MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-051
DATE(S) ISSUED: 05/13/2024
SUBJECT: Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
OVERVIEW: Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLEGENCE: Apple is aware of a report that CVE-2024-23296 may have been exploited in the wild.
SYSTEMS AFFECTED:

• Versions prior to macOS Sonoma 14.5
• Versions prior to macOS Ventura 13.6.7
• Versions prior to macOS Monterey 12.7.5
• Versions prior to watchOS 10.5
• Versions prior to tvOS 17.5
• Versions prior to iOS 16.7.8 and iPadOS 16.7.8
• Versions prior to iOS 17.5 and iPadOS 17.5

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY: Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Details of the vulnerabilities are as follows:
Tactic: Execution (TA0002):
Technique: Exploitation for Client Execution (T1203):

• Processing a file may lead to unexpected app termination or arbitrary code execution (CVE-2024-27829)
• An attacker may be able to cause unexpected app termination or arbitrary code execution (CVE-2024-27818)
• An app may be able to execute arbitrary code with kernel privileges (CVE-2024-27804, CVE-2024-27842)
• An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. (CVE-2024-23296)
• An attacker may be able to elevate privileges (CVE-2024-27796, CVE-2024-27798)
• An attacker may be able to access user data (CVE-2024-27816)

Additional lower severity vulnerabilities include:

• An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac (CVE-2023-42861)
• An app may be able to access protected user data (CVE-2023-42893)
• A malicious application may be able to access Find My data (CVE-2024-23229)
• An app may be able to read arbitrary files (CVE-2024-23236)
• An app may be able to access user-sensitive data (CVE-2024-27789)
• An app may be able to elevate privileges (CVE-2024-27824, CVE-2024-27843)
• An app may be able to read sensitive location information (CVE-2024-27810)
• An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges (CVE-2024-27813)
• A shortcut may output sensitive user data without consent (CVE-2024-27821)
• An app may be able to gain root privileges (CVE-2024-27822)
• An app may be able to bypass certain Privacy preferences (CVE-2024-27825, CVE-2024-27847)
• An app may be able to read arbitrary files (CVE-2024-27827)
• An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication (CVE-2024-27834)
• An attacker with physical access to an iOS device may be able to access notes from the lock screen (CVE-2024-27835)
• A local attacker may gain access to Keychain items (CVE-2024-27837)
• A malicious application may be able to determine a user's current location (CVE-2024-27839)
• An app may be able to disclose kernel memory (CVE-2024-27841)
• A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages (CVE-2024-27852)

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS: We recommend the following actions be taken:

• Apply the stable channel update provided by Apple to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1 : Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.2 : Establish and Maintain a Remediation Process: Establish and maintain a risk-based remediation strategy documented in a remediation process, with monthly, or more frequent, reviews.
  • Safeguard 7.6 : Perform Automated Vulnerability Scans of Externally-Exposed Enterprise Assets: Perform automated vulnerability scans of externally-exposed enterprise assets using a SCAP-compliant vulnerability scanning tool. Perform scans on a monthly, or more frequent, basis.
  • Safeguard 7.7 : Remediate Detected Vulnerabilities: Remediate detected vulnerabilities in software through processes and tooling on a monthly, or more frequent, basis, based on the remediation process.
  • Safeguard 16.13 Conduct Application Penetration Testing: Conduct application penetration testing. For critical applications, authenticated penetration testing is better suited to finding business logic vulnerabilities than code scanning and automated security testing. Penetration testing relies on the skill of the tester to manually manipulate an application as an authenticated and unauthenticated user.
  • Safeguard 18.1 : Establish and Maintain a Penetration Testing Program: Establish and maintain a penetration testing program appropriate to the size, complexity, and maturity of the enterprise. Penetration testing program characteristics include scope, such as network, web application, Application Programming Interface (API), hosted services, and physical premise controls; frequency; limitations, such as acceptable hours, and excluded attack types; point of contact information; remediation, such as how findings will be routed internally; and retrospective requirements.
  • Safeguard 18.2 : Perform Periodic External Penetration Tests: Perform periodic external penetration tests based on program requirements, no less than annually. External penetration testing must include enterprise and environmental reconnaissance to detect exploitable information. Penetration testing requires specialized skills and experience and must be conducted through a qualified party. The testing may be clear box or opaque box.
  • Safeguard 18.3 : Remediate Penetration Test Findings: Remediate penetration test findings based on the enterprise’s policy for remediation scope and prioritization.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Restrict use of certain websites, block downloads/attachments, block Javascript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 2.3: Address Unauthorized Software: Ensure that unauthorized software is either removed from use on enterprise assets or receives a documented exception. Review monthly, or more frequently.
  • Safeguard 2.7: Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassessbi-annually, or more frequently.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Block execution of code on a system through application control, and/or script blocking. (M1038: Execution Prevention)
  • Safeguard 2.5 : Allowlist Authorized Software: Use technical controls, such as application allowlisting, to ensure that only authorized software can execute or be accessed. Reassess bi-annually, or more frequently.
  • Safeguard 2.6 : Allowlist Authorized Libraries: Use technical controls to ensure that only authorized software libraries, such as specific .dll, .ocx, .so, etc., files, are allowed to load into a system process. Block unauthorized libraries from loading into a system process. Reassess bi-annually, or more frequently.
  • Safeguard 2.7 : Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassess bi-annually, or more frequently.
• Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior. (M1040: Behavior Prevention on Endpoint)
  • Safeguard 13.2 : Deploy a Host-Based Intrusion Detection Solution: Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.
  • Safeguard 13.7 : Deploy a Host-Based Intrusion Prevention Solution: Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.

REFERENCES:

Hey Guys,
We are an AI company looking for experienced OnlyFans chatters to come in and label media. This means reviewing photos and writing descriptions about what is happening in the photo. We have training and standard-operating-procedures you will have to follow.
We pay on a PER MEDIA LABELED basis. Meaning, you can earn $8/hr if you are proficient in labeling the media.
Literally, if you know the industry jargon and how to describe what's happening in a scene this is an EASY job.
Must write fluently in english, must have experience with OF content, must understand adult industry jargon, etc.
Comment here or DM me.
Currently hiring for 10 positions.

