<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Yincan Huang</title>
  <subtitle>Ideas, essays, and projects.</subtitle>
  <link href="https://hi-yincan.github.io/blog/feed.xml" rel="self"/>
  <link href="https://hi-yincan.github.io/blog/"/>
  <updated>2026-08-02T00:00:00.000Z</updated>
  <id>https://hi-yincan.github.io/blog/</id>
  <author>
    <name>Yincan Huang</name>
  </author>
  <entry>
    <title>Daily Nutrition Supplements</title>
    <link href="https://hi-yincan.github.io/blog/posts/Daily-Nutrition/"/>
    <updated>2026-07-27T00:00:00.000Z</updated>
    <id>https://hi-yincan.github.io/blog/posts/Daily-Nutrition/</id>
    <content type="html"><![CDATA[
      <p>You are what you eat.</p>
<h2>Quick Summary</h2>
<ul>
<li><strong>Vitamin A</strong>: Take after breakfast/lunch. Fat-soluble; 2000-5000 IU daily is safe.</li>
<li><strong>Vitamin B Complex</strong>: Water-soluble, can be taken anytime, no need for fat. Keep daily intake under 50 mg.</li>
<li><strong>Vitamin D</strong>: Fat-soluble, take with meals. 5000 IU daily.</li>
<li><strong>Fish Oil</strong>: One capsule each with breakfast and lunch to aid absorption of other supplements.</li>
<li><strong>Magnesium L-Threonate / Glycinate</strong>: ~2000 mg per capsule, one with breakfast, two an hour before sleep.</li>
</ul>
<h2>Why Supplement?</h2>
<p>Modern urban life means long indoor hours, irregular meals, and lack of sunlight — all leading to serious nutritional imbalances. A recent checkup revealed I was <strong>severely deficient in Vitamin D</strong>, which pushed me to research modern nutrition in depth.</p>
<p>Even with a balanced diet, modern farming and food processing have reduced nutrient density. <strong>Depleted soil, over-processing, and long-distance transport and storage</strong> all contribute to nutrient loss.</p>
<p>While working on better eating habits, <strong>sensible supplementation</strong> is a practical way to maintain health.</p>
<h2>Disclaimer</h2>
<p><strong>This article is for reference only and does not constitute medical advice.</strong> Everyone's needs differ. Ideally, get tested and adjust your regimen based on your actual levels. <strong>Excessive intake of certain vitamins (especially fat-soluble A, D, E, K) can be toxic.</strong></p>
<p>Always <strong>consult a doctor or registered dietitian</strong> before starting any supplement regimen, especially if you have chronic conditions, take medication, or are pregnant/nursing.</p>
<p>Finally, <strong>supplements are not a substitute</strong> for a balanced diet, regular exercise, good sleep, and sunlight.</p>
<h2>Key Terms</h2>
<ul>
<li><strong>Fat-soluble vitamins</strong>: A, D, E, K. Require bile and fat for absorption. Can be stored in the body, so overdosing can cause toxicity.</li>
<li><strong>Water-soluble vitamins</strong>: B complex and C. Not stored in significant amounts; excess is excreted in urine.</li>
<li><strong>IU (International Unit)</strong>: A standard measure of biological activity.
<ul>
<li>Vitamin A: 1 IU = 0.3 mcg retinol</li>
<li>Vitamin D: 1 IU = 0.025 mcg cholecalciferol (D3)</li>
<li>Vitamin E: 1 IU ≈ 0.67 mg d-alpha-tocopherol (natural)</li>
</ul>
</li>
</ul>
<h2>Vitamin A</h2>
<p><strong>Recommended intake</strong>: 800-1000 mcg RAE daily. 2000-5000 IU is safe. Don't exceed 10,000 IU/day.</p>
<p><strong>Timing</strong>: After breakfast or lunch. Fat-soluble, needs fat for absorption.</p>
<p><strong>Deficiency</strong>: Night blindness, dry eyes, skin issues, weakened immunity.</p>
<p><strong>Food sources</strong>: Liver, dairy, egg yolk, fish liver oil. Plant sources (carrots, sweet potatoes, spinach) contain beta-carotene which converts poorly — roughly 1/12 the efficiency of animal sources.</p>
<p><strong>💊 My regimen</strong>: 5000 IU daily, after lunch. Brand: Shuangjing Vitamin A softgels 5000 IU.</p>
<h2>Vitamin B Complex</h2>
<p><strong>Recommended intake</strong>: Don't take individual B vitamins alone — take a complete B complex. Keep total daily intake under 50 mg.</p>
<p><strong>Timing</strong>: Water-soluble, can be taken anytime. No fat needed.</p>
<p>B vitamins work together as enzyme cofactors. Taking the full spectrum is more effective than singles.</p>
<h3>B1 (Thiamine)</h3>
<p>Deficiency: Beriberi (muscle weakness, edema, heart failure), nerve inflammation.</p>
<p>Sources: Brown rice, whole wheat, oats, soybeans, pork, sunflower seeds.</p>
<h3>B2 (Riboflavin)</h3>
<p>Deficiency: Mouth ulcers, cheilitis, glossitis, light sensitivity, blurred vision.</p>
<p>Sources: Liver, dairy, eggs, leafy greens, legumes.</p>
<h3>B3 (Niacinamide)</h3>
<p>Deficiency: Pellagra, skin irritation, diarrhea, dizziness, fatigue. Poor capillary circulation (cold hands/feet).</p>
