#maybe I just got logged out or something?

[hazzashouse]

First Christmas as a couple (Harry Styles one-shot)

A/N: Merry Christmas 🎄! I hope this little Harry one-shot warms your hearts this holiday season. Thank you for reading and supporting my writing—it means the world to me! Stay tuned because I’ll be sharing more festive one-shots in the coming days to keep the holiday spirit alive. Wishing you all a cozy and magical Christmas!

If you enjoyed this story, please consider leaving a comment, liking, or reblogging—it truly means so much and helps support my work.

Summary: Spending their first Christmas together, Harry and the reader savor quiet moments filled with warmth and laughter.

Triggers: None—this is a soft, fluffy Christmas story with no heavy content.

Pairing: Harry Styles x Female Reader

The snow fell softly outside the window, flakes swirling under the glow of twinkling fairy lights Harry had insisted on hanging everywhere. The small, cozy living room smelled of pine and cinnamon, the Christmas tree in the corner twinkling with mismatched ornaments. Harry was kneeling by the fire, poking at the logs with careful concentration, his pink lips pursed in focus.

“Harry, you’re going to set the whole house on fire,” you teased from the couch, wrapping your blanket tighter around you.

He turned, a mischievous grin spreading across his face, dimples deepening. “I’m a man of many talents, love, but burning down our first Christmas isn’t one of them.”

You rolled your eyes, but your heart fluttered at the way he said “our first Christmas,” like it was something to be cherished, something important.

Harry got up and dusted his hands off, his emerald green sweater slightly askew, revealing a sliver of his collarbone. He crossed the room and sat beside you, his arm snaking around your shoulders as he tugged you against him.

“You’re freezing,” he murmured, pulling the blanket over both of you.

“Maybe because someone made me wait outside in the snow for fifteen minutes while he picked out the perfect tree,” you teased, nudging him with your elbow.

“It had to be just right,” he said, faux-serious. “Our first tree should be special.”

You laughed softly, tilting your head to look at him. His curls were messy, catching the light from the fire, and his eyes seemed to glow.

“You’re ridiculous, you know that?”

He leaned in closer, his nose brushing against yours. “And yet, here you are,” he whispered, his voice low and teasing.

Before you could respond, he pressed a soft kiss to your lips, his hand cupping your cheek gently. The kiss was warm, unhurried, and it felt like everything a first Christmas kiss should feel like—comforting, sweet, and full of promise.

When he pulled back, his gaze lingered on you, soft and full of something you couldn’t quite name but felt all the same.

“Harry,” you began, but he cut you off, reaching into his pocket.

“I wanted to give you this,” he said, pulling out a small velvet box. Your breath hitched as he handed it to you, his fingers brushing yours.

“Don’t worry, it’s not a ring,” he said quickly, though there was a teasing glint in his eyes. “I mean, not yet.”

You opened the box to find a delicate gold necklace with a small charm—a tiny snowflake encrusted with a single diamond.

“Harry…”

“I saw it and thought of you,” he said softly. “Unique, beautiful… and maybe just a little too perfect for me.”

Tears pricked your eyes as you set the box down and hugged him tightly. “It’s perfect. You’re perfect.”

He chuckled, pressing a kiss to the top of your head. “Well, now you’re stuck with me. At least until the tree comes down.”

You laughed, leaning into him as the fire crackled softly. Outside, the snow continued to fall, but inside, everything felt warm and bright, just as Christmas was meant to be.

[rebelliousstories]

Seasons Greetings

25 Days of Ficmas

Relationship: Remy LeBeau/Gambit x Reader

Fandom: X-Men

Request: No

Warnings: Fluff

Word Count: 1,078

Main Masterlist: Here

X-Men Masterlist: Here

Summary: Being so far away from home at the holidays, it was not something that most people could do. But leave it to a Cajun in love with another Cajun to bring home to him.

Consider Donating: Here

“Remy, ya ‘round ‘ere somewhere?” Poking her head into another room in the mansion, the woman was on the hunt. Looking around for her lover, she was trying to locate him so that he could come have some dinner.

“Remy, where ya at?” She called again, dipping into a random study. Finally, the familiar head of hair sitting against the windowsill. Sighing in relief, she was not sure whether or not she had gotten his attention, but came over to sit next to him.

Wrapping her arms around Gambit, she pressed a kiss to his cheek. “Whatcha doin’ up here, mon amour?”

“Just thinkin’, chere. Dats all.” Remy grumbled, keeping his eyes outside on the snowy ground below. He pressed a kiss to her warmed hand in return.