Getting some of your initial clients is hard.
It was hard for me.
What I did to gain my first batch of clients was 2 things.

1. I found a local tech event in Los Angeles, and sponsored it. It cost me $500.00
2. I offered a heavy discount on my services. Something to the tune of $500.00

You could show off a nice app design for around $5k. Cheaper if you're outsourcing it overseas, but I am in the US, I charge US rates, I deliver US quality.
At the time I ended up delivering about $4,000.00 worth of work, for $3,000.00.
Sometimes people just need a push to get started, so the sale certainly helped.
Here's my brand.
I didn't care so much as try to make the most money up front, I wanted to build a network of people who were willing to say good things about me.
Now, those testimonials sit on my Linkedin, Youtube, my website. They are in the ether forever. So when people have doubts about you, your brand, or whatever it is that you do, your testimonials and reviews will shine the most in these moments.
Not only are your early reviews and testimonials of utmost value, you should get them recorded, and on video.
Why? Because they are worth their weight in gold.
I have attached a few examples here:

1. Happy Client 1
2. Happy Client 2
3. Happy Client 3
4. Happy Client 4
5. Happy Client 5
6. Happy Client 6
7. Happy Client 7
8. Happy Client 8
9. Happy Client 9
10. Happy Client 10

It was hard to get these. People have lives, and others don't always feel comfortable. I would in-fact say 1 in 25 people were willing to sit down and record the video. So be prepared for that also.
Now that I have these, I can charge the prices that are appropriate for my service (while I still can, before AI does it for me).
Trolls, go ahead and troll, but the internet has trust issues. There are good people out there, but hard to find. The more you can prove you provide the quality you say you can provide, the better you will perform in this internet world.
I hope this helps young entrepeneurs.

Receive a flat 10% off your next purchase if you spend more than $100, and receive one cache free when you pay full amount in advance(Purchase amount min 60$).
*Reservations are made so that I am sure you will buy from me and you'll not back off.
100% Sets delivered On Time .
To reserve an item/set you need to pay 25% of the price in advance.
The reservation fee is non-refundable and will be deducted from the total payment.
**Accepted payment options in order : Dota2 / CS:GO Items of the same value as the listed set price.
Profile Link : https://steamcommunity.com/id/Mist-san
Buyer goes first, no exceptions.
All conversations will be saved for safety and record.
Buyers go first; add me now if you're interested in a 30-day cooldown period.
Please leave a comment on my profile.
When reserving cache sets, a 25% reservation fee is required.
Keep in mind that for this deal you will need to have Steam Mobile Authenticator and wait for 30 days, so I can gift them to you.
also there might still be a limitation to gift only 8 bundles per day.
Updated Price List : 3-19-2024**(U)** = Unbundled set
Dota 2 collector's cache I & II 2020

Set	Hero	Price
Claszureme Incursion (Very Rare)	Faceless Void	70$ (sold out)
Steward of the Forbidden Chamber (Rare)	Templar Assassin	30$
Apocalypse Unbound	Ancient Apparition	12$
Fury of the Righteous Storm	Disruptor	6$
Signs of the Allfather	Nature's Prophet	15$
Lineage of the Stormlords	Juggernaut	40$
The King Of Thieves	Keeper of the Light	10$
Wrath of the Fallen	Doom	15$
Horror from the Deep	Tidehunter	25$
Talons of the Endless Storm	Chaos Knight	18$
Blaze of Oblivion	Phoenix	8$
Carousal of the Mystic Masquerade	Rubick	8$
Evolution of the Infinite	Enigma	8$
Clearcut Cavalier	Timbersaw	8$
Blacksail Cannoneer	Sniper	8$
Crown of Calaphas	Shadow demon	18$
Secrets of the Celestial	Skywrath mage	8$
Beast of the Crimson Ring	Bristleback	12$
Ire of the Ancient Gaoler (U)	Arc Warden	30$
Master of the Searing Path (U)	Ember Spirit	30$

Aghanim's 2021 Collector's Cache

Set	Hero	Price
Perception of the First Light	Dawnbreaker	18$
Forgotten Fate	Mars	10$
Perils of the Red Banks	Chen	12$
Stranger in the Wandering Isles (Unbundled)	Drow Ranger	50$
Pyrexae Polymorph Perfected ( Rare )	Ogre Magi	35$

Nemestice Collector's Cache 2021

Set	Hero	Price
Twilight Hex	Dark Willow	15$
Litany of the Damned	Doom	15$
Caerulean Star	Enchantress	8$
Eyriebound Imperator	Skywrath Mage	20$
Anthozoan Assault	Tiny	25$
Defender of the Brumal Crest	Winter Wyvern	15$
Indomitable Legacy ( Rare )	Sven	55$ (SOLD) Buyer

Diretide 2022 Collector's Cache I

Set	Hero	Price
Shadowleaf Insurgent	Hoodwink	$15
Scarlet Subversion	Riki	$15
Whippersnapper	Snapfire	$10
Hounds of Obsession	Chen	$10
Seadog's Stash	Clockwork	$10
Starlorn Adjudicator	Dawnbreaker	$15
Spoils of the Shadowveil	Spectre	$15
Trophies of the Hallowed Hunt	Ursa	$10
Crimson Dawn	Phoenix	$10
Forgotten Station	Terrorblade	$15
Dirge Amplifier	Undying	$15
Champion of the Fire Lotus	Monkey King	$10
Deathstitch Shaman	Witch Doctor	$10
Blue Horizons ( Rare )	Marci	$30
Angel of Vex ( Rare )	Invoker	$35
Dark Behemoth ( Very Rare )	Primal Beast	$50

Diretide 2022 Collector's Cache II

Set	Hero	Price
Transcendent Path	Oracle	$15
Darkfeather Factioneer	Phantom Assassin	$10
Freeboot Fortunes	Ogre Magi	$10

Getting some of your initial clients is hard.
It was hard for me.
What I did to gain my first batch of clients was 2 things.

