Original Mastodon Post

#shittycamerachallenge
Taken with a children's camera with built in thermal printer.

Bij een brand in een ziekenhuis in de deelstaat Mecklenburg-Voor-Pommeren vielen zeker twee doden. De brand is inmiddels onder controle.

DUBLIN (ANP) - De Ierse luchtvaartmaatschappij Ryanair heeft in juni een nieuw record geboekt bij het aantal vervoerde passagiers. In totaal stapten vorige maand 21,2 miljoen mensen aan boord van de vliegtuigen van Ryanair. Dat is een stijging van 7 procent in vergelijking met een jaar eerder.

Daarmee werd het oude record van 21 miljoen passagiers uit augustus vorig jaar verbroken. De budgetvlieger voerde vorige maand meer dan 116.800 vluchten uit. Ryanair is, gemeten naar reizigersaantallen, de grootste luchtvaartmaatschappij van Europa. De bezettingsgraad aan boord van de vliegtuigen van Ryanair was afgelopen maand 95 procent.

Vorige maand werd nog bekend dat Ryanair het contract van topman Michael O'Leary verlengt tot 2032. Hij is al sinds 1995 topman van het in 1984 opgerichte Ryanair.

Lydia Wood began drawing the capital’s pubs after losing her job. Now, after her sketches went viral, she is on a mission to illustrate all the city’s watering holes – before some are closed

On the pavement outside a London pub, 32-year-old Lydia Wood is sitting in the sunshine at her easel, peering up at the building and sketching with a pencil. Passersby pause to catch glimpses of her work, but what they might not know is that for the artist, this isn’t just a nice day out, but part of years-long project with no apparent end in sight.

Wood began what she calls “the pub project” in 2021. Since then, she has drawn intricately detailed sketches of more than 350 pubs: her goal is to draw all 3,500-or-so of London’s beloved watering holes – a quest that could take her at least 10 years.

Continue reading...

(Warner)
After years spent chasing trends like trap and Latin pop, Madonna settles back​ nicely into​ old-school dance music to tell vivid vignettes of life in 80s New York

‘Ask yourself this – what are you doing it for? / Is it for you? Is it for them?” ponders Madonna during Bring Your Love, a collaboration with Sabrina Carpenter from Confessions II. It’s a question you could ask of her decision to release a follow-up to 2005’s Confessions on a Dance Floor 21 years on.

The official line is, of course, that it’s for her. Confessions II was inspired by Madonna’s 2023 Celebration tour, a rampage through her back catalogue with staging that recreated the videos for old hits including Don’t Tell Me and Human Nature – it apparently set the singer thinking about her past. Certainly, Confessions II is rich with references to Madonna’s history, and not only the album from which it borrows its title and its initial structure, a sequence of house-influenced tracks that segue into each other like a DJ mix. There’s also the trip-hop-inspired Madonna of Bedtime Stories (the album concludes with a suite of slower, more introspective material); the club-hopping, fame-hungry Madonna of her 1982 debut single Everybody, who keeps cropping up in the lyrics; and the maternal, spiritually inclined Madonna of Ray of Light. The Test, a duet with her daughter Lourdes, is an older, wiser sequel to that album’s lullaby-like Little Star, alluded to in its opening lines.

Continue reading...

Two of international football’s 200 club have had parallel careers with their countries, but will this be their last meeting?

Can you remember what you were doing on 1 March 2006? Perhaps you were at Anfield, watching England beat Uruguay 2-1. You might have seen Switzerland put three goals past Scotland at Hampden Park.

Or you might have watched Luka Modric make his debut for Croatia. They beat Argentina 3-2, with Lionel Messi scoring his first international goal. The same evening, Cristiano Ronaldo scored twice in a 3-0 Portugal victory against Saudi Arabia, no doubt dreaming of the day he would live and work in the country.

Continue reading...

Martin is repulsed by Debbie’s maintenance routine, while she says it’s just the fallout of being a busy woman. You decide if his body of evidence stacks up

• Find out how to get a disagreement settled or become a juror

I am not a germaphobe but I do get freaked out when I see bits of Debbie lying around the place

Continue reading...