<p>Sources: Fish, poultry, liver, whole grains, peanuts, mushrooms.</p>
<h3>B5 (Pantothenic Acid)</h3>
<p>Deficiency: Rare. Fatigue, irritability, sleep disturbances, nausea.</p>
<p>Sources: Nearly all foods — liver, chicken, eggs, whole grains, broccoli, avocado.</p>
<h3>B7 (Biotin)</h3>
<p>Deficiency: Rare. Hair loss, skin inflammation, brittle nails.</p>
<p>Sources: Liver, egg yolk, milk, mushrooms, nuts. Gut bacteria also synthesize biotin.</p>
<h3>B9 (Folate)</h3>
<p>Deficiency: Anemia, fatigue, birth defects (neural tube defects).</p>
<p>Sources: Liver, eggs, leafy greens, legumes, citrus. Easily destroyed by cooking.</p>
<p><strong>Important</strong>: Women should supplement folate before and during pregnancy.</p>
<h3>B12 (Cobalamin)</h3>
<p>Deficiency: Megaloblastic anemia, neurological issues (numbness, memory loss), fatigue.</p>
<p>Sources: Almost exclusively animal products — liver, meat, fish, eggs, dairy. Vegans and elderly are at risk.</p>
<p><strong>💊 My regimen</strong>:</p>
<ul>
<li>B Complex (B1/B2/B3/B6), 50 mg daily, after breakfast.</li>
<li>Extra B9 (Folic acid), 0.4 mg daily, with breakfast.</li>
</ul>
<h2>Vitamin C</h2>
<p><strong>Recommended intake</strong>: 100 mg is the minimum. <strong>200 mg daily is better, 500 mg is optimal, 1000 mg when sick</strong>.</p>
<p><strong>Timing</strong>: Water-soluble, anytime. Split doses if taking large amounts — the body has a limited absorption ceiling per dose.</p>
<p><strong>Deficiency</strong>: Scurvy, weakened immunity, dry skin, fatigue, bleeding gums.</p>
<p><strong>Food sources</strong>: Citrus, kiwi, strawberries, bell peppers, broccoli, leafy greens.</p>
<p><strong>💊 My regimen</strong>: 100 mg daily, anytime. Brand: Northeast Pharma Vitamin C 100 mg tablets.</p>
<h2>Vitamin D</h2>
<p>Vitamin D is essential for calcium homeostasis, bone health, and immune function.</p>
<p><strong>Timing</strong>: Take with a meal containing fat for best absorption. <strong>Don't take at night</strong> — it can interfere with sleep.</p>
<p><strong>Deficiency</strong>: Rickets, osteoporosis, weakened immunity, bone pain, muscle weakness.</p>
<p><strong>Sources</strong>: Sunlight is the primary source (30 min/day). Also found in fish liver oil, salmon, egg yolk. Very hard to get enough from food alone.</p>
<p><strong>Recommended intake</strong>: 800 IU maintenance. If deficient: 2000-5000 IU. If severely deficient: 5000-10,000 IU for a month, then retest.</p>
<p><strong>Important notes</strong>:</p>
<ul>
<li>D3 (cholecalciferol) is better absorbed than D2.</li>
<li>Fat-soluble — can accumulate, but toxicity is rare below 5000 IU/day.</li>
<li><strong>Normal range</strong>: 30-100 ng/ml (25-hydroxyvitamin D). Aim for ~50 ng/ml.</li>
<li>Below 30 ng/ml: supplement 5000 IU/day, retest after a month.</li>
<li>Below 10 ng/ml: 5000-10,000 IU/day for a month, then retest.</li>
<li>Long-term high-dose D3 (&gt;5000 IU for over a year) requires K2 and magnesium. D3 opens the door for calcium, K2 directs calcium to bones, magnesium is a cofactor for D3 activation.</li>
</ul>
<p><strong>💊 My regimen</strong>: 5000 IU daily, after breakfast with fatty food. Brand: Naturewise Vitamin D3 5000 IU.</p>
<h2>Vitamin E</h2>
<p><strong>Recommended intake</strong>: 15-20 mg daily.</p>
<p><strong>Timing</strong>: With meals. Fat-soluble.</p>
<p><strong>Deficiency</strong>: Neurodegenerative issues, muscle weakness, vision problems, weakened immunity.</p>
<p><strong>Food sources</strong>: Vegetable oils, nuts and seeds (almonds, sunflower seeds), leafy greens.</p>
<p><strong>💊 My regimen</strong>: A handful of nuts daily, or 1 capsule (100 mg) after lunch. Brand: Shuangjing Vitamin E 100 mg softgels.</p>
<h2>Vitamin K</h2>
<p><strong>Timing</strong>: With meals. Fat-soluble.</p>
<p><strong>Deficiency</strong>: Rare in adults. Bleeding tendency, coagulation issues.</p>
<p><strong>Food sources</strong>: K1 from leafy greens, K2 from liver and fermented foods (natto, cheese).</p>
<p><strong>💊 My regimen</strong>: K2 (MK-7), 100 mcg daily, taken with Vitamin D3. MK-7 has a longer half-life and better bioavailability than MK-4.</p>
<h2>Other Supplements</h2>
<h3>Fish Oil</h3>
<p>2 capsules daily, one each with breakfast and lunch.</p>
<p>Brand: Viva Naturals Fish Oil (EPA 750 mg + DHA 284 mg + DPA 25 mg).</p>
<h3>Coenzyme Q10</h3>
<p>Mitochondrial fuel. 100 mg daily, after lunch with fish oil.</p>
<p>Brand: Doctor's Best High Absorption CoQ10 (with BioPerine for 30%+ better absorption).</p>
<p><strong>Note</strong>: May be stimulating — avoid taking at night.</p>
<h3>Lutein</h3>
<p>1 capsule daily, after breakfast. Pair with Vitamin C for better absorption.</p>
<p>Brand: Blackmores Lutein Defense (10 mg lutein + 2 mg zeaxanthin). Don't take at night.</p>
