reuse our data and making sure they pay us for the privilege of the data being reliably present. :)

With 20 years of hindsight, what would you have told Magnus when he announced he was going to write the new wiki software in PHP?

Honestly, PHP was a good choice at the time. A lot of people make fun of it for its quirky syntax, function naming, and some old security misfeatures from 20 years ago, but it's an easily-approachable language with an execution model that fits web servers reasonably well and has clear ways to scale horizontally to serve more requests.

I can't really tell from the mailing list archives, but did Magnus (and later Lee for phase 3) tell people they were planning major rewrites of the software or did they just show up with it one day?

These were announced and talked about on the mailing lists. I actually feel like we were more attuned as a technical subcommunity to what was going on because there were only two lists to pay attention to, wikipedia-l and wikitech-l. ;) Magnus's code was also tested on meta.wikipedia.com (remember .com?) as I recall, before we upgraded English Wikipedia itself.

Do you think having one person do a major rewrite on their own was necessary or would have incremental refactoring have been better?

I think of Lee's rewrite as a huge one-person refactor from Magnus's early prototype. It changed a lot but had recognizably similar bones.

Ever since then we've been on the incremental refactoring track, with big internal changes being managed much more carefully.

Some of the other technology decisions like MySQL, Apache, memcached, and on have held up over time and are still actively in use today. Why do you think that is? What was the thought process when selecting those in the beginning?

These are tools that we adopted because they were tried and tested in the wild, and some of those have indeed stuck around while others have changed a bit. For instance I think we now use a mix of several web servers as well as Apache to implement the caching and TLS proxies, memcached is supplemented with redis, etc. But they've kept common protocols because they're tools that are so widely used that specialized high-performance versions that are compatible with the original exist.

And that's pretty cool!

Before you left for StatusNet, would you have considered yourself the BDFL of MediaWiki?

I'd say me and Tim Starling were kind of the dream team dual-BDFLs. :) I took a more hands-off role since I left for StatusNet and came back.

My feeling is that today neither you nor Tim (the other BDFL candidate) want that role - is that accurate? Why not? Do you view BDFLs as a good leadership model for a project like MediaWiki?

I think the BDFL role, and hero worship and cult-of-personality in general, are bad. I think communities of mutually respectful people, both developers and users, researchers and managers, editors and educators, should work together to manage their projects fairly.

Wikipedia or Wikimedia? Why?

Wikipedia has the name recognition. :)

For a piece of software named MediaWiki, it really doesn't do a great job of handling media. This is something you've worked on a ton, from ogv.js to maintaining TimedMediaHandler. Why is this an area of interest for you? Can you give a summary of your efforts? What do you think is the next area to explore for improving media?

Indeed, beyond handling image uploads we're not that great at media. ;)

I would love for us to do more work in general in this area, from audio to video to 3d models to interactive graphs and maps and diagrams of all kinds. We have some of these things, but none of them are resourced for additional by Wikimedia Foundation except for whatever research or side time interested parties like me put in.

I do hope something makes it in the budget for 2021-2022!

The main improvements I've been working on with TimedMediaHandler are:

finish removing the old jQueryUI-based Kaltura-built frontend
finish fixing bugs in the new VideoJS-based frontend, which loads less JS and has fewer modules -> thus performance benefits on first load
cleanup on the ogv.js shim which lets us play WebM and Ogg files directly in Safari -> combined with the above, this'll mostly fix video playback on iPhone

The ogv.js layer itself is one of my proudest projects, but one that's designed to become obsolete -- eventually either Safari will adopt a format we're willing to encode, or we'll adopt a format Safari can play. ;)

Future plans that I can't guarantee time for include modernizing the subtitle editor and integrating trim controls into the VisualEditor media selection. But I hope to get to them too...

Was "Contingency plans" something you were involved in? What was it like planning for a hurricane?

I think others worked on that particular list, but it was certainly something we thought about.

We only really had one or two hurricanes that directly threatened Tampa and didn't have any outages, but it really wasn't the best place for servers. :) It just happened to be near where Jimmy lived at the time, so was convenient for him to help load up the earliest servers. ;)

Are there any outage stories, or near outage stories that stick out to you as particularly funny/sad/interesting/memorable?

I think it was around Christmas 2003? We had just set up our new 64-bit database server, and had I think two or three other machines as web servers. This would've been at the Tampa data center, so all remote from where I was at the time in southern California.

