#2024 you have failed us

[doomdoomofdoom]

Kamala Harris does want "transgender surgery on illegal aliens that are in prison", btw.

So since Trumpists are getting mad enough about the jokes to actually cite their sources, I thought I'd put the source out into my left extremist commie faggot echo chamber, too.

The claim originates from an ACLU questionnaire she filled out for her 2020 presidential candidacy, specifically this section:

She wasn't given a new questionnaire for 2024, and has stated that while her policy on some things may have changed, her values had not. (This most likely means she moved more to the center to appease larger demographics and cut corners to reach compromises. The basic politician stuff.)

It boils down to this: If you're in prison, whether for "illegal" immigration or other crimes, you rely on the state to provide you with necessary amenities, like food and health care. Her argument isn't "hell yeah everyone in prison should get sex changes for free". It's "gender affirming surgery is a necessary medical procedure. If you are in the states care while this becomes necessary, the state should provide it." If you're outraged by your tax money being used on this, consider the massive amount of people being incarcerated in for-profit prisons, on your dime. Then ask yourself if maybe a prison reform might be in order.

Worth noting: In 2015, while Attorney General, Kamala Harris actually argued against providing gender-affirming surgery to an incarcerated trans woman, claiming that HRT and psychotherapy were sufficiently covering her medical needs. She has since obviously changed her stance and assumed responsibility. (I would like to take this moment to remind my fellow left extremist commie faggots that "willingness to learn and rethink your views" is infinitely more valuable than "perfect from the start and unwilling to listen to anyone")

Also found in the source: This image of Kamala Harris participating in the 2019 San Francisco Pride Parade, wearing what I believe to be a sequin rainbow embroidered denim jacket.

I encourage you to read the provided CNN article and the answers to the ACLU questionnaire, as they give great insight into her values.

TLDR: Based.

[wafflesrisa]

On the supposed breaching of a previous agreement

After so much misinformation has been debunked, the one item I’ve seen repeated again and again is that there was a prior agreement which Carlos supposedly broke - but Charles gave no actual information about what the agreement was.

Surely the logical conclusion to draw is that we simply don’t know what the agreement was, and so we cannot cast shade on either Charles nor Carlos off the back of the statement. We simply do not know.

Specifically, while we do know Charles subjectively thought an agreement was broken, we do not have any ability to evaluate whether that conclusion is objectively true. Indeed, we don’t even know whether Charles, when making that statement, even had all the facts to hand (given he is not privy to Carlos’ radio messages and debriefing had not yet happened).

In this context the statement from Charles cannot be taken as objective truth. At most, it is a clear indication he was feeling subjectively frustrated.

The response I’ve seen from all over social media seems to be “let’s take Charles’s word for it that trust was breached, even if we don’t know what the agreement was”.

We have no facts. We have no information. We cannot draw conclusions as to what the agreement was, and therefore we cannot know if Carlos actually breached it.

Until (if ever) we have more information, Charles’ comment can only be taken as evidencing his frustration, and no more.

[blue-eli]

Ink October day 3: Sophistry

An argument that seems plausible, but is fallacious or misleading, especially one devised deliberately to be so.

[katsu2ji]

in light of recent events with the election, i want to remind everyone to take care of themselves the best they can. i know that things are really hard right now for so many people—women, poc, lgbtq+, especially. but please do not forget that there are people out there who love you, who care for you, and wish nothing but the best for you. check in on your loved ones, and check in on yourself 🤍

i love you. we’ll be ok. it doesn’t feel that way now, and it might not feel that way for awhile. but we’ll be ok.

[brainrotcharacters]

I think I finally know why this shot was a religious awakening for me

more in tags because you fuckers seem to enjoy that

[chwedout]

happy new year everyone!💖

[mean-scarlet-deceiver]

Lightshow snippet :)

I've been trying to write a "spiritual sequel" to Steam and Light for 3 years running. It was to feature BoCo (along with a foul-mouthed relief driver) running a couple of holiday specials in mid-December, appropriately decked out in lights... and trying all the while to feign seasonal cheer. Unfortunately the truth is that he regretted this job one second after he let his malewife talk him into it he agreed to it. The result was to be an offbeat little fic for those of us who have ever worked customer service during the holiday. <3

This is me throwing in the towel on this project - just can't quite get the plot to cook.

However, I hereby offer some snippets for anyone who wants one last scrap of under-the-wire Sodor Lightshow 2024 content.

I also wanted to debut my headcanon that Bill and Ben's drivers play Pokemon Go on the job

"Hold still, will ya? We only turned over your engine so we could see what they look like—it'll be a good half hour yet!"

