#a few hours later i'll be here with

[stillagoodwitch]

thinking about self-destructive lily who never knows where she has to stop not because she wants to have everything but because if she doesn't she'll cease to exist

[jamesphillimoresumbrella]

Thinking about a lot of things but mainly of how Terry Pratchett writes tiredness.

(Which means I’m mainly thinking of Sam Vimes. Which is normal.)

But he gets it so right.

The feeling behind your eyeballs. Stealing time from your future self with coffee, and, when the coffee doesn’t work anymore, going on sheer bloody mindedness because you cannot stop, you can’t. Not being sure when you last had real sleep. The strange state of mind you land in where you should absolutely not be tested because everything’s on a hair trigger, and things feel like they’re moving through treacle and your ability to make decisions feels shot to hell so you can only hope that you’re making the right choices.

Not Terry Pratchett’s words, if course, but I can’t get to my bookshelf at the moment, and, if I could, I’m not sure that I can read anymore. 

I’m tired, is what I’m getting at.

And Terry Pratchett writes the whole spectrum of being human so brilliantly, but, damn, how he nails down being tired. 

[aberooski]

Me through the lense of ygo, especially GX, is really one of the most genuine versions of me. It might even be the most genuine by now. Thank you for allowing me to find a version of me that I can make sense of and know who she is and not have to stifle her or hide her from you.

Thank you for allowing her to exist.

[bunnihearted]

🧸🧃⛈️

[hikayunas]

[byanyan]

sat down at my laptop and my brain did an immediate "nope, not that" so. i guess i will try writing again later :/

[impostorsshow]

I love watching Tears of the Kingdom memories out of order /sarc /lh

It took my around 100 hours to even find out the tears were a thing and wondering wtf my mom was talking about when I kept asking for help on what to do but that aside, I had seen #1 and #2 in order, tried to find Tabatha stable for a good 2 hours and then decided to go take a break and got hit with #8, WHICH WAS LIKE GETTING HIT BY A TRAIN

#1: :0 time travel wow oh wait your my old grandparents

#2: "let's go to the castle dear and get some clean clothes"

#8: SHE'S DEAD AND GANON IS IN POWER AND YOUR FUCKING WIFE IS DEAD AND ITS YOUR FAULT RAARU

Also there's 18 memories?? Damn how the fuck is it gonna sucker punch me more than that fucking 180 in story but aside from that i. I really wish it gave you a little way to back out, like it tells you the memory of what your about to watch and if you wanna do it later, I wanted to watch them in order TT AND I STILL HAVENT FOUND TABANTHA STABLE

[tardis--dreams]

I can write 5 term papers à 8000 words in 2 months!

[bunniecunni]

staying up till past 7am every day for 2 weeks is definitely getting to me so I'm going sleepy early tonight bois I'm not ignoring you!!!! I'm just passing out rn lolllll nini :3

[batsarebetterthanpeople]

Also, I would like to explore the idea that Louis is sure that Doug’s his actual dad.

Louis: thank you for joining me for this family meeting today. We need to discuss my paternity.

Mary: it’s not a question. You know who your biological father is.

Louis: or do I? Let’s look at the evidence!  you started taking painting lessons when Alma was 5. There is a seven year gap . When you and Dad got divorced, you had already I had been dating your instructor. Who is now my stepfather.

Doug: that’s not proof of anything?

Louis: evidence part two: genetic short comings. (Insert slide with very unflattering photo of Stede at 14 with the most obnoxious headgear)

Stede: where on earth did you get that photo??

Louis: I have my ways!! Anyway…Both Dad and Alma had massive overbites they had to have corrected as kids. I didn’t! My hair is darker, my nose has less character.

Ed under his breath to Stede: didn’t he just finish Invisalign?

Mary: fine! Let me go grab the test out of the lock box. I had you tested when you were born. It says that Stede is your father.

