Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
An IT security guy at a place I once worked said the executives were the biggest security vulnerability the company had because they wanted what they wanted and didn't care much about security. I think that's what tool Maersk down a few years ago - some exec installed malware that spread to the entire network.
"they normally put big all caps bold red warning if the person is a VIP, eg C suite, so they get VIP service - ie anything goes."
As tensions escalate between Israel and Iran, Iranian analyst Mohammad Marandi exposes how Western media ā even so-called progressive outlets like Democracy ...
SANAA, June 24 (YPA) - Head of the Sanaa negotiating delegation, Mohammed Abdul-Salam, praised the great stance and sacrifices made by Iran's leadership, people, and army during the 12-day war with the Israeli enemy.In a post on X, he emphasized that
UPDATE: NARA has taken this down/rescinded, and stated that it had "many inaccuracies."
This is NOT GOOD. #archives " Restricted-Access Federal Facility, Effective July 7, 2025 Effective July 7, 2025, the National Archives at College Park, MD, will become a restricted-access federal facility with access only for visitors with a legitimate business need. It will no longer be open to the general public." archives.gov/college-park
We hold permanent records created by Federal agencies that include: Textual records from civilian agencies Army unit records dating from WW1 Navy unit records dating from WW2 Still pictures Electronic records Cartographic and architectural holdings ā¦
People keep telling me that X11 doesnāt support DPI scaling, or fractional scaling, or multiple monitors, or something. Thereās nothing you can do to make it work. I find this surprising. Why doesnāt it work? I figure the best way to find out is try the impossible and see how far we get.
Iām just going to draw a two inch circle on the screen. This screen, that screen, any screen, the circle should always be two inches. Perhaps not the most exciting task, but I figure itās isomorphic to any other scaling challenge. Just imagine itās the letter o or a button we wish to draw at a certain size.
I have gathered around me a few screens of different sizes and resolutions. My laptop screen, and then a bit to the right a desktop monitor, and then somewhere over that way a nice big TV. Specifically:
$ xrandr | grep \ connected
eDP connected primary 2880x1800+0+0 (normal left inverted right x axis y axis) 302mm x 189mm
DisplayPort-0 connected 2560x1440+2880+0 (normal left inverted right x axis y axis) 590mm x 334mm
DisplayPort-1 connected 3840x2160+5440+0 (normal left inverted right x axis y axis) 1600mm x 900mm
I think I just spoiled the ending, but here we go anyway.
Iām going to draw the circle with OpenGL, using a simple shader and OBT. Thereās a bunch of not very exciting code to create a window and a GLX context, but eventually weāre going to be looking at the shader. This may not be the best way to draw a circle, but itās my way. For reference, the full code is in circle.c.
I got a little carried away and made a pretty color wheel instead of a flat circle.
The key variable is radius which tells us how many pixels from the center the circle should be. But where does the shader get this from?
glUniform1f(0, radius);
Okay, but seriously. We listen for configure events. This is the X server telling us our window has been moved or resized. Something has changed, so we should figure out where we are and adjust accordingly.
Itās somewhat annoying that physical width and virtual width are in different structures, and we have to put the puzzle back together, but there it is.
Some more code to handle expose events, the draw loop, etc., and thatās it. A beautiful circle sized just right. Drag it over onto the next monitor, and it changes size. Or rather, it maintains its size. Send it over to the next monitor, and same as before.
Time for the visual proof. A nice pretty circle on my laptop. Another circle on my monitor. And despite the 4K resolution, a somewhat pixely circle on my TV. Turns out the hardest part of this adventure was trying to hold an uncooperative tape measure in place with one hand while trying to get a decent, or not, photo with the other.
We were so close to perfection. Somebody at the factory screwed up, and my TV is actually 66.5ā wide, not the claimed 63 inches. So if we learn anything today, itās that you shouldnāt use a consumer LG TV for accurately measuring the scale of structural engineering diagrams, at least not without further calibration.
The good news is weāve done the impossible. Even better, I didnāt mention that I wasnāt actually running this program on my laptop. It was running on my router in another room, but everything worked as if by MIT-MAGIC-COOKIE-1. Alas, we are still no closer to understanding why people say this is impossible.
Anyway, I think the point is we should probably ignore the people who canāt do something when they tell us we canāt do it either. I woke up this morning not knowing precisely how to draw a scaled circle, having never done so before, but armed with a vague sense that surely it must be possible, because come on of course it is, I got it working. And now look at me, driven insane by the relentless stare of three unblinking eyes.
With my new knowledge, I also wrote an onscreen ruler using the shape extension. Somewhat tautological for measuring the two inch circle, but in the event anyone asks, I can now tell them my terminal line height is 1/8ā, and yes, I measured.
DragonForce Ransomware Cartel are claiming credit for attacks on Marks and Spencer, Co-op and Harrods and say more victim orgs are coming bloomberg.com/news/articles/20ā¦
@se I wonder... maybe the Palo Alto Global Protect firewalls are somehow related to the breach perhaps? That particular software product has had some well documented (CVE) vulnerabilities in the past year related to VPN, plus there's been some pretty serious PAN-OS RCE issues too. Hope everything was patched!
Attached: 1 image
Co-op Group have shut down some systems due to a cyber incident, however retail stores are still trading uninterrupted (which is core to their business).
Co-op Group have now admitted a significant amount of member (customer) information has been stolen by DragonForce Ransomware Cartel, saying they "accessed data relating to a significant number of our current and past members" - around 20 million people. The Membership database, basically. That includes home addresses and phone numbers etc.
Up until now Co-op hadn't even used the words cyber or threat actor, referring to an "IT issue" and "third party" in comms.
for someone who is unfamiliar with the UK retail market, do you happen to know if Co-op is at all related to the Swedish company Coop that suffered from a major ransomware attack a couple of years ago?
The individuals operating under the DragonForce banner and attacking UK high street retailers are using social engineering for entry. I think itās in the public interest to break down what isā¦
"Advanced Persistant Toerags", as Ian Levy would put it. Basics don't sell boxes, and when the narrative is controlled by the box-sellers, the basics get neglected.
Was reading your "Actions for Defenders", pt #1 - what are some good suggestions for IT/helpdesk to vet the legitimacy of an "employee" - when was the last time you called the helpdesk? who is your boss's boss? how many times have you worked from home/used VPN in the past month? like what else would be a surefire thing that ONLY a legit employee would know... that the helpdesk could look up that an intruder wouldn't be able to?