<h3>Magnesium Glycinate</h3>
<p>D3 activator and sleep aid. ~200 mg, one hour before sleep.</p>
<p><strong>Why</strong>: Long-term D3 supplementation depletes magnesium. Glycinate form is well-absorbed, gentle on the stomach, and promotes relaxation and sleep.</p>
<p><strong>Avoid</strong>: Magnesium oxide — poor absorption, causes diarrhea.</p>
<h3>Zinc</h3>
<p>Three times daily, one tablet each time.</p>
<p>Brand: Nandao Zinc Gluconate 70 mg tablets. Absorption rate is low, so higher dosage is needed.</p>
<h2>Daily Schedule</h2>
<ul>
<li><strong>After breakfast</strong>: Vitamin D3+K2, B Complex + Folate, Vitamin C, Lutein, Fish Oil</li>
<li><strong>After lunch</strong>: Fish Oil, CoQ10, Vitamin A, Vitamin E</li>
<li><strong>Throughout the day</strong>: Zinc</li>
<li><strong>One hour before sleep</strong>: Magnesium Glycinate</li>
</ul>
<blockquote>
<p>Original article (Chinese): <a href="https://seanxp.com/daily-vitamin-supplement/">Daily Nutrition Supplements</a></p>
</blockquote>

    ]]></content>
  </entry>
  <entry>
    <title>Think First, Then Cut</title>
    <link href="https://hi-yincan.github.io/blog/posts/speaking-concisely/"/>
    <updated>2026-08-01T00:00:00.000Z</updated>
    <id>https://hi-yincan.github.io/blog/posts/speaking-concisely/</id>
    <content type="html"><![CDATA[
      <p>Two kinds of people ruin meetings. The first circles for five minutes without reaching the point. The second uses only recognizable words, yet you leave unsure what you were supposed to do.</p>
<p>The problem isn't the mouth. It's the thinking. When people can't speak briefly, they usually haven't thought things through — or don't know which parts to keep.</p>
<h2>Two layers: the &quot;way&quot; and the &quot;technique&quot;</h2>
<p>Speaking has two layers.</p>
<ul>
<li><strong>The way (道)</strong>: think before you open your mouth, pick the point, keep the logic straight.</li>
<li><strong>The technique (术)</strong>: once the meaning is set, say it in as few words as possible.</li>
</ul>
<p>Most people get stuck on the first layer. Short video, bullet comments, and instant messaging have trained us into &quot;reflexive fragments&quot; — we speak the moment we think, instead of thinking before we speak. Expression fragments, and the logical thread snaps. Polish the technique all you want; without the way, it won't carry.</p>
<p>Ask three questions before you speak:</p>
<ul>
<li>What do I want the listener to remember?</li>
<li>Where's the point of this?</li>
<li>If I could only say one sentence, what would it be?</li>
</ul>
<p>Answer those and you've already cut the speech in half.</p>
<h2>Concise isn't minimal</h2>
<p>Here's a common mistake: treat concision as cutting every sentence to the bone, like a telegram.</p>
<p>That's wrong — especially at work. Strip out the polite buffers and the words turn hard. People aren't parsing your grammar; they're reading your attitude. Words like &quot;maybe,&quot; &quot;roughly,&quot; &quot;if possible,&quot; &quot;I think&quot; look like filler, but they're lubricant. Cut too far and the meaning survives while the tone dies.</p>
<h2>Why short sentences save brains: cognitive load</h2>
<p>It's cognitive science.</p>
<p>Cognitive load theory, developed by John Sweller, rests on one premise: <strong>working memory is tiny</strong>. It holds only about four chunks of new information at once (Miller's classic 7±2, refined by later estimates to 4±1). Every redundant word occupies a slot. Fill the slots and whatever comes next simply falls out.</p>
<p>That's why this line from Strunk &amp; White's <em>The Elements of Style</em> is worth memorizing:</p>
<blockquote>
<p><strong>Vigorous writing is concise. A sentence should contain no unnecessary words, a paragraph no unnecessary sentences, for the same reason that a drawing should have no unnecessary lines and a machine no unnecessary parts.</strong></p>
</blockquote>
<p>The same applies to speech. Every word you delete frees a slot in the listener's working memory. It's not a stylistic preference — it's respect for their attention.</p>
<h2>Language is half redundancy</h2>
<p>Information theory makes an even harsher point.</p>
<p>In his 1951 guessing experiment, Shannon estimated that written English carries roughly 80% statistical redundancy — most of what you hear can be predicted from context. A 2025 PNAS study pushed further and separated out &quot;semantic redundancy&quot;: about half of a sentence's uncertainty comes from its meaning, the other half from its wording.</p>
<p>In other words, <strong>rambling is the default of language</strong>. The brain naturally leaks filler because it costs nothing. Concise speech goes against nature — it has to be practiced on purpose.</p>