Load kept going up on the db server... we weren't sure why, but it seemed to be a hardware failure... eventually it just choked up. We had to switch back to the replica on one of the lower-end boxes. We had partial service during the crash and switchover by using the file cache (is that feature still even there?) to serve out cached pages without hitting the DB.

The secondary machine had trouble too, and died a couple days later, making it a double outage.

On the plus side, this gave us lots of opportunity to push our donation link in error pages! ;)

https://en.wikipedia.org/wiki/Wikipedia:Milestones_2003#December_2003

What MediaWiki feature did you work on that you're most proud of and why?

Special:Export and the XML dump format. It's not pretty, but it gets the job done and helps tons of people build tools on top of it!

Who is someone from the early days of Wikipedia who doesn't get enough credit for their contributions?

Lee Daniel Crocker. Lee and I don't get along on some issues so we don't talk on Facebook anymore, but I learned a lot about programming from him and the work he put in in the early days of what became MediaWiki. And that's something I'll always appreciate.

A lot of old Wikipedia and foundation work and history is in the archives of lists.wikimedia.org. But today (public) mailing lists are mostly used for announcements and discussions (at least on wikitech-l, wikimedia-l and other top lists)...do you think the shift away from mailing lists makes sense?

I think it's not surprising, but I'm not sure I like it. Maybe it's just graybeard syndrome; it was easier to have an idea what's coming down the pipe "in the old days" but at the same time it was a smaller pipe, wasn't it? Maybe email vs phab vs gitlab vs discourse doesn't make a difference. Maybe it's just whether we can have thoughtful interactions and also steer the right people to the right discussions?

You quietly stepped down from TechCom last year - why?

Quite simply, the last couple years have been really rough on my mental health. I don't have the bandwidth or the ability to consistently concentrate on the many ongoing issues I'd need to keep up with TechCom work. While I work on that, I'm concentrating on less directed research projects and underresourced things like TimedMediaHandler that don't have strict deadlines.

Wikipedia is unique in that it allows users to contribute JS/CSS directly to the site rather than requiring browserside user scripts (Greasemonkey, etc.). Do you think that was a good idea at the time? Now? I know you've also worked on exploring how to sandbox these, can you talk a little bit about that?

a) I think it's SUPER GREAT
b) I think WE DID IT SO WRONG

;)

There are two problems with letting people run direct JS in the host app environment:

if they run someone else's malicious code it can take over their account
code may use internal data accessors and methods that aren't going to stay stable, potentially breaking over time

Both can be solved by using a sandboxed environment (probably a suitable iframe). I think there's a lot of cool stuff that can be built on top of this method, with full-on APIs for accessing an editor state as a plugin, or whatever.

So far I get a lot of "yes that sounds great" but not a lot of "yes I'll assign a PM and 2 engineers to it", so this remains on my research backlog. ;)

Why is VIBBER in all caps in your username?

It is a common convention in some language communities, including Esperanto speakers, to all-caps the family name to indicate which name portion is the family name and which is the personal name. I got into Wikipedia through discovering the Esperanto edition, so that's where I created my first user name according to the local convention!

If you could, what language would you rewrite MediaWiki in and why is it Rust?

There's so many good options. ;) Honestly for its primary market (running Wikipedia) PHP scales in the right ways and has an ok combination of easy to use and handles complex paradigms you need in your big program.

Rust would be great for a micro-wiki, which runs as a small executable as a peer-to-peer service or some crazy thing. ;)

git.legoktm.com is back, sort of

2026-05-26T04:42:00+00:00

I started hosting my own Git server on git.legoktm.com in 2015 using Gogs, and in 2018, I opened it up to the world. Only a few friends and many, many spambots took me up on that offer.

I never got around to migrating the Gogs setup to Gitea, and then when the Forgejo fork happened, I was totally behind. At some point last year, because of a combination of Gogs having unfixed vulnerabilities and the excessive traffic from scrapers taking down my tiny VPS, I turned it off, letting the entire domain return HTTP 503 errors.

I expected that to be the end, thinking that I'd find some other Git hosting provider and move all my stuff there.