Regarding IOCs around the UK retailer activity - thereās loads doing the rounds, and theyāre almost all not useful.
Eg hundreds of dynamic VPN IPs from 2022. If you google them youāll find them on vendor blogs from years ago for Scattered Spider - people are recycling in panic and passing around in panic.
Donāt hunt on random IOCs. IP addresses change. Strengthen foundational controls. Review sign in logs for abnormal activity etc.
UK cyber security at private firms tends to be very poor on average but social engineering remains the hacker's most effective tool.
Slack and Teams access in particular seems like a large attack vector. I believe the Twitter hack a few years back - when it was Twitter - was facillitated by superuser creds being pinned to a slack channel.
Rebuilding business is prioritised by importance. If the online shop is a small side hustle compared to the brick&mortar ones (or is much slower), then itās lower priority.
Communicating the current status and expected progress is better, builds trust.
Wages usually are handled as lump payment, i.e. the same sum as last mont - and corrected later when the HR systems are back online.
The incidence response team should cover IT forensics, BCM and communication.
When I was in an M&S yesterday they had card payment working fine but they were having obvious fresh stock problems. While M&S online shopping is probably large for them, they also have a deal with Ocado to do M&S food deliveries, so I suspect that might still be partially going.
āa former chief executive at another firm and had to deal with a data breachā is an awkward way to say āoverpaid jackass who was fired for his handling of a data breachā
There's a report on ITV News that Co-op member data is available on the Dark Web(tm), but as far as I know this isn't accurate. DragonForce's portal hasn't been available for over a week.
Here's the ITV News report anyhoo, logline: "ITV News understands the the ongoing cyberattack faced by the supermarket has worsened since Friday, impacting the ordering system, drivers and warehouse staff."
I'm not sure people realise that "members" are mutual owners, but "customers" are anyone using co-op services, whether members or not. Not sure which are in the data breach - perhaps both? I think the members' db is probably separate.
Sunday Times has a piece looking into ransomware incident at Marks and Spencer. It's pretty good, goes into their contain and eradicate focus.
"By shutting down parts of the IT estate, Highamās team had worked to prevent the attack from spreading, but had also stopped parts of its digital operations from functioning. This was considered a worthy trade-off."
One error in the article - lack of recovery doesn't mean no ransomware paid. Paying is not quick restoration.
Thereās a piece in The Sunday Times today about the DragonForce ransomware incident at Marks and Spencer which caught my eye. Itās a great piece, e.g. it looks at M&S containing the threat toā¦
Sky News quote a source in M&S head office saying Marks and Spencer have no ransomware incident plan so they are making it up as they go along apparently, with staff sleeping in the office and communicating via WhatsApp.
M&S dispute this, saying they have robust business continuity plans.
One of the points of exploitation of large orgs is they usually outsource their Service Desk to somewhere cheap offshore who donāt know the org staff, and when you call and say your name, they normally put big all caps bold red warning if the person is a VIP, eg C suite, so they get VIP service - ie anything goes.
Co-op Group appear to be trying to course correct with their cyber incident comms.
Theyāre calling it a cyber incident now, and have put a statement on the front page of their website, along with an FAQ. They havenāt yet emailed members (they should). Edit: theyāve started emailing members.
It sounds like the situation at Co-op has got worse. Theyāve stopped taking card payments in some stores, itās cash only. telegraph.co.uk/business/2025/ā¦
One thing for media covering the Co-op thing - attackers are not impersonating IT help desks to gain access. Theyāre impersonating *staff* calling in to the IT help desks - theyāre different things.
The Co-op is redirecting food and drink supplies to stores in rural and remote areas in a bid to protect isolated communities from shortages following a serious cyber attack.
I just did a Shodan Safari on Co-op - basically all their Windows and Linux systems in their core DCs at network boundary are down, it's not just EDI. It's been like that for just under a week, prior to that things were still online.
I feel really bad for them as it's a great org. Also their CEO is basically the only one who stood up like this for trans people.
If you're wondering about Marks and Spencer - I just did a Shodan Safari of their network boundary, Palo-Alto GlobalProtect VPN remote access access is still offline, 15 days later.
Online orders are still not working, and the store stock checker is disabled now.
Marks and Spencerās online shopping is still offline 3 weeks later. It is thought they have lost around Ā£63m so far, excluding IR, BCP and ransom payment costs. drapersonline.com/news/ms-onliā¦
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
For anybody wondering what 'dial into the incident response bridge' means, it means they'll literally Teams call into cyber IR bridges as themselves and just extort you to your face. They'll also call CISOs etc. Bad Times at the El Royale.
Marks & Spencer bureau de change staff are being forced to use pen and paper to serve customers as a result of the cyber attack on the retailer and cannot accept card payment. thisismoney.co.uk/money/marketā¦
M&S bureau de change staff are being forced to use pen and paper to serve customers. The travel money desks are also unable to accept card payments in some cases.
Co-op Group have provided some more detail about what itās doing about remote lifeline stores (ones where theyāre the main/only retailer on an island):
āFrom Monday, 12 of the most remote lifeline stores will receive treble the volume of available product, and another 20 lifeline stores will get double the volume.ā bbc.com/news/articles/c071e7x8ā¦
Explore exciting job opportunities at M&S across various sectors: In-Store, Digital & Tech, Clothing, Food, Support, and Logistics. Be part of Britain's best-loved brand, championing sustainability, inclusion, and innovation.
I think Co-op may have stopped recruitment too, theyāre a big employer so usually have hundreds of open positions - currently they have 17, and most close today and the rest in a few days.
U.K. retailer the Co-op is still having trouble with keeping grocery shelves stocked as it continues to respond to an attempted cyberattack that forced it to shut down some systems two weeks ago.
Allianz supplies Marks and Spencer's cyber insurance, and will apparently suffer a full tower loss (i.e. it's going to be expensive) insuranceinsider.com/article/2ā¦
Co-op stores in Sheffield, Badenoch, Dunfermline and many other places are apparently running out of produce - it's not possible to keep up with the local media reports but they're basically bored reporters get sent out to photograph half empty fridges.
This ITV News report linking the Co-op and M&S breaches to SIM swapping is not accurate, no source given. itv.com/news/2025-05-12/sim-swā¦
They also have a report today saying Co-op stores are restocked, which is also not accurate - that one is sourced from Co-op, but obviously doesnāt stack up to looking in Co-op stores.
If anybody is wondering, all of Marks and Spencer's Palo-Alto GlobalProtect VPN boxes are still offline, 3 weeks later. Pretty good containment method to keep attackers out.
