firehose

This is interesting research::

Whilst the fridge implements SSL, it FAILS to validate SSL certificates, thereby enabling man-in-the-middle attacks against most connections. This includes those made to Google's servers to download Gmail calendar information for the on-screen display.

So, MITM the victim's fridge from next door, or on the road outside and you can potentially steal their Google credentials.

The notable exception to the rule above is when the terminal connects to the update server -- we were able to isolate the URL https://www.samsungotn.net which is the same used by TVs, etc. We generated a set of certificates with the exact same contents as those on the real website (fake server cert + fake CA signing cert) in the hope that the validation was weak but it failed.

The terminal must have a copy of the CA and is making sure that the server's cert is signed against that one. We can't hack this without access to the file system where we could replace the CA it is validating against. Long story short we couldn't intercept communications between the fridge terminal and the update server.

When I think about the security implications of the Internet of things, this is one of my primary worries. As we connect things to each other, vulnerabilities on one of them affect the security of another. And because so many of the things we connect to the Internet will be poorly designed, and low cost, there will be lots of vulnerabilities in them. Expect a lot more of this kind of thing as we move forward.

Read 7 remaining paragraphs | Comments

A Marvel Studios reorganization leads to president Kevin Feige now reporting to Disney chief Alan Horn instead of Marvel CEO Ike Perlmutter.

They already have a word for that, and it's "airplane."

© Max Wittert, 2015

“Coffee is a lot more than just a drink; it’s something happening. Not as in hip, but like an event, a place to be, but not like a location, but like somewhere within yourself. It gives you time, but not actual hours or minutes, but a chance to be, like be yourself, and have a second cup.”

- Gertrude Stein, from Selected Writings (via violentwavesofemotion)

http://dontracrta.tumblr.com/


http://dontracrta.tumblr.com/


http://dontracrta.tumblr.com/


http://dontracrta.tumblr.com/


http://dontracrta.tumblr.com/

Đontra

Marijuana social networking app MassRoots announced Monday that it has applied to be listed on the Nasdaq Capital Market. If accepted, the company would be the first cannabis technology firm on the exchange.

The Denver-based company MSRT, +13.68%  , founded in April 2013, has been listed on the OTC Markets Group’s OTCQB marketplace, usually reserved for developmental stage companies, since April of this year. MassRoots connects marijuana users to other enthusiasts and area dispensaries via mobile app.

With the Portland Thorns officially eliminated from NWSL playoff contention before their last home game of the year against the Washington Spirit, attention at Providence Park turned to the final matches in the careers of goalkeeper Nadine Angerer and defender Rachel Van Hollebeke.

And that final match was a wild one, with six goals bookended by celebrations of those two players and their teammates. It finished 3-3, with the Thorns' 2015 struggles, potential, talent, and frustration all folded into one.

After going down 2-0 in the first half, Portland fought all the way back to take a 3-2 lead late in the second half on the playoff-bound Spirit, only to see Washington equalize just seconds after the Thorns' go-ahead goal. Portland had several chances to win the game 4-3 in stoppage time, but familiarly, failed to convert.

Angerer, the German World Cup and Ballon d'Or winner, was in turns tortured, elated, exasperated, and always gracious. Her body language alone provided all the fuel the Thorns needed in their second half comeback. Angerer's final game didn't go the way she planned, but hers was a career that hardly had room for a perfect sendoff match to add to a massive list of achievements and awards.

Angerer wasn't just a terrific goalkeeper in Portland, she was a terrific Portlander: genuine, interesting, warm, and almost universally beloved. This was a player who only enhanced her legend every time she opened her mouth. Keeping her around, if at all possible, is a must.

Van Hollebeke's final match—and final season as a whole—didn't go as planned either. She was one of the four players cut from Jill Ellis' final World Cup roster, and watched as her teammates went on to claim a glory and trophy that she missed out on in her time in the national team.

