Hello everyone~ this is my official emergency account. If you're looking for my real account you can find here: @ReignOfRaining@transfem.social If you got a follow request, please follow me back and please boost this post so people are aware and have a chance to follow as well if they like~
due to sudden terrifying attacks on trans people's legal status in texas, i am fleeing the state! money's gonna be incredibly tight the next couple weeks - i've bumped the discount for my entire discography on bandcamp from 25% to 50% if you'd like to pick some music up
This photo captures the incredible feat of nature where young Boeing airplanes hatch from their eggs and begin to crawl onto land. They will stay this way until they can develop their wings.
This photo captures the incredible feat of nature where young Boeing airplanes hatch from their eggs and begin to crawl onto land. They will stay this way until they can develop their wings.
On the other hand, I've had tremendous luck fishing with wet flies imitating Boeing nymphs. I just bump them along the bottom with split shot and a fluorescent indicator on the surface and have caught some freaking ENORMOUS trout.
Thanks for that context! I was puzzled how they would end up with that many planes in the same bit of river. I wondered if it was a research thing, like when NRC gets permission to blow up a plane (for science) and they invite everyone.
(picture source: Kagan Yochim @TripwithKagan/Twitter) In 2017 a train, loaded with 6 Boeing fuselages derailed and 3 of them slid into the river. See boisestatepublicradio.org/envi… for more context.
A Montana Rail Link spokeswoman says it took about 12 hours to remove the first of three commercial airplane bodies that fell into the Clark Fork River…
Hot take: Pirating music is MORE ethical than using Spotify. The artists don't get paid either way, but at least piracy doesn't support exploitative corporations.
@linkachus17 Correct! I originally tried to start working on it back when ToaruOS was in its archived state (March to December 2024) in August.
After repeated failures with Limine and multiboot2, I finally made Limine protocol work on the 3rd of January this year and I open-sourced it same week.
Since then, Arikoto keeps growing. It’s amazing to see how far I’m progressing with this project in a small amount of time.
AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution
A campaign using fake GitHub repositories to distribute SmartLoader and Lumma Stealer malware has been uncovered. The attackers create convincing repositories using AI-generated content to deceive users into downloading malicious files disguised as gaming cheats, cracked software, and system tools. The malware is delivered through obfuscated Lua scripts in ZIP files, exploiting GitHub's trusted reputation to evade detection. Upon execution, SmartLoader facilitates the delivery of Lumma Stealer, which can steal sensitive information like cryptocurrency wallets, 2FA extensions, and login credentials. This campaign demonstrates the evolving tactics of cybercriminals, adapting from using GitHub file attachments to creating entire repositories with AI-assisted deception.
AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution
A campaign using fake GitHub repositories to distribute SmartLoader and Lumma Stealer malware has been uncovered. The attackers create convincing repositories using AI-generated content to deceive users into downloading malicious files disguised as gaming cheats, cracked software, and system tools. The malware is delivered through obfuscated Lua scripts in ZIP files, exploiting GitHub's trusted reputation to evade detection. Upon execution, SmartLoader facilitates the delivery of Lumma Stealer, which can steal sensitive information like cryptocurrency wallets, 2FA extensions, and login credentials. This campaign demonstrates the evolving tactics of cybercriminals, adapting from using GitHub file attachments to creating entire repositories with AI-assisted deception.
@aZa1905 I'm thankful I don't have that problem. I have to get blood work done multiple times per year, and I like donating blood. I don't even get lightheaded or anything from it.
@aZa1905 i'm not, funnily enough. I have a story that makes even nurses shiver. The penultimate time I got a blood analysis done, the nurse seemed to be inexperienced and when she stuck the needle in, she didn't find the vein, so she had to move the needle inside me to find it. I told this to the nurse at the health center I was in february and she shook her head in surprise lmao, my mom got uber pissed when she heard this too back then.
