Hi, I'm Marla! I have never been particularly invested in posting anywhere in my multiple decades on the internet, but when I do it's badly drawn furry smut or video games.
I occasionally draw, or 3d model, or play music, or write, or paint miniatures, or program, or any number of other things; It turns out ADHD's got hands, and I've become exceedingly mediocre at more things than I can count. Tell me about your favorite TRPGs and fighting games, why you're a marmot, and which contributor to Webcage you think has the most interesting solo album.
I love pictures of the Holy Family that recast them in the modern time, or in other times and places. For example, this drawing, by Everett Patterson. (1/2)
La técnica fragmentaria es una herramienta poderosa para la creatividad y la expresión. En este video, exploramos cómo la fragmentación puede ser utilizada para crear obras de arte innovadoras y conectar con el público.
🚨Don't use Anna's Archive — it's pirate website with 61M+ books and 95M+ research papers freely available. We should all try to make billion-dollar academic publishers richer. https://x.com/MushtaqBilalPhD/status/2003447835887587556 #science
“We need to get better at treating this like a business,” ICE Acting Director Todd M. Lyons said at a border security conference in April, according to the Arizona Mirror.
The administration’s goal, he said, was to deport immigrants as efficiently as Amazon moves packages:
“Like Prime, but with human beings.”
Commercial real estate experts say concentrating detainees in warehouses would create its own logistical problems. Such structures are designed for storage and shipping, not human habitation.
They tend to be poorly ventilated and lack precise temperature controls — and, because they are typically located far from residential areas, they may not have access to the plumbing and sanitation systems needed to support thousands of full-time residents.
“It’s dehumanizing,” said Tania Wolf, an advocate with the National Immigration Project who is based in New Orleans — about one hour south from the site of a planned warehouse in Hammond, La.
“You’re treating people, for lack of a better term, like cattle.”
Nazi Germany’s Reichsbahn treated humans as "cargo," optimizing logistics via transit "warehouses" and standardized "bulk shipments."
By integrating cattle-car transports into national rail schedules, they achieved terrifying efficiency, managing millions like a routine industrial supply chain.
It’s nearly the end of 2025, and half of the US and the UK now require you to upload your ID or scan your face to watch “sexual content.” A handful of states and …
If we already know each other, hello again! It's me, my old server no longer exists & beige.party is very kindly hosting my new accounts (plz pardon my dust while I rebuild) 🚧
If this is our first meeting, hello there! I'm Irene, here's some stuff about me:
* im kind not nice
* i fake wellness not illness
* the trauma specialist literally said "therapy offers you nothing, heres a bag of chips, you have to go now"
* i made up a "how to tell if someone is a safe person" test, and the forensic psychiatrist i showed it to literally said "they wont be able to lie to you if you ask them that"
* i take absolutely everything seriously
* my life partner says im "tragically beautiful" and i know theyre correct
* im extremely bad at being governable
* i will probably make you uncomfortable and im fine with that, save us both & block me quickly ✌️
Lately I have noticed that when you purchase a ticket you don’t get a static PDF/PNG anymore.
Increasingly often, you get a .pkpass file, which is supposed to be opened in wallet apps (like Google Wallet or any 3rd-party wallet app).
Since I don’t like to share information about the events I attend with strangers on the Internet, I have decided to take a closer look at these .pkpass files.
They are just zip files that contain a background image, an icon and a pass.json with the actual information about the ticket. Nothing that can’t be handled by a script rather than a 3rd-party 100 MB mobile app.
I have thus put together a simple #shell script that does exactly that.
On Monday, the US Department of the Interior announced that it was pausing the leases on all five offshore wind sites currently under construction in the US. The move comes despite the fact that these projects already have installed significant hardware in the water and on land; one of them is nearly complete. In what appears to be an attempt to avoid legal scrutiny, the Interior is blaming the decisions on a classified report from the Department of Defense.
Last week, Google filed suit against SerpApi, a scraping company that helps businesses pull data from Google search results. The lawsuit claims SerpApi violated DMCA Section 1201 by circumventing G…
"The implied attack assumes that MFA is not used or has been bypassed. If you can get access to download the encrypted database, like what happens with most password databases that are stolen, you don’t need to deal with MFA (or those pesky password lockouts) when making attempts thereafter." hivesystems.com/blog/are-your-…
💬 50 🔁 9194 ❤️ 8059 · Instructor who gave U of Oklahoma student a zero on anti-trans paper removed from teaching · Graduate assistant Mel Curth found Samantha Fulnecky's paper unscientific and of…
Years ago I used to recommend a Fedi platform called Lemmy. However, in 2021 some very disturbing stuff about Lemmy's developers came out which totally changed my mind. Because of this, I did a thread to warn people about Lemmy and then never mentioned them again.