On this night, she was at fault for the opening goal after dawdling on the ball and seeing an open cross blocked, and had she continued, questions about her pace and fit in Paul Riley's system would have been loud this offseason.

But Van Hollebeke rebounded by setting up what was Jodie Taylor's go-ahead goal, and through everything, her positivity and appreciation of the good things in her soccer career and life were admirable. Now is as good a time as any for Van Hollebeke to bow out and start anew in medical school in San Diego. She has absolutely nothing left to prove.

The fans delivered too, with a full sellout of over 20,000 at Providence Park for only the second time in team history. Angerer was saluted in the first minute, Van Hollebeke in the 16th—corresponding with their respective jersey numbers—and the atmosphere for a nationally televised match on Fox Sports 1 was terrific throughout.

The fans were treated to a hell of a game too, with Portland's stirring comeback and some sensational skill from Washington's Crystal Dunn. It was almost good enough to forget about the fact that this Thorns team—the Yankees of the NWSL—were out of the playoffs with two games to go in the season. This campaign has, without a doubt, been a failure.

Whether you give Riley—whose job seems safe—and this team a pass because of their numerous injuries, World Cup absences, and problems integrating new players, or don't because of their budget, level of talent, support, and Riley's tactical struggles, one thing is for sure: Next year is do or die.

This year, the Thorns team never got right, World Cup absences or not. That's unforgivable, and it's what this organization will ponder for the next six months.

For this night though, and there is one more game at Western New York next week, the occasion was joyous. Thorns fans watched a frustrating team this year, but they were also watched an extremely likable group of players led by a likable coach who always tried to please.

As those players joined the Rose City Riveters in song on the capo stand after the match, that bond was at its strongest. Winning or not, Portland still has something that is the envy of the league—the same league that will host its championship game at Providence Park next month.

There's no telling how many of these players will be back in Portland next season. The Thorns have had a well-documented history of major offseason roster turnover. Hopefully the core of this team remains intact, if only so we can see what the 2015 season should have been in 2016.

This night, though, was about two terrific individuals, reminding us again that this sport is and always will be about the people who live it first and foremost. So as the Thorns get ready for their first fall without playoff soccer, nothing seems as important as wishing Angerer and Van Hollebeke the best. And that's just the way it should be.

attackonpepe:

dulect:

cuntinued:

justbrosthings:

retorn:

sale:

sharksdancing:

matvrity:

forward:

smileprettybaby:

The rot just looks at the pit like “you gunna say me right?” 

And then looks so happy that the pit did.

Wait. Who ate your homework?

attackonpepe:

fuckyahumor:

penismanlyguy69:

thanks netflix

rbertdowneyjr:

when someone you hate mentions your name

saturnpolice:

human beings in a mob

whats a mob to a king

whats a king to a god

tolaughterandbeyond:

SLOW THE FUCK DOWN.

gold:

rain-force:

fruitcrocs:

fuckyahumor:

cumberbitchen221b:

scampthecorgi:

We have no idea what he’s doing…

drinking water but in a punk rock way

NBCNews.com

Supreme Court Rules Against Kentucky Judge in Gay Marriage Case NBCNews.com The U.S. Supreme Court on Monday rejected a Kentucky county clerk's request to deny gay marriage licenses on the basis of religious objections. Kim Davis, the clerk in Rowan County, Kentucky, "holds an undisputed sincerely held religious belief that ... and more »

The reviewers who seemingly tested coverage and features the least had the best things to say about the OnHub; those who performed more complete tests were the least impressed.

How does anyone not love Glenn Fleishman?

∞ Permalink

Seattle’s gaming convention PAX Prime will play host to the Mad Max Ubers, so if you’re looking to catch a Warboy, head to the Seattle Convention Center. According to the press release from Uber:

• Open the Uber app in downtown Seattle and request MAD MAX.
• Demand will be high and availability is limited, but if your timing is right, a Warboy will swoop you up in a car ripped from the world of the Mad Max video game and brought to life on the streets of our fair city!
• Cars vary in size. Your Warboy will let you know how many riders (1, 3, or 4) he can keep safe from marauders.
• Trips must begin and stay within downtown Seattle. The Wasteland is vast and gas is precious—the Warboys must remain near their Stronghold.
• Your dollars are worthless in the Wasteland. Payment shall not be required.

