Mastodon.

Mastodon.

Can someone help my man out?

cross-posted from: https://lemm.ee/post/47902662

First, I have no idea what some of these things are called or I think I know but I'm also second guessing myself the whole time. Also, I've never bought glass from anywhere but a local head-shop. For instance, this bong is almost 20yo. Please forgive me, if I apply incorrect nomenclature to any of the parts.

My bong's inner pipe, I think it's called a joint, broke several months back. I searched online shortly after but there were so many variables to consider that it kind of seemed overwhelming. I'm hoping there's someone within this community who has experience replacing a bongs' hardware. I have some measurements and images with the measurements included if anyone needs to see them. All of the measurements below are approximate mm -> inch conversions.

• Depth from rubber grommet to lowest part of chamber: 115 mm, 4.5 in

• Inner glass diameter (joint?): 14 mm, 0.5 in

• Inner glass diameter (bowl?): 8 mm, 0.3 in

• Diameter of lowest chamber (don't know if this is needed): 107 mm, 4.25 in

• Diameter of bowl chamber (don't think this matters): 30 mm, 1.25 in

I would appreciate recommendations you all have for reputable glassware replacement sellers (from first-hand experience, preferably). In addition, I don't think the depth of the join needs to be that long, that's just the max depth. Thank you in advance for any suggestions, recommendations, or numbers to filter for when finding a replacement!

Citizen Sleeper, a light RPG with dice-based gameplay, feels like a classic sci-fi story with contemporary ideas and worries. It's tight gameplay; I felt on edge most of my time in this decaying space station, always a sense of urgency maintaining my body and getting enough scrip for my greater goals.

All this is underpinned by some great prose. It's not quite on the level of Disco Elysium or Planescape: Torment, but even after taking in positive initial impressions, Citizen Sleeper has a surprising amount to say. The developer said they wanted to tell a story about those on the fringes of capitalism, where many of us have had to learn to survive. I think they nailed it.

The player is a sleeper, a human-machine hybrid detached from the corporate network, having to start from zero. An interesting concept itself, the story is that sleepers came about as a loophole in AI prohibition: put a human to sleep and copy them into an artificial body for indentured servitude. The means of corporate control is a built-in body deficiency. You'll degrade without a very specific chemical. The sociological concerns presented by these concepts and putting these kinds of escapees in a "normal" society are also interesting. I never know who to trust as I try to survive, knowing that merely being off the corporate leash puts me at the mercy of someone looking for a cut of the bounty. Or, I might be taken advantage of by someone that knows I can't survive without stabilizer. That's just the start of it.

Very cool experience, and refreshingly compact (I was through the main story in under 10 hours). There's a sequel coming, and I'm eager to get more of a taste of the game world.

Mastodon.

🇯🇵Source.

I really enjoyed the Witcher 3 so I thought I would go back and play the first two games even though some people seemed to have mixed opinions on what they think of them both. Then after playing the first two games my partner got interested in W3 so we then played through that together. I feel like now I have some good perspective to offer on the whole series and what people should do if they really enjoyed 3 but haven't gone back.

Witcher 1

Witcher 2

Witcher 3

Thanks for reading and let me know if you've played these and what you think or if you want play these in the future!

To protect users from data breaches and phishing attacks, service providers typically implement two-factor authentication (2FA) to add an extra layer of security against suspicious login attempts. However, since 2FA can sometimes hinder user experience by introducing additional steps, many websites aim to reduce inconvenience by minimizing the frequency of 2FA prompts. One approach to achieve this is by storing the user's ``Remember the Device'' preference in a cookie. As a result, users are only prompted for 2FA when this cookie expires or if they log in from a new device.

To understand and improve the security of 2FA systems in real-world settings, we propose SE2FA, a vulnerability evaluation framework designed to detect vulnerabilities in 2FA systems. This framework enables us to analyze the security of 407 2FA systems across popular websites from the Tranco Top 10,000 list. Our analysis and evaluation found three zero-day vulnerabilities on three service providers that could allow an attacker to access a victim's account without possessing the victim's second authentication factor, thereby bypassing 2FA protections entirely. A further investigation found that these vulnerabilities stem from design choices aimed at simplifying 2FA for users but that unintentionally reduce its security effectiveness. We have disclosed these findings to the affected websites and assisted them in mitigating the risks. Based on the insights from this research, we provide practical recommendations for countermeasures to strengthen 2FA security and address these newly identified threats.

BianLian group actors have affected organizations in multiple U.S. critical infrastructure sectors since June 2022. They have also targeted Australian critical infrastructure sectors in addition to professional services and property development. The group gains access to victim systems through valid Remote Desktop Protocol (RDP) credentials, uses open-source tools and command-line scripting for discovery and credential harvesting, and exfiltrates victim data via File Transfer Protocol (FTP), Rclone, or Mega. BianLian then extorts money by threatening to release data if payment is not made. BianLian group originally employed a double-extortion model in which they encrypted victims’ systems after exfiltrating the data; however, they shifted primarily to exfiltration-based extortion around January 2023 and shifted to exclusively exfiltration-based extortion around January 2024.