1. I found a local tech event in Los Angeles, and sponsored it. It cost me $500.00
2. I offered a heavy discount on my services. Something to the tune of $500.00

You could show off a nice app design for around $5k. Cheaper if you're outsourcing it overseas, but I am in the US, I charge US rates, I deliver US quality.
At the time I ended up delivering about $4,000.00 worth of work, for $3,000.00.
Sometimes people just need a push to get started, so the sale certainly helped.
Here's my brand.
I didn't care so much as try to make the most money up front, I wanted to build a network of people who were willing to say good things about me.
Now, those testimonials sit on my Linkedin, Youtube, my website. They are in the ether forever. So when people have doubts about you, your brand, or whatever it is that you do, your testimonials and reviews will shine the most in these moments.
Not only are your early reviews and testimonials of utmost value, you should get them recorded, and on video.
Why? Because they are worth their weight in gold.
I have attached a few examples here:

1. Happy Client 1
2. Happy Client 2
3. Happy Client 3
4. Happy Client 4
5. Happy Client 5
6. Happy Client 6
7. Happy Client 7
8. Happy Client 8
9. Happy Client 9
10. Happy Client 10

It was hard to get these. People have lives, and others don't always feel comfortable. I would in-fact say 1 in 25 people were willing to sit down and record the video. So be prepared for that also.
Now that I have these, I can charge the prices that are appropriate for my service (while I still can, before AI does it for me).
Trolls, go ahead and troll, but the internet has trust issues. There are good people out there, but hard to find. The more you can prove you provide the quality you say you can provide, the better you will perform in this internet world.
I hope this helps young entrepeneurs.

Welcome to our weekly board game meetup at Level One 🙂. Level One is a board game lounge where we like to come hangout, have fun, and meet new people. Everyone is welcome!
Where is it? Level One Game Pub, 14 Waller Street, Downtown Ottawa
When is it? Every Thursday at 6pm. Ask for the Reddit group upon arrival. Generally we take up the back half of the upper level. ^{Note: Please try to arrive at 6pm, coming later means there may not be space for you to join a game as the tables may already be full!}
How much do I have to pay? There is a $9 "stay & play" fee, plus any food or drink you purchase.
What games? Some games people commonly play are: Codenames, Secret Hitler, Avalon, Just One, Wavelength, Dominion, Coup, and Wingspan, but we also love mixing it up and trying new games 🙂. We usually play light strategy games, party games, and social deduction, but we also tend to have a table or two for heavier strategy games.
FAQs:

How many people usually show up?

Around 25 to 45 people.

Is there a particular time I should show up at?

We strongly suggest showing up at 6pm.

How late does everyone stay?

10pm is usually when people start heading out, but feel free to head out whenever you wish. There are also some of us who tend to stay until closing/midnight.

How big are the tables?

Generally we have three 8-10 seat tables and at least three 4-6 seat tables

What’s the age range of the crowd? Will I fit in?

Most of us are in our 20s and 30s, but of course all ages are welcome! Our group is commonly described as welcoming, fun, good vibes, and relaxed.

Do I need to know how to play these games beforehand?

Nope! The games are for fun, not competition, feel free to learn from us or staff once you arrive. No pressure to know anything!
If you have any questions do not hesitate to comment or message 😁
^{tweet tweet - some bird}

Hi all,
I posted a while back asking for input on using Doxy while dealing with T, as one of the side effects listed on Google was tinnitus/persistent ringing in the ears. Seeing this obviously spiked my anxiety, as my T is baseline a 5/6, it's audible over tv and quiet driving, so I'm definitely aware of it on a day to day basis.
Seeing this, I furthered exasperated my anxieties by jumping to reddit, and googling the connection between Doxy and T. Finding the Tinnitus Talks forum where the discussion was pretty evenly split between negative effects and none.
I know the interne ti's a terrible place to play doctor, but I was looking more so to be able to make an informed decision based on risk v reward. I also spoke to a couple local pharmacists before actually filling the script. Both folks reviewed their systems and said that Tinnitus didn't even come up as a listed side effect for them, so they felt it was a much more rare effect, and assured me that if it did worsen my T, I could stop the Med and find a similar antibiotic.
I'm officially a week in, and it's hard to tell if there's been any increase in my T. I can still here it over most day to day activities, but I'm unsure if that's caused by the meds themselves, or because I've been more hyper vigilant of my T, because I'm worried about it worsening. Yesterday, I had two temporary spikes, where everything went mute, and my T hit a solid 8 in one ear. This isn't abnormal for me, these spikes happen from time to time, but never last more than 30 seconds to a minute.
Only posted this elongated explanation, as a few people asked for updates on my original question about doxy. Also, unsure why it will only let me post if I provide a link, sorry. 🙃