For various reasons, I wasn't entirely satisfied with any existing Git hosting providers and at the same time I thought it was kind of stupid that I, a pretty competent sysadmin, couldn't run my own Git host. So I took a bit of time to develop a new setup, and I'm happy to announce that git.legoktm.com is partially back.

By partially back I mean you can just clone and pull repositories, and that's it. They are served using the "dumb HTTP" protocol, which means server-side it's just static file hosting and nothing else. And there's a very basic HTML page that tells you the clone URL (example).

Most, but not all, of the repositories that used to be on git.legoktm.com are now once again clonable using their old URLs. I will backfill the remaining repositories in the next few weeks.

To the best of my knowledge, all previously working clone URLs should be supported; if something that used to work isn't, please let me know, because that's a bug. git.legoktm.com itself is still a 503 for now, I'll add a repository listing at some point.

At some point I may add a web repository viewer, but I plan to implement it fully client-side, i.e. the browser would fetch the various Git objects, calculate whatever is needed, and then display it to the user. Instead of gating on wasteful proof-of-work check, I call this hypothetical system "do the work" because you do some computation, and that work is the result you wanted!

Under the hood I'm running Forgejo, but it's only accessible via my intranet. Repositories that I designate as public are rsynced to git.legoktm.com, which I think nicely lets me run a Git server and make my repositories public without needing to worry too much about the security of Forgejo or server load.

Exclusive: Justice Sotomayor on AI, taxes and more

2026-03-14T02:30:00+00:00

U.S. Supreme Court Justice Sonia Sotomayor visited CUNY Law earlier today, for an event titled “My time as a law student.” Two students, one full-time and one part-time, asked her questions submitted by other students.

My reporting may read as quite critical of her. Broadly, I don’t think Supreme Court justices get anywhere near an appropriate amount of criticism and scrutiny compared to the immense power they all wield, even for the “liberal” justices in the minority.

With that in mind, I think it’s worth starting with something that most media organizations (unless you’re Ken Klippenstein) shy away from: her health. No video recording was allowed, so you’ll have to rely on my written descriptions.

Sotomayor will turn 72 in a few months. In the CUNY Law auditorium, there are three steps to get on or off the stage. There is no handrail; every time she went up or down, she needed two people to hold her.

To her credit, she didn’t just stay seated on the stage, she slowly walked through the crowd while talking, regularly taking breaks by leaning on a desk while posing for photos with students.

Sotomayor stated early on that because she can multitask, it was fine for the students to read the question out loud while she was posing for photographs. She initially seemed quick on her feet but made some factual mistakes throughout that surprised me.

The first question was about what law school classes she’d recommend us students to take. She started off with “as many legal writing classes as [we] could take.”

She said that if we can’t explain ourselves in writing, we’ll never succeed at anything in life, regardless of the profession. “The ability to explain yourself in writing is what will get you heard.”

The second skill she said to develop is public speaking, and to find opportunities for it, even if law schools don’t offer it as a class.

She prefaced her third critical skill as something that didn’t exist when she was in law school: AI.

“AI may be the revolutionary technology of your century”, Sotomayor said. “It is going to absolutely alter every single profession in the world.”

A few days ago she had dinner with her former law clerks, she said one told her that they laid off half of their paralegals because of AI. Another clerk told her that all their associates use AI to help draft their briefs.

Sotomayor explicitly described it as “not cheating” and that the skill to learn is how to use it “smartly and understanding its strength and limitations.”

After sharing an anecdote about how her most recent mammogram was read by AI and apparently not a human, she put it even more bluntly.

“You should not be graduating without taking an AI course,” Sotomayor said.

After those three “critical skills” (writing, public speaking and AI), she said that aside from our normal doctrinal classes of contracts and constitutional laws, we should take classes outside what we plan to practice to gain a broad understanding of the profession.

Sotomayor explained that she took an estates class and now all of her relatives, despite her telling them to consult a lawyer, ask her for help with their wills. She also took a tax class, because taxes are relevant to everything — even civil rights.

“Where do the rich get all their money to oppose civil rights?” she asked. It wasn’t clear to me if she was implying support for taxing the rich.

The next question was from a classmate of mine who was formerly incarcerated, asking about the impact and role of lawyers who were formerly incarcerated.

Sotomayor started by acknowledging that lawyers who were formerly incarcerated have made great law clerks, but didn’t know if any had ever been a clerk to a Supreme Court justice. Some of her former district court and circuit court colleagues had hired former inmates as clerks, but apparently she has never done so.