“Gon’ need more den dat, Remy. Ya been upset for da past few days. Tell me what’s wrong,” she tried to prompt him onto speaking more.

“Well, I just… guess da Gambit is feelin’ bit homesick, or- or like, nostalgic tonight ‘s all.” Muttering into the sweater the covered her arms, he tried to almost disappeared into the soft wool.

“Oh, Remy,” she cooed, nuzzling into the side of his head. “Whatcha thinkin’ ‘bout dat’s got you feelin’ so down?”

He took a minute to answer, looking very hesitant to say what it was. “‘Member dem bonfires up and da road on Christmas Eve? I miss those da most.”

“Maybe we should show these Yankees what a proper Cajun Christmas looks like, yeah?” She shook the other Cajun slightly, looking deep into his eyes. There was a twinkle there that had not been there before as he got excited at the prospect.

“It’s snowin’, but dat jus’ means dat de ground no set ablaze.” Her smiled widened as Remy was getting into the spirit again.

Rushing to throw on the proper outside attire, she barely managed to get her coat on when she was being pulled out the door by her boyfriend. Giggling, they set out together to gather enough dry wood and sticks to build their little fires. It was a little difficult with the snow, but they made it work.

Once they gathered enough to make one, now the real fun began. The more wood they gathered became different shapes and creations. Remy managed to find just enough to turn into a log cabin looking thing, while she attempted to make one that looked like an alligator. All the while, they kept laughing, and smiling. Reminiscing about their childhood Christmas’s.

“What are you two doing?” A sudden voice came through as they were building a fleur-de-lis. Ororo stood there, white hair nearly blending in with the snowy background.

“Cajun Christmas, Storm.” The woman beamed, adding small twigs where she could.

“And what do you do with these wooden structures?” Noticing just how many there were around the front yard of the school, Storm was utterly confused as to what these two crazy Cajuns were going to do.

“We light ‘em up.” Remy stated.

“That checks.” Storm shrugged. “Want an extra hand?”

And just like that, now three people were working on building. Ororo was intrigued as the two southerners explained to her why they did what they did. “In Cajun country, these bonfires light the way for Christmas mass. Dey serve gumbo, and make sure people reach church before Pére Nöel reaches der houses. We must put up a hundred o’ these before Christmas Eve.”

“Yeah. And Pére Nöel to us Cajuns don’t come in a sled wit’ da reindeer. He come wit’ a pirouge pulled by gators. Dis why Cajuns da best.” She added to her boyfriend’s explanation.

The stories from their childhood around these bonfires demonstrated clearly just how much this tradition meant to them. She also noticed that Gambit was in a much better mood than he had been recently. Perhaps this is what he needed; a little taste of home.

What the three did not know was that they were slowly accumulating an audience. Students watched from the windows, or they made their way to sit on the front porch of the school. The other adults were also finding ways to watch what the three were doing. Only when they began lighting them up, did they realize what had happened. Oohs and aahs sounded off, making them look over to the front of the school.

However, one person that did not understand what was going on was Charles. As he rode through the school, he became more and more confused as he could not find a single student nor teacher. That is, until he felt the culmination of all of their thoughts out front. Wheeling closer, he panicked a bit as he saw the flames but calmed down when he actually made it outside. With a smile, the professor found a spot to sit and watch the display of beautiful flames, and enjoy the warmth they provided.

Lighting the last structure, Remy grabbed his girlfriend’s hand and pulled her up to where the students and teachers sat. He sent a smile to Xavier, who winked a him in return. Storm went over to stand with Rogue and Wolverine who watched with rapt attention.

“This makin’ ya feel bettah, Remy?” She asked, leaning her head back onto his chest while she sat in front.

“Yes, it is, chere. Merci beaucoup.” Gambit pressed a kiss to her neck, and watched as the flames danced higher and higher. The chill of Christmas was gone, and he knew it was not about the temperature outside.

The fires went out a few hours later, but they continued watching until the wooden structures had been reduced to cinders. Only then, did everyone begin making their way in.

“Gambit,” Storm called, “thank you for letting me help you both. That was a lot of fun. Perhaps we can do it tomorrow for actual Christmas and you two can make some gumbo?” She left to go back into the warmth of the school before her after that.

However, the couple was stopped by Charles before they made their way in. “That was wonderful, you two. Next time, let me know first. I almost panicked when I saw the smoke rising.”

The couple looked at each other with matching smirks. Stepping forward, she rested her hand on the professor’s chair to lead them all inside. “Tell me, Charles. You ever had proper gumbo?”

Oh yeah. Remy was definitely in love with this woman.

[rotationalsymmetry]

Doing election research, doot do doot do doo.