Tarot Reader since 2017 who has fully mastered in depth readings to bring true insight to the energies and circumstances you are dealing with, with the use of Oracle and Astrology as well. Shaneka's Services And Contact Linktree
get a tarot reading
how often should you get a tarot reading
should i get a tarot reading
is it good to get a tarot reading
how much does it cost to get a tarot reading
how often should i get a tarot reading
best time to get a tarot reading
reasons to get a tarot reading
where can i get a tarot reading
why you should get a tarot reading
get a tarot reading online
getting a tarot reading in a dream
how to get the tarot card at arasaka tower
how to get the tarot card above misty
what age can you get a tarot reading
how to ask for a tarot reading
ways to do a tarot reading
how to get tarot reading
what to do if you get a bad tarot reading
what to know before getting a tarot reading
what to expect when getting a tarot reading
get a tarot reading for free
a tarot reader
is it bad to get a tarot card reading
when you get a bad tarot reading
best tarot cards to get in a love reading
can you get a bad tarot reading
how to get a better tarot reading
can you get a tarot reading online
where can i get a tarot card reading
can i get a free tarot reading online
how often should you get a tarot card reading
get a tarot card reading
worst cards to get in a tarot reading
what do you get from a tarot reading
i got a tarot card reading
i want a tarot reading
i need a tarot reading
how to get a free tarot reading
what is a general tarot reading
when should i get a tarot reading
how long should a tarot reading be
how to get a tarot reading
how many times can you get a tarot reading
how to get the most out of a tarot reading
how to get a good tarot reading
is it safe to get a tarot reading
when is the best time to get a tarot reading
why get a tarot reading
learn tarot reading near me
what happens when you get a tarot reading
where to get a tarot reading near me
get a card reader natwest
buy tarot card near me
when not to get a tarot reading
what to get a tarot reading on
buy tarot card online
quick tarot reading
questions to ask when getting a tarot reading
questions for a tarot reading
should you get a tarot reading
getting a tarot reading
what to do when you get tarot cards
get a reading with theresa caputo
where to get a tarot reading
x tarot reversed
z tarot
1 tarot card reading
2 tarot card reading
2 card tarot reading free
2 card tarot spreads
3 tarot reading
3 card reading tarot free
3 card tarot reading new age store
3 card tarot reading questions
4 card tarot reading free
4 tarot card reading
4 tarot card reading meaning
5 card tarot reading free
5 card reading tarot
6 card tarot reading free
how to read a 6 card tarot spread
6 card reading tarot
6 card relationship tarot spread
7 tarot reading
7 card tarot reading free
7 card tarot reading free online
8 card tarot reading
8 card spread tarot reading
9 card tarot reading
how to read a 9 card tarot spread
psychic reading
psychic reading near me
psychic reading free
psychic reading online
free psychic reading by date of birth and time
psychic reading free love
psychic reading cards
psychic readings by danielle
psychic readings by alicia
psychic reading meaning
eva tarot psychic reading
rebecca's psychic reading ted lasso
free psychic reading app
psychic reading ai
psychic reading apple pay
psychic reading banner
bali psychic reading
bobby brown psychic reading
benefits of psychic reading
bts psychic reading
birth chart psychic reading
best psychic reading
psychic reading cards meaning
psychic reading cards deck
daily psychic reading free
dallas psychic reading nyc
david schultz psychic reading
dark psychic reading
dangers of psychic reading
psychic reading elijah vue
psychic readings near me
psychic reading near me open now
elijah vue psychic reading
empress chain spiritual psychic reading
ethical psychic reading
email free psychic reading
experienced psychic reading
elsa psychic reading
psychic reading for taurus
psychic reading for today
psychic reading for riley strain
psychic reading for 2024
psychic reading free by date of birth
psychic reading flyers
psychic reading for aries
psychic reading for elijah vue
free psychic reading for love
free psychic reading cards
free psychic reading for leo
fertility psychic reading free
free psychic reading for virgo
free psychic reading for libra
free psychic reading for cancer
free psychic reading for taurus
psychic reading generator
psychic reading gif
psychic reading german
psychic reading gold creek
gemini psychic reading
gretchen fleming psychic reading
ghost psychic reading
goddess elite psychic reading
kelsey grammer psychic reading
sal governale psychic reading
psychic reading hannah mount sinai
psychic reading hoodie xplr
headache after psychic reading
horoscope psychic reading
howard stern sal psychic reading
henry cavill psychic reading
hand psychic reading
psychic reading in st louis mo
psychic reading in weymouth
impractical jokers psychic reading episode
i get a free psychic reading
i free psychic reading
psychic reading jobs online
psychic reading joslin smith
psychic reader joyce
psychic reader jerry
tarot reading jobs
tarot reading jakarta
tarot reading jobs from home
tarot reading jobs near me
tarot reading journal
tarot reading jobs remote
jungkook psychic reading
joslin smith psychic reading
january psychic reading
jade psychic and tarot reading cape town
kate middleton psychic reading youtube
kyle psychic reading
kim porter psychic reading
kim's psychic reading room
kris jenner psychic reading
kim kardashian psychic reading
kpop psychic reading
kelsey psychic reading
princess kate psychic reading
psychic reading lounge reviews
psychic reading ltd
love psychic reading free
libra psychic reading
leo psychic reading
love psychic reading free by date of birth
live psychic reading free online
love psychic reading online
leo psychic reading today
psychic reading meaning in hindi
psychic reading malaysia
psychic reading malvern
psychic reading meaning in hindi with example
morgan nick psychic reading
matthew perry psychic reading
my psychic reading today
psychic reading near scarborough
nebula psychic reading
nebula astrology and psychic reading
turkish coffee psychic reading near me
yes or no psychic reading
psychic reading online free
psychic reading online cards
psychic reading on riley strain
psychic reading on elijah vue
psychic reading on samantha murphy
online psychic reading manchester
old port maine psychic reading
online psychic reading
psychic reading pathfinder
psychic reading pismo beach photos
psychic reading pismo beach reviews
psychic reading princess kate
psychic reading quiz
tarot reading questions
tarot reading quotes
tarot reading questions about love
tarot reading quiz
spiritual reading quotes
tarot reading questions about career
tarot reading questions about life
tarot reading queen of cups
tarot reading quezon city
question psychic reading
relationship psychic reading questions
que significa psychic reading
que es psychic reading
psychic reading riley strain
psychic reading royal family
relationship psychic reading free
rebecca welton psychic reading
ryan shtuka psychic reading
random psychic reading
rose renee psychic reading
cameron robbins psychic reading
psychic reading spotify
psychic reading shirt
psychic reading shreveport
psychic reading today
psychic reading tube top
psychic reading template
turkish coffee psychic reading
ted lasso rebecca psychic reading
tarot psychic reading near me
tea leaf psychic reading
today's psychic reading
turkish coffee psychic reading nyc
true love psychic reading
tiktok psychic reading
taurus psychic reading
psychic reading ubud
tarot reading ubud
tarot reading using playing cards
tarot reading uk free
tarot reading upside down cards
tarot reading uluwatu
spiritual reading ubud
tarot reading unique
tarot reading utah
tarot reading udemy
unintentional psychic reading
online psychic reading us
psychic reader reading uk
psychic reading in urdu
virgo psychic reading
valentine psychic reading
vicki psychic reading
vivid psychic reading
vampire psychic reading
psychic reading with playing cards
what is psychic reading
xplr psychic reading hoodie
x-men psychics
x and y psychic pokemon
x psychopath reader
psychic reading yes or no
tarot reading yes or no
tarot reading youtube
tarot reading yes or no accurate
tarot reading youtube channels
tarot reading yes or no in hindi
tarot reading yes or no horoscope
tarot reading yourself
tarot reading yellow springs
yellow pages psychic reading
can you share your psychic reading
psychic reading 100
psychic reading 101
tarot reading 100 accurate
tarot reading 10 card spread
tarot reading 101
tarot reading 1 card
tarot reading 10 cards
tarot reading 111
tarot reading 10 of cups
tarot reading 1111
1.99 for 10 minutes psychic reading
10 minute psychic reading for $1
2024 psychic reading
psychic number 2 meaning
2 of pentacles psychic revelation
2 of wands psychic revelation
2 swords psychic revelation
tarot reading 3 card spread
tarot reading 3 cards
tarot reading 3 of cups
tarot reading 333
tarot reading 3 kings
tarot reading 31st
tarot reading $35
psychic number 3 meaning
flight 370 psychic reading
3 of swords psychic revelation
3 of pentacles psychic revelation
3 of wands psychic revelation
43551 psychic reading
4 psychic number
4 swords psychic revelation
4 of pentacles psychic revelation
tarot reading 5 card spread
tarot reading 5 of cups
psychic empath 5 books in 1
tarot reading 6 cards
tarot reading 6 of swords
tarot reading 6 of cups
psychic revelation 6 of wands
tarot reading 7
tarot reading 7 card spread
tarot reading 7 of cups
tarot reading 7 of swords
tarot reading 77084
psychic readings 90
tarot reading 9 card spread
tarot reading 94538