"A half hour?" BoCo looked at the clock mounted at Wellsworth shed, as if somehow it could back him up. But the second hand just went round uselessly at its usual speed, and the workers kept on with their fussing.

"At least. Don't get your pistons in a twist, lad; there's plenty of time."

"And if you don't hold still," quipped another worker, "I'll break out your Santa hat, and you'll wear it till it's time for your train."

BoCo made a face. He thought it was very reasonable to be restless, seventy minutes into his fitting. As the minutes crept by, and the sting of being made sport of held over his headcode as a threat to ensure good behavior deepened, he began to feel slightly murderous.

He wondered if this was how it was for Gordon and James, every other day.

BoCo rolled towards the platform rather unwillingly. There was still plenty of time before they were due, and he always preferred to back onto his train at the last possible minute, when all was just about ready and the passengers were too preoccupied with boarding to bother much about him. But his driver only snorted that shed staff had not gone to all the trouble of decking him out only for them to hide away from the public, so straight to the platform BoCo went.

"Blimey," cried a half-grown boy's cracking voice, anonymous in the throng. "They sent us the diesel, this time!"

"Ooh, gilt and flaaash," said another, with exaggerated awe.

"Sparkly!"

"I think you're a little confused, Diesel," laughed another, "you got all dressed up, but the girls' school is down in Suddery, innit?"

That was about all the reaction he got. The general laughing and shouting afterwards really all had to do with the students' own affairs, but BoCo did not know this and he felt his face start to harden into a grimace—which wasn't very professional, on a passenger service. To soothe his feelings to something more neutral, he gave a brief growl of his engine. "Is anyone here a diesel," he muttered to his driver, all irony, "and hasn't said anything yet?"

"Take it easy, lad," warned his driver. "No need to get your pistons in a twist."

BoCo glared. The smoking boy was too bold to do anything but smile back, although most of his companions started to giggle and shuffle nervously under the weight of a rumbling diesel locomotive's frown.

But not all of them. "C'mon, don't tell tales."

"Yeah, Diesel. Be a mate."

"Relax... have a puff." The tallest boy, taking the funny little whatever from his friend, made a gesture of offer.

This set off a new round of sniggers, and the engine had had enough. Not breaking eye contact, he gave a honk on his horn. 

"PORTER!" he bellowed, making everyone on the platform jump. Save for the insouciant youthful delinquents before him, who only pulled lazy faces of disgust. "If you would help these boys find their way out of the rain, and into a carriage!"

There was a collective groan and "awwww" from the boys. They began to shuffle, as if heading down the platform of their own accord. But they were such lallygags about it that, for all their amorphous shuffling, they hadn't really made an inch of progress before a porter and a schoolmaster came into BoCo's view, chivvying the boys along.

"Rat-sneak," one of them muttered out the corner of his mouth, as they passed level with the engine's bufferbeam.

"Rustbucket," hissed another.

"About as fun as old Eddie, this one..."

BoCo revved his engine, and finally got a jump out of them.

Though even then they laughed as soon as they were out of sight, unrepentant.

BoCo pressed his eyes and lips tightly shut for a moment. He then largely ignored the scolding of his driver, who had run out in alarm at the racket, and who was now grumbling that a body was expected to man a diesel-electric all on her own these days, even though you couldn't trust any engine alone for a moment.

In turn, BoCo growled protest about the blamelessness of his conduct and, especially, the insults he'd been subjected to—as a rule he wasn't a fussy sort of engine, but no locomotive busts their axles day in and day out only to take being called a rustbucket without a murmur. His driver was not oversympathetic. "Abbey boys are snotrags?" She snorted. "I'll alert the press."

People milling about at the fence grumbled among themselves, and a few even called out angrily to the porter as he made his way back into the station house. “Come on, mate! We’re all freezing our—” The cross passenger looked over at BoCo, and reconsidered. For some reason Sudrians were rather particular about their language around locomotives. “—wheels off.” 

The porter ignored the yells. 

The coaches, playing telephone, relayed up to BoCo (and down to the other end of the train) that the child was “overstimulated,” and Stationmaster had given them permission to board early so that the mother might be able to calm the girl and perhaps get her to nap quietly before the rest of the throng boarded, in hopes of avoiding a screaming meltdown. 

BoCo thought this perfectly sensible, and not much cause for the drama of the other waiting passengers. He explained as much to his driver. 

“They all turn into hags, this time of year.” He could feel the driver giving them a dark sideways glare. “Reckon I ought to stay with you this time, and protect you?” 