It is annoying, doot do doot do doo.

Why did the Chron let me see stuff last week but is demanding a subscription this week? doot do doot do doo.

[freakinator]

thinking about kab and the thing about her i think is she knows just enough to keep herself safe Generally but not enough to really predict what would happen should something more... complicated??? unforeseen??? idk whats the right word to use but something not covered by someones reputation and/or vids happen, believe it or not this also affects her view of clownpierce (we'll get to that)

for example, mapicc has a reputation for being an violent, angry, & impulsive guy and nothing else which makes sense but is incredibly surface level and something that only really works if you dont have a lot of experience working with him

another is reddoons, his betrayal after the base incident while shocking is not unforeseen but his reputation as being a guy whos seen as being a reasonable person whos fairly loyal to his team made it seem like something he wouldnt do even tho it absolutely is

regarding how it affects her view of clown, since he isnt perfectly aligned with his reputation she instead pivots in the complete opposite direction and forgiving basically every crime he does even tho hes something much more mild and complicated than either his reputation or her view of him will ever be (think madonna-whore complex which is especially obvious when it comes to kabs vs woogies view of him)

another side effect of this Just Enough amount of knowledge aside from being blinded by her own expectations is that it frustrates ppl who think shes oversimplificating things (like me and seemingly several other tumblr users as well) especially when she claims that shes objectively correct and the smartest in the room at any given moment

how this roughness in her analysis affects her in the server still has yet to be fully seen but we do still have at least a couple months until the end but 'til then shes just gonna keep stumbling as more and more complicated situations pop up as is typical in lifesteal to happen and eventually shes gonna have to learn to adapt or else she'll be suffering the consequences one way or another

[reborrowing]

mermay! love to throw the gays at an au

[r0semultiverse]

Don’t Starve Lost Media or Leaked Media in 2024

Okay so I can’t find it anywhere but did anyone see a Don’t Starve claymation short recently on Instagram posted by a voice actor who took part in voicing it? Seemingly an official animation and now it’s just gone entirely. Google sucks and I don’t remember the voice actor, but I believe he was playing Wilson.

I think Willow shows up and saves him from one of the monsters and she ends up cooking a giant spider nest cocoon looking thing and eating the giant spider’s meat near the end much to the disgust of Wilson.

It was claymation/stop motion animation style and I literally cannot find a claymation/stop motion animation for this series except a fan made one from like 9 years ago. This one had very on-model characters and creatures! Wilson and (I think) Willow we’re voice acted rather than just making sounds and gesturing/emoting.

My app is really old so I’ll post a screenshot & reaction that my partner and I had to it in the reblogs. Sometimes posts with straight images don’t show up in the tags on this old phone. @thehollowkidvg as my witness, we both watched it and now it’s just gone.

[ilkkawhat]

has tumblr been acting strange on desktop for anyone else or am i just cursed

[thetangibleghost]

I think we might have trauma tied to the literal feeling of falling asleep/waking up. Like we get nightmares that are just. The feeling of changing concousness but drawn out + adrenaline + terror

[plantenjoyer]

I SWEAR I KEEP TRYING TO DO ART BUT THEN SOMETHING GETS IN THE WAY AND THEN I PROCRASTINATE AND THEN SIX MONTHS PASS

[pierswife]

God what if I did a "takeover" but instead of it just being me screaming into the void, it's actual Pokemon Insert OC time and yall can see Unova's #1 Klutz in action--

[opens-up-4-nobody]

...

[mechahero]

//Racking the brain and trying to put together a new base for another pet project involving outfits but it's not looking good right now. Which is a shame because I've got some decent inspo on hand and I want to do something like this and this.

[tender-rosiey]

from me to you — gojo satoru x f!reader

a/n: this takes place in chapter 268, soo sort of spoilers ahead? also long live gojo satoru; gojo leaves you a letter 🙏

“y/n-sensei, there is a letter for you as well!”

that catches your attention, and you look up at the first years. you tilt your head slightly, and yuuji hands you an envelope.

you gently take it from him, and the first thing you notice is “wifey” written on it then the doodle of satoru with his blindfold on. you feel your throat tighten, and your hands shake slightly.

you let out a small breath then shakily open the letter.

hey, honey!!

it first reads.

I feel like there is still much I didn’t tell you in our last meeting, so here I, your beautiful and handsome husband, am writing them down.

you swallow lightly, and a small smile appears on your face as you imagine satoru saying that, then you continue to the next line.

first, I changed all your computer passwords to variations of “satoruisthebest” at one point. your confusion was so cute!!

you quirk an eyebrow at the admission, but when you rack your brain, you remember that one day when you couldn’t log into your computer.

what you vividly remember was satoru being sat beside you the whole time, and now that you think about it. he was smiling so widely the entire time, letting out small chuckles every now and then. oh, that sneaky man.