Attached: 1 image
M&S use Palo-Alto GlobalProtect for VPN, they took all the endpoints offline days ago (usually first stage containment for ransomware/extortion groups).
M&S confirm my toot from 3 days ago that a significant amount of customer and staff data was stolen. Theyāve known for weeks but opted not to tell anybody. bbc.com/news/articles/c62v34zvā¦
Re the Co-op Group breach, Co-op say home addresses of customers were exfiltrated (it was the membership database). This one dates back to my May 2nd toot upthread re home addresses - at the time, they didn't specify home addresses.
Co-op's AGM is this weekend, and M&S yearly results and investor contact are next week.
Gonna be awkward for different reasons, e.g. Co-op is member (customer) owned, so the people's data Co-op had stolen are effectively the shareholders and are invited.
The Channel Islands Coop, which is different to Co-op Group, has been able to restock shelves by moving away from Co-op Group for supply distribution and moving to local suppliers. bbc.co.uk/news/articles/c3d4xvā¦
The Grocer reports Nisa and Costcutter are running out of fruit & veg, fresh meat and poultry, dairy products, chilled ready meals, snacks and desserts.
Nisa and Costcutter are supplied by Co-op Wholesale, which is dependent on Co-op Group.
āItās really poor. I feel bad for them but what makes it worse is their hush-hush mentality about it. Thereās no proper level of communication and we get random updates.ā
In communications sent to retailers, the symbolĀ groups listed products that were either ātemporarily unavailableā or āout of stockā as a result of supplier issues
Co-op Group have told their suppliers that "systemic-based orders will resume for ambient, fresh, and frozen products commencing Wednesday 14 May". They say forecasting system will still be impacted.
As the Co-op turns orders back online, it has warned suppliers that it is unable to provide āaccurate product forecasting ahead of Wednesdayās ordersā
Financial Times report Marks and Spencer expect to claim Ā£100m on their cyber insurance, the maximum allowed, suggesting losses probably more. ft.com/content/723b6195-1ce7-4ā¦
If you want figures for your board to set expectations in big game ransomware incidents, Co-op containment just over 2 weeks, M&S just over 3 weeks so far - recovery comes after.
In terms of external assistance, Co-op have Microsoft Incident Response (DART), KPMG and crisis comms. M&S have CrowdStrike, Microsoft, Fenix and crisis comms.
The threat actor at Co-op says Co-op shut systems down, which appears to have really pissed off the threat actor. This was the right, and smart, thing to do.
While I was at Co-op we did a rehearsal of ransomware deployment on point of sale devices with the retail team, and the outcome was a business ending event due to the inability to take payments for a prolonged period of time. So early intervention with containment was the right thing to do, 100%.
Marks and Spencer say food distribution to their stores is returning to normal. It follows Co-op's announcement yesterday that food and drink distribution will begin to return to normal from the weekend. reuters.com/business/retail-coā¦
The link in the article to Vectra Cognito AI has a Coop Sweden logo on it, and the Coop Sweden CISO is named. Coop Sweden is different company. Coop Sweden went on to have a ransomware attack that crippled the org, including point of sale, so I don't think it's a good sales point. Same with Silverfort.
Google AI has ingested the article and now uses it to claim Co-op Group use the tools.
The Times reports M&S were breached through a contractor and that human error is to blame. (Both M&S and Co-op use TCS for their IT Service Desk).
The threat actor went undetected for 52 hours. (I suspect detection was when their ESXi cluster got encrypted).
M&S have told the Times they had no ādirectā communication with DragonForce, which is code for theyāre using a third party to negotiate - standard practice.
M&S looks to be moving to reposition their incident as a third party failure, which I imagine will help redirect some of the blame (they present their financial results during the week to investors): bbc.co.uk/news/articles/cpqe21ā¦
Both M&S and Co-op outsourced their IT, including their Service Desk (helpdesk), to TCS (Tata) around 2018, as part of cost savings.
There's nothing to suggest TCS itself have a breach btw.
Basically, if you go for the lowest cost helpdesk - you might want to follow the NCSC advice on authenticating password and MFA token resets.
I've put a 3 part deep dive blog series coming out probably next week called Living-Off-The-Company, which is about how teenagers have realised large orgs have outsourced to MSPs who follow the same format of SOP documentation, use of cloud services etc. Orgs have introduced commonality to surf.
The Office of the Privacy Commissioner for Personal Data (PCPD) has confirmed that Marks and Spencer (M&S) Hong Kong has not informed it of a recent customer data leak, nor responded to its enquiries. hongkongfp.com/2025/05/19/ms-hā¦
The Office of the Privacy Commissioner for Personal Data says M&S Hong Kong has not informed it of a recent customer data leak, nor responded to its enquiries.
"Cyber analysts and retail executives said the company had been the victim of a ransomware attack, had refused to pay - following government advice - and was working to reinstall all of its computer systems."
Not sure who those analysts are, but since DragonForce haven't released any data and M&S won't comment other than to say they haven't had any "direct" contact with DragonForce, I wouldn't make that assumption.
There's also a line in the article from an cyber industry person saying "if it can happen to M&S, it can happen to anyone" - it's ridiculous and defeatist given Marks and Spencer haven't shared any technical information about how it happened, other than to tell The Sunday Times it was "human error"
The Air Safety version of cyber industry would be a plane crashing into 14 other planes, and industry air safety people going "Gosh, if that can happen to British Airways it could happen to anybody!"
I made this point a few weeks ago, but... outsourcing all your IT, Networks, Service Desk (helpdesk) and operational cybersecurity is a temporary cost saving and basically paints a ticking timebomb on the org, IMHO.
M&S say online ordering will be stopped until sometime in July, and it has taken a Ā£300m hit, far higher than analysts had predicted. bbc.co.uk/news/articles/c93llkā¦
The NCA has confirmed on the record that the investigation into the M&S and Co-op hack is focused on English teenagers. I could toot the names of the people I think theyāll pick up, but wonāt.
The CEO of M&S has declined to comment if they have paid a ransom. For the record: Iāve heard they have, in secret, via their insurance. reuters.com/business/retail-coā¦
I guess it's low risk since the electronic displays are basically paper - Dumb eink displays that you update via RFID from a handheld. (The ones I saw in the local coop worked that way anyway.)
This stuff is brilliant. Based on e-paper and runs on Zigbee.
And they can raise the prices between you picking things off the shelf and going through the checkout and you'll have no proof that it was offered at a lower price.
e-paper price labels are apparently extremely common in mainland Europe. The UK is extremely slow to adopt things like this.