Doug: you look like your mom, champ.

that is so fucking funny. omg. You're so right. Also he got the photo from knife buddy Jim, who got it from Lucius when he sent the picture to the private group chat the book store employees have to affectionately dunk on their boss (Stede). Lucius got it from Fang who got it from Ed when Ed was trying to prove to Fang that Stede used to be so fucking dorky it hurt back when all of this started.

[huehoa17]

So... Hey my name is Hoa Giang (Wa Yang) and I'm an artist?

Welcome and I hope that you're enjoying your time, I really only use tumblr nowadays, so if you try to look at other websites, I haven't updated them in a long time, the bird purgatory account is deleted so no use for looking into that, although I would like to upload more drawing videos but hey I don't think that bodes well with the files I work with currently

I wanna try to get used to talking to people here so send an ask if there's a question or anything really that you want me to respond, whether it may be art or something else?

(but please be respectful and know that I have boundaries and I'll delete any uncomfortable ones, and just be nice first and foremost, I don't know you well enough to make a joke that I'll get without utter confusion for malice or something else, especially if you're on anon)

I mainly post about that game series that I enjoy alot, especially a character from said series and my oc's! (which I'm trying to post more of nowadays)

Also I feel like this should be put on top where I said my name but hey better late than ever, right.. ? My pronouns fluctuate between he and she but nowadays I use he first

(anh is just he/him in viet so if there's any viet speakers, those are my pronouns!)

Speaking of, if there's any viet speakers that wants to talk to me, please know that my viet is... Shit at best and I use translators to read and write, so excuse me for the feeble attempts

All in all, adios but welcome, I hope that your having a wonderful day, at least

[korattata]

i wish tumblr would let me put 2 videos in one post so i could post a comparison of how Chicory was acting normal and then 48 hours later was acting. not okay.

mostly so i could just point at it and go 'why are rats like this'

[mosspapi]

The amount of stress and sadness and fear and grief and anger I have been feeling for the last two months is. Astounding. And what's worse is I haven't even actually felt any of it. I just know it's there, somewhere my brain won't let me see it, waiting to tumble out from its precarious stack in the dusty closets of my mind and and knock me down at the most inopportune moment.

[roseverdict]

microdosing on childhood nostalgia by staring dead-eyed at a windows 98 screensaver while sick enough to hallucinate*

[mostlysignssomeportents]

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en

[prickly-paprikash]

Pushing aside the fact that I am, quite possibly, a Kendrick fan—disregarding my biases, I think Drake needs to stop. Push Ups was a good diss. Surface level, vapid, but it possessed that mean, petty spirit that carries a diss track all the way. Even bringing up accusations that are, realistically speaking, unlikely still works because a diss is supposed to show just how much you hate a person and how cleverly you can bring it.

Taylor Made was weird. I get that it was a strategy. Drop the main diss first and then drop this one to really prod at Kendrick. Using Pac and Snoop AI voices sucks though. Distilling Kendrick as Taylor's underling also doesn't work because Kendrick only collaborated with her once (twice when they remade Bad Blood) and that's it. Meanwhile Drake is out here always looking for new, up and coming artists to pounce on their trends or cling to established artists. Then it got taken down, because of course it would have been. You used 2Pac's voice. Did you really think his estate, his family, wouldn't do anything?

So he bought Pac's ring and used his voice without permission. More and more we see just how much of a vulture Drake is.

And then Euphoria drops.

Your first diss was met with solid reactions. Your second got taken down. Kendrick drops on a random hot Tuesday, and in a matter of hours surpasses your numbers that took weeks to accumulate. Kendrick did that. Euphoria was also harsh, clever, and sounded so good that people kept replaying it over and over again. Once more, Kendrick schools you.

A few insiders then say that Drake will drop that night. Right after. But he then allegedly gets cold feet. A few hours later from when Drake was supposedly ready to drop but backs out, Kendrick drops 6:16 in LA.

In your previous disses, you begged Kendrick to drop something with quintuple entendres. Euphoria did that. But he took it a step further by naming his second diss 6:16 in LA.