She noted that having relevant lived experience makes you better at what you’re doing, and that type of diversity was just as important as racial or ethnic diversity.

“When I’m asked what’s the greatest flaw on the Supreme Court today, I could name many things,” Sotomayor said. “But the one that stands out to me is our bench’s lack of depth in lived experience.”

No sitting justice has had civil rights experience since Thurgood Marshall and Ruth Bader Ginsburg, she said. Odd for her to ignore Clarence Thomas, who briefly worked in the U.S. Department of Education’s Office for Civil Rights before running the Equal Employment Opportunity Commission.

Then she incorrectly stated that no current justice has criminal defense experience, which was shocking given that one of the things Ketanji Brown Jackson is best known for is being the first federal public defender to be appointed to the Supreme Court.

Relevant to today, she said none of the nine justices have experience with immigration law. She recommended students not try to just follow what past justices have a history of doing, but rather pursuing whatever interests them, as the standards for picking justices will constantly change.

Next question: what advice do you have for new lawyers going into the profession? She said that despite it being a totally new thing, not to be scared.

Sotomayor started her legal career as an assistant district attorney in Manhattan. After failing to obtain convictions in two cases that she felt she should have, she discussed it with her supervisor (or possibly mentor), who explained to her that she couldn’t just let the evidence stand on its own, and that she needed to turn the facts into feelings that would change the jury’s mind.

After that, Sotomayor said she never lost another case (with the exception of a hung jury).

“The most powerful weapons we have as lawyers are words,” she said. “Words can kill … Words can build courage in a way that nothing else can. Words can exceedingly powerful things.”

Sotomayor grew up in the projects in the Bronx and worked her way up to attend both Princeton (undergrad) and Yale (law school). The next question asked about her journey in doing so, and how she navigates being in elite institutions.

She started by noting that her poverty was different than what Thomas endured, as he had grown up in the south where he suffered a more “extreme” type of persecution. And that immigrants come here having faced even worse poverty and situations than what she went through.

At Princeton she said she didn’t understand the opportunities she was missing out on, and wished that she had gone to the theater or attended free concerts that her classmates were going to.

Sotomayor said that everyone wanting to become a lawyer should have the goal of bettering the world we all live in. And that we should not to aim to destroy their world (i.e. do not destroy “elite institutions”) but instead meld them with the world we came from.

The next student question was about how lately the law feels oppressive and supporting those in power rather than protecting the vulnerable.

“If your goal to become a lawyer is to win every case, then leave law school,” Sotomayor immediately answered. “You are a lawyer to fight for lost causes. You will lose cases,” she said, in stark contrast to her earlier remarks about her never losing a case again.

She said these people need a voice, they need a champion, someone who will stand by them even when it seems hopeless.

But then she attacked the underlying premise of the question, which is that in fact the law has rarely been a reliable tool for positive social change, and for most of history it has been oppressive — I agree!

Dred Scott lost every state and federal case he filed, including in the Supreme Court, she said, reiterating its place in the anticanon as one of the worst Supreme Court decisions ever.

She continued, emphasizing that it was only through fighting the Civil War was Dred Scott able to regain his citizenship. Sotomayor recited most of the Citizenship Clause, which is currently under attack by Trump’s efforts to end birthright citizenship and in front of the Court. (She misattributed it to the 13th Amendment instead of the 14th.)

Then it was another hundred years until Brown v. Board of Education, which itself was one of the few success stories amongst many, many failed civil rights cases that were filed at the time, she said.

But she said she still believes in the Martin Luther King, Jr. quote about how the arc of the universe bends towards justice.

A good friend of mine was able to snag the last question, asking about what advice she’d give to law students who followed non-traditional paths and are starting their legal careers later in life.

Sotomayor said to never be afraid of saying “I don’t know.” She said that even in conference, if she doesn’t understand something, she’ll ask someone to explain it.

It’s not stupid to not know something, she said, rather it would be stupid to not know something and then not say that you didn’t know! She encouraged everyone to ask professors questions whenever they don’t follow something in class or have doubts.

Personally I really appreciated the event, Supreme Court justices can often feel like larger than life figures, so it’s nice to get the opportunity to see and hear from one in person. I’m glad CUNY Law is able to attract an interesting set of speakers for us to engage with.