“satoru, I am telling you it’s broken!”

“sweetheart, we spent over 2000$ on that. if it broke, then we could easily sue the company,” he chuckled, arm wrapping around your shoulder and pulling you closer.

“2 year guaranteed top performance my ass!”

you smile at the memory. it was pretty satoru of him to do that. your eyes then move to continue reading.

second, there are times when I would tell megumi that you would be coming with me, then he would turn and leave me when he found out I was tricking him.

your eyes glance up at said boy who is sat across of you. he made it out alive, despite everything. he suffered so much, but he made it.

it makes you relieved, and you can imagine satoru being bloody proud of him and saying something along the lines of ‘you handed sukuna’s ass to him, very cool!’

no matter how much megumi had frowned and grimaced at satoru’s presence or antics. it rooted itself as something—safe and familiar.

you can’t count on your hands the times when you and satoru would visit the siblings, and nobody really said it, but these meetings did all of you a favor, a chance to kind of wind down. maybe act like death might actually not be looming tomorrow.

it feels like just yesterday when megumi would cling to you when he got really sad or nervous, after so much time spent getting comfortable with each other.

he grew up well, you think, eyes gliding to next.

third, I hid your uniform every two to three weeks, so you have to stay with me.

at that, your eyes widen a bit. satoru’s schedule was pretty packed, but he somehow managed to squeeze time for quality time between you two.

it tugged on your heartstrings, and you made sure he knew how much you appreciated it, not a single space on his face left without a kiss. however, finding out that he went out of his way to make you rest and stay.

satoru’s care really showed in his actions, and you feel like this is the biggest proof of it.

“satoru, have you seen my uniform?”

“nope! maybe, it is a sign to stay home today? you’ve been working so hard, wifey!”

you cupped his face, pulled him down to your height, and kisses his cheek, “you’ve been working harder, ‘toru. let me take off some of the load at least.”

“we could both stay!”

“you’re kidding, right?”

“I already told yaga; I miss you!”

you try to stop the reminiscing further and try to compose yourself before reading the rest.

fourth, I’m the one who kept adjusting the thermostat. I just wanted an excuse to cuddle.

a fond yet melancholy smile appears on your face. you kinda figured that one out. satoru’s favorite pastime was cuddling, so it’s no surprise that he would go out of his way to create the need for it even further.

add to that, once you went to get some green tea and saw him from the corner of your eye teleport to the thermostat, click something, then teleport back to bed.

you figured that the room being chilly that night was not an exception in the middle of july.

“babeeee, it’s so cold! let’s cuddle!”

“maybe the problem is with the thermostat?”

“I checked! I think cuddling is the best solution.”

you giggle as you recall the moment, one of many similar. your heart feels a bit lighter as you go through the letter. something satoru managed to always do even in person.

he would plaster sticky notes, get you trinkets, and even pull pranks on other just to see you smile. feeling more encouraged, you keep on reading the letter.

then you feel your chest constrict so tightly that you might just throw up.

fifth, I am really gonna fucking miss you.

you read the line over again, and you purse your lip in hopes of silencing any noise that may come out as you feel the lump in your throat return, even worse than before. your breathing starts getting more difficult.

your grip on the letter tightens, and you find yourself thinking back to the good times. memories of late nights spent in each other’s arms, thinking about everything and nothing at once.

hushed whispers of confessions and quiet giggles as you reminisced on your highschool days. tight hugs when recalling the sad moments and the departure of a certain someone.

“you know, y/n, I think we might just be made for each other,” he said one night. you hummed and looked him in the eyes.

“three am thoughts?”

“three am admissions,” he grins slightly, “I am made for you, and you’re made for me.”

you remember him pulling you closer and kissing your forehead, while you teased, “and what would you need little old me for, so much that I got made?”

he feigns thinking then closes his eyes, burying his face in your shoulder, “grounding me.”

I love you. I really do, but you should know that already, right?

your eyes drift down to the corner of the paper, and that is when you feel your tears start free-falling. there is drawn a chibi satoru besides a chibi you and between them is a heart.

the chibi satoru is giving yours a big smooch, while she laughs. you never thought that the day your jealousy burns would be because of drawings, and drawings of you and your own husband, nonetheless.

“but wow, gojo-sensei is shit at writing letters,” you hear nobara remark.

megumi responds with a small chuckle, “I am fine with mine.”