Today a mod on this account's old server deleted the 2021 thread, without any explanation but apparently by mistake.
If you're looking for the thread, it's on the Internet Archive:
So, still looking for someone to do a logo for my dba ★General★ Delivery, basically just stylized text, normal cash payment for this.
Also looking for someone to create official looking signs for us featuring cryptids/mythological creatures, with two initial products, and depending on sales success, two additional designs every six months for us to sell, payment is up to the artist, either straight flat rate cash, or some combo of cash and a cut of the gross.
I love things like this. At first it doesn't look like much, just a sign for an apartment complex but if you pay attention to the details, it gets really... Funny? Dumb? ?? Luxury apartments are always a rip-off, but they usually put some effort into appearance like a new sign when branding changes, not slapping a cheap sign over the old one. And that logo, is that a recolored PayPal logo?
I mean its not like I would've been surprised to hear the song modified, maybe gayed up if'n it were Dee Snider or George Michael singing it, or for a straight guy replacing Santa Claus with Mrs Claus, but for Nathaniel Ratecliff and the Night Sweats to play it straight? Yeah, I think they broke my brain.
When an entire class of technology states on the packaging that it was made in China but intended "for overseas use only," this should really give you pause before plugging it into your network.
You will find this verbiage on a lot of Android TV streaming boxes for sale at the major retailers. There's a very good reason the country that makes this crap doesn't want it on their own networks. My advice: If you have one of these Android streaming boxes on your network or get one as a gift, toss it in the trash. I'll have a lot more about this in the New Year, but these things are responsible for building out a botnet that currently has ~2M devices and is growing rapidly. blog.xlab.qianxin.com/kimwolf-…
Background
On October 24, 2025, a trusted partner in the security community provided us with a brand-new botnet sample. The most distinctive feature of this sample was its C2 domain, 14emeliaterracewestroxburyma02132[.
How do those devices (along with all the fridges and IOT cameras that make up most botnets) get infected? Aren't most of them behind NAT? I understand "default passwords", but for that to be a problem, there has to be a way for the attacker to connect to a device in the first place, and that is the part I don't get.
@miki The bot forms the connection to the server. Bing bang boom.
There's also IP6. That may or may not be available for direct addressing.
That's all the issue is. The outside doesn't know how to address something behind a NAT. Once a connection is formed the NAT gateway deals with the translations and communication happens normally for the two sides. The NAT gateway does the work at that point.
@briankrebs@infosec.exchange I don't think China is a country. I think China is a stateless territory infested by a communist criminal terrorist organization whose kingpin is Xi Jin Ping.
@clock I don't think the United States is a country. I think it's a stateless territory infested by a criminal capitalist terrorist organization whose kingpin is three billionaires in a trench coat shaped like Donald Trump.
Meant to link to my previous reporting on this topic, which briefly touches on some of the challenges w/ the ubiquity and sheer insecurity-by-design of most of these Android TV/movie streaming devices
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for…
For the record, I am mainly interested in seeing the major US retailers moving to stop selling these devices, period. That seems to be happening, at least on the ones that are being called out. But the only reason that's happening now is because more people (present company included) are starting to make a lot more noise about it.
Since I started writing about these particular video devices, I've gotten a lot of messages from readers asking, okay, but what about *this* model, as if just having a different model number or brand makes a difference. The underlying hardware and software is functionally the same.
I'll add that pro-piracy advocates are militant in their observation that technology is not inherently this or that, that it's all just how the technology is used. The subtext is, okay, maybe these things are designed w/ zero security and are a major security liability, but hey you can still flash them with whatever you want and run your own stock firmware or hardware, etc. No reason to distrust these devices at a more fundamental level, even though every single point of evidence about their design, manufacture and sale points to the opposite conclusion being the correct one.
Also, the people saying the loudest that this is a nothingburger are the same people who think flashing firmware and running custom ROMs is a thing they want to do. Most people who buy these devices a) have no clue what a liability they are and b) wouldn't begin to know how to do that, or that they might need to. To me, it's a form of class snobbery.
If you're planning to give your child a phone for Christmas, please do not install any monitoring apps on it!
I know, you're just trying to protect them. As you should! But if we accustom children to constantly being monitored, they won't protest surveillance once they become adults.
So please, teach them to use technology responsibly, even when Big Parent isn't watching!
Asakiyume
in reply to Asakiyume • • •Or this one, by Bogota artist Jean Zapata, that I posted the other day (link to original post below) (2/2)
instagram.com/p/DSklnXHEbzl/
Jean Zapata on Instagram: "Adoración by @_jean.zapata #2025 #gallery #educacion #expresionismo #fiebreafro pesebre"
Instagram