Boba Quest: Arteassan

2026-02-22T23:15:00+00:00

As part of Boba Quest 🧋, I'm trying and reviewing a new boba shop ~~each week~~ whenever I have time.

I was recently walking down the street earlier this week and noticed that the location that used to be home to Möge Tea (reviewed in Jan. 2025, 6/10) had a new sign up: Arteassan.

As you may have read on the news, there is currently a blizzard hitting New York City, so I did the reasonable thing to do and ~~hunkered down under a warm blanket~~ went outside to try a new boba shop!

(In normal weather you can take the 7, N, W via Queensboro Plaza or E, F, R via Queens Plaza to get there but I'd wait until the weather improves!)

I ordered a Cloud Ceylon Brown Sugar fresh milk tea with regular (100%) sugar and light ice (it's cold out!). The barista said that "Cloud Ceylon" was similar to black tea (TIL that Ceylon is an old name for Sri Lanka), so I expected it to be similar to a standard brown sugar boba milk tea.

Boba: 3/4 the boba was well flavored, but just a little too chewy (not enough to be a problem but enough that I noticed).
Tea: 2/4 on the other hand the tea felt weak and not as strong as I would've liked it. I don't think it was the boba overpowering it either.
Bonus: 1/1 I'm going to give this as a pass today; it was clear they were still setting up the new shop and I don't want to penalize them for that. Plus, they were open during a blizzard! What more can you ask for? (Though to be fair, I walked past 3 other boba shops and they were also open.)

Total: 6/10, decent, but not worth getting in a blizzard. I'll probably visit it again in a month or two to get a more realistic impression.

Wikipedia’s 25th birthday proves the power of free speech

2026-01-15T17:00:00+00:00

Originally published on freedom.press

In the mid-1700s, Denis Diderot published his Encyclopédie in France, collecting the work of more than 140 authors to summarize the Enlightenment. It quickly landed on the Catholic Church's banned books list for including contrarian thoughts, and, at one point, his publisher preemptively censored some content without Diderot's knowledge.

Around the same time, King George III censored the first edition of Encyclopaedia Britannica, requiring the removal of some anatomically correct drawings in an article about midwifery.

So when the 13 newly independent American states ratified the First Amendment a few decades later, it laid the groundwork not only for a free press but also for an encyclopedia that was not censored by an oppressive government.

Today, we celebrate the realization of that dream in the form of Wikipedia, which over the past 25 years has been collaboratively built by unpaid strangers on the internet. Wikipedia went from the source that teachers universally clamored "you can't trust it" to one of the most reliable sources in a world of "disinformation" and AI-generated slop.

Despite not being written by professional journalists (I edit it myself as a volunteer and used to work for its nonprofit host, Wikimedia Foundation), it's still able to set trends and drive narratives. For example, in 2011, Wikipedia editors started collating a list of people killed by law enforcement in the U.S., three years before The Washington Post would win a Pulitzer for its version of the same.

And for better or worse, Wikipedia is most likely the largest single source powering today's AI models. All in all, it's the largest repository of knowledge in human history.

But it's important to understand and appreciate that Wikipedia only exists because of the robust free speech and free press protections that exist in the United States.

Wikipedia has never been actively censored in the U.S., nor has any U.S.-based editor ever been arrested for their edits to Wikipedia. There's never even been a serious threat of censorship of Wikipedia by the federal government. (The FBI once demanded Wikipedia stop using its seal under a law written to stop impersonation of federal agents; Wikipedia's legal team laughed it off.)

The same cannot be said about Wikipedia in other countries. In France, intelligence operatives held a Wikipedia administrator until he deleted an article about a military radio station, under the guise it contained classified information. Agents made this demand even though the information in question wasn't classified at all and was mostly based on a documentary that the French air force had worked on and publicly released.

In India, a court required Wikipedia to remove an article about a news agency because it was supposedly defamatory. To top it off, the court then demanded Wikipedia remove the separate article that was written about the court case and removal order!

This kind of censorship shouldn't happen in the U.S. The Supreme Court ruled the First Amendment protects publishing classified information in a case about the Pentagon Papers. A U.S. court cannot order an article to be taken down, as that would be an unconstitutional prior restraint.

