#(I'd be here again in 2024
Explore tagged Tumblr posts
ntshastark · 4 months ago
Text
Thought the people who were impressed by That Photo would like to know he does this kind of shit all the time
2K notes · View notes
theminecraftbee · 1 month ago
Text
Here's the thing about anger:
It doesn't last.
It always feels like it will. Like you're going to be angry forever. Like you have to be. Like you have to be the very fires of hell that you did not let burn you, lest those fires catch up. Like you've got to hold on to your anger lest that thing you're angry with convinces you to love it again. Like you've got to blow the whole world up, because if you don't, it'll hurt you first.
For a bit, it'll be true.
One day, though. One day you'll walk through the snow to a house on the edge of the world, and you'll look at the things that used to make you angry, and you'll realize you've grown up. Maybe you're still angry, somewhere in there. Maybe you're still sad. Maybe you're still hurt. Maybe, if you think about it long enough, the people that destroyed everything and burned you and made you who you are can still change you.
But maybe, you'll realize, you've just...
Fire doesn't burn without fuel, and when a forest burns it leaves behind new soil.
There's no point being angry over a losing hand, is Jack's point.
He has time. He's not on fire any more. He can just play a new one.
473 notes · View notes
mobius-m-mobius · 11 months ago
Text
Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media
I know what kind of god I need to be... For you.
1K notes · View notes
seaofreverie · 2 months ago
Text
Sparkstember Day 30: Whatever!
Tumblr media
Unbelievable... I told myself that I'd do something (something pretty damn ambitious for what I usually manage to do at that) and then I actually did it! I hope you liked the posts because I really loved preparing them!! <3 Sparks mean so much to me, which is probably very easy to see by now, haha... So I'm glad I could celebrate that with you all for this entire month!
I think this is also a good time to say thank you to this whole fandom... Because as someone who was once seriously the MOST anxious person on earth that you could possibly imagine, who couldn't even bear to be perceived by anyone or participate in any community, I feel so lucky to have you all!! I've been here for only about 4 months, but it feels like much much longer than that, because my life is completely different now in a major way. I'm no longer so terribly scared to do things I want and express myself openly, and this whole month was also an amazing opportunity for the latter! And now I truly feel stronger and more ready to face new challenges and try new things than ever before! <3 Also, thank you to the folks who have shown me support when I really needed it over those past couple of months, because without you it would have been a much much harder time :) :')
Thank you all once more and see you NOT next year, I mean, yeahhhh I'll see you next year during the next Sparkstember that's true, but I can assure you that I'll still be sparksposting and sharing more doodles in the meantime!! Never putting a stop to that! :] Hooray for Sparks and this amazing fandom! ✨️✨️✨️
(And here's all the drawings which I framed like I said I would lol. Looking at them now will always remind me of all the amazingness of this year's Sparkstember!)
Tumblr media
31 notes · View notes
cairavende · 2 months ago
Text
Worm Arc 23 thoughts:
So much happened in so few chapters, how do I even break this down?!?
First off, Colin had better stop fucking bonding with my daughter! And apologizing and making amends for past wrongs! I'm a huge fan of redemption arcs and second chances and that is being used against me! JUST LET ME HATE THIS MAN!!!!!!
My bug daughter is in prison but that's almost like, a minor side thing? It barely matters right now except that it gives some background structure. Compared to everything else the prison bit is just . . . a thing.
I'm in tears over bug horse. I'm bawling. I may never recover. RIP Atlas, you were the best of us.
TAYLOR GOES TO THERAPY!!!! AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA!!!!!!!!!!!!!!!!!!!!!!! IT IS EVERYTHING I EVER WANTED!!!!!!
I love Jessica so much! She does such a good job. I want to bake her cookies as thanks but I'm not sure if that would trigger some type of conflict of interest.
Fucking Glenn. I want to hate him and love him all at the same time.
Is he an artist? Absolutely! He has a vision and it is beautiful.
But also if it comes down to "letting the world end or compromising said vision" he might be the kind of person who would watch the world burn with a tear running down his cheek, because at least it was beautiful.
Look I get it. My daughter is terrifying. But that isn't because bugs are scary. It's cause my daughter is terrifying. Making her use butterflies just means a bunch of people are gonna start having butterfly phobias.
Like come on, Clockblocker gets to break fundamental forces of the universe and cause people to question their very existence!
Do not try to tell me that someone getting time frozen and just . . . skipping a chunk of time because their mind is not part of the time stream for a few minutes would not provoke some deep thoughts of existential dread! Sure not in everyone, but not everyone is scared of bugs either! I just think it's very unfair.
