• 1 Post
  • 553 Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle




  • In another comment, someone mentioned that it’s not just repayment of interest that profits credit card companies.
    Even if you pay all debts monthly before interest can compound, the CC companies still charge processing fees to merchants on a per-transaction basis (which merchants either pass directly to consumers or indirectly through higher prices). They still get their cut, even if you don’t see it on a line item.

    Recently I had house work done. The contractor offered to charge me 5% less if I paid with cash or check instead of credit card.


  • My local fancy grocer has bins of loose spices, including salts of various colors and descriptions. A few years ago I was curious and did a bit of a deep dive on their supplier, to be disappointed when I learned that all their special salts were artificially colored. Their salts, reflecting geographic names, were named so because the company named the colors after the location – not because the salts came from those locations.



  • Everybody hates the government, but that take is not applicable.

    Reading the incident report -
    A privileged user got spearphished into downloading a compromised system administration tool. After the compromised tool was detected by industry standard (and modern) intrusion detection software and removed, the backdoor it installed, which was not fixed, was (eventually) used to install a keylogger. Shortly thereafter, another privileged user had a keylogger installed. Afterward, the harvested credentials were used to create further compromises in their network and to move laterally throughout it.

    The age of the equipment or software is not a factor when your admin accounts get compromised. The user that got compromised should have known better, but they literally failed one thing - double checking the veracity of the download website. They didn’t surrender credentials, or fall for any direct attack. It’s not really a government bad, private industry good sort of thing. Heck, if that had happened to a non-admin user, the attack wouldn’t have been possible.


  • The why is sort of at the limits of my knowledge. I can tell you a ‘close enough’ what, though.

    By default, Windows tries to install programs to the program files directory, but that requires admin, which triggers user account control. However, apps that do not require admin to install or run can still be installed to the users profile. Clicking cancel from a UAC prompt will just try to install the program locally instead of for all users.

    My assumption is that many system administrators believed UAC was enough, or that programs installing locally (as in, just for that user) and not requiring admin were not a big deal.



  • That’s kind of fucked up if there’s not an indication that it’s a replica. Akin to yelling fire in a theater if someone used one of them maliciously.

    Perhaps it could be kind of neat as a curio if it’s a highly engineered/beautiful work of art (that is maybe too expensive to use for malicious ‘jokes’). But I’d still want it to have some sort of indication that folks aren’t getting dosed/they don’t have to trigger a response by your local atomic energy officials.

    Editing to add that before I picked Krakatoa (fingers crossed on my inability to predict natural disasters), I actually searched for “disasters with no death toll” to use as an example for a potential model without much success. It is in poor taste and my comments are definitely parody.



  • Wow. A 3d printer, an ultrasonic humidifier module, and a completely sociopathic grasp on world affairs could see the most offensive Etsy store ever.

    There’s basically no limit to the depravity one could stoop to in pursuit of money.

    I sense a business opportunity, but at what cost?
    No, I mean, literally, what’s a steaming Krakatoa worth?




  • Same philosophy, but we did get married after we realized the legal protections and tax benefits were worth it. We just saw too much opportunity for our very dissimilar families to pull some nonsense if someone became ill or incapacitated.

    We snuck into a park (that requires reservations for ceremonies) with some friends and that was that.
    The rings are simple and inexpensive, and also rarely worn. We know what we’re about.



  • It’s definitely dated now, but Robin Williams’ joke about Islamic suicide bombers getting to heaven and being met with 72 virgins was what made me realize that society had it all wrong about promiscuity.

    “And now for my talent portion…”

    Don’t get me wrong, it’s an unfair generalization to say that virgins/less experienced are uniformly bad at sex (some people just ‘get it’), but it’s generally more accurate that practice makes perfect. (Or maybe that those who have more of an aptitude and interest ‘practice’ more… same result, either way.)