June 16: Father's day. Referencing the fact that Drake has been proven to be a deadbeat father.

June 16, 1971: Tupac's Birthday. Kendrick idolizes him. Drake steals from him.

June 16, 2019: First episode of Euphoria drops. A show Drake is listed as a producer on. A show about underage girls entering a life of sex, substance abuse, and more. Things that Drake has been accused of repeatedly in the past.

June 16, 2011: in June 2, 2011, Kendrick posted on his twitter that there will be a concert at Toronto on 6/16. Allegedly this is where Drake and Kendrick first met.

6:16 AM: The time of release for this track.

6:16: Multiple possible Bible verses, given Kendrick's Christian background.

Other claims felt like reaches though, so I'll stick to that.

The final two lines of 6:16 also reference the Michael Jackson, R. Kelly, and their song "You Are Not Alone". Drake, who has always claimed he is Michael Jackson or at the very least his equal/successor, is now tied to him in a way he does not want. Because we know all of the dirt that came out after MJ's death. We all know what R. Kelly was sent to prison for. And we all know what Drake has been accused of multiple times.

Kendrick also alludes to the fact that you have a leak in your circle, Drake.

So Drake drops Family Matters. A scathing 7 minute song that makes fun of the GKMC van. Saying that Kendrick's daughter isn't his. Saying that his wife cheats on him with security. Saying that he beats his wife.

Now, these are enormous accusations levied. But Kendrick has responded before, years ago, that the DV accusations were false. He has also always been open about his faults. Adultery. Sex addiction. Insecurity. God complex. Kendrick, for better or worse, has always laid out nearly every aspect of his younger life on his songs. This also helped by the fact that in both Euphoria and 6:16, Kendrick says that Drake has spent millions on finding dirt on him but came up with nothing. Again, these accusations can still be proven true and if so, Kendrick needs to be held accountable for them.

But if not? Then Drake just adds another to the pile of "He's a liar and a master manipulator."

Drake also posts a Parody on his Insta that gains little to no attention because 30 minutes after dropping Family Matters and supposedly going on his victory lap, Kendrick drops meet the grahams.

Another thing. 6:16's cover was a glove. That meant nothing to us, the audience. meet the grahams makes it make sense by zooming out of the glove and showing off a shirt and drugs that Drake supposedly uses. Drake has not had any receipts with his accusations against Kendrick. Kendrick puts Drake's supposed prescription, his full name, on a bottle of Ozempic. Kendrick, for now, seems to make good on his threat. OvO, Drake's company, is full of leaks. And they're leaking it straight to Kendrick Lamar.

Nearly 24 hours later, Kendrick drops Not Like Us.

Euphoria was a general character dissection and assassination of Drake: Insecure about his identity as a biracial man. Culture Vulture. Blaccent user. Code switcher. Fake abs. Womanizer. Misogynist. Using black features just to feel black enough. A deadbeat dad that knows nothing of raising a child. And even revokes Drake's ability to use the N-Word (I have no stake in that I am Asian so I will keep my brown mouth shut for that).

6:16 in LA was an ominous threat that slowly reveals that Kendrick has insider information on Drake. That he is ready to leak so much more should Drake continue.

meet the grahams is a brutal open letter to Drake, his parents, and even to Adonis, Drake's son. Saying that Kendrick could be a better mentor to Adonis. Saying that Drake abandoned you and that's not your fault. Don't be like your father—whatever anyone says, for better or worse, you are a black man and don't code switch just to make yourself feel better. He says that Drake failed his mother for what he did to women. Saying that Drake's father is the cause of his gambling issues. Drake is a body shamer. Leaving the mother of his children to rot. And of course, the reveal that Drake has a secret daughter, the same way Pusha T revealed Drake has a son. Adonis.

And of course, now. Not Like Us. Where Kendrick goes all in on one topic that he has alluded to in every diss track before. Drake is a groomer. A pedophile.

I am sick. I should not be tuning into this beef. But my fever can go ahead and end me, I need to know how this ends.