*In theory*, during an incident, the labels would remain as-is until they receive a new price. So TAs would specifically need to target the pricing database prior to wiping.
TCS has a security incident running around the M&S breach.
Interestingly the source claims TCS aren't involved in Co-op's IT - which is categorically false, they took over most of it while I worked there, including the helpdesk, and my team (SecOps) after I left.
While Co-op have restored every customer facing system and internal systems like recruitment and remote working, M&S still don't even have recruitment back.
I'm reliably told they paid the ransom, so they'll be target #1 basically forever with other ransomware groups now due to resiliency woes and willingness to pay.
Marks and Spencer's remuneration committee have opted not to dock the CEOs pay as expected and prior reported over the cyber incident, but instead increased it by Ā£2m. bbc.co.uk/news/articles/c23mz5ā¦
Marks & Spencer is holding walk-in in-store recruitment open days to fill vacant roles while its online hiring system remains offline following its ransomware attack in April. thegrocer.co.uk/news/mands-stoā¦
This Daily Mail piece about security leaders thinking work-from-home means they will be crippled is horseshit, I'm not linking it.
They've taken a survey about how security people think their businesses couldn't survive ransomware, and linked it to working from home. WFH isn't the problem: business IT and resilience being built on quicksand is the problem.
The 'WFH' allegations seem in especially bad faith given the suspected entry point for the M&S compromise: the outsourced helpdesk.
Those guys are even more compliant labor than work-not-from-home employees, so the Daily Heil isn't going to say anything; but lack even the (informal; but in practice often at least reasonably effective) "does the IT person you just poked recognize who is interrupting with a password question?" ID verification step with onsite workers and onsite IT.
I could draft an opposing headline about how ransomware and cyber threats will naturally proliferate faster and more easily within a physical network than it will in a distributed environment. It wouldn't be the whole story either, but it's just as true.
I WFH 100% of the time. I never connect to an office "network". The only way I could spread any form of malicious payload to my colleagues is through shared communications platforms which not only requires ME to fuck up so that my account is used to send that payload to others, but it then requires the recipients to ALSO screw up and make mistakes like open dodgy links or attachments. WFH provises an additional buffer to protect an organisation, in my opinion.
I think they did a great job. They do call it a "highly sophisticated attack", which, frankly.. isn't true and may come out in open court later if the suspects are ever caught.
6 weeks from containment to "near full" recovery, for statto nerds like me who track this stuff.
I'm sure the logic of 'work from home' being an existential threat while extensive exposure to outsourced managed services is just good sense must only baffle me because I'm not the sort of person who deserves a bonus that brings me up to Ā£7 million for the year; not because it's questionable.
TCS have told shareholders their systems were not compromised in the hack of M&S.
As an explainer here (not in the article): TCS IT systems weren't compromised. Their helpdesk service (they're AD admins at M&S) was used to gain access to M&S. They manage M&S IT systems. reuters.com/business/media-telā¦
M&S haven't been able to supply sales data - so the British Retail Consortium (BRC) - used by the UK government as as economic indicator - basically made up figures for M&S and didn't tell people they had done this.
Ultra spicy post claiming to be from UK retailer employee (M&S or Co-op) about their experience with TCS on their security incident. reddit.com/r/cybersecurity/comā¦
I'd be very curious to know what the breakdown is between TCS dropping the ball and lying about it and M&S/Co-op not actually insisting on adequate procedure.
It's not terribly uncommon for people to only care about time-to-resolution with some lip service to user satisfaction when it comes to helpdesk metrics; and tacitly discourage things that are slow and unpleasant like hassling people for ID, at least until that becomes a visibly terrible idea.
as someone who has been subjected to Tata on multiple occasions going back over a decade?
This isn't nearly spicy enough. I don't even describe them as a 'body shop' because they'd gladly route you to a corpse and try to charge extra for '24x7 coverage.'
When one employer did a basic security audit of their helpdesk services, Tata failed so severely that the contract was pulled for cause before the audit was even completed. They moved it all back in-house.
The root problem here isn't that TCS are shockingly bad (they are, just about everyone knows that).
The root problem is that "management decisions" constantly overrule those that raise concerns about their service and tell any remaining internal IT and security staff to "deal with it as best you can."
I'm very much of the view that, yes, the outsourced provider can be the cause of an incident, they can provide a shockingly bad service, they can cost your business millions of pounds. But the decision to continue to use them when you already know this is a real possibility - that's a decision by senior management within the company. That's on you.
Interesting. I don't have the background on this specific attack, but I'm reminded of the Target credit card theft. An HVAC company near me was the point of entry for the attackers; they had high-access keys to Target's intranet because they install and maintain shopping-mall-grade HVAC and can remote-override it for maintenance and schedule reasons (nation-scale chain stores with giant footprints save not-inconsequential money on things like "Don't power up the HVAC to normal capacity on days nobody is here").
They had the keys on the same machine running their webserver.
(Meanwhile, Target actually did get an SEC slap-on-the-wrist for one specific thing: the HVAC intranet piece wasn't firewalled from the financial transactions and cash register source code pieces).
If you ever doubted the link between Scattered Spider(tm) and LAPSUS$ - one of the people arrested today was a key part of the LAPSUS$ attacks a few years ago.
Authorities in the United Kingdom this week arrested four alleged members of "Scattered Spider," a prolific data theft and extortion group whose recent victims include multiple airlinesĀ and the U.K. retail chain Marks & Spencer.
Co-op finally admitted the entire membership database was stolen
I had this in the thread months ago, they originally tried to deny it entirely then tried to say āsomeā data was accessed when they knew it was the whole thing.
Personally I think Co-op did a really good job getting out of that situation and minimising impact.
I definitely think if you have a LAPSUS$ style advanced persistent teenagers situation, tilt towards open and honest comms as those kids will use secrecy against ya. Itās 2025, itās okay to say you got hacked, people largely understand. Also, in IR, lawyers are usually stuck in 1980 advice - itās just advice, they aināt yo boss.
When GDPR was being introduced, I got to see *so much* bad advice being given to companies by their lawyers that it made me realise how many lawyers really are making it up in the spot as much as everyone else - and therefore bringing their own biases and misapplied experiences.
Itās 2025, itās okay to say you got hacked, people largely understand.
Probably the most damning indictment of the entire computing industry that I've seen for a long time.
I don't disagree at all. But this absolutely should not be the case and wouldn't be if we weren't still building core infrastructure around ideas that were known to be bad by the mid 1980s.
