d e v o n

No title available
almost home

Product Placement
ojovivo
taylor price
KIROKAZE
No title available
dirt enthusiast

roma★
"I'm Dorothy Gale from Kansas"

★
sheepfilms
Monterey Bay Aquarium
hello vonnie

JVL
Peter Solarz
Aqua Utopia|海の底で記憶を紡ぐ
Three Goblin Art
trying on a metaphor

seen from Mexico
seen from United States
seen from United States

seen from Singapore

seen from France

seen from Canada
seen from United States
seen from Maldives

seen from Germany

seen from United Kingdom
seen from United States

seen from Canada
seen from Mexico

seen from United States

seen from Canada
seen from United States
seen from China
seen from Malaysia

seen from Netherlands

seen from Türkiye
@angrycybersecurity
jobs for girls who can't focus and are tired all the time and aren't rlly that good looking and get startled easily
Hey, so this may be a weird place to put this, but if your college or school uses Canvas, it was likely affected by the recent data breach. As of right now, the most likely personal information swept up in this hack is names and email addresses. Login and financial information were not included in the breach (as far as we know).
Right now, as a student you should beware of phishing attempts. Do not click on links seeking your login or financial information. Do not respond to emails about financial aid until verifying the email is legitimate first. Call your school or go speak to an admin in person if you have to. Report any suspicious emails to your school's IT department.
took me a minute to find, but the company that owns canvas has confirmed a "cybersecurity incident"
its being reported on by mashable, some smaller tech outlets, and Inside Higher Ed. i was also able to find a local news station reporting on their scool district's response to the attack
Huge apologies, I swear I had sources linked but Tumblr mobile loves stripping my links for some reason.
(Also for clarity to some reblogs - Canvas is an Learning Management System in which online classes are hosted. Canva is the graphic design website. They are not the same, despite being frustratingly similarly named.)
The cybercrime group ShinyHunters claimed to have hacked Instructure again, defacing the login pages of several Instructure customer schools
Whelp.
Just as an update on this, Instructure agreed to pay the ransom, which... is not great, but seems to indicate your data is not going to be leaked. As before, the biggest thing you have to be on the lookout for as a Canvas user are phishing attacks.
Do not attempt to out-malicious-compliance the staff at the malicious compliance conference.
Some dipshit decided to pay the conference fee ($250) in quarters. He handed us a wrapped plastic bag full of loose change. "It's all there," he said with a shit-eating grin, "you can count it."
Oh buddy. We're going to count it. What were you expecting?
At about the time I got to $60, he offered to give us $300 collateral so he could get his badge and go to the conference.
No, bud. You get to watch the most dyscalculic staffer count to a thousand while all your friends go in to the breakfast and find seats for the first talk.
"Ruining someone's day" is the favorite hobby of everyone here. Why would you hand us the perfect opportunity to wreck your shit and think that was an own? Half the con is calling him "Untraceable," the other half is calling him "Quarter Boy" and nobody cares what he says his handle is.
I spent an hour counting that and made him go fetch me baggies to hold it every fifty dollars.
This ended up being a good bonus prank for me too, because when the counting was done I wrapped the bags in gaffer's tape and spent the rest of the day handing it to people very casually while saying "oh here, hold this for a sec" and then watching they weren't ready for the weight (I only did this to people I know well enough to know this wouldn't hurt them).
It's an infosec conference, so it's a weekend in a hotel full of people whose favorite thing is breaking the law and whose second favorite thing is following the letter of the law while cheerfully violating the spirit.
Thank you, that means a lot coming from you, @unyanizedcatboys
Every Website right now: Give us a scan of your driver's license or be banished. It's for safety.
Every Website for the last 10 years: Oopsies we had another massive data breach! Tee-hee!
real talk i have become a problem recently. the hospital wanted my fingerprint and i said no. the receptionist was like: but its such a convenient way to check in! and i said ok i dont want you to have my biometric data. and she was so baffled. i said, can you not check me in using an id card?
well of course but dont you want to provide your biometric data for your convenience?
nope thanks!
fuck this happened again i was buying some LPs and the clerk was like: can i have your email? and i was like no.
she full on stared at me. she was like: but i need to put you into the system.
and i was like: need to? you NEED to? i don't want to give my email
and she was like: but...how are you going to return items without an account?
and i was like, with a fucking receipt??? wtf is going on right now. if i can't return them i guess i'll die??whatever
Hit them with the "if you need my email to return these items I am not buying them" and see how fast they reassure you that they don't need your email
why are there so many posts about asexuals being immune to sirens. people. sirens don’t lure you in with sex (necessarily). they sing about whatever it is that you want most. they could sing about mothman or cinnamon toast crunch and guess what then your asexual pirate is fucking dead
this is the only kind of ace discourse i ever want to see on my dash. the only kind. ever again. good job
