#Pretend its Saturday

[askriopuppy]

seeing as the other princes have joined in sinful Saturday but im a bit late, I'll be doing it sunday!

Ask me anything you want! Both nsfw and sfw!

[gummybugg]

Glory

Upon lending my heart to thee

Did I finally start to see

Why temples are built for gods

And kingdoms fight for glory

[agangan]

i was rewatching grepre with a friend and right after I GET JUMPSCARED WITH A NEW FUCKING TEASER??? THE TIMING??? WAHT THE FUCK????? im so sleepy but also i cant stop shaking i wanted to draw something so i calm down

[purplepenguintime]

Me when I achieve enlightenment

[sideblogdotjpeg]

i am not immune to launchpad sol and albin thoughts

[presdestigatto]

good lord some people are saying its no big deal to win at monaco when their drivers have no wins no poles at the track #lol

[cameoutstruggling93]

💜❤️

[oflgtfol]

we work together later this week i think im just gonna be straight up after our shift ends i'll be like hey dude. i am Aromantic. and i'll explain it to him if i must. we have a lot of mutual queer friends so hopefully he's at least acquainted with the vague idea. so i'll explain it to him and lay it all out. like i do not - i cannot - feel anything romantic, but i know that i like talking and hanging out with you, and i'm not opposed to like, seeing where this goes, so long as like, YOU are okay with the idea of me not reciprocating the romantic feelings. not because of anything about you but because of me and who i am. this is potentially weird and nontraditional and potentially even offputting to "date" someone who doesn't reciprocate your romantic feelings but like it certainly can and has been done before and as long as YOU are chill with the idea then i'm down to try it out. i also don't know what "it" is because as i said i'm aromantic i don't know what any of this entails. so forgive me if i'm also a little bit clueless in all this. so i'm gonna lay it all out honestly and let him make the decision if he wants to continue because i sure as fuck do not know what the hell is going on in my life anymoreeeee

[justheblueberry]

looking thru the tags on my prev reblog. wow. wow there are so many people having experiences all at the same time and sometimes they collide for a couple hours or just a day and its okay its beautiful

[giverofempathy]

TEACHER AGREED ON THE LABEL I CHOSE FOR MY EXAM COLLECTION SO NOW I GET TO MAKE COTTAGECORE CLOTHES !!!! so happy :)

[salora-rainriver]

Question: have you ever known a rapist. Ever.

Question 2: have you ever listened to any trans woman talk about what it’s like to be openly trans in public. Ever.

[mostlysignssomeportents]

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en

[beansforwhat]

yall ever look back on your past and think

"damn. my time in the [x piece of media] fandom really fucked me up. idk if I can ever recover from that"

and then you swirl into thoughts of how most of the fandoms you've been in in your past have subtly traumatised & groomed you into being the person you are today?

[foldingfittedsheets]

I’ve been fired exactly once in my life. In my early twenties I was working at a pizza place. The pizzas were artisanal, thin crust and personal. They’re a huge chain now but when I first started the company was in its infancy. It was the wild west of management, and the core investors would frequently stop by to check on things. One of these people was this round little man with rage issues. A knock off Danny Devito with no charisma at all.

His favorite thing to do was to come in on a Friday or Saturday night. We'd be at our stations: taking orders, making pizza, manning the oven, finishing orders off, running the cash register. He'd shove his way onto the line and start rearranging people. "You, get off orders and work the cash register, you come over and make the pizzas!" With a line of customers snaking out the door he'd throw off all our grooves and rattle us.

Then, inevitably, a mistake would happen.

When it did he'd call the person over and say, "Hey c'mere. You're fired." Just like that. No inflection, just a flat "You're fired." It was absolutely a power kink, and because of his involvement the average turn over was three months. You were a veteran at five months.

One night there was only three of us manning the front. I took an order than went to the cash register to ring them out before I made the pizza. This horrible man watched that then called me into the back. I didn't know if I was about to be fired. But I wasn't. In fact, he had one other move besides firing people. He yelled.

In the back he absolutely lost his mind screaming at me for being on the cash register. I'm talking veins popping, spit flying, red with rage, this man just started bellowing nonsensically about where I should be and how I was just such a failure. It was truly like his brain had shut off, nothing he was saying even made sense. I stood there in the face of this tirade for a minute and then set a record for being the first person to ever cut him short by bursting into tears.