Four young people who were arrested for their suspected involvement in the damaging cyber attacks against Marks & Spencer, the Co-op and Harrods, have been bailed.
at this point I'm much more surprised when someone over 25 gets picked up for hacking stuff, I think some dude was helping gangs smuggle drugs into Rotterdam via hacking into the port logistical systems, they were like 41 with kids, that was way more unexpected to me lol
Europeās commercial ports are top entry points for cocaine flooding in at record rates. The work of a Dutch hacker, who was hired by drug traffickers to penetrate port IT networks, reveals how this type of smuggling has become easier than ever.
The term 'user' in "no TCS systems or users compromised" could be more interesting to argue on in a civil liabilities case.
If a TCS staff member falls for social engineering (even if the action they take is within an assigned M&S tenant account...), is that not the same as a TCS user being compromised?
Anyway... I'm sure that statement won't at all be like rubbing salt in M&S's wounds.
I keep reminding people who mention this that M&S outsourced their IT services to the cheapest possible option. That immediately tells you how much they care about your data safety and security. Itās so important to them that they phone it in. Absolute joke.
Still didnāt have any Percy Pigs at the last store I checked either. Staff told me they donāt know what theyāre going to receive one delivery to the next.
the daily mail publishing click bait headlines with sensationalist takes that fit the narrative the rich and powerful want to push? Who could have predicted that ahead of time?
I took that to mean that they (or more likely the analysts they hired) have concluded it's cheaper/quicker/safer to rebuild new systems from scratch than to continue any further recovery. So drawing a line in a financial & investigative sense, rather than saying that Ā£300 million is just a scratch.
And rebuilding from the ground up would seem to tie in with their statement about online orders being unavailable until at least July and then "ramping up" after that.
unless maybe you outsource, but to a bunch of different providers, spreading risk? ie use local OpenLDAP as an organisation management tool (does not eerste a huge amount of resources, then set up mail with A, storage with B, web with C, etc. ?
when I got my business degree, one of my management profs said that the instant you outsource, you give up control. To the service provider, you move from income to liability on the balance sheet because you now are costing them money, and to eke out any profit they need to cut costs related to providing service to you.
They are still within the contract sla period for a response from the outsourced help desk. Sorry. But the contract sla only covers time to first response to the ticket not when the ticket will be done. Also orders for that many new machines exceeds the average % of requests and so is subject to delays from the equipment supplier
One of the big MSP's from India was adamant: 1. Personnel is not allowed to store passwords. 2. Must use unique passwords for every service. 3. Passwords must rotate every X days. 4. Only sanctioned apps are allowed. 5. No password manager is sanctioned or installed by default.
I have memories of those exercises š (particularly logistics chiming in with 'erm, we'd need to kill all supplier orders asap' and the room going quiet š³) Just glad some of the lessons sank in....
the thieves could probably show up at the AGM and present themselves as a member, since they have access to all the information the Co-Op has on it's membership...number, address, etc.
Short of checking govt. ID or requiring a hard copy of the meeting invite that was mailed to their address. Even then, the thieves might've gotten away with that too.
I wonder if the M&S and Co-op PR departments are constantly waiting for the other to announce something so that they themselves can push out an announcement and hope theirs goes under the radar?
I can only hope this data breach is the kick up the arse needed to abolish the common practice of using date of birth as an (immutable!) security password. Once itās public knowledge itās beyond uselessā¦ itās a liability. Especially in banks.
Today they apparently emailed all customers that have ever purchased items from their online store. I received two such emails, an apologetic one from Stuart (CEO), and a slightly more explanatory one from Jayne Wall (Customer Services).
I was on holidays in Brodick (Arran, Scotland) last sunday, I can confirm the Co-op was low on products, with only potatoes available as fresh vegetables š¬
I though it was because it was a sunday late afternoon, but reading your thread it was clearly linked to the cyber incident
I am hoping that the local Co-Ops might be able to bypass the Co-Op Group for some items if the problem persists. The Southern Co-Op shops sell local/regional items where a nearby "Manchester" Co-op (as I have heard some of the Southern staff refer to the Co-op Group) shop doesn't.
Not sure if it is related, but M&S shuttered a flag-ship store without notice and earlier than planned on May 7th.
š Marks and Spencer suddenly closes Aberdeenās flagship St Nicholas branch after more than 80 years in city centre pressandjournal.co.uk/fp/news/ā¦
you don't understand, I lost at least 700 million to the drugs I had to buy to help my paranoia because I can't watch my wageslaves Imean workers do their job
itās a nice idea, but sheās just saying sheās ok with exploiting trans labour. āMassive business benefitā is never to the benefit of the workers.
Ehm, they're doing both things. The easiest way to get physical access to most companies is to pretend being an employee of their it service contractor. They often just open all of the doors and show you the way right into the server room or ask you if they should log out before you take over (followed by if you'd like tea or coffee). At most what you as an attacker risk is getting also tasked with fixing the printer or copy machine "now that you're already here"...
Well, that's an easy one. Just say that you are calling regarding the reported problem with Outlook.
On the one hand you have a ~90% Chance, that the called person had.a Problem in the last Week, and on the other hand will hand you over the username as well as the password immediately.
I'm somewhat surprised, that this had not been tried earlier.
noticed the shelves in my local Co-op were not looking good this evening. Looks like they are struggling getting items ordered via their fallback methods.
Can also confirm, from several years ago, that sometimes there is also an Executive Assistant with a flag in some systems to ācall on behalf ofā C-Suite/VPs.
Itās like a privilege escalation on people exploit š¤£š
The cult of āitās an exec!ā and thus able to bypass normal protocols has always made me cry - especially seeing as how theyāre the ones with access to the juicy stuff and (usually) have low IT literacy and awareness.
Often, when Iāve worked with an org to help strengthen the help desk, the push back has been from the service desk management (scared that theyāll been seen as impeding the exec in the course of Important Work). Usually asking the question āwould you rather be responsible for an extra 60 seconds on a call, or for the entire company being breached?ā helps them to see the light.
The other source of friction is from the admin assistants of the execs who seem even more entitled than the execs themselves. An appeal to vanity (āwe have to be extra careful when you call in because youāre in a very privileged positionā) can work wonders.
Every time Iāve spoken directly with said execs and explained exactly why they are going to be asked to positively ID themselves for any interaction they have been 100% supportive.
This is basically the plan for most businesses in reality.