This isn’t the first time I’ve said this. It won’t be the last. More than anything else—the advertising, the budgets, the DLC—it’s the culture surrounding preorders that is most responsible for the trail of broken and unfinished games that clutter the sales charts, and for the anger and angst that follow in its wake.

There once was a time, 10-15 years ago, when the concept of pre-ordering made sense. Every video game on the market was pressed onto a disc, and those discs had to be manufactured, shipped and sold in a store. Often, due to demand, popular games would sell out, leading to frustrated customers (and lost profits for businesses).

Soon enough, though, companies like Gamestop and Amazon figured out that if you could pay for a game before it shipped, then you could avoid missing out. Publishers would have a better idea of how many boxes they’d actually need to ship, and customers could guarantee they’d get hold of the latest game as soon as it was released, avoiding the small but genuine heartache of a sold-out sign.

It was a good arrangement! At least, it was for a time. It didn’t take long for publishers and retailers to realise, though, that once a customer put their money down for a game that wasn’t finished, that customer was on the hook.

Usually, preordering the game only costs a percentage of the final price. You pay a small sum up front, and the full price when you pick up the game. You may think that by putting $10 (or more!) down on a game you’re interested in, you’re reserving yourself a copy. Maybe getting some sweet Collector’s Edition swag. But in the eyes of publishers, you’re a guaranteed sale, regardless of what kind of state the game actually ships in once it’s deemed finished.

This is a serious problem. There once was a time when, even moreso than advertising, video game reviews and word of mouth played the most important part in determining the success of a new game. A commercial can tell you anything, but if someone you know or at least trust has played a game you’re interested in and has an opinion on it, that information is far more useful.

“This game is awesome!” is what an advertisement will tell you. “This game is kinda ok but also broken in parts and runs badly!” is what a friend or a review might say. One of those things is a lot more useful than the other.

If you’re in the business of making or selling video games, opinions can be bad for business. Same goes for facts, like the fact that a game doesn’t run well on PC, or the fact that the credits roll after just a few boring hours. Preordering removes both of those things from the equation. By getting your commitment to purchase a game in advance, when all you’ve got to go on is a marketing campaign, you’re signaling that you’re totally cool spending $40-$60 on a game simply on the strength of how it’s been marketed.

---

“This game is awesome!” is what an advertisement will tell you. “This game is kinda ok but also broken in parts and runs badly!” is what a friend or a review might say.

---

Time was, you could download a demo of a game and try it out at home. Why have demos more or less ceased to exist? Preorders are why. Want to know why exclusive missions and items are withheld from everyone’s game and are instead sprinkled across various competing retailers? Preorders are why. Want to know why it’s now accepted that you can sometimes pay more for a multiplayer game and start with a competitive advantage? Preorders are why.

Last fall’s Assassin’s Creed Unity launched with noticeable technical issues on consoles and PC. What incentive does Ubisoft have to improve the next game in the series if people are already preordering it? What incentive does Microsoft have for learning from its disastrous Halo: The Master Chief Collection if tons of fans have gone ahead and put down money for Halo 5? Little to none.

Warner Bros.’s move to take Arkham Knight off Steam is almost unprecedented, and I’m guessing there’s a reason for that: Steam’s new refund policy. As Arkham Knight’s PC version fell on its face, Steam users were for the first time exercising their rights en masse to get their money back. Publishers have been taking abuse and criticism for years and simply rolling with it. They’ll promise fixes and sometimes they’ll deliver; sometimes they won’t. While I don’t know how many people actually got Steam refunds for Arkham Knight, I’d guess that Warner was taking enough of a financial hit that they pulled the game—again, almost unprecedented for a AAA game like this one—and promised to come back when it was fixed.