He instantly stopped yelling and it was like Jekyll and Hyde. He was remorseful and consoling, deeply embarrassed by my display of emotion. All my male coworkers just took the abuse but faced with my weeping he about faced and instantly backed off. I went outside to cry and when I came back in he pretended it had never happened.

That was the state of things. The investors knew they desperately needed to keep this man out of the stores, but they couldn't just give him the boot. They needed to move him aside and fill his position with someone. The store manager was this lovely woman who had hired me on the spot at my interview. The entire staff adored her. She was the best fit to get this roided out investor out of the stores for good.

Her replacement was this man called Anthony. He was instantly loathed by the entire staff. Condescending, critical, and lazy he started off his reign by letting go a core lead who "back talked." He spent a whole morning berating the opening crew because the closing crew (who had sold 100 more pizzas than we were even supposed to have on hand) had forgotten to windex the doors. He left the entire crew to close without him while he flirted with a girl who wasn't his pregnant girlfriend. He hired his roommate to replace the lead he fired and even that guy hated his guts.

Our antipathy toward him made him paranoid and resentful and one by one he started finding excuses to fire the whole staff, certain that if he could clean house he'd be able to do the job. My time came, and he sat me down with his boss, my former manager. She cried as he announced I wasn't personable enough and used too many pepperonis.

I looked at her, the woman who had trained me on how many pepperoni to use, but she said nothing. What could she say? He was the boss now and had determined I was going to be let go regardless. Too many in this case was seven. Seven pepperonis on a personal pizza. The correct number was five according to him, which is one pepperoni per slice, and one in the middle.

I sat there for a moment, taking it in. I smiled at my old manager, obviously miserable. I looked back at him and said, "You're a terrible manager, you're doing the worst imaginable job." I outlined some of the things he'd done so she could hear them, then I stood up and left. I made it to the back room before I started crying.

I found out later through a bus boy that he replaced the whole staff with college kids who had such limited availability that the store couldn't run, then quit three months later leaving the whole place in shambles. Most of the old staff returned, but I'd moved onto the sex shop already and was enjoying a job with significantly less risk of being fired on a whim.

However I do have to disclose on job applications if I've ever been fired. I always says yes and list the reason as, "Excessive use of pepperoni." It has never failed to get a laugh from my interviewer.

[nintendont2502]

@ninjayuri

Last Sasuke Saturday of 2022 how are we feeling

[ssahotchnerr]

a bit late but i have a request for protective aaron 😓😓 reader and hotch having a date night and they run into someone who claims to be from the fbi like that one guy who prentiss garcia and jj came across?? maybe they play along for while? i love ur writing btw 💕💕 and congrats on 5k!!

brad's back

let's pretend this hasn't been in my drafts for ages, and what if it is the same guy they came across 🤭 cw; jealous!aaron, bau fem!reader, bar setting, light drinking mentions, suggestiveness, brad LOL wc; 1.2k

Saturday night. Date night.

Aaron and yourself had already finished dinner, and had stopped at a nearby bar for a drink or two before heading home. Jack was at Jessica's for the night, having fun of his own at a sleepover with his cousins.

That meant a wonderfully empty apartment was waiting for you, and all of its advantages.

You were giddy with impatience, eager to head out. As you waited for Aaron to return - he had run to the men's room - out of your peripheral you sensed someone lingering, just a few feet away from where you were sat.

You turned your head, subtly brushing your fingers through your hair so your glance didn't seem purposeful. It was a man in a suit, hair swept cleanly, looking greatly out of place in the casualness of the bar.

But your discreet attempt at observing did go noticed; the man took it as a plausible excuse to approach you.

"You should be careful."

Your eyebrows quirked quizzically, evaluating whether or not his statement was a threat or hopeful flirting. "How so?"

"Saturday night. It's getting late. We're in a high crime area."

You widened your eyes in feigned surprise, "Are we?"

No, you were not.

You quickly deemed him harmless, for now. And while you waited, why not play into it; he obviously had some story going, without a doubt a highly entertaining one at that. Not only, with Aaron due back in a few short minutes, you wouldn't mind seeing his protective side in the slightest.

"But lucky for you, I'm around. I just so happen to be a part of the FBI."

"Really." Your chin pointed downwards, not wasting a second to rack through your brain. He didn't look familiar, and you were quite good at remembering faces. You definitely hadn't come across this man before in practice.

When nothing unveiled, "I didn't catch your name."

"Brad."