“My knight in shining armor,” BoCo said drily, making her cackle with a trace of real appreciation.  More passengers trickled into the station, waiting impatiently for the porters to allow them to start boarding. BoCo eyed the clouds and the clock. The former loomed but continued their progress south-east. He reckoned if they started on time they were likely to miss the rain. He’d be just as glad, to catch one break today.

“Was the day so bad as that?” [Edward] asked at last. 

BoCo’s mouth quirked briefly, albeit he’d expected this. “I’ve had worse. But I don’t know how you stand these things. The Middle Station was awful!” 

“Ah, well. Public school boys can be a little obstreperous, I suppose.” 

“Ob,” said BoCo, stunned. “Obstreperous?” 

“Some of them. Some of them are nice lads, though! Did you talk with Robert and Declan?” 

Aha. “You put them up to that?” BoCo asked slowly. 

“Well! I told them, when I dropped them off beginning of term, to expect you might come to take them away. They promised to say hullo. They did, did they?” 

BoCo smiled weariness. He wasn’t surprised, really. “They’re nice kids,” he allowed. “But I’ve no platform manner, Edward. We all know this.”

“It takes practice.” 

“This is my sixty-fourth year of service!” 

Edward winced. “That can’t possibly be true,” he said, somewhere between wistful and dazed. BoCo raised his eyebrows. “But yes, I suppose I deserved that. Still, it’s not about you succeeding or failing. I knew the passengers were safe with you, and that’s all that matters.” 

“I think Bobby and Declan, or whoever, might disagree.” 

“Robert. He hates being called Bobby.” 

“We... didn’t get that far.”

"Ooh! Ooh! It's true!"

"Give us a blink then, BoBoBoCo!"

BoCo smiled. Zippy and troublesome though they might be, the twins were also inextricably tied up for him in the ideas of home and family and he couldn't be cross to see them…

... saving, of course, occasions where they came into view recklessly pushing around trucks with explosives. 

Or messing with his brake tender.

Or covered in petrol because they had "wanted a taste." (He never had pinned down exactly the sequence of events, there…) 

Right, so maybe there were plenty of times he might be cross to see them. 

A little cheeking off, however, never hurt. Not from these two.

And so, he obligingly flicked the lights off and on again.

"Oooooh," the twins chorused, very still and wide-eyed... for at least a whole two seconds.

Ben whistled.

"You can't operate your own lights," Bill teased Edward.

"No," Edward agreed. "I have to rely on the coaches for that!"

"Do it again, BoBoBoCo!" urged Bill.

"I will not," BoCo smiled. "I mustn't risk damaging them. And what's with the new name? It won't do, you know—I don't have that many wheels!"

"Oh, still the same number of bogies?" asked Bill idly.

"We thought you might have evolved by now," giggled Ben.

BoCo glanced at Edward, who mouthed Don't ask.

The pain appeared to have knocked out [the auto-ballaster] during the wait, which was all the better for her. BoCo felt an orderly's regret when he had finished clearing away the other containers. When it was time to approach the derailed ballaster, the loud grinding of the P-Way crane vibrated the rails - and at least two of her wheels were still touching the track.

She came to with a moan, cross-eyed at first, from her awkward angle. It took her several long moments to blink herself awake and as she was doing so all she could see, amid the darkness, was a looming, growling figure, some shape she had never seen the like of, made up of nothing but blinking flashes of red.

"Uhhnnnnmm," she groaned, in hazy, blinded wonderment. "I'm in hell..."

"No. Barrow."

This time she groaned twice as loudly. "Worse and worse! I don't deserve this, I don't... I wasn't that bad..."

[pa-pa-plasma]

i don't think i'll ever get over how people treat kids that aren't good in school as worthless no matter what. "oh it can't be that bad" my guy idk how to tell you this but the last time i went to a normal high school the principal called me into his office to brag about how he failed me in all of my classes before the semester was even finished & i should quit while i'm ahead cuz i'm too stupid ("officially" diagnosed as such by a school counselor & a psychiatrist!!) to succeed. & this is considered normal

[serendipity-in-spring]

All i’m saying is the checks and balances of this country better work and continue to keep working cause i WILL be voting in 2026 AND 2028 and you CANNOT stop me or i will fight the christian god and win

[lokiiied]

[creampuffqueen]

ecology professor actually put grades in the gradebook so i know how i’m doing in the class before the final challenge: impossible

[gameshowtrainwreck]

welp. apparently i decided to hold a monday sermon with a dear friend who turned out to be a pro-life conservative. she wanted to 'resepectfully [...] agree to disagree' when i pointed out there were a lot easier, a lot cheaper, and a lot more effective ways to reduce abortions than to criminalize it. i replied to her that, respectfully, the savior i worship does not allow me to be content with thought-terminating cliches when people are getting hurt because of this.