“what about you, y/n-sensei?—”

the trio becomes silent as you let out a sob. a watery smile makes its way up your face as you kiss the letter gently and murmur, “so shitty.”

taglist: @magenta-cat-drawingss@pompompurin1028@scul-pted@requiem626k@nameless-shrimp@sonder-paradise@jessbeinme15s-notebook @todorokichills @ginneko @missrown @shrynkk @simplyxsinned @beautiful-is-boring @starlostlaiba @izukus-gf @irethepotato @thekaylahub @dazaisbloodybandages @aeanya @sweetcloudsimp @moon-catto @the-midnightskies@pianopuppygirl @gojosblackqueen @kryscent @kunikida-simp @whoami-72 @mx-0-child @fiona782 @kisakitwister @imjustasimpxd @psychopotatomeme @dreamcastgirl99 @watyousayin @doobiebochana @laylasbunbunny @hojicha-expresso @4sat0ruu @nineooooo @chuuyasboots @alekssashka7 @rieejjyubi02 @satoryaa @nothisispatrick300 @fallencrescentmoon @etheviese @ho34gojo @the-mom-friend-dot-com @the-weeping-author

@libbyistired @anon1412@maehemthemisfit @satorustar @b4nka1@sad-darksoul@ko-fi-heart@pumpkindudeishere@suyaaachin@babyqueen17@chaosguy352@murakami-kotone@sukun4ryomen@yumieis@hearts4itoshi@sleepyxxhead@dunixxd@sleepycrybbylaiah @imjustaduckwholikesbread @emilyyyy-08@spacebaby1@arabellatreaty@viscade @washeduphasbeen @janbannan @sugurubabe @enidths @mwtsxri @peppersapro @uranosbaaee @lifeisadumpie @guacam011y @kurooandkenmasslut @callmemirro

copyright © tender-rosiey

do not copy or plagiarize or I will tell @callmemirro

check out my buy me a coffee!

[foone]

Your posts are in an AI model

and then Tumblr decided to sell them to AI models.

Now, don't get me wrong, tumblr selling out the users to AI companies is bad, yes, they shouldn't do that. It sucks.

but don't lets get this confused: your posts were already in there. Tumblr selling them is about tumblr making some money and about the AI models having more exhaustive post collections. It's not about your posts being in an AI model, vs not being in one. That battle has already been lost.

Can you find your post on google? Then it's almost certainly in an AI model already. Think about it: These AI sites showed up before all the sites were making deals to sell their users' content, right? How do you think they built them in the first place?

They scraped the posts. Just like google and bing and such do when they build their search indexes.

It's a fundamental part of how the open web works: you want your posts on tumblr to be visible to users, right? You want them to be readable?* Like, look how much stuff broke when twitter changed their whole read-while-not-logged-in policy, ruining a bunch of thread links/NSFW links. And if it's visible, it's scrapable. That's what the AI models were built on.

I've done website scraping before (not for AI models, of course. I was doing search engines and website archival), this is just how it works. You hire a few relatively smart CS graduates and tell them "build me a scraper that'll give us a bunch of tumblr posts" and they go off for a month or two and come back with a database of a few billion posts, and you stuff that into your AI model. That's how they got all the deviantart and flickr and twitter and pinterest and so on posts. They didn't pay for them: they just took them.

They only ever pay for this shit because either:

they fucked up in such a way that the site might be able to sue them for taking rather than paying

They can buy them cheaper than they can finish taking them. Maybe they'd need to pay the CS grads for an extra month? well, that might be more expensive than just throwing the site a couple hundred thousand bucks.

ANYWAY: my point is, don't treat this "oh no tumblr is selling our posts to AI" like it's a big thing that might happen and it would be bad to happen. Yes, it's bad, tumblr shouldn't do this, this'll let AI models get continual updates of content for far easier than just scraping them would be, tumblr betrayed user trust, and so on...

but realistically, this is not a black and white matter of "if only tumblr didn't do this, then we'd be safe from AI models!"

Nope. We already lost that battle. I'm sorry, and it does suck, but that's just how it is. The avalanche has already started, it's too late for the pebbles to vote. * I'm assuming here that you don't run a private blog that's set to only followers or something. You'd be safer then, of course, but you're not really my target audience for this rant

[mostlysignssomeportents]

How I got scammed

If you'd like an essay-formatted version of this post to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

I wuz robbed.

More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!

Here's what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union's ATM and I used that one instead (I bank with a one-branch credit union and generally there's no fee to use another CU's ATM).

A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU's after-hours fraud contractor. I'd dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn't great and the staff will often make mistakes like mispronouncing my credit union's name.

