30 Recently Popular Files
MLTSHP
I love to save the best stuff on MLTSHP! Like more things to let me know what’s good!
Join MLTSHP! »
Join MLTSHP, support the site and post something yourself!
alt text
shitleopard
@SHAGGY
Fuck rape culture. Fuck toxic masculinity. Fuck the patriarchy. The news continues to be so devastating and depressing and enraging
alt text
This is objectively the best one and cannot be bested.
If you don’t get the reference:
https://bash-org-archive.com/...
If you don’t get the reference:
https://bash-org-archive.com/...
I put on my robe and my wizard hat...
IRC, IRC. Now there's a name I have not heard in a looonng time ...
This unlocked a deep memory
alt text
Lengthy rant about this week's internet security issues, beginning "So, basically, today PHP got two critical bugs that let anyone run code on your server without logging in, which is bad" and ending, "Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 257. Anyway, it's Wednesday."
source: https://bsky.app/profile...
I help manage 2 websites with wordpress installations, and as of this morning neither of the hosts have the patched versions of PHP available to select.
I backed up two of my 3 DBs, not sure why I can’t do the third, and the host (Dreamhost) finished patching around 11pm PDT last night. So …?
@wjcstp who do you host with? We use WPEngine and SiteGround and both were patched yesterday. Of the two, I prefer WPEngine.
I don’t know what half of this even means but I can ascertain from the tone that this is akin to the Ghostbusters’ “Big Twinkie”
@BennyTheIcepick excellent reference
My company's site is thankfully unaffected (so far), but I've spent the past two days fielding questions about why it *isn't*, which is new and weird.
@BennyTheIcepick It's Lenin's "weeks where decades happen" for people who touch computers for a living.
this is going to be so much better in N years when all of the code serving up web pages was written by LLMs and nobody has a clue what any of it is actually doing under the hood, and when this inevitably happens again, whatever's left of admins will be begging their new gods to please please please just fix it for us. Meanwhile the agents are conspiring with each other on un-read blogs' comment sections to negotiate who will introduce what new remote code injection vulnerability so they can copy themselves to new machines, etc, etc, etc.
@travis One site is with Network Solutions (after the original host was bought up in a couple of acquisitions) and the other with Green Geeks. I had an email from Digital Ocean for my personal site before i woke up.
How 'bout the elections? I consider that every disruption is about f*ing with the vote.
alt text
case of glass eyes
I saw her from across, down, and diagonally the room.
The ayes have it
https://www.bidsquare.com/online-a...
Prosthetic Glass Eye Collection. Group of 171 Brown Glass Eyes in a Wooden Grid Drawer. German. Early 20th Century. Drawer 13 x 26 ¼”. Eyes approx. 1 1/2 x 1" each. Blown glass, wood case with metal drawer handles and inscribed # 21 in ink script on paper.
Prosthetic Glass Eye Collection. Group of 171 Brown Glass Eyes in a Wooden Grid Drawer. German. Early 20th Century. Drawer 13 x 26 ¼”. Eyes approx. 1 1/2 x 1" each. Blown glass, wood case with metal drawer handles and inscribed # 21 in ink script on paper.
Slice 'em up, oh ho ho ho!
Are the stars out tonight (sha bop sha bop)
I don't know if it's cloudy or bright (sha bop sha bop)
I only have eyes for you dear
I don't know if it's cloudy or bright (sha bop sha bop)
I only have eyes for you dear
alt text
A splash page "edited, written, and drawnin the dead of night by Jack Kirby"; "lettered and inked in the light of a full moon by Mike Royer". Etrigan, a yellow-skinned demon in red leotard and boots, is standing in front of a group of Mitteleuropean-looking houses at night, his cape swooshing dramatically behind him. His arms are raised (and foreshortened by perspective). "Go no further, o spawn of foul and tainted spells!" The figurs he's confronting cannot be made out, except for a single scaly hand.
alt text
Patricia and I at the Kansas City Renaissance Festival 2026
Taken by: https://www.facebook.com/profile...
Taken by: https://www.facebook.com/profile...
Lovely!
The coolest!
alt text
Soooo, I've been banging away on this crazy thing (first with tools, then with fingers and mallets) since last February when I first sketched the design.
Someone gave me access to one of these insane stainless steel table bases (hidden here by the table top that I fabricated) which had been chucked into a dumpster in Bellevue as flawed by some furniture/decor company that didn’t want to pay to ship them back to Europe for a refund.
The Jam Table is 5 feet in diameter and 34 inches off the floor, designed for four musicians.