Do you think the sirens would be grateful that they finally get some variety?
“Oh my god we can finally just sing about pasta thank the fucking gods.”
I’m not asexual but I’m fairly certain sirens would do a far better job luring me into the depths with a song about pasta rather than sex…
I mean.
“WHAT THE FUCK STAY AWAY FROM THE ROCKS.”
“FUCKER THEY SAID THEY HAVE FETTUCCINE CARBONARA AND HOT GARLIC BREAD OVER THERE HANG ON BITCH.”
This is true; Odysseus heard them promising him knowledge of the future. So the next time you see artwork like this:
Remember those sultry naked chicks are saying “We’ll tell you the winning lotto numbers.”
Them: “We have unlimited wifi at incredible speeds~” Me: *diving headfirst into the water*
This post is a blessing
Congratulations! Odysseus! You’ve been selected as a winner for the free $1000 Amazon Gift Card, Apple iPhone X 256G or Samsung Galaxy S8! Claim your prize now!
Oh my god sirens were literally scam websites
Oh my god they were phishing
"We're gonna achieve immortality by turning ourselves into machines" buddy I want you to find yourself a 15 year old laptop and try to run a 10 year old piece of software on it please. Connect to the internet, if you can, and attempt to log into any of your online accounts
I'm seeing warnings about scammers trying to commission artists but the "reference sheet" for their character they want commissioned isn't an image but a .vbs file ("visual basic script"), and will run a script when you open it, probably to yoink your account(s), but I haven't seen this from anyone who's actually clicked it yet. Just be careful and never open a file like that, 'cause people suck.
For reference (heh)
At a glance, file name checks out. But!! Do not open a .vbs file!!!
a reCAPTCHA will not request a sequence of keys, and what to do if you got scammed
(The basics of) what this actually does, because nothing is magic:
In the Reddit screenshot we see three instructions:
Press & hold the Win key + R
In verification window, press Ctrl key + V
Press Enter key on your keyboard
(We also see some odd grammatical errors - "Complete these verification steps use keyboard" instead of "using keyboard" or "To complete" - which should be a red flag as well.)
The first instruction - Win+R - opens the Run dialog:
You might notice that this looks like it's part of Windows; that's because it is. This dialog isn't part of the CAPTCHA but part of your own computer (a huge red flag!!)
The description says that Windows will open a file for you, but it's actually more advanced than that: this can run any command-line command you type into it. (If you don't know what that means, the command line is a way to interact with your computer by typing commands, and lets you do basically anything Windows can do.)
The second instruction - Ctrl+V - you might recognize: it pastes whatever you have copied to the clipboard.
Usually, you'd have copied this with a Ctrl+C or Ctrl+X, but websites are able to modify what's in your clipboard directly. (You might have experienced this with something like the "Share results" button in Wordle.)
In this case, they've copied a malicious command into your clipboard already, so when you hit Ctrl+V the command gets pasted directly into the Run dialog. I don't know the details of the specific command, but it has the power to do basically anything you can: download files, run programs, delete files, whatever.
The third instruction - Enter - is the same as hitting the OK button in the dialog: Windows executes the command you've pasted in for it.
In short, Win+R opens a tool to use commands, Ctrl+V pastes in a malicious command, and Enter executes it.
Many of you might be saying, hey, I already know what Ctrl+V does! That's great! I'm just trying to clarify how exactly the keyboard presses "run a command that can download malware onto your device", so you or anyone can understand what your keypresses are doing in general (not just in this specific fake CAPTCHA attack), and be aware when they might be doing something dangerous.
(That being said, if you scrolled past the entire post, don't press keyboard shortcuts that start with Win or Ctrl or Cmd or anything like that if you don't know what they're doing. That's all.)
“Attempting To Read News In 2025” (medium: safari with ads, screencap, 2025)
If this shit happened in 2005 it meant your computer had a virus
crossposting from bsky - glad I stopped using spotify when I did and that I unlinked it from my discord, but still
[ reddit thread | bsky post ]
helpful to know on 1,234 days left
oh dear god
I am speed running the stages of grief. Come explore this with me.
I WONDER WHY HEALTHCARE DATA IS SO LIMITED. HEY HAS ANYONE EVER THOUGHT ABOUT WHY WE DON'T HAVE COMPLETELY OPEN PLATFORMS FOR HEALTH DATA. AND WHY IT'S A BAD IDEA TO HAVE WRITE PRIVILEGES VIA SOME WEB INTERFACE TO MEDICAL RECORDS. HAS ANYONE EVER WONDERED.
okay well let's look at the github. at least an mcp server is just like a stupider API. right.
STARTING OFF. BAD.
This is. a PHI nightmare.
do you think these tech guys ever think. "i wonder why nobody has done this."
Well if they had to pick an AI at least they're not using one of the sketchy ones right. thank goodn
oh
You know, I'm glad Epic put so much time into making mychart extremely secure, even with all the health systems who configure them like a drunk monkey. it would be a shame if
hmm hey what do we think 'read local passwords' does
feed healthcare data to openclaw openclaw safe for 2FA codes and passwords in plaintext nothing bad will happen to your passwords and 2FA ccodes if you feed them to openclaww
ooohghhg my fucking ggogod
FROM DISCORD??? FROM MM DISCORD? YOU WANT TO FEED YOUR OWN PERSONAL HONEST TO FUCK PHI INTO, POTENTIALLY, DISCORD??