The Adepts are fun. Sure powers aren't "magic" but might as well have fun with the idea! Besides it seems to be working and if I had powers I'd absolutely love to lean into a magical focus idea.
I am quite upset about the fact that during the whole Thirteenth Hour thing Weaver didn't get to shove bugs down Clockblocker's throat to save him. It would have been so poetic. Saving the day by shoving bugs down throats was still super amazing, I just wanted it to be Clockblocker.
It was the most extreme level of active awareness and minor "control" while being disabled that we've seen from Taylor so far though! Really curious to get more into that, the nature of passengers/shards, and all those things. I have so many thoughts, but they're all just speculation right now (I don't think writing 75 pages of theories that all end up being wrong is really gonna be very helpful).
“If anyone asks, you kicked their asses with butterflies.” Clockblocker gets it!
It was really cool to get more into different vibes of the world with the Vegas section! I love me some thinkers and strangers.
I'm very glad The Number Man used a sniper rifle. I would have been a little disappointed if he didn't after getting into his head in his interlude - it is just the perfect weapon for him. Motherfucker over here just bouncing bullets.
Finally got to see more Bambina after the little bit in arc 8. Her power is wild, I love it! Also Bambina's mom just shot right into the top contenders for "worst parent in Worm". Like, WTF lady.
August Prince is wild. Sucks when the most effective use of your power is "human shield" though.
Considering she had an interaction with The Number Man and Contessa, Taylor actually came out of it pretty good! Sure they lost the target they were trying to bring in, but I don't know that they really had a chance of keeping Pretender. Contessa isn't easy to stop.
The only problem I have with the Las Vegas Wards actions is hiring Bambina to break Pretender free. Otherwise ya, fucking ditch the Protectorate. Given the information they have it makes sense.
TAYLOR HAS FAN MAIL!!!!!!!!! EEEEEEEEEEEEEEEE!!!!!!
Grue's letter was way to heartfelt. Tattletale clearly wrote most of it.
Like come on: "I could hit you, hug you, yell at you and hold onto you for hours all at the same time. It’s fitting that I want to kiss you and throttle you at the same time because that’s what you were to me for a long time. You drive me crazy and I can never understand what’s going through your head." This is totally Tattletale! She couldn't flirt with Taylor in her own letter, she had to be sneaky about it!
"You’re an idiot. I want you to know that. You’re an idiot, Skitter. You’re brilliant and reckless and I’m betting it makes sense to you to do this but you’re an idiot." - also Tattletale.
LOOK I'M GONNA MAKE THIS SHIT GAY AND THERE ISN'T ANYTHING YOU CAN DO TO STOP ME!!!!!!!
Imp's letter might be my favorite.
Tattletale's actual letter ends with "See you there, hun?" Just. So fucking gay. Sorry I don't make the rules.
Speaking of gay, Rachel's letter!!!!!! AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA!!!!!!!!!!!!!!!!!!!!!!!!
Wolfspider wolfspider wolfspider!
Like I mean come on
"Being around you wasn’t simple or quiet but things made more sense.  Your minion with dark hair said we need to be around people but I’m around people and still feel somethings missing." GAY
"Going to take puppies to your place again soon. Show the kids to them. Might help." SO GAY
"You have plan, okay. But if your plan means you’re thinking about fighting us you should know I am getting very good at hunting and skinning things." HOLY SHIT IT'S THE MOST LESBIAN THING EVER
"We both stay alive. Try hard." TOP-TIER GAY SHIT!!!!!!!!!!!
GGGGGGGGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
GAY GAY GAY GAY GAY GAY GAY
AND THE SCENE WITH THE CHILDREN!!! AND THE BUTTERFLIES! AND THE DICE!!!!!!!!!!!
dies of joy
Seriously, 23.4 is the most beautiful chapter in Worm so far and it'll be very hard for it to be outdone.
I could talk about just that chapter for pages. It was perfect in every way. Even if I knew it had to end with Behemoth pretty early on. There was too much hope in that chapter for it to end any other way.
But in the middle of all that downward "oh fuck it's Behemoth" stuff we got an Undersiders reunion! With so much gay!
Like - “But you guys mean a lot to me.  I’m sorry I didn’t say it before, but I couldn’t without letting on that something was going on.  You’re my family, in a way.  As lame as it might be, I love you guys.” My head turned from Grue to Rachel to Tattletale as I said it.
SO FUCKING GAY
She starts at Grue sure but ends with Rachel and Lisa when saying "I love you". Certified gay.