PWNED Welcome back to PWNED, the column where we document serious security failures in hopes we can all learn from others’ mistakes. This week, we’ll talk about how a lack of physical security can allow threat actors to take control of your network. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.com. Anonymity is available upon request. Our story comes to us from two professional red teamers, who get paid to break into offices and networks in order to find holes in the security system. Kristopher Johnson was working as an offensive security consultant at Echelon Risk + Cyber in 2023 and his manager was Dahvid Schloss. We spoke to both. Johnson and another employee named Michael were called upon to challenge the security at a client’s office while Schloss supervised remotely. It was winter and the maintenance crew had the maintenance door open. They walked through it and into the mail room, where a woman confronted them and asked what they were doing there. The two intrepid testers talked to the company maintenance crew and told them that they were new IT employees without working badges. They said that they had almost slipped on the ice and offered to help shovel, an offer the maintenance team was happy to take them up on. While Michael kindly helped the maintenance crew shovel snow, Johnson asked if the maintenance folks could let him in so he could go upstairs and start setting up Michael’s laptop for work. They let him in where he was free to explore the building as his partner brushed away a large section of ice and snow. Inside the building, Johnson looked for a place to plug in his Raspberry Pi. The idea was to connect this single-board computer to the network, where they could access it remotely and use it to attack the network from afar. He tried plugging his Raspberry Pi into an Ethernet port in the AV closet, but the company had network access control enabled, which prevented it from connecting. The Raspberry Pi had an LTE radio, but it couldn’t connect from the closet either. So Johnson instead moved his Raspberry Pi into the middle of the conference room and found an active network port that didn't have network access control enabled on it. However, he realized the Pi would be visible to anyone who entered the conference room, and they might find it suspicious. So he took some trash cans and used them to hide the device. Johnson had a hard time getting out of the building after that. He tried to go out the front door, but it required him to swipe a badge he didn’t have and strangers would not swipe their badges for him. But when he went back through the maintenance entrance, they were more than happy to swipe him out. He waited in the car while Michael finished his shoveling assignment. The next day, Johnson found out that his security breach had been detected. When he and Michael came in to meet with their contact at the company, the head of security confronted them. They had been “caught” because someone from maintenance went up to the IT department and wanted to thank the IT team for Michael’s help with the shoveling. However, the IT team had no record of new employees named Michael or Kristopher, so that raised suspicion. Before learning that they were professional red teamers, the building security had been suspicious and had looked at camera footage tracking their movements. They had even tried to get information on the license plate from Johnson’s rental car. However, they never did find the Raspberry Pi, which remained plugged into the Ethernet port in the conference room for two weeks. During that time, Johnson’s team was able to connect to the company’s Active Directory, find where the domain controllers were, and start password spraying accounts to see if they could gain access. They tried using the password “winter2023!” and got 50 or 60 hits among the employees. “So we used those credentials to kind of map out the rest of the network,” Johnson told The Register. “Network shares and things like that and then, towards the end of the test, we enumerated the certificate services - ADCS (Active Directory Certificate Services).” The red teamers found eight templates that were open to ESC1 and ESC4 vulns. They also found that the certificate authority was vulnerable to ESC8. They were then able to exploit those holes to gain domain administrative access. The janitor found the Raspberry Pi two weeks after they broke in, but by then it was too late. There are a lot of lessons here, but they start with training every member of the team to be suspicious of people coming from the outside, without badges, no matter what they say or do. Schloss noted that, if someone looks and acts like they belong in a space, most people will treat them that way. “First and foremost, what most people believe is crime is not crime. It's a Hollywood myth of what crime looks like,” Schloss told us. “I call it the ski mask bias. Everyone assumes you're not getting robbed until a person comes in with a ski mask and a gun yelling.” The maintenance team at this company should have been more suspicious of people calling themselves new employees and asking for a swipe in, even if they were willing to help shovel snow. The company also should have restricted network access to the port in the conference room so that an unknown device like a Raspberry Pi could not make an Ethernet connection from that spot. Finally, the company should have enforced a strong password policy that would have prevented our heroes from finding dozens of accounts with “winter2023!” as the password. And they should have enforced multi-factor authentication on those accounts as well. ®

Op de Schiedamsedijk in Vlaardingen is in de nacht van woensdag op donderdag een rijdende auto in brand gevlogen. Hoe dat kon gebeuren is niet duidelijk. De brandweer had het vuur snel onder controle, maar de auto van de auto is niet veel meer over.