Tackling Email Delivery Problems in Django

When developing web applications with Django, integrating email functionalities is often crucial for features like user registration, password resets, and confirmation notifications. However, developers sometimes encounter challenges where Django fails to send these emails, leading to disrupted user experiences and potential security risks. This issue not only hampers the reliability of the application but also affects the trust users place in the platform. Understanding the common pitfalls and configurations necessary for Django's email backend is the first step towards resolving such problems.
Several factors can contribute to these sending issues, including incorrect SMTP server settings, firewall restrictions, or problems with the email service provider. Additionally, Django's sendmail configuration requires careful attention to ensure compatibility with the hosting environment and the email service being used. This introduction aims to guide developers through the process of diagnosing and fixing email delivery issues within their Django projects. By addressing these challenges head-on, developers can ensure that their applications maintain high levels of functionality and user satisfaction.

Command / Configuration	Description
EMAIL_BACKEND	Specifies the backend to use for sending emails. For SMTP, use 'django.core.mail.backends.smtp.EmailBackend'.
EMAIL_HOST	The hostname of the email server.
EMAIL_PORT	The port of the email server (typically 587 for TLS).
EMAIL_USE_TLS	Whether to use a TLS (secure) connection when talking to the SMTP server. This is usually True.
EMAIL_HOST_USER	The username to use for the SMTP server.
EMAIL_HOST_PASSWORD	The password to use for the SMTP server.

Solving Email Delivery Issues in Django Applications

When a Django project fails to send confirmation emails, it's a signal to dive into the underlying email configuration and troubleshoot potential issues. The Django framework provides robust support for sending emails through various backends, including SMTP, console, file-based, and in-memory backends. Understanding these backends and their appropriate use cases is crucial. For instance, the SMTP backend is widely used for production environments, requiring accurate settings such as the host, port, use of TLS or SSL, and authentication credentials. Misconfiguration in any of these parameters can lead to failure in email delivery. Developers must ensure that these settings align with their email service provider's requirements, which might involve additional steps like setting up SPF or DKIM records to improve email deliverability and avoid being flagged as spam.
Beyond configuration, the Django environment plays a significant role in email functionality. Issues like a blocked SMTP port by the hosting provider or an improperly configured Django email backend can prevent emails from being sent. It's also essential to consider the use of asynchronous task queues like Celery to manage email sending, especially for high-volume applications. This approach not only enhances performance by offloading email sending to a background process but also adds resilience, as it can retry failed email sending attempts. By meticulously reviewing these aspects and applying best practices, developers can significantly improve the reliability of email delivery in their Django projects, ensuring critical communications reach their intended recipients.

Configuring Django Email Settings

Django Framework Setup

EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend' EMAIL_HOST = 'smtp.example.com' EMAIL_PORT = 587 EMAIL_USE_TLS = True EMAIL_HOST_USER = 'your_email@example.com' EMAIL_HOST_PASSWORD = 'your_email_password' 

Ensuring Email Deliverability in Django Projects

Effective email communication is a cornerstone of user interaction within Django applications, necessitating a reliable email delivery system. The Django framework accommodates this need with a flexible emailing setup, allowing developers to configure email backends that suit their project's requirements. However, ensuring the deliverability of these emails involves more than just configuring SMTP settings correctly. It requires an understanding of email protocols, adherence to best practices in email sending, and sometimes, navigating through the complexities of email deliverability issues. Factors such as the selection of a reputable email service provider, proper authentication methods (like SPF, DKIM, and DMARC records), and monitoring email bounce rates are critical. These elements help in establishing the legitimacy of the emails being sent, which is crucial for avoiding spam filters and ensuring that emails reach their intended recipients.
Moreover, Django developers must be proactive in handling potential email delivery issues by implementing feedback loops with email service providers, using email validation services to clean lists, and carefully crafting email content to avoid triggers that commonly lead to spam classification. Additionally, understanding the nuances of transactional versus marketing emails, and segregating them appropriately, can significantly impact deliverability. By taking a comprehensive approach to email setup and monitoring within Django projects, developers can minimize issues related to email sending failures, thereby enhancing user engagement and trust in the application.