Holy shit. You've heard the infamous Brad story from the girls, numerous times, and this had to be him. It had to; he was just as they described: vain, a bit gawky. You quickly stifled the laugh that wanted to burst through your chest. It's been months since, and evidently he was still using the same pickup.

"Brad the FBI agent." You nodded slowly, toying with your drink, fingers on the rim. "That's quite the title. What department are you in?"

"That's classified," he answered, leaning against the counter on an elbow. "I'm afraid I can't tell you that."

"I see..."

Your eyes shot to the side as Aaron approached, landing on him just in time to see him stop in his tracks. As expected, a scowl deepened on his face as he saw Brad talking to you, also taking notice of his close, flirtatious proximity. His feet began moving once again, more urgency in his step.

"You must know Aaron then." You gushed, grabbing onto Aaron's arm and drawing him close as soon as he was in reach, and before he could ruthlessly interrogate Brad. Aaron lightly stumbled in surprise at the sudden pull.

Brad blanched, "I, urm-"

"Aaron," you grinned, "this is Brad."

Aaron shot you a look, one that read: 'And why the hell would I care?' but as he gave you said look, he immediately eyed the mischievous, fiery glint in your eyes. You were up to something.

The tension lessened in Aaron (barely), offering a rather stiff, "Hello."

"Brad," you turned, your hand clutching onto Aaron's bicep, your thumb grazing it calmly. "Aaron's in the FBI too."

Aaron's shoulders relaxed, probably coming to the same realization; he's heard the story also, as Penelope all but sprinted into the bullpen to share the hilarious encounter.

"No, I don't believe we have met." He activated his Hotch Stare, "What department are you-"

"Oh, he can't say. Classified." You interrupted, lips developing into a pout. "Strange, isn't it?"

While Aaron's notorious expression was enough to make Brad squirm, he also put an arm around you, keeping you close. Very close, your shoulder was practically digging into his chest.

Brad forced a laugh, his voice painfully strained. "Actually, it's uh... the big one. In DC."

"The big one." Aaron deadpanned, his brows furrowing more into a hardened line above his eyes. "You mean the J. Edgar Hoover Building?"

"Yes sir, that one." He rushed out, his gaze darting to the side. Probably looking for a quick escape.

"And your speciality?"

A dreadfully, humorously weak answer, "Crime."

"Crime." Aaron repeated, with an undertone of idiot.

"Modern day hero, clearly." You inputted. Aaron's lips twitched, holding back a smile.

"Your Superior is?"

"Superior... you see, I really can't stay. My boss wouldn't be too happy with me giving out the details."

"And you are aware that impersonation can be charged as a criminal offense," Aaron laid it on thick, his tone nothing less than strictly authoritative. "Aren't you?"

Brad opened his mouth to respond. Much to his avail, only silence came out.

"If I were you, I would try to find a better use of your time than using a forged title to pick up women. Perhaps being yourself may work? Although, I believe that needs extensive work as well."

Humiliation glassed over Brad's eyes, a blush rising to his cheeks. He turned on his heel, retreating.

"One more thing."

Your heart skipped a beat. From Aaron's tone of voice, the protectiveness you had anticipated - deep emphasis was about to come to the surface.

"I'm not the only one in the FBI." He spoke with pride in his chest, cocking his head towards you. Aaron's lips also quipped into a smile, whereas a smug look was on your face. "She's more than capable to take care of herself. And if for some reason she couldn't, that's where I come in."

Brad merely stood there, helplessly. From the irritation present on his face, he was completely over it.

"Have a good night."

"That was something, wasn't it?" You stated humorously once Brad was out of earshot.

Aaron snorted a laugh into his drink. "I'll say."

"I wonder how often it's worked." You thought aloud, feeling for those who had unknowingly fallen for it.

"Not enough if he's still using it as a ruse."

"It's kinda sad." While it was well deserved, long overdue and hopefully ceased any future endeavors of his, you still couldn't help but feel bad. Partially bad.

"It is, but he doesn't deserve your pity sweetheart." Aaron's hand fell atop yours, giving your knuckles a gentle pat. "Ready to head out?"

You nodded yes, "I've been ready."

After tossing some bills on the counter, Aaron properly grabbed your hand this time. The two of you headed for the exit, Aaron's hold on your hand tightening - to not lose you amidst the crowd, or for anyone else to make a pass at you.

"Is this the part where I say I can show you what a real FBI agent can do?" Aaron teased, a delightful little smirk on his face as he opened the door.

You laughed. "Whatever makes you happy. And benefits me."