a teenaged girl in Texas (18, might be around the same age as her daughters but I'm sure her girls are completely different) died painfully and unneccessarily of sepsis because she was forced to carry stillborn. but hey, according to her, innocent lives have to be protected. courts should start finding people innocent or pregnant.

those responsible for her death are hiding behind the pulpit, using God as their scapegoat. whatever argument the american civil religion might have about protecting the sanctity of life has gone straight into the fuckin trash can as far as i am concerned, because this very thing has happened before and people were warned that this specific kind of thing would happen.

even the most ardent, women-must-be-subservient-to-men, conservative, orthodox jews know that if it came down to a zygote or a grown woman, the woman is never to be the villain in these matters. but despite christians believing themselves better because they eat bacon, they somehow are caught severely lacking in this particular comparison.

contrast that with the venn diagram between "those in this country who claim christianity (a system of rules and dictates revolving around a man who famously blessed peacemakers)" and "those thinking the Palestinian genocide isn't going hard enough" being a single circle.

hell, our government executes people who turn out to be innocent all the time and yet the death penalty is still just as popular with the crowd that likes to print Jesus everywhere but on their own hearts. a mean person would interpret the broader consensus as thinking the government should only be used as a tool of God's wrath, not His love, not His benevolence, and certainly not His mercy.

(I try not to be mean, but that doesn't necessarily mean I am good at it.)

so, no. i will argue this because it is on my heart to argue it.

this isn't even something you can write off as hospital negligence, because how many doctors were literally afraid to treat her because of all of the hassle, paperwork, and government intrusion into their lives that would have resulted due to changes in texas' laws? isn't that one thing a lot of christians specificially say they wanna change the government to avoid? surely they did not think this happened solely in a vacuum, do they?

one hospital could be negligence. three refusing to treat her is a pattern. the purpose of a system is in what it does, which means laws designed to be compassionate towards a clump of cells has produced a lot of dead women in order to do it. if one isn't enough to count as 'a lot,' especially in the field of 'unnecessary misery and death,' please tell me where you set your number and I will pray for God to humble you in a deeply meaningful way.

the british jurist lord blackstone, the man who many consider the father of british (and by some extent american) common law said that he would sooner allow ten guilty men to go free than to see one innocent man hang. mind you, this was back in the times when a dude could get drawn and quartered for farting on a picture of the king and somehow he's ended up more-advanced than christians in the year of our lord two thousand and twenty four.

this would not have happened had republicans treated pregnant women as literally anything other than irresponsible and/or slutty and democrats done literally anything about roe v wade getting repealed beyond fundraising off of it.

and yet here the fuck we are. I hope we are all proud of that, because the people got exactly what they wanted with it.

[youreadarkwizard]

David: I think the one picture I have of us up on the wall is the one where I had the dress on. Gillian: I love that picture. David: Yeah. Gillian: And I'm holding you up. David: Exactly. Gillian: Yeah. I love that picture. (Fail Better podcast, 11/12/2024)

📸 David Duchovny & Gillian Anderson photographed by Mark Seliger, 1997

[eowyntheavenger]

Americans, these are things we are NOT saying in 2024:

"Voting blue won't solve anything." Yes it will: if enough of us do it, it will solve a problem called Trump's second term in the White House. We unfortunately live in a two-party system. If you refuse to vote, you're effectively voting for Trump. I shouldn't need to explain this to people, yet here we are.

"It doesn't matter who's president. Both candidates are the same anyway." No, they are REALLY not. Biden was never my first choice, and his shipments of arms to Israel are despicable, but don't try to tell me even for a second that a second Trump term would be the same for the world as a second Biden term.

"But voting blue won't fix [fundamental underlying problem in America]." Voting for Democrats cannot fix every issue, this is true. But by saying this and ONLY this you are discouraging people from voting by making them feel hopeless. Voting is one of many tools in our arsenal, not the only tool, but an important one, and it does matter.

"You shouldn't vote blue, you should do [other thing] instead." See above: you can vote and protest and organize at the same time. It's not either/or. You can do it all. Stop discouraging voters from exercising their rights under the guise of leftism.

"Voting is just legitimizing government power. It makes you part of the system." Literally just shut up. Women and people of color didn't fight for their voting rights to have you say things like this. If you live in America and you can legally vote, then you should fucking vote, and vote blue. There is no neutral option.