<p>This also explains a familiar annoyance: people who use recognizable words yet communicate nothing. Redundancy is meant to absorb noise, but too much of it becomes the noise. Cutting is not about zeroing out redundancy — a channel needs some slack — it's about removing the parts that carry nothing.</p>
<h2>Lead with the bottom line: BLUF and the pyramid</h2>
<p>The military and journalists figured out the same thing long ago: put the conclusion first.</p>
<p>The U.S. military's communication standard is BLUF — Bottom Line Up Front. Give the bottom line, then the reasoning. Barbara Minto's &quot;Pyramid Principle,&quot; developed at McKinsey, is the same logic: conclusion on top, evidence beneath, each layer supporting the one above. Journalistic writing uses the inverted pyramid: the most important information goes in the first paragraph, the rest in descending order of importance.</p>
<p>Why? Because listeners leave whenever they want. Spend five minutes on setup and your audience walks at second thirty, taking nothing with them. Lead with the conclusion and at least they leave with the one thing that mattered.</p>
<p>Same for everyday speech: give the result first, then the process; the recommendation first, then the reasoning. Don't make people guess what you're getting at.</p>
<h2>How to practice</h2>
<p>Four drills. They're simple; consistency is the only trick.</p>
<p><strong>Write it down, cut it in half.</strong> Write out what you want to say, then delete: every &quot;actually&quot; and &quot;just&quot; that doesn't change the meaning, every repetition, every bit of throat-clearing. Cut until you can't cut any more — then read it aloud. You'll find spoken language needs its own rhythm that writing doesn't.</p>
<p><strong>Record yourself.</strong> Capture two minutes of impromptu speech and count the fillers: how many &quot;so,&quot; &quot;like,&quot; &quot;you know,&quot; &quot;um.&quot; The number will shock you — and then you'll stop.</p>
<p><strong>Give a one-sentence recap.</strong> After explaining something complicated, add &quot;in one sentence: …&quot; and compress the whole thing to a line. Do it often enough and you'll start filtering before you speak.</p>
<p><strong>Have someone verify.</strong> After you explain, ask: &quot;Summarize it back in three sentences.&quot; If they can't, your message had waste in it.</p>
<p>Here's what these drills most often produce:</p>
<table>
<thead>
<tr>
<th>Original</th>
<th>Concise</th>
<th>Notes</th>
</tr>
</thead>
<tbody>
<tr>
<td>I actually haven't quite figured out the whole process yet, so I might still need some more time to double-check.</td>
<td>I haven't figured out the process yet — might need more time to confirm.</td>
<td>In formal settings, &quot;I'm still working through the process&quot; is more polished than &quot;haven't figured out the process yet.&quot;</td>
</tr>
<tr>
<td>I don't think I've received that file yet — not sure if it was sent to the wrong place or just missed.</td>
<td>Haven't received the file — was it mis-sent or just missed?</td>
<td>To a boss or client, soften with &quot;maybe it was missed?&quot; The &quot;maybe&quot; takes the edge off the implied blame.</td>
</tr>
<tr>
<td>I understand what you mean, but I feel like maybe we could discuss it a bit more and see if there's another option.</td>
<td>I get what you mean — but let's see if there's another option.</td>
<td>&quot;See if there's another direction&quot; sounds even more collaborative.</td>
</tr>
<tr>
<td>Overall the plan is pretty good, but I feel like we might still need to polish the details a bit.</td>
<td>The plan is solid overall — let's polish the details.</td>
<td>&quot;Let's polish&quot; is a joint effort; &quot;we need to polish&quot; reads like criticism of the current version.</td>
</tr>
<tr>
<td>Sorry, I didn't quite catch that part just now — could you possibly say it again?</td>
<td>Sorry, I missed that — could you say it again?</td>
<td>Natural, polite, softener intact. Leave it alone.</td>
</tr>
</tbody>
</table>
<h2>It's about tact, not word count</h2>
<p>Being concise and being minimal aren't the same thing.</p>
<p>The real craft isn't word count. It's that the speech got shorter while the attitude survived — the meaning stayed the same and the tone improved. &quot;We need to polish the details&quot; is an inspection; &quot;let's polish the details&quot; is an invitation.</p>
<p>This is where a language's texture lives. The content doesn't change; a shift in tone and phrasing makes the difference between feeling criticized and feeling respected. How you speak is where emotional intelligence shows up in the room.</p>
<p>So practicing concision isn't practicing &quot;talking less.&quot; It's three things:</p>
<ul>