It's fine to talk about stuff being "widely known best practice," but when IT shows up with big expenses for backups and security, the MBA's always decide it's more important to rightsize the headcount and operate lean. Many IT departments report up through an MBA and not a technical person, and many IT people are terrible at communicating risk dramatically enough to get money.
The thing that gets me is that the two statements are probably true for the people who said them. The Security group may have wargamed and prepared for malware attacks, and done so in a way that no one else in the technical stack even noticed happening (beyond some new agent installs being requested). So when the attack comes, the Security plan swings into action and no one outside of Security knows what it is or has practiced it.
This is high visibility. Executives step in to make Declarations, complicating the response. This is an incident big enough to need sub-commands to track various workflows, reporting up to a rotating incident command. Everyone wants to help, the workflows aren't well defined yet, and people help on their own authority (thanks to Command not having a clear picture yet and guiding where help would be good) and maybe make things worse in a few spots.
In fairness, I don't think I've ever believed a ransomware incident response plan would *actually* be used in any meaningful circumstance beyond an ISO audit anyway.
@ollie_whitehouse Do egress filtering (esp. for servers) with alerting. If there is unknown communication, then you have either a misconfiguration or a problem.
Keep critical IT infrastructure (network, firewalls, SAN/NAS, virtualisation, backups) separated from Active Directory.
Do not couple internet-facing systems (including VPN and M365) with your local AD.
@ollie_whitehouse One Entra Conditional Access policy to block high risk logins, a second policy to block high risk users. You most likely want to do both, and need to do them in separate policies
I agree with most of your arguments. (In fact, the only one I take exception with is comparing ransomware with climate change. Ransomware is a much more real and urgent problem.) Those are pretty much arguments I've used myself when advising customers hit by ransomware not to pay.
But, ultimately, it's the company's decision. Even if the company makes the wrong decision, the government shouldn't be the one who decides for them.
The Ransomware-as-a-service (RaaS) model has not recovered from law enforcement disruption, and the entrance of novice actors along with non-Russian state-linked cybercriminals has led to uncertain outcomes for victims.
superb summary. Surprising it still hasn't been made mandatory to report incidents, and clearly payments to criminal groups should have been outlawed before now. You'd have thought that would easily have fallen foul of the existing anti-money laundering/anti corruption regs.
My thought after reading this is very old school. When the first indication appears, shut everything down. I have seen banks do this, and watched tellers calmly tell customers "I'm sorry, but the system is temporarily shut down" and start from there. If the breach is stopped quickly enough, you may have a chance. Also, what about off site storage, that would not be accessible to the attacker? Ultimately, the decision is a risk management decision, to evaluate as quickly as you can
I caught a typo similar to ones I make, hope this helps. "Travelex arenāt alone. When I covered the Capita ransomware, they paid quietly paid" maybe delete one of the "paid"s
it's good to make that known, i remember reading pieces about how professional the "commercial" side of these groups were and how companies found it so compeling to pay for the "service", that gave me an impression of a much better argument for doing so (with the downside that it does fund crime and rewards it).
it absolutely blows my mind that *anybody* pays ransomware attackers off, *ever.* Taking your lumps is better even WITHOUT the fact that you're literally funding them to continue attacking people, and that eventually (if not much, MUCH sooner) they're going to come right back to YOU again for another handout. Very likely, for the same damn attack you just paid them to keep quiet about in the first place.
Stuart Machin had been looking forward to a long weekend. It was Easter Saturday and the chief executive of Marks & Spencer had retired to his south London home for the evening, after a long day inspecting the aisles of his local M&S branch ā somethiā¦
Multiple explosions were heard in the Iraqi capital, Baghdad, particularly at Camp Taji, a military installation used by Iraqi and the US-led coalition forces.
if you suspect that an enemy is about to make a move on you, what do you do? A. prepare defenses? B. attack first? C. do what the enemy wanted before they get a chance to do it?
Lets keep blaming it all on the Jews when Lucifarians set this shit up. All three of these pieces of shit worship Lucifer. Motherfuckers smell like sulphur.
Anarchism is the great liberator of man from the phantoms that have held him captive; it is the arbiter and pacifier of the two forces for individual and social harmony. -- Emma Goldman
Chinese President Xi Jinping will attend a gathering marking the 80th anniversary of the victory in the Chinese People's War of Resistance Against Japanese Aggression and the World Anti-Fascist War.
Al-Qassam Brigades, the military wing of the Islamic Resistance Movement (Hamas), announced on Tuesday that its fighters carried out a complex ambush targeting a Zionist force entrenched inside a house south of Khan Younis in the southern Gaza Strip.
Ahmed, a rail worker, told WSWS, āThe attack on Iran is totally unjustified, itās also a total threat to democracyā¦ Before we know it, we wonāt be able to protest.ā
The ruling isn't a guarantee for how similar cases will proceed, but it lays the foundations for a precedent that would side with tech companies over creatives.
These Labour cuts will push 250,000 more people into poverty, including 50,000 children.
This isn't what anyone voted for.
The UK is a wealthy country, but that wealth is hoarded by a tiny few. The answer isn't to take more from the already struggling, it's to tax the rich.
Israelis are flocking to Cyprus like it was promised to them in a 3,000 year old book. Cypriots are freaking out about the loss of sovereignty as Zionists buy up huge chunks of real estate, in case they lose occupied Palestine. It could be a matter of time until Cypriots are forced out of their homes into concentration camps and called "antisemites" for objecting. The world let Zionists get away with this once so don't doubt it would let it happen a second time.
Ci sono voci che, nel grande frastuono della storia, sussurrano veritĆ che nessuno vuole ascoltare. E poi cāĆØ la voce di Emmanuel Todd. Storico, demografo,ā¦
Also abgesehen davon, dass niemand Bock auf Baustellen hat, hƤtte ich kein Problem mit einer Stromtrasse in der NƤhe. WƤre definitiv leiser und weniger geruchsintensiv als die Kuhwiese um die Ecke.
If you're making music that can even obliquely be considered "protest music," I'd love to help you get it out there by mixing and mastering for cheap (or even free, depending on your financial circumstances).
Art made by conscientious people is very good for the world.
I've already mixed and mastered one protest song from a mutual here on fedi. š Allow me to help, if you need. Send me a DM or find my email from my website.
@Emmanuel Florac Truth be known, I've only ever used Microsoft or any propriety software for only a brief four year period. Ever since then I've gone my own way, using free and open source software. I like to learn, so I'm not intimidated, nor frustrated when it's time to fix or make things work. Plus it gives one the perception of being in control. If there is such a thing, as being in control.
