oh hey @the-ravenswritingdesk - Tumblr Blog

tiktok refugees i believe you are few but it is VITAL that you know on tumblr you can speak freely. kill. die. sex. fuck. you can say things here

super-oddity

IRON FLAME SPOILERS theories & shit

okay violet’s second signet!! ry confirmed that it did manifest in this book… theories I’ve seen:

andarna’s linked to the gods, meaning her capabilities and violet’s signet defy established norms.

communicating with or resurrecting the dead. stems from her conversation with liam, though ry did say in an interview that liam was, in fact, just a hallucination. others theorize that even if that were the case, maybe sawyer was truly beyond saving had violet not intervened.

soul mender/something to do with healing venin. from the emphasis on “balance”; violet can both destroy and save the venin.

amplifier for other signets. mira’s shield, rhi pulling the dagger through a wall, dain seeing specific memories…

foresight. seeing the future; the way andarna was sure they would bond before she even hatched

time travel. linked to andarna’s power to stop time as a feathertail, the idea is that violet will ultimately go back and influence characters in the past

more theories!! bc i need to consolidate these somewhere:

naolin turned venin and is still alive (poor brennan & tairn); it’s never says explicitly that he dies, just that saving Brennan “cost him everything”— much like Lyra’s words when talking about sharing the knowledge and protection of the wards

xaden’s mom turned venin and is still alive

violet’s dad turned venin before Violet was born/conceived

if resurrection/communicating with the dead is gonna come into play, burning a person’s belongings severs any potential connection/makes it impossible

either Violet and Xaden have been having the same nightmares and were both targets or one of them is seeing the other’s dreams

“recovered correspondence” could simply mean that it was recovered from a destroyed location, or that it was for a time believed to be lost… i’m more worried about the seemingly static ranks…

#the empyrean

sandmandaddy69

softwaring

becausealecisnotyourbitch

today on: emails that would not have been on my middle school or current bingo card if you gave me thirteen thousand guesses

gonna miss this show

I personally really enjoyed s6 of Black Mirror, don't know why people are so mad about it

schibi12

Oh how i missed that fucked up emptyness and numbness you get after watching a Black Mirror episode

headspace-hotel

tbh i don't really get why we divide the oceans into different oceans because they're all connected it's the same ocean

headspace-hotel

no metaphor here just pure confusion...is there a line where one ocean stops and another begins? or is it like a smooth gradient of percentages of one ocean shading into another ocean?

sea-salted-wolverine

Yes, there is a line. There are confluences you can see and touch and they are NOT subtle in the slightest.

That's the Atlantic and the Caribbean on a particularly pronounced day.

This is the Indian and the Pacific. It's not always this obvious everywhere but the dividing lines are very much there.

Oceans have their own properties as far as temperature and salinity and unless something like a storm or a current forces them to mix they won't. Mostly this applies to vertical mixing and it gives you things like thermoclines and haloclines but water is wierd and won't mix horizontally either.

The ocean basins tend to have their own currents that go in a circle and define that ocean, and those patterns mix the water within that ocean. Like a washing machine.

The Caribbean has a little loop of its own that not on this map, but that current keeps that ocean pretty internally consistent. It's got clear warm water because of the shallow bowl of limestone sand it sits in. Where it meets the Atlantic with wildly different conditions the water is traveling in opposite directions, and it acts kind of like an oncoming lane of highway traffic. Species that have adapted to a narrow band of temperatures and salinities (most fish) can't cross, while species with a stronger homeostasis hang out there on purpose, (marine mammals, turtles, sharks). Plankton, that cannot control their horizontal movement in the water column, are held in their home territories by these barriers.