So gay that even Imp agrees! Though I've been doing the long drawn out “Gaaaaaaayyyyyyy” since like arc 2. So Imp is a bit behind the curve here.
TAYLOR WANTS TO GO ON A DOG PARK DATE WITH RACHEL! IT'S THE MOST LESBIAN DATE POSSIBLE!!!!!!!!!!!!!
GAAAAAAAAAAAAAAAAAYYYYYYYYYYYYYYYYYYYY!!!!!!
Weaver's new flight suit is pretty neat. Dragon is a pretty good big sister.
Cody Interlude thoughts:
THIS motherfucker! I was waiting for him to show up again.
I am so mad. I'm so fucking mad.
Cody is the worst. He's pathetic and dumb.
And Accord just has to go and get killed by him in the dumbest way! GOD DAMMIT ACCORD I SIMPED FOR YOU SO HARD!!! AND THEN YOU DIE TO CODY! OF ALL PEOPLE! YOU CAN'T BE COOL IF YOU DIE TO CODY!
Chevy too! I thought he was cool and all, but he had to die to Cody. God. The worst.
ALSO MY BABY GIRL HE TRIED TO HURT MY BABY! THE ONE WHO ISN'T MY DAUGHTER!
SOMEBODY HELP TATTLETALE!
I did like seeing more of the mechanics of the Yàngbǎn after getting hints about how they work in the Lung interlude.
The power sharing plus the power amplification is a pretty broken combo tbh. Feels like there is some pretty neat stuff that could be accomplished with that.
Fuck this man though. Simmy just had to whisper to him and just dove right in. Cody can't even conceptualize what fighting back means, that would require him to grow as a person in literally any way.
Sucks for the Behemoth fight though. I guess my daughters are going to have to save the day. Again.
40 notes · View notes
kanamesengoku · 10 months ago
Text
till all the seas run dry
"Oi! Are you Shimotsuki?" Turning to his left, he squinted a bit against the sun and leaned over the railing to see a young man around his own age, dark hair mussed and a huge duffel bag slung over his shoulder. His face was open and friendly and his bright eyes stared up at Zoro expectantly. "No, uh… she's in the shop," he offered, gesturing vaguely downwards towards the door. Then, his brain catching up, he continued, "are you… Garp's… new tenant?" Apparently the boy found the question amusing, because his face split into a huge grin and he broke into a peal of laughter. "Haha, yeah, I guess that's me!" he stated, still smiling up at Zoro. For some reason, it made Zoro want to smile back.
Roronoa Zoro, university student and florist, meets someone for the first time that he already knows.
-- relationship: monkey d. luffy/roronoa zoro rating: explicit word count: 27,976 chapter count: 7 tags: modern au, flower shop au, zoro is good at math, too many hidden references, mentioned nami/vivi, mvp sanji, developing relationship, angst and fluff and smut, most of the strawhats are just cameos so don't read specifically for them lmao, minor spoilers through wano act 1
32 notes · View notes
springs-hurts · 1 year ago
Text
Me if India loses another semifinal on 15th November-
Tumblr media
28 notes · View notes
desertfangs · 11 months ago
Text
My fanfic writer resolution for 2024 is to write more varied stuff and push myself out of my comfort zone. I want to write more stuff with pairings I haven't written much or at all, POVs I haven't tried, maybe even some outsider POV stuff. I really, really want to do at least one plot-driven longer fic. Maybe a couple of longer fics, since I tend to write a lot of one-shots. It'd be fun to possibly try co-writing with someone if the opportunity arises.
I started an AU the other day that I'm super excited about and it's literally the first AU I've ever written! I've just been so inspired by the other amazing folks in this fandom and I think it's a really fun idea.
So yeah, I just want to expand my fanfic horizons a bit and do some different stuff in the coming year. And never fear, I will still write plenty of classic Devil's Minion because they are my OTP and I never get tired of reading or writing about them. But I'm also excited to branch out a little more and do some new things!
Do you have any fandom resolutions? I'd love to hear them!