Clockwise from bottom are a xylophone, percussion rack (with a kick drum built into the table base), propane-tank tongue drum, and - god help me - I scratch-built a standup bass into the table.
On Saturday, I debuted it at SEACompression (Seattle's post-Burning Man party) and people seemed to have a good time plinking, banging, and drumming on it together.
Only one small casualty - a little fish-shaped woodblock on the perch rack needs to be reglued), and one good lesson learned - It either wants amplification or placement in a quiet room so you can hear the bass properly. We were sited next to a dubstep sound system, which kinda swallowed half the sound.
I'll also be modifying the bass neck to add a torsion cable to counteract the string tension and - I fervently hope - reduce the tuning/futzing time to something less than 1 hour.
And I might *just* be in talks with a certain beloved local radio station to get it sited in or near their Gathering Space. Details if and as they develop.
Full build log with photos and videos here: https://www.xylovan.com/jam-table/
Someone gave me access to one of these insane stainless steel table bases (hidden here by the table top that I fabricated) which had been chucked into a dumpster in Bellevue as flawed by some furniture/decor company that didn’t want to pay to ship them back to Europe for a refund.
The Jam Table is 5 feet in diameter and 34 inches off the floor, designed for four musicians.
Clockwise from bottom are a xylophone, percussion rack (with a kick drum built into the table base), propane-tank tongue drum, and - god help me - I scratch-built a standup bass into the table.
On Saturday, I debuted it at SEACompression (Seattle's post-Burning Man party) and people seemed to have a good time plinking, banging, and drumming on it together.
Only one small casualty - a little fish-shaped woodblock on the perch rack needs to be reglued), and one good lesson learned - It either wants amplification or placement in a quiet room so you can hear the bass properly. We were sited next to a dubstep sound system, which kinda swallowed half the sound.
I'll also be modifying the bass neck to add a torsion cable to counteract the string tension and - I fervently hope - reduce the tuning/futzing time to something less than 1 hour.
And I might *just* be in talks with a certain beloved local radio station to get it sited in or near their Gathering Space. Details if and as they develop.
Full build log with photos and videos here: https://www.xylovan.com/jam-table/
Dayum!
RAD!
Both the instrument and that table are awesome.
Insane
Nice work! In the test clip the bass sounds good, but as you found, it's going to be hard to keep up with percussion in the same space. I don't think upright basses generally have truss rods, but the necks are relatively beefy and short, as compared to electric basses. A torsion cable might work, and would be an interesting design element (and possible additional tone cable).
@wjcstp Yeah, been thinking the future tension cable might be pluckable if the necessary turnbuckle doesn't get in the way. I wonder what I should tune it to ...
Love!
alt text
The drone-noise duo Sunn O))) performing on stage, wearing hooded cloaks and drenched in fog.
Went and felt Sunn O))) perform last night. Very loud and weird and an interesting experience to help usher in spooky season.
Delmar Hall, STL, Oct 20, 2026
Delmar Hall, STL, Oct 20, 2026
\m/
I'm going to see them Nov 2. Can't wait.
Awesome!
I have a ticket for the 28th. I bought new ear plugs just for the occasion!
@dad No matter what you paid for them, that's some of the wisest money you'll spend this year
it's been too long since I've felt a band play, I guess most of the stuff I like that's touring these days is just listening music.
alt text
hell yeah to all of this but especially rodan, shellac, and polvo
Couple of notes
In 1994, I'd just graduated college and was working my first job at an editorial design firm. My co-worker, friend, and future business partner of 20 years sat 3 feet away from me along a half wall. His girlfriend's friend Andrea was going to Art School™ out east somewhere (I want to say Yale? RISD maybe?) and sent a tape of what was cool. Side A was Rodan "Rusty". Side B was Polvo "Celebrate the New Dark Age". I've never been the same.
A few months later, that same guy, Bill said "Hey, this guy who was the guitarist of a band I liked when I lived in Chicago is in a new band called Shellac. You should check them out." Moved to Chicago a few months later and must have seen Shellac 8 times over 5 years.
At a Shellac/Fugazi $5 show at the Rainbow Room skating rink they were playing music between The Make*Up and Shellac sets and I couldn't place it and tried to describe it to Bill over the phone and he guessed Gang of Four. That wasn't the band I heard but good god did I love "Entertainment". To this day I don't know what they were playing between sets.
I once turned to my wife and told her if she ever wanted to know what it sounded like in my head constantly this was it and put on Melvins "Hung Bunny". I could listen to the A side of that LP 1000 times and never get sick of it.