That's what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank's name and then asked if I'd attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I'd had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union's ATM (it had been a very cheap looking system).

I told the guy to block my card and we started going through the tedious business of running through recent transactions, verifying my identity, and so on. It dragged on and on. These were my last hours in New Orleans, and I'd left my family at home and gone out to see some of the pre-Mardi Gras krewe celebrations and get a muffalata, and I could tell that I was going to run out of time before I finished talking to this guy.

"Look," I said, "you've got all my details, you've frozen the card. I gotta go home and meet my family and head to the airport. I'll call you back on the after-hours number once I'm through security, all right?"

He was frustrated, but that was his problem. I hung up, got my sandwich, went to the airport, and we checked in. It was total chaos: an Alaska Air 737 Max had just lost its door-plug in mid-air and every Max in every airline's fleet had been grounded, so the check in was crammed with people trying to rebook. We got through to the gate and I sat down to call the CU's after-hours line. The person on the other end told me that she could only handle lost and stolen cards, not fraud, and given that I'd already frozen the card, I should just drop by the branch on Monday to get a new card.

We flew home, and later the next day, I logged into my account and made a list of all the fraudulent transactions and printed them out, and on Monday morning, I drove to the bank to deal with all the paperwork. The folks at the CU were even more pissed than I was. The fraud that run up to more than $8,000, and if Visa refused to take it out of the merchants where the card had been used, my little credit union would have to eat the loss.

I agreed and commiserated. I also pointed out that their outsource, after-hours fraud center bore some blame here: I'd canceled the card on Saturday but most of the fraud had taken place on Sunday. Something had gone wrong.

One cool thing about banking at a tiny credit-union is that you end up talking to people who have actual authority, responsibility and agency. It turned out the the woman who was processing my fraud paperwork was a VP, and she decided to look into it. A few minutes later she came back and told me that the fraud center had no record of having called me on Saturday.

"That was the fraudster," she said.

Oh, shit. I frantically rewound my conversation, trying to figure out if this could possibly be true. I hadn't given him anything apart from some very anodyne info, like what city I live in (which is in my Wikipedia entry), my date of birth (ditto), and the last four digits of my card.

Wait a sec.

He hadn't asked for the last four digits. He'd asked for the last seven digits. At the time, I'd found that very frustrating, but now – "The first nine digits are the same for every card you issue, right?" I asked the VP.

I'd given him my entire card number.

Goddammit.

The thing is, I know a lot about fraud. I'm writing an entire series of novels about this kind of scam:

https://us.macmillan.com/books/9781250865878/thebezzle

And most summers, I go to Defcon, and I always go to the "social engineering" competitions where an audience listens as a hacker in a soundproof booth cold-calls merchants (with the owner's permission) and tries to con whoever answers the phone into giving up important information.

But I'd been conned.

Now look, I knew I could be conned. I'd been conned before, 13 years ago, by a Twitter worm that successfully phished out of my password via DM:

https://locusmag.com/2010/05/cory-doctorow-persistence-pays-parasites/

That scam had required a miracle of timing. It started the day before, when I'd reset my phone to factory defaults and reinstalled all my apps. That same day, I'd published two big online features that a lot of people were talking about. The next morning, we were late getting out of the house, so by the time my wife and I dropped the kid at daycare and went to the coffee shop, it had a long line. Rather than wait in line with me, my wife sat down to read a newspaper, and so I pulled out my phone and found a Twitter DM from a friend asking "is this you?" with a URL.

Assuming this was something to do with those articles I'd published the day before, I clicked the link and got prompted for my Twitter login again. This had been happening all day because I'd done that mobile reinstall the day before and all my stored passwords had been wiped. I entered it but the page timed out. By that time, the coffees were ready. We sat and chatted for a bit, then went our own ways.

I was on my way to the office when I checked my phone again. I had a whole string of DMs from other friends. Each one read "is this you?" and had a URL.

Oh, shit, I'd been phished.

If I hadn't reinstalled my mobile OS the day before. If I hadn't published a pair of big articles the day before. If we hadn't been late getting out the door. If we had been a little more late getting out the door (so that I'd have seen the multiple DMs, which would have tipped me off).

There's a name for this in security circles: "Swiss-cheese security." Imagine multiple slices of Swiss cheese all stacked up, the holes in one slice blocked by the slice below it. All the slices move around and every now and again, a hole opens up that goes all the way through the stack. Zap!

The fraudster who tricked me out of my credit card number had Swiss cheese security on his side. Yes, he spoofed my bank's caller ID, but that wouldn't have been enough to fool me if I hadn't been on vacation, having just used a pair of dodgy ATMs, in a hurry and distracted. If the 737 Max disaster hadn't happened that day and I'd had more time at the gate, I'd have called my bank back. If my bank didn't use a slightly crappy outsource/out-of-hours fraud center that I'd already had sub-par experiences with. If, if, if.