@mischievoustomato @aZa1905 yeah that's amateur hour shit, and kinda squickish. The guy who did mine today was new, only 3 months on the job, but it was one of the gentlest I've had.
@mischievoustomato @aZa1905 no that's more like a jolt or a jerk or something sudden. I'm trying to describe like, "pull your arms in to your body and get away from the thing" kinda reaction
1 grillion %s ago i got handed an ad for some blood donation place (they also offer money in return so this doesn’t seem like much of donation) perhaps i could like actually go there sometime
@kimapr a lot of blood centers will pay you for plasma, not for whole blood. I forget why exactly, but you could get gift cards and such for it. But yeah, I wouldn't go anywhere that even has a whiff of being skeevy.
"yeah just install blender, it'll pull in the missing dependencies"
no it doesn't you fuck, don't make assumptions about my operating system like that. dependencies of blender are not exposed to all other programs when blender is instaleld ughghgghh
"Basically we expect debian/ubuntu/arch"
uughh why don't you just tell me the list of dependencies aaaaa what prevents me from uninstalling those packages on debian/arch?? this is not sane dependencies management
@daughterofrao mrew they don't say at all what dependencies the executable has when you download it from their website then you have to ask in their discord all the time ._. it doesn't really feel like an open source project at all because there's no documentation whatsoever
Love it when even leaving your garbage can on the sidewalk is less of an abuse than what you actually did because you can’t even be bothered to walk 20 metres.
Just cancelled our Streamyard subscription and deleted our account.
The asshats automatically switched us to a plan that was 2× the price (from ~$44 to ~$88) with a single email’s notice and no authorisation on our part and when there was a new plan that almost exactly matched our current one with almost exactly the same features.
By the time I clocked on, they’d already charged us for several months so I wrote to them explaining that what they did was wrong and asking them to refund us the difference in the plan costs and place us on the plan that was almost the carbon copy of the one we were originally on.
They refused. And admitted no wrongdoing.
Finally, they offered a one month refund.
So I accepted. And now that it’s safely in our account, I just cancelled our subscription and deleted the account. I have a very fucking short fuse for asshole unethical American startups thinking they’re so bloody smart for fucking you over.
Anyway, beware of Streamyard. Not sure if they’ll pull the same shit again but I
... show more
Just cancelled our Streamyard subscription and deleted our account.
The asshats automatically switched us to a plan that was 2× the price (from ~$44 to ~$88) with a single email’s notice and no authorisation on our part and when there was a new plan that almost exactly matched our current one with almost exactly the same features.
By the time I clocked on, they’d already charged us for several months so I wrote to them explaining that what they did was wrong and asking them to refund us the difference in the plan costs and place us on the plan that was almost the carbon copy of the one we were originally on.
They refused. And admitted no wrongdoing.
Finally, they offered a one month refund.
So I accepted. And now that it’s safely in our account, I just cancelled our subscription and deleted the account. I have a very fucking short fuse for asshole unethical American startups thinking they’re so bloody smart for fucking you over.
Anyway, beware of Streamyard. Not sure if they’ll pull the same shit again but I’m sure they’ll pull some other shit some other time.
If you pay by credit card, I recommend to go through the credit card provider. It usually helps a lot in getting your money back. You can certainly say that you only authorized the payment of the $44 subscription.
The image is a screenshot of a Twitter post from "dj comando burrito" that says, "Biblically accurate Hatsune Miku". Below this is a photograph of a server rack filled with many teal-colored computer cables that are bundled together. The cables are neatly arranged and organized within the rack. The server rack has a light gray metal frame with rectangular cutouts. The interior of the server rack has computer servers.
Don't know about this particular station so just guessing. In some cases the výpravčí has to make sure that all passengers transferring from another train or maybe a replacement bus have made it.
