still normal about him

breakfast

Mid 7 year gap date in Germany; but I took the dialogue from The Count of Monte Cristo

You can make a donation to my gogetfunding& my PayPal link... Thank you friend, each SHARE, each like, each comment of support, each small contribution is of great value to me, because this makes you feel very sad, very alone.

heat haze daze 🩸

some of my meiko sketches. i'm iN LOOOVE with her and her project diva model is literal perfection

tried somethin different

“Complementary delicacy” Anyone remember that one Ace Attorney official artwork??? I’m so in love with my girls

GUMI 🥕

New Things to Beware on the Internet

On May 3rd, Google released 8 new top-level domains (TLDs) -- these are new values like .com, .org, .biz, domain names. These new TLDs were made available for public registration via any domain registrar on May 10th.

Usually, this should be a cool info, move on with your life and largely ignore it moment.

Except a couple of these new domain names are common file type extensions: ".zip" and ".mov".

This means typing out a file name could resolve into a link that takes you to one of these new URLs, whether it's in an email, on your tumblr blog post, a tweet, or in file explorer on your desktop.

What was previously plain text could now resolve as link and go to a malicious website where people are expecting to go to a file and therefore download malware without realizing it.

Folk monitoring these new domain registrations are already seeing some clearly malicious actors registering and setting this up. Some are squatting the domain names trying to point out what a bad idea this was. Some already trying to steal your login in credentials and personal info.

This is what we're seeing only 12 days into the domains being available. Only 5 days being publicly available.

What can you do? For now, be very careful where you type in .zip or .mov, watch what website URLs you're on, don't enable automatic downloads, be very careful when visiting any site on these new domains, and do not type in file names without spaces or other interrupters.

I'm seeing security officers for companies talking about wholesale blocking .zip and .mov domains from within the company's internet, and that's probably wise.

Be cautious out there.

I really want to reiterate how this can go wrong frequently and fast, folks.

A malicious actor sets up a page with an auto-downloader squatting on a domain name that matches a common zip file name like photos DOT zip. This website is set up to start an auto downloader upon being visited, downloading a zip file with the same name as the URL which contains malicious software (virus, worm, keylogger, etc).

Scenario.

Someone you know well sends you an email or text with promised photos attached. The email even reads something like this.

Because .zip is now a TLD, that plain text is automatically formatted into a link to malicious actor's website without them having to send you anything.

Folk with family with iPhones or iPads that are sent multiple photos in one go might be familiar with iCloud's tendency to automatically compile them into zip file for the sender and less savvy tech users have trouble NOT doing that.

These same less savvy users, or even just someone just not thinking in the moment, will click that .zip link, not realizing it isn't the the same as clicking on the promised attachment.

They download a file that matches the name they expected. They open it because they were expecting that file and it's from a trusted source. Except the file they downloaded isn't the one that was sent by their trusted source and now they have malware.

Another Scenario.

An IT person tries to send you an email with instructions on how to resolve a problem with a commonly used filename like install-repair DOT zip or to install new software like microsoft-office DOT zip.

The email may start with instructions of where to go get the legitimate file to do the install or repair, but now a line later in the instructions is also has a link to a .zip URL. A user, already frazzled by IT problems, may click it to ensure they have the right file. Again, they download malicious code from a squatting website or it prompts them with a fake login and now the squatting website has stolen their login credentials for a legitimate site. All due to an expected email from a trusted source.

Above you can see microsoft-office DOT zip is already out there with a fake Microsoft login screen waiting to steal your credentials.

These risks are already out there now because the TLD has been activated.

Plain text on old post are already being resolved into links to the new websites.

Here you can see a tweet from 2021, long before .zip was a domain name, now resolves that plan text into a clickable link. You'll start seeing this everywhere, and malicious actors do not have to lift a finger to send it to you.

Yes, a lot of users aren't going to click that, but a lot of folk will. Whomever is squatting on photos DOT zip domain name has made a one time payment to have access to anyone that ever sees that file name typed out.

In an example of an existing squatter site, clientdocs DOT zip is exactly one such pre-setup .zip domain name that initiates an automatic download. This one may be harmless, but the set ups are already out there and waiting to catch folk.

It's an unnecessary and risky can of worms that's been opened up.

Holy Unforced Errors, Batman.

back to the drawing board

+flat colors and oodles of doodles ive accumulated

that one girl who dont play about the cure

I do not ask this lightly, the Missouri AG’s office has started a site to build a list of trans people. Clog the system. That’s the life of a trans kid who gets another day on this earth. Spam the fuck out of it, it’s not sophisticated. You don’t need to use a real email. Post as much as you’d like

Hi! Transgender Missourian here. DO NOT DO THIS. DO NOT SUBMIT ANYTHING TO THIS SITE.

This is not to “collect a list of trans people”. This site was created to collect fake complaints specifically about the Transgender Center at Washington University Hospital in St. Louis, Missouri. It was only uploaded because the A.G.’s “investigation” into the Transgender Center turned up nothing, so they want people to submit lies to justify shutting down the Center (which is the only one in the region).

In February, a former non-medical employee of the Transgender Center published a viral op-ed about how the Center was “mutilating children”. Every. Single. Thing. She said was a lie, and she shared identifying information about trans patients. She went straight to the Missouri Attorney General asking him to ban trans healthcare in the state.

The far-right A.G. complied and immediately opened an “investigation” into the Center.

We heard nothing for a month, demonstrating that the “investigation” found no evidence to support the government’s transphobic agenda. THAT IS WHEN THEY CREATED THIS WEBPAGE. THEY WANT PEOPLE TO SUBMIT THINGS. THEY WANT LIES. THEY WILL BELIEVE ANYTHING CRUEL ABOUT TRANS PEOPLE.

Investigations by the St. Louis Post Dispatch, the Missouri Independent, and NPR, who interviewed an enormous number of patients from the Center, found no evidence to support this former employee’s transphobic claims, nor evidence to support banning trans healthcare altogether (of course).

Despite no evidence, on April 13th, 2023, the Attorney General announced that all transgender healthcare will be illegal in the state beginning April 27th.

THE FAR-RIGHT STATE GOVERNMENT IS FISHING FOR FAKE “EVIDENCE”. DO NOT GIVE IT TO THEM.

Please actually learn about the situation and check with the people on the ground before you spread misinformation like this. Although some people may have good intentions, this will hurt trans people.

If you see this misinformation going around, please correct it (I’ve seen 3 posts like this in the last day).

⚖️☀️🌻 we always hear about propaganda from the fans... but how about from the characters? luckily interviewer, anita knough, is here to ask our lovely ace attorney cast!

little comic for this poll from @theyrebasicallycanonpoll !!! (no being toxic to em! we're here to just have fun oki!!)

you heard the aa cast!!!! now go vote nrmt go go go!!!

welp fellas, we lost but that's alright! congrats to the happy couple!! the lil museum fellas!!

have some old man (they are 35 years old) yaoi from me, on the house <33