@Carter Braxton I've used Microsoft at work in the 90s, but already in 1996 I was interested in OS/2, then discovered Unix (IRIX then). I've installed my first Linux in 1997, and I ditched my last Windows gaming machine in 2003.
Russian Federation Council Speaker Konstantin Kosachev told RT that Iran has repeatedly stated its commitment to non-proliferation and there's still no proof Tehran is developing nuclear weapons despi...
i don't think enough people realize that when you make a phone call to someone else, the other phone literally stops what it is doing and makes a noise and shakes, it's very distracting, please do not make phone calls
@drchaos In fact, I keep my smartphone turned off unless I explicitly need it for a specific purpose. I check for important email, vm, etc. at intervals.
@nanook @ernestoDuracelli @lauren I cannot talk for the op, but I'm not buying a tablet because they are way too big for me.
Unfortunately my 7" tablet has a bad battery and is... ancient (for such a device, and slow, and actually an Intel device). The thing is that size is an issue. Phones are getting too big to put in my pockets, and tablets are too big. Maybe I'll convert an e-reader (or actually get a cheap phablet). Though a tablet would just be a "nice to have" now.
okay, still kind of stuck on the iran israel war, bc fog of war and censorship and media bias makes it hard to fill in some of the blanks...
the palestine chronicle published this article with a photo that is allegedly a screen grab from a photo of the iranian attack on al-udeid air base in qatar.
from whati saw reportrd, no missiles landed in qatar, they were all destroyed in the air. Also, that is a distinctive skyline, maybe compare it with a search to verify where it was. I remember a drone strike landing in a former american base in iraq.....
@doublemonkeyfun thats definitely not iraq. both trump and qatar said one missile landed, the iranians claimed 6. so i think 1 hitting is fair to assume.
it might be somewhere outside the middle east if the skyline doesn't match qatar. Some people were posting images from the ukraine claiming it was iran.
they're usually good. it's a small entity. i don't think malice or disinformation is at play here, and literally all outlets have shared some type of crap in the past. that being said, always double check important information.
As Prime Minister, Rutte was known for forgetting things ('I do not have an active memory of that') and for deleting text messages from his phone ('It does not have enough memory').
There are people here defending Rutte, saying flattery is needed to keep Trump 'on our side'. For me, there are legal and moral limits to such tactics, and ignoring international law is one of those. Also, when you keep telling a bully he's the greatest, he'll take his bullying to the next level.
Blowing up NATO's foundation, right before its Summit:
"Trump refused to give a clear commitment to NATOās Article 5 ā its collective defense clause ā as he departed for The Hague, raising fresh concerns about his stance on one of NATOās core princiā¦
Further making a fool of himself & NATO, and emboldening the bully, Rutte now called Trump 'daddy'...
Your daddy supports genocide, bombs Iran while negotiating, betrays Ukraine, holds razzias in the US, ignores Supreme Court rulings, kills climate action. Get a spine.
ā¢ Subscribe to ITV News on YouTube: http://bit.ly/2lOHmNj ā¢ Get breaking news and more stories at http://www.itv.com/newsFollow ITV News on TikTok https://ww...
Dutch media frame Rutte's shameful behavior towards Trump ("We really loved your bombs on Iran, daddy!") as successful. Because European NATO members agreed they'll spend "5%" of GDP on defense (let's wait and see) and Trump firmly recommitted to Article 5 (in your dreams).
I don't think many of former Trump employees or collaborators who did his dirty work can boast that he stood by them when their dirty hands landed them in trouble. So getting him on our side won't help us on the long term, probably not even in the short term.
this is absolutely insane. we absolutely must free ourselves of US protection, we cannot be dependent on sending that kind of narcissistic bait to a madman for survival.
this is clearly sarcasm that mocks the infantile American President, so explicitly that it would be obvious to an average person, but he will be too simple and too narcissistic to appreciate. Right?
The other option, Trump made up the message and Rutte didn't have the guts to tell the word Trump is a liar (that may break up NATO), could also be true.
Especially as we know Rutte has a hard time having 'active memories' of facts.
Stephen Miller, the influential Trump administration aide behind its hardline immigration policies, holds a substantial financial stake in Palantir Technologies ā a key tech contractor for U.S. Immigration and Customs Enforcement ā raising new ethics questions, according to a report published Tuesday by the Project on Government Oversight.
They donāt sell seeds. They donāt own tractors. They donāt run warehouses or ship grain. But BlackRock, Vanguard and State Street are among the most powerful actors in global agriculture. Together,ā¦
A suspected fed. agent is seen exiting a Dodge Charger @ an intersection & pointing his gun @ members of the public. Acc. to #Pasadena officials, the vehicle's license plate is a "cold plate," or untraceable, which is typically used by law enforcement in undercover criminal operations. "One question is this a law enforcement agent or someone pretending to be a law enforcement agent, & there is no good answer" (Mayor Gordo).
Local police have little or no insight into where the federal enforcement actions are taking place. In some cases, local cops have been mistaken for federal ...
Like I've been saying, and now elected officials are saying it, we can't tell that they're police officers? How do we know they're not faking it? And if we don't know if they are or not, are we not obligated to assume they aren't cops and stop it?
This really is the end of trust in law and order for what might be a sufficiently critical mass to start the process of abolition
Tucker Carlson's recent interview with Ted Cruz surprised many with his strong critique of the U.S.-Israeli alliance. But Carlson's "woke right" view has a long history in conservative politics and should not be mistaken for Palestine solidarity.
Tucker Carlsonās recent interview with Ted Cruz surprised many with his strong critique of the U.S.-Israeli alliance. But Carlsonās āwoke rightā view has a long history in conservative politics and should not be mistaken for Palestine solidarity.
European countries have based their social stability on the low cost of energy and know it will all fall apart if oil/gas spikes and blows it all to pieces. Is so, Syria might look like a kids party compared to civil disorder in EU, with population density as it is.
Supertramp have such a unique sound and have created tons of amazing hits and we LOVE The Logical Song written and sung by the amazing Rodger Hodgson. We lea...
Attached: 1 image
NATO boss Rutte (fmr Dutch PM) sends app to Trump, who promptly publishes it.
"Wow, your bombing of Iran was great; it makes the world a safer place!"
Straight from The Hague, formerly known as the International City of Peace anā¦
can we kick the Dutch out of Europe yet or do we need another ten years of them responding to any debate by saying that southern and eastern Europeans are lazy because we have inferior genes?