Common Questions on Email Sending in Django

1. Question: Why are my Django emails going to spam?
2. Answer: Emails from Django applications may land in spam due to issues like misconfiguration of email settings, lack of proper email authentication records (SPF, DKIM, DMARC), or content that triggers spam filters. Ensuring correct configuration and establishing a good sender reputation can help.
3. Question: How do I use Gmail to send emails in Django?
4. Answer: To send emails through Gmail in Django, configure the EMAIL_BACKEND setting to use Django's SMTP backend, and set the EMAIL_HOST, EMAIL_PORT, EMAIL_HOST_USER, and EMAIL_HOST_PASSWORD settings to match Gmail's SMTP server details. Additionally, enable access for less secure apps in your Gmail account or use app-specific passwords if two-factor authentication is enabled.
5. Question: How can I test email sending in Django during development?
6. Answer: For testing emails in Django, use the console or file-based backend by setting EMAIL_BACKEND to 'django.core.mail.backends.console.EmailBackend' or 'django.core.mail.backends.filebased.EmailBackend', respectively. This allows you to view email output in the console or write it to a specified file without sending real emails.
7. Question: Can Django send asynchronous emails?
8. Answer: Yes, Django can send emails asynchronously by using Celery with Django to offload email sending to background tasks. This approach improves performance and user experience by not blocking the request-response cycle for email operations.
9. Question: What is the best practice for managing email templates in Django?
10. Answer: The best practice for managing email templates in Django is to use Django's template system to create reusable HTML or text templates for emails. This approach allows for dynamic content generation and easy maintenance of email layouts and styles.

Mastering Email Delivery in Django

Ensuring the reliable delivery of emails in Django applications is paramount for maintaining user trust and engagement. This article has navigated through the complexities of configuring Django's email system, highlighting the importance of correct SMTP settings, authentication techniques, and the use of asynchronous tasks for efficient email processing. Developers are encouraged to adopt a holistic approach towards email management, incorporating best practices such as monitoring deliverability, using email validation services, and carefully crafting email content. By addressing these aspects, developers can significantly reduce the chances of email delivery issues, thus enhancing the overall user experience. As Django continues to evolve, staying informed about the latest email handling techniques will be crucial for developers aiming to create robust and user-friendly web applications.
https://www.tempmail.us.com/en/sendmail/troubleshooting-sendmail-issues-in-django-projects

Couple of items up for sale on this beautiful Tuesday!
[Will consider trades for 2.5 pesos or Napoleon 10 Francs]
Proof: https://imgur.com/a/QmypBZh
Silver Prices: https://imgur.com/a/vR1n7rE
2021 Niue Owl - $32
2019 Phil - $30
FM 1/2oz - $16 each (5) or buy all (5) for $80 shipped!
Pirate Pours! https://imgur.com/a/5Nyo4tr 24g each, purchased from a member here. Just looking to pass them on as they don’t quite fit my collection. $30 each or both for $62 shipped!
Jewelry Prices:
Jacoje 14kt 7.5” 4mm Flat Curb Bracelet (4.8g) https://imgur.com/a/iNIRASo Beautiful bracelet that I recently purchased that is unfortunately too small. Selling for $250 shipped
Sterling 8” 4mm Franco (13.7g) - $30
Sterling 20” 4mm Franco (32.7g) - $75
Buy the set for $105 shipped!
Sterling 8” 6mm Curb (8g) - $18
Sterling 20” 6mm Curb (19.1g) - $42
Buy the set for $63 shipped!
Sterling 18” 1.5mm Box (5.6g) - $13
Sterling Blue Heart Necklace - $24 each
Earrings https://imgur.com/a/bZafGSL (All are screwback style, 14kt)
6mm ball - $36 each pair
Cross - $25 each pair
Hearts - $35
Pendants (All are 14kt)
Crucifix (.75g) - $75
Smaller Cross (.375g) - $25
Tree of Life (1.6g) - $100
Sterling Rounds https://imgur.com/a/WuAETbd
All (3) for $83 shipped!
Copper Prices:
Trump 1oz Rounds - $3 each or 4/$10
Please add $6 for USPS Ground Advantage or $9 for Flat Rate.
If better pics/descriptions needed feel free to reach out in chat.
All items will be packaged secure. Items in capsules will ship with them. Once hand delivered to the post office and scanned my responsibility ends. I accept Venmo and PayPal f/f or add 4% for g/s. Reasonable offers and bundle deals welcome! Worst I can do is counter. Thanks for looking!

I found out last week that my job has been absorbed by another department and that I am being moved, immediately, to said department.
I work in an individual contributor support role, in a large company, that has many different business lines. I worked under the Operations department (Sales Ops, IT Ops, Commissions, etc). My initial role was to support a business line (let’s call them Business A) with some duties and to also support all other business lines as well where needed. I’ve been in this role for about 2.5 years and really enjoyed my team and leadership. I was told last week, very abruptly, that my job on my team was being eliminated and that Business A was absorbing my position and me. My boss, his boss and our VP did not know that this was happening until the day before. I was not laid off, I’m not signing a new job description per HR and will have no salary change. I have had great performance reviews and the rest of my team is staying in the same roles.
My duties will change to be 100% support and work with Business A. My least favorite part of my job was working with Business A. They are not run well, lots of infighting and drama and I was happy to be at a distance.
My questions are; has anyone been in a similar potion? Is this an “all other duties as specified” situation? How could they not see that myself and my team would be very negatively affected?
This has really negatively affected my mental state. I’m already looking for new jobs but I’m shocked that they were able to make this change without any notification to my leadership. I’m disappointed as I genuinely enjoyed my previous job and was in line for a promotion and possible leadership position which now is not an option due to the nature of Business A.
Edit to clarify: My previous work was about 25% direct support of Business A.