<li>Think before you speak — the way</li>
<li>Delete words that don't carry meaning — the technique</li>
<li>Keep enough politeness for the situation — the tact</li>
</ul>
<p>Do all three and your speech shortens on its own — and stays short without turning harsh.</p>
<h2>References</h2>
<ul>
<li><a href="https://my.chartered.college/impact_article/cognitive-load-theory-a-school-wide-approach/">Cognitive Load Theory: A School-Wide Approach</a> — working memory limits and the three types of cognitive load</li>
<li><a href="https://www.quadshift.com/articles/the-science-behind-clear-concise-communication">The Science of Clear Communication: Cognitive Load &amp; Hick's Law</a> — the cognitive science behind concise messaging</li>
<li><a href="https://www.pnas.org/doi/10.1073/pnas.2502353122">Information rate of meaningful communication | PNAS</a> — estimates English's semantic redundancy at roughly 50%</li>
<li><a href="https://en.wikipedia.org/wiki/BLUF_(communication)">BLUF (communication) — Wikipedia</a> — the military's &quot;bottom line up front&quot; standard</li>
<li><a href="https://www.npr.org/2009/04/15/103147654/excerpts-the-elements-of-style">The Elements of Style, excerpts | NPR</a> — &quot;Omit needless words&quot;</li>
</ul>

    ]]></content>
  </entry>
  <entry>
    <title>Protecting Personal Information in the Digital Age</title>
    <link href="https://hi-yincan.github.io/blog/posts/information-defense/"/>
    <updated>2026-08-01T00:00:00.000Z</updated>
    <id>https://hi-yincan.github.io/blog/posts/information-defense/</id>
    <content type="html"><![CDATA[
      <p>Two recent incidents got me thinking about personal information.</p>
<p>One: Bilibili's open-source project <a href="https://github.com/SocialSisterYi/bilibili-API-collect">bilibili-API-collect</a> received a legal demand letter and shut down. Two: a post on Linux.do, <a href="https://linux.do/t/topic/387565">How I Treated a Hacker to Prison Food</a>, in which a red-team investigator assembled a hacker's real identity from public information alone and got him sent to prison.</p>
<p>One person was traced by a company, the other by an individual. They point to the same fact: in the digital age, your identity is almost entirely built from public information. Protecting your privacy is about managing the links between your identities.</p>
<h2>The two incidents</h2>
<h3>The bilibili-API-collect demand letter</h3>
<p>bilibili-API-collect (BAC) was started in 2020 by a developer known as &quot;Yijie&quot;. In six years it accumulated 20.4k stars and 200+ contributors, effectively becoming the standard third-party API documentation for Bilibili. In late January 2026, the author received two letters from a law firm: a demand letter and a follow-up criticizing the &quot;incomplete remediation.&quot; The letter alleged the project &quot;systematically collected and organized Bilibili's non-public API interfaces, their calling logic, parameter structures, access controls, and security authentication mechanisms, and distributed them to the public in the form of technical documentation and code examples.&quot; The repository was deleted soon after. The full story is in the <a href="https://shakaianee.top/archives/1074/">shutdown announcement</a> and the author's <a href="https://shakaianee.top/archives/1080/">follow-up reflection</a>.</p>
<p>The timing is more telling. In early January 2026, Tencent had just filed a DMCA with GitHub against a batch of WeChat-related open-source projects, on the same grounds of &quot;invading user privacy.&quot; When APIs become the chokepoint through which big tech controls data in the AI era, any channel that bypasses the official ecosystem gets shut down.</p>
<p>The author's framing: the internet is a dark forest. The government is the Singer, big companies are advanced civilizations, and individuals and small companies are the weak ones. To survive, the weak must hide themselves and clean up after themselves.</p>
<h3>The hacker who got prison food</h3>
<p>A company had been harassed by DDoS and phishing attacks for three months. A red-team investigator started from a single Open Redirect payload in the attack logs, found a personal blog hosted next to the attack infrastructure, then used the blog's email to find the same handle on HackerOne, which led to Twitter.</p>
<p>The tweets leaked the attacker's country, age, when he entered the field, that he was job-hunting, and the dates he earned two certifications (eCPPT, OSWA). Those timestamps were the breakthrough: the investigator narrowed LinkedIn candidates from tens of thousands to about twenty, then combined photos, platform verification, domain registration records, and an enumerated email address to close the loop from &quot;anonymous attacker&quot; to &quot;real person.&quot; No intrusion, no social engineering — all legally public information.</p>