The next Friday night, at 5:30PM, the fraudster called me back, pretending to be the bank's after-hours center. He told me my card had been compromised again. But: I hadn't removed my card from my wallet since I'd had it replaced. Also, it was half an hour after the bank closed for the long weekend, a very fraud-friendly time. And when I told him I'd call him back and asked for the after-hours fraud number, he got very threatening and warned me that because I'd now been notified about the fraud that any losses the bank suffered after I hung up the phone without completing the fraud protocol would be billed to me. I hung up on him. He called me back immediately. I hung up on him again and put my phone into do-not-disturb.

The following Tuesday, I called my bank and spoke to their head of risk-management. I went through everything I'd figured out about the fraudsters, and she told me that credit unions across America were being hit by this scam, by fraudsters who somehow knew CU customers' phone numbers and names, and which CU they banked at. This was key: my phone number is a reasonably well-kept secret. You can get it by spending money with Equifax or another nonconsensual doxing giant, but you can't just google it or get it at any of the free services. The fact that the fraudsters knew where I banked, knew my name, and had my phone number had really caused me to let down my guard.

The risk management person and I talked about how the credit union could mitigate this attack: for example, by better-training the after-hours card-loss staff to be on the alert for calls from people who had been contacted about supposed card fraud. We also went through the confusing phone-menu that had funneled me to the wrong department when I called in, and worked through alternate wording for the menu system that would be clearer (this is the best part about banking with a small CU – you can talk directly to the responsible person and have a productive discussion!). I even convinced her to buy a ticket to next summer's Defcon to attend the social engineering competitions.

There's a leak somewhere in the CU systems' supply chain. Maybe it's Zelle, or the small number of corresponding banks that CUs rely on for SWIFT transaction forwarding. Maybe it's even those after-hours fraud/card-loss centers. But all across the USA, CU customers are getting calls with spoofed caller IDs from fraudsters who know their registered phone numbers and where they bank.

I've been mulling this over for most of a month now, and one thing has really been eating at me: the way that AI is going to make this kind of problem much worse.

Not because AI is going to commit fraud, though.

One of the truest things I know about AI is: "we're nowhere near a place where bots can steal your job, we're certainly at the point where your boss can be suckered into firing you and replacing you with a bot that fails at doing your job":

https://pluralistic.net/2024/01/15/passive-income-brainworms/#four-hour-work-week

I trusted this fraudster specifically because I knew that the outsource, out-of-hours contractors my bank uses have crummy headsets, don't know how to pronounce my bank's name, and have long-ass, tedious, and pointless standardized questionnaires they run through when taking fraud reports. All of this created cover for the fraudster, whose plausibility was enhanced by the rough edges in his pitch - they didn't raise red flags.

As this kind of fraud reporting and fraud contacting is increasingly outsourced to AI, bank customers will be conditioned to dealing with semi-automated systems that make stupid mistakes, force you to repeat yourself, ask you questions they should already know the answers to, and so on. In other words, AI will groom bank customers to be phishing victims.

This is a mistake the finance sector keeps making. 15 years ago, Ben Laurie excoriated the UK banks for their "Verified By Visa" system, which validated credit card transactions by taking users to a third party site and requiring them to re-enter parts of their password there:

https://web.archive.org/web/20090331094020/http://www.links.org/?p=591

This is exactly how a phishing attack works. As Laurie pointed out, this was the banks training their customers to be phished.

I came close to getting phished again today, as it happens. I got back from Berlin on Friday and my suitcase was damaged in transit. I've been dealing with the airline, which means I've really been dealing with their third-party, outsource luggage-damage service. They have a terrible website, their emails are incoherent, and they officiously demand the same information over and over again.

This morning, I got a scam email asking me for more information to complete my damaged luggage claim. It was a terrible email, from a noreply@ email address, and it was vague, officious, and dishearteningly bureaucratic. For just a moment, my finger hovered over the phishing link, and then I looked a little closer.

On any other day, it wouldn't have had a chance. Today – right after I had my luggage wrecked, while I'm still jetlagged, and after days of dealing with my airline's terrible outsource partner – it almost worked.

So much fraud is a Swiss-cheese attack, and while companies can't close all the holes, they can stop creating new ones.