Hello! Just hoping to move some cards for any of my wants. Really hoping to finish Guardians Rising so if you have anything on my list plz let me know.
Pricing is based on tcgplayer at 10% off but all offers welcome. Shipping is $1 in an envelope or $5.50 bubble mailer with tracking. I wont send at the same time unless you have 70+ trades. All sales through F&F paypal as I am over 350 trades completed.
---------------------------------------------------------------------------------------------------------------------------
HAVE:

• Charizard ex FR LG and Booster packs: https://imgur.com/a/KXLlP0C
  • Values: Charizard LP $550 (Hoping to trade even or up but willing to trade down if in my favor).
  • Loose Packs: 8 Flash Fire ($50 each), 6 Primal Clash ($17 each) 10 Roaring Skies ($18 each), 7 Ancient origins ($24 each), 8 Breakthrough ($14 each), and 10 S&M Base ($7 each).
• Main Binder: https://imgur.com/a/main-binder-zpjHVp3
  • LC RH conditions: https://imgur.com/a/gnAOkl9 (kadabra is sold)
• Holos from modern, s&m, bw, and xy: https://imgur.com/a/11JUCre
• 151 Reverses holos: https://imgur.com/a/qusD6jf
• Vintage C/UC: https://imgur.com/a/E4uJLFR
  • Conditions vary on the older cards from MP to NM.
• Vintage Rares: https://imgur.com/a/hS8G7Z6
• BW rares: https://imgur.com/a/W42R0jh
• XY rares: https://imgur.com/a/EuVEPHN
• SM rares: https://imgur.com/a/UcIMaCZ
• Trainer Reverses: https://imgur.com/a/BjuaKuO
• UC and C Reverse holos at .25 each
  • BW https://imgur.com/a/NF8XCBx
  • XY https://imgur.com/a/44kprd8
  • 151 https://imgur.com/a/DOTxmw4
  • Upside down means more than 1 available
• Used binders https://imgur.com/a/vBLrLxv
• Bulk- I can sort through as needed. It includes cards as far back as base but 98% of it is BW through Guardians Rising. Maybe about 3000 UC/C including a bunch of reverse holos.

---------------WANTS-------------------------------------------------------------------------------------------------------------------

• Wishlist (Or see list below): https://www.tcgcollector.com/cards?cardSource=inWishlist&releaseDateOrder=oldToNew&cardsPerPage=30&displayAs=images&viewUser=Ad925
• Paypal (feel free to make offers)
• Binders
• 151:
  • Full Art: Venusaur
  • Illustration: bulbasaur, ivysaur, Venusaur
• Guardians Rising (Big Priority)
  • Full Art: Tapu lele, Metagross
  • RR: Incineroar, Alolan Ninetales, Vikavolt, Metagross, Kommo
  • SR: Rare Candy, Lightning, Fighting energy
• XY Promos:
  • 27, 91, 167, 169, 176
• WOTC promos
  • 8, 9 holo, 11, 15, 17, 25, 40-45, 50-53
  • Only Looking for NM on these
• Shinings, Gold Stars and Crystals (see wishlist)
• Venusaur ex FR LG (Priority)
• Southern Islands (Priority)
  • 4 togepi,8 jigglypuff, 12 lapras, 16 lickitung
• Legendary collection reverse holos :
  • Charizard ,Nidoking, Pidgeot, Challenge!
  • (I have these in excellent to poor condition in case you were interested in a downgrade where I offer paypal or cards to make up difference)
• USIR Grass starter cards (see wishlist)

Thanks for looking!

My history with iron levels is a bit of a long one - I was quite underweight from about age 13-age 27, and along with complaining of chronic fatigue and exercise intolerance, the most often suggested culprit was anemia. Suffice it to say, it's a body type that runs in my family, and there were no blood markers to suggest anemia at the time. I'm now 36 and still trying to solve some of my ongoing health issues. I've been getting CBCs fairly consistently the past few years; they were a requirement for health insurance with one company I was at. No flags were raised until I had a sleep study done and the practitioner who reviewed my file noted that I moved a lot (I also didn't get into REM sleep the entire night, but that's another thing entirely). My iron was on the borderline of low, so she instructed me to take iron supplements for the next 3 months and follow up.
Lo and behold, when I had my blood retested, my levels had not changed. I discontinued the supplements. When I have been tested since, my MCH and MCHC have continued to test on the low end of normal or slightly below normal, in the 25.5 range and 31.4 range respectively. However, the most recent test revealed that they have slipped lower, to 25 and 30.6. My RDW is normal at 14 and my MCV is normal, if a bit low, at 81.6. I'm wondering if I should ask my GP for further testing when I see her next, or if because my values have largely remained the same, if slightly off, for so long, they're probably just representative of my normal. I doubt that anemia would account for my issues, which I suspect are a combination of several complex comorbidities related to hypermobility.
Thanks in advance for any input!