<p>It shows that doxxing today isn't a business that requires hacking skills. It's a jigsaw puzzle: every piece looks harmless on its own, but together they form a full ID.</p>
<h2>Identity is made of links</h2>
<p>Put the two stories side by side. A person gets traced by an organization through the email and phone number they voluntarily provided at signup; a person gets traced by an individual through the IDs, timestamps, and photos leaked in their public footprint. The common thread: identity is made of links. As long as a single edge connects two identities — the same email, the same username, the same photo, the same timeline — anonymity is paper-thin.</p>
<p>A few conclusions follow:</p>
<ol>
<li>
<p><strong>Cross-platform reuse is the biggest hole.</strong> Usernames, emails, and phone numbers are the &quot;primary keys&quot; of identity, and the three things attackers want most. Using alias emails, unique IDs, and fewer phone-number bindings is, essentially, deleting your primary keys.</p>
</li>
<li>
<p><strong>Social media is the richest source of clues, and timestamps are the deadliest.</strong> Posts like &quot;finally got my cert today&quot; or &quot;one year at the company&quot; put month- or day-precision information on a public wall. Location, routine, certifications, offers — once cross-referenced, they narrow the search faster than intuition suggests.</p>
</li>
<li>
<p><strong>Resumes and professional networks are confessions.</strong> Schools, employers, project dates, photos, platform verification — all of it is designed to identify a person. Publishing a resume means consenting to be identified from it.</p>
</li>
<li>
<p><strong>Purchase records and registrations are the receipt at the end of the trail.</strong> Domain WHOIS, server registration emails, forum accounts — everything you paid for leaves a record. Separating work assets from personal ones is key to stopping someone from finding you through your infrastructure.</p>
</li>
<li>
<p><strong>For individuals, the real defense isn't any single platform — it's isolation.</strong> Split your life into a real-name side and an anonymous side, with no shared primary keys between them. The more thoroughly you do this, the more clues the other side must collect, and the higher the cost of the puzzle. The BAC author was easily identified precisely because his open-source identity and his personal information had no separation at all.</p>
</li>
</ol>
<h2>Line in the sand: self-protection is not evading the law</h2>
<p>Here I need to draw a line. Talking about self-protection is not teaching people to hide from the law. On the contrary, the Linux.do post is persuasive precisely because the entire trace was legal, and it ended with the offender in prison.</p>
<p>The truly safe posture is not keeping your secrets airtight, but leaving nothing in your legally public footprint that can be used against you.</p>
<p>Criminals should fear that public information can become evidence against them. The rest of us should learn to make ourselves not worth doxxing, and impossible to fully assemble.</p>
<h2>What to do, concretely</h2>
<h3>Accounts and primary keys</h3>
<ul>
<li>Use different usernames on high-value platforms (email, payments, cloud) and low-value ones (forums, communities)</li>
<li>Reserve your primary email for people you know, banks, and official real-name services. Use alias emails for everything else — SimpleLogin, addy.io, Firefox Relay, or Cloudflare Email Routing on your own domain — one per site, disabled whenever you want</li>
<li>Bind your phone number only where necessary; use a virtual number when possible</li>
<li>Use a password manager with random passwords; prefer hardware keys and TOTP over SMS codes for 2FA</li>
</ul>
<h3>Identity isolation</h3>
<table>
<thead>
<tr>
<th>Dimension</th>
<th>Real-name side</th>
<th>Anonymous side</th>
</tr>
</thead>
<tbody>
<tr>
<td>Information</td>
<td>Real name, school, employer, real photos, location</td>
<td>Unique ID, alias email, custom avatar</td>
</tr>
<tr>
<td>Used for</td>
<td>WeChat, job hunting, banking, socializing</td>
<td>Tech discussion, open source, forums</td>
</tr>
<tr>
<td>Iron rule</td>
<td>Never shows real name, photos, work or school info</td>
<td>Never shows anonymous IDs or content</td>
</tr>
</tbody>
</table>
<p>Business assets should be equally separated from personal ones: a VPS, domain, or blog used for testing should share nothing with your personal email and phone.</p>
<h3>Social media</h3>
<ul>
<li>Turn off location services; don't post photos with landmarks, homes, family, or schools</li>