Several women specifically urged me to investigate how “women seeking women” were handled in the database and code. Many had met other women for threesomes with men, or just for a lesbian romp outside their heterosexual marriages. I decided to take their advice, because now it was clear that a lot more women were active in the membership than I initially believed.

What I found was that there are over 770,000 women seeking women in the database, out of 5.5 million women overall, and none of them are hosts. That’s 14 percent, much higher than the estimated 1.5 percent of lesbians (and .9 percent of bisexuals) in the U.S. population. These may not be active accounts, but they don’t appear to be Ashley Madison engagers either. If there are real women behind these accounts, we know they aren’t getting bombarded with bot messages. Bots avoid women. And comments in the code reveal that “woman seeking woman” profiles aren’t shown to straight men. It would seem that the only members of Ashley Madison who aren’t inundated by spam and randos are women who seek trysts with other women or couples.

There are also about 345,000 men seeking men in the database, and we know from the patch I mentioned earlier that developers were working hard to prevent the engagers from harassing these guys too. It’s possible, as one person put it to me in email, that Ashley Madison was actually a pretty decent hookup site for gay people—but that was mostly because the system was designed to ignore them.

Lenny Bruce

The FBI Vault

Interesting interview by Emily Coker in MAKE with Jared Preston on the history of mixology’s relationship with the maker movement:

Recently, I’ve been fascinated with the various crossovers within the Maker Movement and different areas of everyday life. Can you be a “Maker” if you are an artist, a chef, or designer?

I wanted to learn more, especially in the bartending and culinary world. I decided to ask a mixologist and good friend of mine, Jared Hirsch, to answer some of the questions swirling in my head. Hirsch has made a name for himself in the world of cocktails and mixology. He just started his own business off of an inventive idea for a cocktail syrup called “Caged Heat.” As of late, I’ve been fascinated with mixology and the modern twists to bartending, noticing that many old practices are being revived. This got me thinking about how the Maker Movement may play a bigger role in the world of food and beverages. I mean, why not? People are becoming increasingly more and more creative in all aspects of making.

Read more.

bibulb:

rnightiest:

every-kiss-begins-with-potassium:

a) perfect example of people discrediting clever idea & intelligence of a female due to her appearance, and
b) all these people wouldn’t have noticed her kit, which was her goal in the first place

Lol “she also wears sexy clothing to distract people from the bulky shoes” She’s a genius, really

What’s extra-wonderful is how much she calls attention to that in her notes on her Imgur for this project : 

So I got to thinking- if I had to do penetration testing on a corporate facility, how would I do it? Social engineering for one- I’m a natural honeypot. I think there’s a reasonable chance that a guy might invite me back to their office after a few drinks in the neighborhood? :-P But a handbag would be suspicious and leaving cell phones at the gate would be standard practice in any reasonably secure facility. My typical clothing does not leave room to hide anything- but that’s all the more reason they would not be suspicious of me. 

And then at the end : 

Edit: Normally I have to sort though about 50% identical replies to my posts on Reddit. For those flexing their fingers and getting ready to give me a hard time: Yes, they are fake. Yes, I feature them prominently and deliberately in everything I do. No, most of my projects do not have all that much technical merit- they are 90% silicone and 10% silicon ;-) No, if you point out the absolutely obvious no one will think you are insightful, edgy or cool. They will think you are 12. 

And that very last part deserves repeating with a call-out : 

No, if you point out the absolutely obvious no one will think you are insightful, edgy or cool. They will think you are 12.

I’m not 100% on board with her aesthetic in general, but meh - she doesn’t need me to be so. IT AIN’T FOR ME, IT’S FOR HER. 

And in the meantime, DAMN those are some awesome shoes. Go back to her general Imgur page for some of her other projects - I wanna see someone do her Hikaru skirt sometime soon.