14 notes · View notes
the-insouciant-scientist · 10 months ago
Text
Ough I'm late as hell to this but! I'll be taking Feast of the Rose themed doodle requests for the next week or so! So, if anyone wants a little doodle of a hug/handshake from Harper, a kiss (cheek, hand, forehead, or lips if you're feeling really zesty) from Irving, a dance with Caiomhe, or a variation thereof, feel free to send in a request! <3
16 notes · View notes
sysig · 10 months ago
Photo
Tumblr media Tumblr media Tumblr media Tumblr media Tumblr media
Finally made it through (Patreon)
#Doodles#Here it is! Finally transitioning into 2024 doodles! Heck!!#A small handful to bid the year goodbye#Starting with trying to doodled something and it not going to plan so nevermind lol#Sucks too 'cause it was one of those shower thoughts that I got Really excited about and then every step ended up getting frustrated#Wanted to make a cover of a song and then the song had no instrumental-only version :/#Okay well the concept was meant to be a fem cover of non-human characters - I'll draw up what I think they'd look like! No#Designs were underwhelming and looked weird :// So I gave up lol#Maybe another day! But not this day not when I keep being stopped lol#Only Christmas! Yes I wore the ribbons it's an important tradition and also I like cute in them#Ma got me some fine-tip markers so I had to test them haha - they scan a bit dark so I don't think I'd use them for scanned doodles#That purple is pretty tho I do like it#Was really excited about the gold but nahh oh well I still appreciate them haha#Oh and the tests were on my latest Blank Slate scratch page haha#I've set it down again for the moment but Ch. 4 is probably about 70% done! :)#Had a lot of fun moving pieces around hehe ♪ To no one's surprise Scriabin has painted himself into a corner#Might have a mini project/side project planned around Blank Slate at some point hmmm#Other than the fic itself haha#And finally seeing out the year - it's been over for a while now!#Always feels funny to approach it's end and ring in the new
9 notes · View notes
ntebook · 24 days ago
Text
01: glass
I peer into the darkness try to make sense of the world beyond my window but my face stares back— dull, flat, blurry, bleak, hollowed eyes and fractured silhouette a figure from another plane a silent watcher guarding lesser shadows staring in as I stare out
I wonder what she sees and if the glow from the kitchen light seems inviting and warm a fluorescent halo round my unkempt hair, or if it casts my face in shadow and makes me monster and if she feels relief that she is out there in the night while I remain behind the glass
2 notes · View notes
spacedoutwitch · 2 months ago
Text
Tumblr media
Another day where I was fiddling with visuals. Not sure this turned out quite how I wanted, but it exists now! Some kinda weird.... egg society.... where the sun never rises nor sets....
Corresponding FFM Story
2 notes · View notes
lesbxdyke · 6 months ago
Text
Tumblr media
I could think of no better way to share the news than this!
So when I was 17, my cat went missing and I'd given up hope of ever seeing him again.
Until on Monday, 27th of May, 2024, my friend sent me a FB post asking 'isn't that your mother?' about the person named on the microchip.
Tumblr media
Here he is! 16 years old, and found safe, twelve whole years after he went missing!
Yesterday (Tuesday the 28th of May, 2024) I went to the rescue that had him, and I reclaimed my boy, renaming him Artie! (He'd originally been called 'Cat' because my mother and I couldn't decide on a name)
He's home safe with me now, currently inhabiting my bathroom and purring up a storm every time someone goes in there!
I'll be doing slow introductions between him and my current cat to give them the best possible chance of living in harmony!
Here's some pictures of Artie once we let him out of the carrier:
Tumblr media Tumblr media Tumblr media Tumblr media
Tumblr media
39K notes · View notes
circusgoth-dotcom · 3 months ago
Text
RAAAAHHHH I THINK I'M ACTUALLY GOING TO THE MOTHER MOTHER CONCERT IN MY AREA
0 notes
themadnatxd · 4 months ago
Text
Information being revealed that would have made me of 10 years ago freak out and I'm just here like: I don't need to revert to that fandom stage thank you very much.
1 note · View note
mostlysignssomeportents · 10 months ago
Text
How I got scammed
Tumblr media
If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:
https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security
Tumblr media
I wuz robbed.
More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!
Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).
A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.
That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).
I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.
"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"
He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.
We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.
I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.
One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.
"That was the fraudster," she said.
Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.
Wait a sec.
He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.
I'd given him my entire card number.
Goddammit.
The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:
https://us.macmillan.com/books/9781250865878/thebezzle
And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.
But I'd been conned.
Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:
https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/
That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.
Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.
I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.
Oh, shit, I'd been phished.
If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).
There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!
The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.
The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.
The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.
The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.
There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.
I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.
Not because AI is going to commit fraud, though.
One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":
https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week
I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.
As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.
This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:
https://web.archive.org/web/20090331094020/http://www.links.org/?p=591
This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.
I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.
This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.
On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.
So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.
Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:
https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security
Tumblr media
Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg
CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en
10K notes · View notes