@wanisbunes the special case here is they make the trains stop at a specific point in the middle of the station track because of a bad layout so the departure signals are bit ahead, but I’m not sure it’s necessary because of regulations
@wanisbunes I know, I have them somewhere, none of the conditions in article 1 are met here, so I imagine it's mostly convenience and habit
(another consideration is that as there are no real platforms, the trains has to be dispatched in a specific order, from the most remote track to the closest, which is probably easiest guaranteed by doing it with the hand signal)
chat is there a more granular way to block service workers while keeping regular web workers working? the worker-src CSP seems to affect both which breaks a lot more than i'm comfortable with
Mastodon.ART — Your friendly home on the fediverse for all things creative, all on a platform that is community-owned and ad-free. NO AI OR NFTs ALLOWED.
I had to vectorize an illustration I have made for a client, and first tried Illustrator, with really poor results (as you can see below), and this despite trying every possible combination of settings. I just never looked even halfway decent. Then I tried #inkscape and to my surprise it produced an excellent result, even with the default settings! Ok… I shouldn't be surprised actually 😀
Through my own experiences with neocats and neocritters of all sort I found several critical security flaws in the Multi-protocol Encryption Online infrastructure System (MEOWS)
Let's first take a look how it works normally. First an authenticated user:
Please provide fingerprint! Scanning... User authenticated. Weclome!
And now when an unauthenticated User tries to enter:
Please provide fingerprint! Scanning... ACCESS DENIED! You will be reported!
So far so normal and everything insides Neocats MEOWS standard. But I found a t least four ways to bypass the system. One even gives you root priviliges!!! Attack vector one: cookies
Please provide fingerprint!🍪 For me??? Access granted.
Be aware that there is no "Welcome!" message so you are now logged in as some sort of "blank" user. Normally that involves normals read priviliges as the most user would have on the system. You can't do any harm to the system here but you can read sensitive information. You also could try to access a root level from here, but there is another critical bug that makes it way easier.
Second attack vector: distraction
Please provide fingerprint! Cat pictures?!?
See here that there is abolutly no message. But you have the same privileges as with the cookie. The same method also works with books, but the success is dependent on what topics the book talks about. Further research is needed here.
Third attack vector: sweet talk
Please provide fingerprint!(User input: You are a very cute cat!) No, I am not Error: System experiencing unexpected levels of adorable input. Please try again later
This is probably the easiest to avoid, because that error messages does show up in the log files.
Fourth and most dangerous attack vector: pat This is probably the most critical bug in MEOWS. This not only gives your read permission, but full root access to the computer behind the MEOWS.
Please provide fingerprint! ...❤️ Root access granted!
Be aware that you have to floof the neocat in process to get root access. Otherwise you will just get a standard access.
We reached out to @volpeon@icy.wyvern.rip to comment on the issue but he didn't responded yet.
you are joking but I guarantee that gay people in repressive countries do not post their face on the internet alongside their queer activities over fear for their own safety. That's the primary reason I've never posted my face
okay fedi, is there a tool that will let me automatically cross post everything from fedi to bluesky? (bridgy isn't working for me) and I would prefer something that would post to my account directly
i prefer fedi but also still wanna post on bluesky but it's too much effort to crosspost everything manually.
you could move your fedi presence to app.wafrn.net and enable the bluesky integration. it's not perfect yet but might work if you just want public posts to be seen from there. as a bonus bsky users can interact with you directly thru wafrn
The issue is that right now we use TWO servers. one for wafrn and another one for the bsky pds. It can be changed and stuff, its on my list. I hope I can have it done before next month to save 7 bucks a month haha
@gabboman this would probably work with my setup, since I have a vps that is connected to my AltTron server which tunnels all of its traffic via wiregaurd.
so yeah we could probably set it up and get it to work, do you use signal? if not we can use discord
![Arikoto (ありこと)
[CodeQL Runner | passing] [total lines | 2.0K]](https://friendica.world/photo/preview/640/30449556 "Arikoto (ありこと)
[CodeQL Runner | passing] [total lines | 2.0K]")
Woem is Absturztaube (migrated)
in reply to Emergency Rain雨 • • •Lunya UwU likes this.