Nordstahl @Nordstahl@social.cleverlibre.org

boost this cat when they least expect it

Happy Holidays!

#drawing #dinosaur #art #mastoart #digitalart

Two of my kitties Artemis and Poseidon.
#catsofmasadon

Is Fox Friday a thing?

A neighbour was working on his front drive and his wife had brought a sandwich out for him on a plate and set it down. While no-one was watching this fox then snuck in to claim it (and got spotted in the act). I managed to get a couple of photos before it decided there was no more food to be had.

#fox #FoxPhoto #AnimalPhotography #photography

"Everyone needs to hear this, and they should understand in their hearts that their governments have largely abandoned them."

"No government is ever going to admit they’re a failed state. That would cost them whatever authority they have left. Instead, they’re going to continue shirking their own responsibilities, and pretend it’s normal.

They’re telling us we’re on our own now.

For once, it’s the truth."

— @jessicawildfire

https://jessicawildfire.substack.com/p/the-social-collapse-has-started

Breaking: Texas Governor Abbott has been caught lying about the power grid once again. After promising the grid would hold strong, tens of thousands of Texans are now without power as freezing temperatures blast the Lone Star State. https://youtu.be/J1wMQluQmYE

Another Elon Musk innovation: Tesla shares haven't been this affordable in years

Bidens read to patients at Children's National Hospital https://www.upi.com/Top_News/US/2022/12/23/Biden-Children-Hospital-Washington-Winter-holiday/1241671839389/

Map of the entire internet circa 1973

Doing some testing with credentials in a LastPass vault after learning that URLs of vault items are unencrypted...

While poking around in the LastPass vault within the Chrome extension, I learned that simply editing the URL field of a saved password causes an instantaneous HTTPS request to LastPass containing the cleartext URL of the item being edited.

Here's the format of the request, where the vault URL was set to www[.]google[.]com: https://lastpass.com/typeahead_addsite.php?q=www.google.com

Another example when using a fake internal URL: https://lastpass.com/typeahead_addsite.php?q=http%3A%2F%2F10.10.10.10%3A4433%2Fsecret%2Flogin.php

It appears that if the URL is well-known to LastPass, a response is sent back containing a favicon. The internal URL caused the request to respond with a 403, but the request was made nonetheless.

So not only is it saved in your vault in cleartext, but its likely getting captured in a web server log somewhere upstream. Does this matter? I guess thats up to each person to decide if they care. But this certainly bends the truth in LastPass' marketing of 'we don't know whats in your vault'

All so that you can have pretty icons next to your vault entries? Maybe this is a dense question, but why couldn't these aesthetics just be built into the client-side code? What about URLs that contain sensitive secrets in the URL parameters themselves??

The House and Senate have approved a package that not only keeps the US government open, but the $45 billion for #Ukraine.

#MerryChristmas Ukraine, from your allies in the USA.

#SlavaUkraini
#СлаваУкраїні

Source: Reuters

https://qoto.org/web/statuses/109565543314921680

#caturday on a Friday

Significant: much has been made of 10 files @yoyoel recieved on the eve of the NY Post Hunter Biden story.

The FBI has been reviewing what’s come out through the Twitter Files and say those 10 giles had nothing to do with Hunter Biden.

That and lots more new information in this story: https://www.cnn.com/2022/12/23/politics/twitter-files-elon-musk-fbi-hunter-biden-laptop/index.html

It’s those with power and privilege who’ve been able to dictate what these words mean and the punishment for infractions

I honestly no longer do “civil”, “nice” or “fair” for that matter because it’s rarely the most vulnerable get to make these determinations

How often have you seen “good white folx” use a Black persons lack of “civility”, “niceness” as a weapon for not being held accountable…y’all don’t like the approach, so anything I say is invalid…fuck that

boost this cat whenever you feel like it. no rush.

Governing competence is soon to be replaced by fools, clowns and traitors.

House approves $1.7 trillion omnibus bill amid GOP objections, sending it to Biden https://www.washingtonpost.com/us-policy/2022/12/23/omnibus-bill-house/

I'm going to bed now.

#GoodNight , fellow tooters!

Georgia QAnon activist who appeared in January 6 documentary finally charged after two years. https://www.rawstory.com/georgia-qanon-activist-who-appeared-in-january-6-documentary-finally-charged-after-two-years/

One positive thing about Elon Musk's tyrannical attack on the freedom of the press is that it pushed me over to Mastodon. I'm glad to be here.

But we can't ignore the dangerous precedent that's being set. The moment everyone starts going along with the dictator's rules and normalizing his behavior, he wins.

It's not surprising that some journalists are getting banned from Twitter. The question is why more aren't challenging and defying him.

https://www.washingtonpost.com/media/2022/12/23/musk-twitter-journalists-suspended-elonjet/