<li>Don't post events with exact dates; scrub real names, photos, and phone numbers from old posts</li>
<li>Re-examine LinkedIn and your resume against the &quot;can I be found by this?&quot; standard — every school, company, and date is a filter</li>
</ul>
<h3>Infrastructure</h3>
<ul>
<li>Enable WHOIS privacy protection on domains; assume registration details (servers, domains) can be subpoenaed</li>
<li>Publish sensitive or gray-area projects via private repos or anonymous emails, not under your portfolio</li>
</ul>
<h3>After a breach</h3>
<ul>
<li>Periodically check <a href="https://haveibeenpwned.com">Have I Been Pwned</a> for your emails; change passwords, close, or abandon any account that shows up</li>
<li>If you get doxxed: in China, you can demand platforms delete your information under the <a href="https://www.gov.cn/xinwen/2021-08/20/content_5632486.htm">Personal Information Protection Law</a> and report to the cyberspace regulator</li>
<li>Obtaining, selling, or providing citizens' personal information without authorization can be a crime under Article 253(1) of the Criminal Law — file a police report</li>
</ul>
<h2>Conclusion</h2>
<p>Back to the dark forest. Information self-defense isn't about hiding more carefully — it's about managing links:</p>
<ul>
<li>Hiding a secret is worth less than having no connectable edge between two identities</li>
<li>Don't count on platforms to protect your data; assume registration info can be obtained</li>
<li>Assume anything you publish can never be taken back — so only publish what you'd be fine with the world keeping forever</li>
</ul>
<p>Most doxxing victims weren't broken by sophisticated techniques. They assembled the puzzle themselves, one fragment at a time.</p>
<h2>Links</h2>
<ul>
<li><a href="https://github.com/SocialSisterYi/bilibili-API-collect">bilibili-API-collect repository (GitHub)</a></li>
<li><a href="https://space.bilibili.com/293793435">Yijie's Bilibili page</a></li>
<li><a href="https://shakaianee.top/archives/1080/">After the &quot;Green Corpse&quot; incident (Yijie's blog)</a></li>
<li><a href="https://shakaianee.top/archives/1074/">Announcement: bilibili-API-collect permanently discontinued and deleted</a></li>
<li><a href="https://linux.do/t/topic/387565">How I Treated a Hacker to Prison Food (Linux.do)</a></li>
<li><a href="https://simplelogin.io">SimpleLogin — email aliasing</a></li>
<li><a href="https://www.gov.cn/xinwen/2021-08/20/content_5632486.htm">Personal Information Protection Law of the PRC (full text)</a></li>
</ul>

    ]]></content>
  </entry>
  <entry>
    <title>Faint but Not Distant</title>
    <link href="https://hi-yincan.github.io/blog/posts/faint-but-not-distant/"/>
    <updated>2026-08-02T00:00:00.000Z</updated>
    <id>https://hi-yincan.github.io/blog/posts/faint-but-not-distant/</id>
    <content type="html"><![CDATA[
      <p>July 30 is the UN's International Day of Friendship, and the Chinese magazine New Weekly marked it with a question: why do adult friendships last longest when they're faint?</p>
<p>Your contact list is swelling while your friendships are shrinking. WeChat holds hundreds of names; the people you talk to daily number in the single digits. In school, you walked to the cafeteria together after class and booked movie tickets for the weekend. As an adult, friendship carries a quiet sense of distance: three or five months can pass without a message, dinner needs a week of schedule coordination, and a wall of Moments likes is all that keeps you &quot;still present in each other's lives.&quot;</p>
<p>Yet the people who reassure you most are often exactly the ones you're &quot;not in regular touch with.&quot;</p>
<p><strong>In short: adult friendship hasn't faded. Its maintenance method changed, from &quot;being there&quot; to &quot;showing up when it counts.&quot; Faintness is the norm; distance is the failure.</strong></p>
<h2>The weight shows at critical moments</h2>
<p>You casually mention that you need extra hands for the weekend move. The friend says little at the time, then shows up on the day, on time, holding iced drinks. You mention being hungry at midnight during overtime; half an hour later, a warm late-night snack arrives at the front desk. You hesitate a long time before asking for help; the other person asks no questions, only &quot;how much do you need, just say it.&quot;</p>
<p>No instant replies required. No forced small talk. No fear of awkward silence. Each of you is busy with your own life, yet when you meet, there's no hint of estrangement.</p>