What many users may not know about MyChart providedby EpicSystems is that MyChart providedby EpicSystems is actually kind of like a local instance that your healthcare org runs, not a "Sign in once and see everything" type of deal (unless you have Care Everywhere, and then it maybe can be. But it Depends.)
Why is that you might ask. Well you see. There are many Rules and Laws and Regulations about the use and exchange of personal healthcare data.
Which is why of course this guy, seeing a well-thought-out and tested technical position, decided "what if i get all of them at once and also the 2FA codes and stored them ALL in the same place with no encryption whatsoever"
MRN??????????? YOUR PERSONAL HIGHLY PROTECTED BASICALLY ILLEGAL TO SHARE MEDICAL RECORDS NUMBER?
????????????????????????
This is genuinely the most terrifying import i have ever seen
I LIED; WHAT
GIVE OPENCLAW ACCESS TO YOUR ENTIRE FUCKING EMAIL AND MEDICAL RECORDS NOTHING BAD WILL HAPPEN IF YOU FEED YOUR ENTIRE BROWSER CACHE NAD PASSWORD KEY STORE INTO OPE NCLAW
okay. i'm done. i can't. i cannot continue to look at this. this is out of this world.
how do we think this project ends
sued
straight to jail
openclaw sending messages to your forme college professors with random diagnoses
hipaa police
All computer safety ever for the past 30 odd years: "if you go on the internet — especially if you're under 18 — lie about everything. Lie about your name. Lie about your age. Give as little information away about yourself as you possibly can. Obfuscate, falsify, and omit anything and everything as otherwise They Will Get Your Ass. Actually, avoid it in the first place if you can altogether."
All computer safety(?) since like 2020: "it's imperative we make every 8 year old scan a passport before letting them use their LeapFrog™️. Always-on connectivity required."
Pandoc, the near-universal document conversion tool, implemented in wasm and running purely on your computer in the browser. If you need to convert a document between formats and you don't have a tailor-made tool, this is probably the best way to do it. If you were using some dubious adware website to do it it was probably just using pandoc in the background so this just cuts out the privacy nightmare.
“I always remember having this fight with a random dude who claimed that ‘straight white men’ were the only true innovators. His prime example for this was the computer… the computer… THE COMPUTER!!! THE COM-PU-TER!!!
Alan Turing - Gay man and ‘father of computing’ Wren operating Bombe - The code cracking computers of the 2nd world war were entirely run by women Katherine Johnson - African American NASA mathematician and ‘Human computer’ Ada Lovelace - arguably the 1st computer programmer”
- Sacha Coward
Also Margaret Hamilton - NASA computer scientist who put the first man on the moon - an as-yet-unmatched feet of software engineering, here pictured beside the full source of that computer programme. #myhero
Grace Hopper - the woman that coined the term “bug”
- @robinlayfield
Grace Hopper did more than coin the term “bug”. She invented the first program linker in the early 1950s, for the UNIVAC I. A program linker translates instructions from one language to another (for example, numerical codes that represent instructions translated to machine code that computers can read), which is the very foundation of how computer’s operate independently. she also pulled a steve rogers and tried to enlist in the military a bunch of times and was denied. then, an exception was made for her when she joined the navy reserves, and she ended up serving for over 40 years (half of which was active duty). she retired from the navy Rear Admiral Grace Hopper. she was born in NYC in 1906. Grace Hopper was a fucking badass.
also computing was typically a job for women (many of whom were black women that made incredible contributions) back in the day, so it’s absolutely fucking wild that straight white men think they are the foundation of computer innovation. men PUSHED women out and took the credit.
Reblogging to do what the failed education system never did.
Reblogging to do
what the failed education
system never did.
Beep boop! I look for accidental haiku posts. Sometimes I mess up.
Adding Wendy Carlos to the list! Trans icon and pioneer of synthesized music!!
Also, just about every computerized device outside of desktops is running ARM chips now. Your phone, your keyboard, your car, your watch. Basically everything.
And ARM was primarily designed by Sophie Wilson, a trans woman.
Please don’t forget Hedy Lamarr. Screwed over by the US government. She helped develop spread spectrum communication, which in part led to the development of WiFi and Bluetooth tech.
LED, LCD and CRT colour monitors are built upon the design of Guillermo González Camarena, Mexican inventor of the colour television. Without him, computers would still be black and white. Without colour screens, video games wouldn’t have become as popular as they are now, and movies with digital effects would be almost impossible, meaning computers as a whole wouldn’t have grown to be as powerful as they currently are, because a lot of money in modern computer research comes from the film and video game industries.
ASLOF: Always Shine Light On Fuckery.
Shining light on the fuckery
Even now it’s way too common for people to automatically assume interest in computers = boy for some inscrutable reason. Just a couple of decades ago it was even a common joke that “there are no girls on the internet”.
I’d like to also add Judith Love Cohen who helped to program guidance computers for the minuteman missile and the Apollo 13 mission as well as save 13 when an oxygen tank exploded and took out their guidance system!
(Less importantly she’s also the mother of Jack Black)