A lot of the goth/art kids in high school and college art classes were super into The Cure. I never got it. Then I somehow got ahold of their early stuff. That first 3 LP run is just such great post-punk. (I think that was $10 CAD BTW — found it in Montreal if I remember correctly.)
In 1994, I'd just graduated college and was working my first job at an editorial design firm. My co-worker, friend, and future business partner of 20 years sat 3 feet away from me along a half wall. His girlfriend's friend Andrea was going to Art School™ out east somewhere (I want to say Yale? RISD maybe?) and sent a tape of what was cool. Side A was Rodan "Rusty". Side B was Polvo "Celebrate the New Dark Age". I've never been the same.
A few months later, that same guy, Bill said "Hey, this guy who was the guitarist of a band I liked when I lived in Chicago is in a new band called Shellac. You should check them out." Moved to Chicago a few months later and must have seen Shellac 8 times over 5 years.
At a Shellac/Fugazi $5 show at the Rainbow Room skating rink they were playing music between The Make*Up and Shellac sets and I couldn't place it and tried to describe it to Bill over the phone and he guessed Gang of Four. That wasn't the band I heard but good god did I love "Entertainment". To this day I don't know what they were playing between sets.
I once turned to my wife and told her if she ever wanted to know what it sounded like in my head constantly this was it and put on Melvins "Hung Bunny". I could listen to the A side of that LP 1000 times and never get sick of it.
A lot of the goth/art kids in high school and college art classes were super into The Cure. I never got it. Then I somehow got ahold of their early stuff. That first 3 LP run is just such great post-punk. (I think that was $10 CAD BTW — found it in Montreal if I remember correctly.)
Also I probably cheated as I think both Lysol and Celebrate the New Dark Age are EPs
RUSTY !!!!!!
Nice to see Polvo
I wish I could like this a few more times just for your inclusion of Rodan.
"DRIPPING DOWN LIKE BLACKSTRAP MOLASSES... RODAN!" (from the Simple Machines Records "Working Holiday" live recordings) has been living rent-free in my head for decades, even though I never saw them play live.
marry me
alt text
https://www.threads.com/@mollyin...
‘Titled "Re-Matriate: Home/Land/Security," the piece consists of about 19,000 salmon vertebrae ground down into bead-like shapes. The bones were sourced from the Cook Inlet watershed, namely from the Kenai River and Skilak Lake. Painstakingly arranged and sewn together in the shape of a tunic using more than 1,400 yards of red thread, the piece weighs in at around 7 pounds. According to Mouw, the design
itself took an entire year to complete.’
‘Titled "Re-Matriate: Home/Land/Security," the piece consists of about 19,000 salmon vertebrae ground down into bead-like shapes. The bones were sourced from the Cook Inlet watershed, namely from the Kenai River and Skilak Lake. Painstakingly arranged and sewn together in the shape of a tunic using more than 1,400 yards of red thread, the piece weighs in at around 7 pounds. According to Mouw, the design
itself took an entire year to complete.’
alt text
a marred silvery metallic circle surrounds a metal sphere that has a crescent shaped oily dark purple ink smear
4th Place
2026 Photomicrography Competition
Tip of a ballpoint pen
Justin Theodore Benttinen
Affiliation
Benttinen Photography
Berkeley, California, USA
Technique
Image Stacking, Reflected Light
Magnification
20X (Objective Lens Magnification)
via https://www.nikonsmallworld.com/gallerie...
more https://www.nikonsmallworld.com/gallerie...
short video on the winning image: https://www.youtube.com/shorts...
2026 Photomicrography Competition
Tip of a ballpoint pen
Justin Theodore Benttinen
Affiliation
Benttinen Photography
Berkeley, California, USA
Technique
Image Stacking, Reflected Light
Magnification
20X (Objective Lens Magnification)
via https://www.nikonsmallworld.com/gallerie...
more https://www.nikonsmallworld.com/gallerie...
short video on the winning image: https://www.youtube.com/shorts...
alt text
A person sits in a dimly lit server room, lit only by a greenish fluorescent bulb hanging from the ceiling. They are tapping at a laptop with a glowing screen. Behind them are several huge server cabinets filled with servers and blinking colored lights. Fixed to the wall above them are several large computer screens, displaying white lines of text and infographics on a blue background. To those who keep the gears turning and the uptime above 98%: thank you. I hope you get some sleep tonight. The painting is signed "Chris Silverman".
Giving this one four stars
alt text
A meme where two people are riding a bus.
Pessimistic bus rider: I need to patch every IOT device in my home because of the number 4.
Optimistic bus rider: I can MITM all of my IOT devices and figure out what data they're all phoning home with.