<p>Psychology has a name for this unspoken arrangement: <strong>responsiveness</strong>. The real metric of a relationship isn't contact frequency — it's whether the other person &quot;catches&quot; your need. One deep, responsive exchange holds a relationship together better than a hundred scripted hellos. Research even finds that serious conversation predicts rising intimacy, while small talk predicts the opposite. Small talk doesn't feed a friendship; deep conversation does.</p>
<h2>Faintness is the adult default</h2>
<p>Why must contact frequency fall? It's not that people changed. The budget changed.</p>
<p>Dunbar's number says the cognitive ceiling on stable relationships is around 150, split into layers: 5 intimate, 15 close, 50 friends. Every layer is fed by time, and time has a hard cap. Dunbar quantified the toll: roughly 34 hours of interaction turn an acquaintance into a friend; a best friend costs hundreds.</p>
<p>Adulthood carves most of that time out for work and family. Marriage, children, moving — every shift in your life's radius sheds a few friends. There's even a famous &quot;romantic cost&quot;: entering a new relationship costs you about two people from your support network. Not callousness. Capacity.</p>
<p>So &quot;faint&quot; is almost the inevitable shape of adult friendship.</p>
<p>But then: why, once faint, do these friendships last the longest?</p>
<h2>Faintness is built on intensity</h2>
<p>Every study converges on the same conclusion: <strong>a friendship's texture is cast during the high-contact period; what follows is a low-maintenance steady state.</strong></p>
<p>In a survey of 28,000 people, 92% said their best friend was made in school days. That stage has time to spare, and trust gets confirmed over and over. The faintness of adult friendship lives off that old capital.</p>
<p>Faint-but-not-distant isn't &quot;unmaintained.&quot; Earlier investment keeps paying interest. The principal is the hundreds of hours you once spent together; the interest is that &quot;how much do you need, just say it&quot; at the moment it counts.</p>
<p>This is also why faint and distant are different things: <strong>faintness is relaxation after familiarity; distance is decay from long-term neglect.</strong> Dunbar's team found in a tracking study that six months apart starts eroding emotional attachment, dropping the relationship a layer. The difference in practice: with a faint friend, you speak and they catch you; with a distant one, you speak and they're already gone.</p>
<h2>How to keep a faint-but-not-distant friendship</h2>
<ul>
<li><strong>Show up at the critical moment.</strong> The single most effective move is appearing once when the other person genuinely needs you. One real act outweighs a year of likes.</li>
<li><strong>Go deep occasionally; skip the daily small talk.</strong> Adults don't have time to maintain daily contact, but they can maintain with quality: one real conversation about how things are going beats ten &quot;you there?&quot;</li>
<li><strong>Invest the way they do.</strong> Dunbar found a clear gender split: women maintain through more talking, men through doing things together. Match their mode and it works twice as well.</li>
<li><strong>Reach out before the relationship slips a layer.</strong> Falling contact frequency isn't the danger; never asking is. A single check-in at a six-month or yearly node keeps the relationship where it is.</li>
</ul>
<h2>Quantity depreciates; quality appreciates</h2>
<p>Loneliness damages health on a scale comparable to smoking. Psychology has a finding: after 30, friend count stops mattering and quality starts determining happiness. A meta-analysis of nearly 150 studies found that people with strong relationships had roughly 50% higher survival rates.</p>
<p>Youth friendship is addition — the more people you know, the better. Adult friendship is subtraction — the few who remain are the ones who truly hold you up.</p>
<p><strong>Friendship didn't fade. You finally learned who deserves to be remembered when it counts.</strong></p>
<h2>References</h2>
<ul>
<li><a href="https://www.un.org/en/observances/international-day-friendship">International Day of Friendship | United Nations</a></li>
<li><a href="https://www.newscientist.com/definition/dunbars-number/">Dunbar's number | New Scientist</a> — the cognitive limit on social network size</li>
<li><a href="https://www.businessinsider.com/friends-limited-number-of-close-relationships-2018-3">There's a limit to how many close friends you can realistically have at once | Business Insider</a> — intimacy layers and maintenance costs</li>
<li><a href="https://www.thepaper.cn/newsDetail_forward_8711426">交个朋友：从熟人到好友，需要花费多少时间？ | The Paper</a> — the time investment from acquaintance to best friend</li>
<li><a href="https://mp.weixin.qq.com/s/DSnMYyylfjATHAqQDczb1A">新周刊原文：为什么成年人的友谊，淡淡的反而更长久？</a></li>
</ul>

    ]]></content>
  </entry>
</feed>