Meanwhile, I'll continue to post about it whenever I get scammed. I find the inner workings of scams to be fascinating, and it's also important to remind people that everyone is vulnerable sometimes, and scammers are willing to try endless variations until an attack lands at just the right place, at just the right time, in just the right way. If you think you can't get scammed, that makes you especially vulnerable:

https://pluralistic.net/2023/02/24/passive-income/#swiss-cheese-security

Image: Cryteria (modified) https://commons.wikimedia.org/wiki/File:HAL9000.svg

CC BY 3.0 https://creativecommons.org/licenses/by/3.0/deed.en

[deadsetobsessions]

Sea Cryptic! Danny AU- Pt.3

[Pt.1] [Pt.2] [Pt.4] [Pt.5] [Pt.6] [Pt.7] [Pt.8] [Pt.9] [Pt.10]

“Aquaman.” Batman swept into the room, beelining straight for the suddenly apprehensive Atlantean king.

“Batman. What can I do for you?”

“Phantom. Does he pay taxes?”

“Pardon?”

Batman makes a low noise that had Aquaman’s danger senses buzzing.

“Does Phantom have to pay taxes. Towards Atlantis.”

“No…? Why?”

“He wanted money, in exchange for… information, of a delicate sort,” Batman said, diplomatically avoiding the topic of Phantom bargaining for the identities of corpses in exchange for a measly $100 dollars per identity. Like a flea market dealer, that one was.

“You encountered Phantom again?” Aquaman perked up.

“Yes. Gotham’s bay is… polluted.” Batman paused. “With victims. Of murder.”

The entire area quieted as heads turned towards the Dark Knight.

“Yes, I am… distantly aware of Gotham’s waters.” By that, Aquaman gets green around the gills whenever he turns his awareness in that direction. There’s a reason he doesn’t enter Gotham, and the Dark Knight’s ban is only half of that reason. “Ah, but you’re correct. For what purpose would Phantom need mortal currency?”

“Hn.”

“Maybe he needs some stuff?” Flash zipped to a stop next to Batman, feet tapping as he dug into the pile of snacks cradled in his arms. “Us mortals are always coming up with new things, maybe he wants to try some games or something?”

Batman tilted his head down, seriously considering Flash’s suggestion. “It’s plausible.”

“Barry, Barry, Barry. He’s old as hell, right? He probably wants to try the new booze!”

“Hal, my man!” Flash fist bumped Green Lantern, who came up. “You’re back! What happened to John?”

“Dunno. He got called somewhere that way,” Green Lantern waved a vague hand towards the left. “Had to deal with a politician or something from that area.” He shrugged, swinging an arm over Barry’s shoulders to put him in a headlock and stealing a chip.

“Huh. Anyways, would our mortal alcohol even work on a demi-god or something?”

“We should ask!” Hal turned towards Batman. “You should ask if he wants to go for a drink, spooky!”

“He’s a child.”

“He’s been around for more than a millennia, Bats.”

“Informational gathering, right, Hal?” Flashgot out of the headlock, quickly munching on his snacks to stop Green Lantern from stealing them.

“Totally. Yup.”

“…Fine.”

“Wait, are we just gonna ignore that Gotham’s waters are full of bodies?”

“Yes.”

——

“What?” Danny asked, mind half on the bags he’s dragging out of the water and the other half on the essay he has to submit in about four hours.

“Green Lantern wanted to invite you out for a drink.”

Danny turned to the stoic Gotham knight, who had his wrist computer out to log the bodies’ info the moment Danny gave him the information. Some of them even told Danny who murdered them, so Batman could start building cases with solid leads.

Danny’s only twenty. He’s not legal yet but he doesn’t want to give any clues to who he is. How is he supposed to…

Ah!

“Can’t.” Danny shrugged. “I’m not legal. I died when I was fourteen so…” Danny trailed off, speechless at the drowned puppy face Batman was giving him. What the fuck.

“Anyways, fork over my payment.”

Batman wordlessly hands him a wad of hundreds.

“What do you need cash for?” Batman suddenly asked.

“Huh? Isn’t it obvious?” Danny tucked it in. “Material things, obviously. I need a blanket,” because holy shit, Gotham is damn cold this time of year. “Anyways, see you same time next week, litterer.”

“I don’t litter.”

“Tell that to the batarangs I found under the water,” Danny grumbled. “But I’ll stop calling you that if you get a signature from Poison Ivy. I have a friend who loves her.”

“An alive friend?”

“Wouldn’t you like to know, weatherboy?”

Danny snickered and disappeared. He’s gotta cram that essay.

——

“There’s a possibility Phantom might be homeless.”

“Batman, I mean this in the nicest way, but for the love of Atlantis, please stop giving me headaches. It’s time like these I wish I stayed a lighthouse keeper.”