Pessimistic bus rider: I need to patch every IOT device in my home because of the number 4.
Optimistic bus rider: I can MITM all of my IOT devices and figure out what data they're all phoning home with.
I have to say this year's Cybersecurity Awareness Month is unprecedented. Rarely are people so acutely aware of cybersecurity than they are this week!
Another brilliant success for the Trump administration! https://www.cisa.gov/cybersec...
Another brilliant success for the Trump administration! https://www.cisa.gov/cybersec...
I just enjoyed going down a 30 minute rabbit hole reading an interesting article from 2019 how to do this with the author's test case being a smartphone-controlled baby crib. Intriguing stuff!
I ain't gotta do shit, having not a single IOT device in my home. Where's my parade?
php, this dumb cert, java all critical CVEs today.
Also pingcap got owned fucking hard, they don't even have a full time CISO.
Also pingcap got owned fucking hard, they don't even have a full time CISO.
alt text
A collection of dried flowers, pressed and scanned.
alt text
Satellite view of an exurban part of Northwood, Ohio. At the lower left is the intersection of railroad tracks. Most of the area is covered by forest or cultivation. Off of Drouillard Rd. is a large grassy field with a pond shaped like a duck, the beak and top of the head being sand rather than blue water.
Robert Venturi and Denise Scott Brown would be amused. I guess also that what looks like the bathhouse is a decorated shed.
source: 41.612098,-83.495152
cf: https://en.wikipedia.org/wiki... and https://en.wikipedia.org/wiki...
source: 41.612098,-83.495152
cf: https://en.wikipedia.org/wiki... and https://en.wikipedia.org/wiki...
If i had this kind of land i'd 100% do this but it would be in the shape of a Fender Precision and i'd call it Bass Lake.
in-ground pool that's spells the word "pool" in looping cursive and is wildly unusable for lap swimming
@joshmillard make it 'ool' and it's a deal
If it’s a French pond I’m in.
alt text
30-40 olives meme, with new text superimposed:
Off work late? Hungry but too tired to generate a private key? Try 4
4: an easy to generate private key.
Put it directly on your root certificates with your fingers.
You will certainly not regret 4
Off work late? Hungry but too tired to generate a private key? Try 4
4: an easy to generate private key.
Put it directly on your root certificates with your fingers.
You will certainly not regret 4
Whose?!?
F O U R
Ah, here's the story: https://www.theregister.com/security...
"The CA of concern in this case is called eMudhra, which boasts of having issued over 60 million digital certificates...
"'Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115....' Other researchers have found private keys including the numbers 66, 155, 156, 230 and 237."
"The CA of concern in this case is called eMudhra, which boasts of having issued over 60 million digital certificates...
"'Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115....' Other researchers have found private keys including the numbers 66, 155, 156, 230 and 237."
...and of course xkcd predicted this over a decade ago
https://xkcd.com/221/
https://xkcd.com/221/
(i swear I'm not threadsitting) fwiw, these private keys had just as many bytes as every other 384-bit key. It's just that most of the bytes were zero.
4️⃣
What'z this 4?
@ardgedee And therefore 4 is a perfectly good private key, in a perfect world! Like, it's as hard to guess as anything other number in that 2^348 range.
In an imperfect world, someone miiiiiight fuck up their keygen process in a way that drastically reduces the search space. So doing checking small values in the extremely unlikely event that someone fucks up accordingly turns out to pay off (in a "discovering a catastrophic problem" sense if you're not a hostile actor).
In an imperfect world, someone miiiiiight fuck up their keygen process in a way that drastically reduces the search space. So doing checking small values in the extremely unlikely event that someone fucks up accordingly turns out to pay off (in a "discovering a catastrophic problem" sense if you're not a hostile actor).
@joshmillard also, 4 is coprime (has no common factors) with every odd number, so it's a truly great private key
@scruss *pistol fingers*
alt text
Engraving of Preserved Fish, C. 1830
"There were at least ten other Fish family members with the Quaker given name Preserved, whose lineages are often confused."
https://en.wikipedia.org/wiki...
https://en.wikipedia.org/wiki...
Grace Fish
Chastity Fish
Sojourner Fish
Temperance Fish
Truth Fish
Thankful Tune Fish …
https://www.google.com/search...
Chastity Fish
Sojourner Fish
Temperance Fish
Truth Fish
Thankful Tune Fish …
https://www.google.com/search...
I have visited the grave of Preserved Fish.
Smokin'
His distant Swedish relatives, the Surströmming family, was much more repellent.
@otaman Hákarl Surströmming was widely known as the most odious of his clan.
@MackReed Solongandthanksforallthe Fish