#oceans

bogleech

One single republican decided to base his vote on a reasonable evaluation of available data and it quite possibly improved thousands of lives. I hope maybe in my lifetime I’ll see an America where that isn’t shocking for a politician to do, and maybe one in which people’s entire well being doesn’t come down to just one extra guy having a shred of decency.

triviallytrue

something very charming about “I don’t really know what’s going on here but I don’t think it’s my problem” as a response to the anti-trans hysteria

kissycat

I overuse ellipsis so much it's because of my pensive nature...

mxchxiix

#marcel the shell with shoes on

glozirina

saint-ambrosef

you know how kids tend to subconsciously adopt the mannerisms of their parents? i wonder how far back that stretches.

do i laugh like my great grandfather, because that's the way my grandma laughed, and my mom copied her?

does the way my dad make comedic sounds when he's driving actually originate with a distant uncle two hundred year ago, who made funny noises in the horse-drawn cart because it made his niece laugh?

i wonder which of my little mannerisms came from ancestors long passed, and i wonder which of mine will echo in family descendants long after i'm gone.

flagellant

#we are echoes#another verse to be song again#in a different way#to the same tune

teaboot

I'm a love letter

#words

elfgrove

New Things to Beware on the Internet

On May 3rd, Google released 8 new top-level domains (TLDs) -- these are new values like .com, .org, .biz, domain names. These new TLDs were made available for public registration via any domain registrar on May 10th.

Usually, this should be a cool info, move on with your life and largely ignore it moment.

Except a couple of these new domain names are common file type extensions: ".zip" and ".mov".

This means typing out a file name could resolve into a link that takes you to one of these new URLs, whether it's in an email, on your tumblr blog post, a tweet, or in file explorer on your desktop.

What was previously plain text could now resolve as link and go to a malicious website where people are expecting to go to a file and therefore download malware without realizing it.

Folk monitoring these new domain registrations are already seeing some clearly malicious actors registering and setting this up. Some are squatting the domain names trying to point out what a bad idea this was. Some already trying to steal your login in credentials and personal info.

This is what we're seeing only 12 days into the domains being available. Only 5 days being publicly available.

What can you do? For now, be very careful where you type in .zip or .mov, watch what website URLs you're on, don't enable automatic downloads, be very careful when visiting any site on these new domains, and do not type in file names without spaces or other interrupters.

I'm seeing security officers for companies talking about wholesale blocking .zip and .mov domains from within the company's internet, and that's probably wise.

Be cautious out there.

elfgrove

I really want to reiterate how this can go wrong frequently and fast, folks.

A malicious actor sets up a page with an auto-downloader squatting on a domain name that matches a common zip file name like photos DOT zip. This website is set up to start an auto downloader upon being visited, downloading a zip file with the same name as the URL which contains malicious software (virus, worm, keylogger, etc).

Scenario.

Someone you know well sends you an email or text with promised photos attached. The email even reads something like this.

Because .zip is now a TLD, that plain text is automatically formatted into a link to malicious actor's website without them having to send you anything.

Folk with family with iPhones or iPads that are sent multiple photos in one go might be familiar with iCloud's tendency to automatically compile them into zip file for the sender and less savvy tech users have trouble NOT doing that.

These same less savvy users, or even just someone just not thinking in the moment, will click that .zip link, not realizing it isn't the the same as clicking on the promised attachment.

They download a file that matches the name they expected. They open it because they were expecting that file and it's from a trusted source. Except the file they downloaded isn't the one that was sent by their trusted source and now they have malware.

Another Scenario.

An IT person tries to send you an email with instructions on how to resolve a problem with a commonly used filename like install-repair DOT zip or to install new software like microsoft-office DOT zip.

The email may start with instructions of where to go get the legitimate file to do the install or repair, but now a line later in the instructions is also has a link to a .zip URL. A user, already frazzled by IT problems, may click it to ensure they have the right file. Again, they download malicious code from a squatting website or it prompts them with a fake login and now the squatting website has stolen their login credentials for a legitimate site. All due to an expected email from a trusted source.

Above you can see microsoft-office DOT zip is already out there with a fake Microsoft login screen waiting to steal your credentials.

These risks are already out there now because the TLD has been activated.

Plain text on old post are already being resolved into links to the new websites.

Here you can see a tweet from 2021, long before .zip was a domain name, now resolves that plan text into a clickable link. You'll start seeing this everywhere, and malicious actors do not have to lift a finger to send it to you.

Yes, a lot of users aren't going to click that, but a lot of folk will. Whomever is squatting on photos DOT zip domain name has made a one time payment to have access to anyone that ever sees that file name typed out.

In an example of an existing squatter site, clientdocs DOT zip is exactly one such pre-setup .zip domain name that initiates an automatic download. This one may be harmless, but the set ups are already out there and waiting to catch folk.