If youāve fallen victim to a fake investment platform and thought your money was gone for good, donāt give up just yet. I was in that exact position ā until I came across Mrs. Adelynn Richardson. Thanks to her expertise, I was able to rĀ°eĀ°cĀ°oĀ°vĀ°eĀ°r my lost funds. Sheās helped many others too, and I highly rĀ°eĀ°cĀ°oĀ°mĀ°mĀ°eĀ°nĀ°d reaching out if you need support. Contact her on WĀ°hĀ°aĀ°tĀ°sĀ°AĀ°pĀ°p at +1 (820) 201-7380.
#Smooth-Operator by @SadeSME performed by The #Graystones (4 min) March 14, 2025 #TheGraystones #music #video We love Sade... and Smooth Operator is such an iconic song. Her voice is so effortless and silky and the groove is great. We worked really hard on this song to get it right. We hope you enjoy it!
(We wanted to say that the audio in our live performances is overwhelmingly live and, on many videos, is 100% live. To some select songs, we may add layers of sound, such as harmonies or string parts. But the original live sound as the foundation for our videos, and then we might decide to add/replace some parts, if we feel it would help to bring the song even closer to the original that weāre honoring - but always in service of the art! With love, The Graystones)
We love Sade... and Smooth Operator is such an iconic song. Her voice is so effortless and silky and the groove is great. We worked really hard on this song ...
Rep. Al Green (D-Texas) filed an article of impeachment against President Trump on Tuesday, accusing the president of failing to notify or seek authorization from Congress before the U.S. launched strikes on three Iranian nuclear sites over the weekend.
The resolution alleges āabuse of presidential powers by disregarding the separation of powersādevolving American democracy into authoritarianism by unconstitutionally usurping Congressās power to declare war.ā
āPresident Trumpās unilateral, unprovoked use of force without congressional authorization or notice constitutes an abuse of power when there was no imminent threat to the United States, which facilitates the devolution of American democracy into authoritarianism,ā Greenās resolution reads.
Congress has the sole power to ādeclare warā under the Article 1 of the U.S. Constitution. Presidents of both parties have struck adversaries without approval from the legislature.
Pretty easy to argue this comes under 'official duties' too. Surely there's a thousand other reasons he could be impeached that would stick.
I agree they'll never get the votes to pass anything, but they should keep doing it anyway. Flood the zone back at these arseholes and put them on the back foot.
Senate rules process strips SNAP cuts, other GOP priorities from ābig, beautiful billā tucsonsentinel.com/nationworldā¦ U.S. Senate Democrats have succeeded in eliminating more than a dozen policy changes from Republicansā ābig, beautiful billā after successfully arguing that the elements didnāt comply with the strict rules that go along with writing a budget reconciliation bill. #Tucson #Arizona
U.S. Senate Democrats have succeeded in eliminating more than a dozen policy changes from Republicansā ābig, beautiful billā after successfully arguing that the elements didnāt comply with the strict rules that go along with writing a budget reconcilā¦
In Gaza, death is no longer an event... It's a daily routine. We passed through the cemetery's door 600 times, and returned bearing new names for mourning.
What is your reasoning for not just using capital letters where grammar requires it? I agree with OP, it makes it very annoying to read the way it is now.
I've got a buddy who texts like this. It's madness, but I love him and texts are short. I didn't realize the ability to write like this long form. It's just a style, but it makes it hard as hey for me to actually get my brain to not just error out and quit is all. This isn't a blog for anyone though, it's for you so you do you!
Yes, actually! I love Knifepoint Horror, but I can't ever read any of the books because the tell-tale signs of readability weren't there and it breaks my brain. I can read all caps fine though.
not familiar, though i'm not much of a horror guy myself
i'm gonna assume based on context it's the kind of work my senior-year english teacher would have spent two classes having us discuss the meaning behind the punctuation (or lack thereof) and capitalization, with my attention divided between [i have redacted this for several reasons...]
I went back and looked and I think old boy just uses big chunka paragraphs. School sucks, you do you. I just figured I'd tell you I just can't read it. Uppercase is good stuff though, you had good things to say and I thought it was cute and you're very intelligent for a youngun'. You'll do well, just keep fostering your voice, skills and more of that purposeful consumerism. I'd like to read more about your phone, so I hope you share it some time.
Also horror sucks, I just love it. Don't worry about it.
Oh yeah, of course! I hope to see it, but I update by the hour so who the hell knows if I will. Either way best of luck. I often remember fucking up is just part of the learning process. So if you break something, just learn from it. When you make your first public phone, I'll line up.
Yeah, sorry, that came a bit harsh. I'm just a bit salty, because i dislike monospace and white-on-black for reading. But i'm working on something, that lets the user choose the reading settings. In the meantime, i just create a usercss (Stylus) for pages i see often.
But that's another reason i'm salty; please don't do * {ā¦} CSS hacks. Just set the rule on body, because children inherit, if not set otherwise. And * is the worst for performance, use the rightmost selector instead.
no problem! i'm frequently described as "abrasive" so i guess what goes around comes around...
i do appreciate the CSS tip(s) -- that stylesheet is a few years old with many alterations over time, so there are bunch of weird hacks that i'm not even sure why they're there. off the top of my head, for some reason the header is a div-within-a-div: #header and #header_internal. no idea why. š
It seems like you updated your webpage in the wake of the meme incident. But it has made it unbearable to read. Whilst I was able to read the article in reader mode, the ~ page is virtually an eye sore to browse right now.
Yes. But also, I donāt care about the resolution. What Trump did was flatly unconstitutional already. More legislation making it āmore illegalā is bad obfuscation. The real resolution is called impeachment.
@Simplicator The resolution is a piece of it that Hakeem SHOULD back. It's Constitutional. But AIPAC bought him so he could back #GenocideJoe and his extra-Congressional efforts to fund and arm Israel's genocide and war crimes. That's why we have Trump. Because of second rate corrupt assholes like Jeffries and neoliberal warmongering assholes like Biden.
Play chamber music? Like unusual composers or off beat (as it were)? THIS is your place. OMG. So happy--found Fanny's quartet. Beautifully printed, fast to arrive and very reasonable cost. AND you can hear a clip...I wonder if they can get Oscar Levant's quartet? Must ask.
matthew - retroedge.tech
in reply to Jimmy Johnson • • •Not sure. It certainly was not acceptable to criticize them a few years ago.
If I remember correctly, Alex Jones tip toed around the Israel issue for about a decade. I have seen earlier videos where he had criticisms.