"Voting blue just makes you complicit in [this bad policy]." Inaction, and allowing Trump to have a second term, is worse for the entire world than any Democrat policy. Yes, even that one. Voting is not about finding a perfect unproblematic candidate. It is about choosing the lesser of two evils.

"Voting doesn't work because—" STOP IT. STOP DISCOURAGING PEOPLE FROM VOTING.

You know who wants you NOT to vote? Trump supporters, that's who. You should be suspicious of ANYONE who is suggesting that your vote doesn't matter, or that both candidates are the same, or that Biden's policy on XYZ means you shouldn't vote for him. Trump supporters aren't trying to get your vote by saying, "Vote for Trump!" They're trying to get your vote by DISCOURAGING YOU FROM VOTING AT ALL.

I don't like Biden either, but Trump is unequivocally worse. Voting doesn't fix everything, but it is the minimum fucking requirement of living in a democracy. Voting for president has real, tangible, immediate impacts on people's lives, and choosing not to vote is not the rebellion you think it is, it is just relinquishing your voice. So fucking vote. THIS IS A GROUP PROJECT AND DAMN IT WE ARE NOT FAILING BECAUSE OF YOU.

[intersex-support]

Help an intersex family in Gaza!

Hi everyone. I'd like to share about a fundraiser that is very important to me. A good friend of mine is in contact with the organizers.

(Described in alt).

Their story:

"Hello, my name is Abeer. I'm organizing this fundraising campaign from Belgium on behalf of my family, who currently live in Gaza. 

Since October 7, all families in Gaza have been subjected to genocide. My family is one of those families that has had to flee its own home several times because of the threat of regular attacks. 

After two months, my family decided to return home and take the risk of being bombed at any moment rather than stay in the street. Our 4-floor building now contains over 100 people who have fled from different parts of Gaza. We always open our hearts for our own people, but we can't do it without your help and support. 

My parents, Kamal (53) and Moukaram (51), are suffering from the war because of their age and health. My brother Suliman, his wife Rawan Abualnaja and their two-year-old daughter Bisan are trying to stay strong, but it's complicated by their little daughter's enormous needs. My other siblings who are not married are Mohammed 25, Inas 22, Ibrahim 17, Abdallah 15.

My family medical condition during the war:

My father suffers from delusional disorders. He can't work or help my family financially. Mohammed and Ibrahim suffer from a chronic disease, congenital adrenal hyperplasia. It is difficult for them to obtain medication in Gaza. One of their medicines has not been available in Gaza for two years. During the war, they couldn't get their medicines because they simply didn't exist anymore. My family members are still suffering. They don't want to be potential victims. They want to escape death and live like other families on the planet.

 On 01/01/2024, they attacked the local mosque and the missile failed to explode and ended up in front of my family's house. My family is in danger and the missile will explode any second.

Since then, my family has decided to be evacuated from Gaza because of the senseless attack on our city. Please help me evacuate my family to Egypt so that they can rebuild their lives in peace.

I've been in Belgium for over five years. I feel useless because I haven't been able to do much except try to help them with their daily living expenses. That's why we created this campaign. We're raising funds to evacuate my family to Egypt, a place that offers a glimmer of hope and stability. However, the cost of the evacuation is high, hence our call for crowdfunding.

Every contribution makes a difference The funds we raise will be used for :

- Evacuation from Gaza for both families (Rafah border crossing fees for 9 people total)  - Two months of temporary living expenses in Egypt, including food, shelter, and transportation  - Passport fees  - Food expences untill they leave Gaza 

No matter how small your contribution, it can make all the difference in breaking the cycle of violence and uncertainty. By supporting our campaign, you are offering a lifeline to our families so that they can rebuild their lives, heal from their trauma and make a fresh start in a safe and secure environment. Please leave a comment and share our campaign with your friends, so we can reach more people and make a bigger impact. Together, we can make a difference!"

They are using a French platform called Papayoux Solidarite instead of GoFundMe. Abeer also has a Paypal account for non European donors.

They are currently at 33 588,78 €/ 50,000 €.

Let's see if we can get them to 34,000 today. Any donation matters, even $1 or $2 donations can add up.

We need to help them meet their goal. Intersex liberation means intersex liberation everywhere--it is so important that we show up in solidarity. Those of us living with CAH know how dangerous salt wasting crises are without medication, and how important it is to urgently help Mohammed and Ibrahim get access to the medications they need to support their CAH. Intersex solidarity means that we need to show up and support intersex people facing genocide.

If you can't donate, please share. Consider doing an art raffle to raise money. Do whatever you can to help this family because it is urgent, and we need to act in solidarity with them now and make sure that the intersex community is here to support them!

[mostlysignssomeportents]

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en