In the U.S., the law known as Section 230 would also protect Wikipedia from defamation claims, and instead require litigants to sue the editor who actually wrote and published the allegedly defamatory content. Those editors would be protected under the First Amendment and the high court's New York Times v. Sullivan decision, which requires defamation claims from public officials — later expanded to public figures — to meet the much higher standard of actual malice to win (nearly every biography on Wikipedia is of a public figure, by policy).

And to state the obvious, the U.S. has never blocked all of Wikipedia, unlike China (since 2015), Myanmar (since 2021), or Turkey, which did so from 2017 until an appeal to the European Court of Human Rights forced that nation to unblock it in 2020. We know of one editor, Bassel Khartabil, who was executed for their online activity, and a few others who are incarcerated in Belarus and Saudi Arabia.

Certainly, there are plenty of people in power who wish they could censor or control Wikipedia. At first, it was through editing: In 2006, a number of Congressional staffers were caught whitewashing their bosses' biographies, and, in 2007, someone at the FBI tried to remove images from the Guantánamo Bay detention camp article.

Then, in 2013, Edward Snowden leaked that the National Security Agency was illegally spying on Wikipedia readers and editors, revealing that the U.S. had adopted the same playbook as China. Wikipedia responded by encrypting all connections using HTTPS a few years later, and (unsuccessfully) sued the NSA for First and Fourth amendment violations.

The attacks against Wikipedia are starting to ramp up once again; last year saw ethically compromised interim U.S. Attorney Ed Martin and Sen. Ted Cruz complain about Wikipedia's supposed left-wing bias, despite the First Amendment prohibiting the government from acting as speech police. We've also seen bits of the First Amendment firewall begin to crumble, with judges green-lighting prior restraints, or bipartisan groups of lawmakers working to repeal Section 230.

It will require a concerted effort by all of us to not just maintain existing First Amendment protections, but to expand them. That's the only way Wikipedia will thrive for another 25 years.

Boba Quest: ChaHalo

2025-12-31T17:00:00+00:00

As part of Boba Quest 2025 🧋, I'm trying and reviewing a new boba shop ~~each week~~ whenever I have time.

It's been a while since my last boba review, but sometimes you visit a new place that just inspires you to write about it. ChaHalo recently opened in Long Island City, right in between the Queens Plaza station (E, F, R) and Court Square (7, E, F, G, R) so I thought I'd give it a try with my sister, who was in town for the holidays.

My sister wanted a drink without lactose, and since they didn't have an alternative milk, she asked for a jasmine green tea with boba. The barista added the jasmine green tea to the order and then said: "I'm sorry, our computer won't let you order boba with this." Whaaaaaaaaat. And then, "But we could give you some boba in a separate cup?"

What kind of boba shop offers a drink that you can't add boba to? And not even like some practical issue, it's that their computer can't handle it.

I was able to order a jasmine green milk tea with brown sugar boba without running afoul of any software restrictions. (There were no other boba options aside from brown sugar.)

Boba: 3/4 the brown sugar boba was actually pretty good, well flavored, maybe just a little overcooked.
Tea: 1/4 it was...not good. It was a bit bland to the point the taste of the boba totally overpowered it.
Bonus: 0/1 sorry, our experience didn't merit any bonus points.

Total: 4/10 honestly, if they served a brown sugar milk boba (with lactose-free options!!), I think it would be near perfect.

This story has a somewhat happy ending, in that we walked to a different tea shop across the street and my sister was able to get her lactose-free boba. Stay tuned for that review!

One semester of law school done

2025-12-18T05:45:00+00:00

I just finished my first semester of law school Tuesday evening...only eight more to go! People say that the first year of law school is the worst, and I certainly hope that's true.

I don't think I've ever had so much information dumped into my brain in such a short period of time. In my Liberty, Equality and Due Process (LEDP) class about the Fourteenth Amendment, I took 109 pages of notes, and for Criminal Law, 54 pages.

As a very very condensed version of what I learned, here are the study guides I made for both classes:

Probably best viewed in a separate tab.

Also best viewed in a separate tab.

I cannot yet vouch for the accuracy contained on those guides yet as I haven't gotten my grades back yet, but I think they're mostly correct!

Next semester is contracts, which'll probably be immediately practically useful, and legal research, which I'm really looking forward to. I now have access to Westlaw, which is both amazing in how rich the content and interface is...and terrible how it's all locked in a commercial, private database.

Three-ish takeaways from Zohran's win

2025-11-21T06:20:00+00:00

There have been a lot of Zohran Mamdani thinkpieces since November 4th, and I've read most of them! But I want to add three takeaways that I really haven't seen discussed elsewhere in detail.

In the past few weeks people have talked a lot about how Obama's volunteer army fell apart after he was elected and how Mamdani campaign leaders are trying to prevent that from happening by launching "Our Time", a separate entity that can organize former campaign volunteers and keep them politically activated.

But more immediately, I think it's worth understanding that there was a specific effort to prevent a repeat of Buffalo's 2021 mayoral election in which a socialist (India Walton) upset the incumbent mayor (Byron Brown) in the Democratic primary, so Brown launched an independent campaign for the general, rallied the Democratic establishment to support him and not Walton (the Democratic nominee), winning the general by 20 points.

With that context, it made perfect sense that immediately after the primary we saw Zohran moving to consolidate the establishment behind him, including labor and elected officials. It mostly worked, just about everyone backed him except Chuck Schumer and Kirsten Gillibrand. Oh and Jay Jacobs, the chair of the state Democratic party, who refused to endorse Zohran just like he refused to endorse Walton, except at least this time he didn't compare the socialist upstart to David Duke!

On primary day, Hell Gate interviewed Walton and afterwards City & State NY interviewed her too.

But I have yet to see any reporting on how many volunteers came down from Buffalo to support the Zohran campaign in the final stretch. I met a decent amount of people who were very open about why they had come to the city: to prevent a repeat of what happened in 2021.

Because of the natural-born-citizen clause in the U.S. Constitution, Zohran is ineligible to run for U.S. president. Meanwhile it was incredibly obvious that Andrew Cuomo was running for mayor to relaunch his political career so he could run for president in 2028. That would follow the recent trend of NYC mayors running for president, including Bill de Blasio (2020), Michael Bloomberg (also 2020) and Rudy Giuliani (2008).

And of course, way too many people touted Eric Adams as the "future of the Democratic party" and a future presidential candiate. Oops, should've listened to Andrew Yang.

I think it's underrated that Zohran can't run, and so after the primary win, there was no endless dicussion of whether he'd run in 2028 or some made up hypotheticals of him vs. AOC as to who should be the left's standard bearer, etc. And, it's much easier to convey and convince people that Zohran was genuinely interested in improving the lives of New Yorkers as the mayor and not just using it as a stepping stone to higher office.

In 2024, it very much felt that Indians were moving right, with Nikki Haley and Vivek Ramaswamy rising in the Republican ranks and Kamala Harris losing. Polling indicated Asians broadly shifted right (though I didn't find anything about Indians specifically). Not to mention the backdrop of Modi's right-wing government rising in India, which undoubtedly affects the views of the diaspora.

Anecdotally, the WhatsApp forwards were getting worse.

Zohran is easily the most high-profile Indian American politician in the U.S., but more importantly, his campaign was backed by incredibly strong South Asian turnout across the board, with Indian turnout rising from 18% to 45%. To quote: "South Asians and Muslims account for just 7 percent of the city’s registered voters, yet they cast an estimated 15 percent of all ballots in the general election." The aunties are activated.

Not to mention, Ro Khanna is now a legitimate 2028 presidential contender who also campaigned with Zohran in the final stretch while Ramaswamy is possibly starting to collapse.

Regardless of how that turns out, it's clear that it's far from inevitable that Indians will move right, and more importantly, we can move them left.

People keep repeating how this mayoral election was like none other, and I geniunely have no idea what they mean. This was my first mayoral election as a New York City resident so it's also my baseline. I expect things to only go up from here, starting with the special election for my assemblymember and then the open primary for my U.S. House district.

The Lego Mirror

Do-the-work instead of proof-of-work, for Git hosting

A client-side Git viewer#

Second semester of law school: done

Interview with Brooke Vibber (2021)

git.legoktm.com is back, sort of

Exclusive: Justice Sotomayor on AI, taxes and more

Boba Quest: Arteassan

Wikipedia’s 25th birthday proves the power of free speech

Boba Quest: ChaHalo

One semester of law school done

Three-ish takeaways from Zohran's win

No repeats of Buffalo#

Being ineligible for president can be a boon#

Indians can move left#

Final thoughts#