For context: we have two kids age 8 and 5.
Just back from 10 nights at POFQ, our first ever Disney trip. Overall really liked the hotel, it's a shame they had a pipe burst in their swimming pool and it was being repaired for most of our stay, but it was still a really nice place. Swimming pool at Riverside was only a 10 min walk away.
I had a good outline of our itinerary for the whole stay written up before we left with plenty of ADRs however, however what we actually did was quite different.
Wrote up as much as I could remember, the exact order of events in particular is a bit muddy but I did my best.
Day 1: Arrive in the early evening, went to the pool, had inner in the food hall, went to bed.
Day 2: Genie + at Magic Kingdom. Totally screwed up EE that day because the park opened at 8am that day which caught me off guard, but aside from not rope-dropping Seven Dwarves as planned, we still got SO much done that day.
Arrived at 8am park opening.
Jungle Cruise
Big Thunder Mountain x 2
Pirates of the Carribbean
Ariel
Barnstormer x 2
Dumbo
Genie + Peter Pan
Laugh Floor
Genie + Buzz Lightyear
Peoplemover
Genie + Space Mountain/Speedway (in two parts since my youngest didn't go on it, I took both my kids to speedway while my husband had his turn)
Big Thunder again
Small World (but son needed toilet in queue so we left and husband and daughter stayed)
Then we went back into Smallworld while daughter and husband did Barnstormer again.
Genie + Winnie the Pooh.
Dinner at Skipper Canteen - so good!
We also watched the parade that day but it was sooo hot, we opted for a poorer view from a main street shop in the shade. Was not worth sticking out the heat for the length of time you would need to get an optimal view. I think trying to go our very first day was a mistake because we weren't acclimatised at all yet.
The longest queue we had that day was probably for Smallworld. Everything moved really quickly! Was also happy with Genie+.
Day 2: Animal Kingdom
Had entry issues and needed cards re-assigned at entry so kinda messed up FOP EE rope drop but husband and daughter persevered anyway. Son and I did Na'vi River and explored Pandora and stared Wilderness Explorers. Spent a LOT of time in Pandora gift shop.
Gorilla Trek
Wildlife Express and Rafiki's Planet Watch.
Festival of the Lion King (so good!)
It's Tough to be a Bug
Triceratops Spin
Had really nice homey feeling cookie and gigantic ice cream in Dinoland
Dinosaur (3 of us loved this ride, my son thought it was a bit too scary also it seemed like they should increase the height requirement because he could barely reach the bar to brace himself. I know it's being discontinued though.)
Safari
Dinner at hotel.
Day 3: Hollywood Studios
Successful EE rope drop for Rise of the Resistance
Smuggler's Run
Met Donald Duck
Met Goofy and Max
Star Tours
Runaway Railway (queue was brutal in the sun but it was a great ride)
Indiana Jones Show
Star Tours again
Muppets 3d
Race Academy - did not know what to expect coming in. If we had known we would not have trekked all the way across the park in the heat for that. My son DID like it, but it really didn't feel like it was the same quality as any of the other shows or rides.
Went back to Galaxy's edge for Blue and Green milk + puffbread. All really good. We possibly did Star Tour again, I don't remember haha.
The wait times for everything else being very long + the heat had us going back to the hotel early.
Dinner at hotel.
Day 4: Magic Kingdom Day 2
Tried to EE rope drop 7 dwarves but it was down and we decided not to wait it out (rookie mistake)
Teacups
Thunder Mountain x 2
Split up and did Haunted Mansion/ Smallworld (and got stuck on Smallworld for like 15 minutes)
Haunted mansion crew did Carousel while waiting for us, then we did Carousel after.
Took Daughter to meet Pooh and Tigger while the others did Speedway + People Mover
Back to hotel early for dinner.
Day 5: Genie + Epcot.
Failed to get Guardians Boarding at 7am.
EE Test Track
Mission Space (Green)
Genie + Remy
Genie + Soarin
Moana water walkthrough
Genie + Living with the Land
Got boarding for guardians for about 6pm. Cancelled ADR because of it.
Spaceship Earth
Met Moana
Genie + Nemo
Genie + Figment
Met Figment
Met Joy
Nemo again
Quick Dinner in Mexico
Gran Fiesta Tour (honestly had no idea this was here, really cool building, kids liked the boat ride)
Finally boarding group for guardians called at nearly 7pm.
Really great day! I seemed to be able to book really quickly back to back for Genie +. Kids really liked all the chill dark rides .
Wanted to do Frozen that day but the Genie+ was sold out even before lunch.
At this point we are really just trying to get things we missed
Day 6: Magic Kingdom Day 3
Successful EE rope drop of Seven Dwarves. Said 75 min wait when we entered but it really wasn't too bad, maybe 30-45. This ride had amazing theming, but was lacking as a coaster.
Teacups
Split up and 2 of us did astral orbiter that had a wait time of 25 minutes, and the other 2 did space mountain with a wait time of 35 minutes. Space mountain finished first!
Carousel
Swiss Family Treehouse
Enchanted Tiki Room
Magic Carpet - this seemed to be my son's favourite of this style ride. He's been talking about magic carpets evey day since.
We actually had a boarding time for Tron but the kids got fed up of the heat so we gave up and cancelled or place in the virtual queue.
Took the train back to the entrance. Very pleasant.
Dinner at hotel
Day 7
Epcot Day 2
We really wanted to do Cosmic Rewind again and do Frozen since we missed it the other day.
We failed to get a 7am boarding so bought an ILL for 11:30
EE rope drop at Frozen, which was down and they tried to get us to go elsewhere but it was open by about 8:45.
Gran Fiesta Tour
Met Asha
We were going to go do Soarin but we got distracted by a giant Joffrey's donut and a squirrel that was fun to watch, and then there was a minor child meltdown so we had a long break before heading to our ILL for Cosmic Rewind. Totally worth the cost.
I tried one last time to see if the kids would explore the World Showcase but they voted to go to the waterpark instead.
We went back to the hotel, then off to Typhoon Lagoon where 3/4 of us got minor scrapes in the wave pool, but kids loved it and would have gone back a second day.
Went back to Disney Springs and got dinner at Chicken Guy. Probably the best fast food I have ever had.
​
Day 8
Animal Kingdom Day 2
This was a lot of running around chasing short queues. Genie + would have been really good for us at this park.
EE rope drop Everest x 2. Was really good but going backwards made my stomach a bit iffy.
Na'vi River
Safari (finally saw an elephant!)
Nemo Show
Lion King Show again
Met Dug (first character my son was actually excited to meet)
Maharajah Jungle Trek
Back to Disney Springs for Dinner. Went to Pizza Ponte so we could all choose a different topping of pizza. Also walked around and heard live music before we left.
Took daughter to Happily Ever After fireworks that night. Stood above the railway station for a quick escape at the end.
Day 9
Last day :(
Genie + Hollywood Studios
Genie + didn't seem to work as well at this park, it seemed at Epcot I could always book after entering a ride and we used it a lot but at HS it seemed strictly 2 hours apart. Maybe I am just not seeing it clearly.
On reflection , next time I would probably do Slinky Dog at EE followed by Runaway Railway and buy an ILL for Rise and skip Genie + if I was looking to save some money. I would de-prioritise Toy Story Mania next time, but our first day we missed all of the Toy Story area.
EE rope drop Rise of the Resistance. Pretty sure we were on the ride before EE even officially started.
Smuggler's Run
Met The Mandalorian and Grogu (probably the best meet!)
Star Tours
Alien Flying Saucers
Droid Depot
Genie + Slinky dog
Beauty and the Beast show
Met Chewbacca
Met Pluto
Genie + Runaway Railway
Star Tours again
Genie + Toy Story Mania. Ride broke down while in queue. Waited for ages before the put us on the other side, almost missed our next booking.
Oga's Canteen. Tried 4 different non-alcoholic drinks and they were all good. It was super cool. Only downside is we had a high table (standing only) and my son couldn't see the top of the table/anything and he was pretty unimpressed by the whole situation. Flying Saucers Mama Melrose for dinner. Muppets 3d Fantasmic. I read 15 min early "at least" aimed for 30 minutes early, and the place was well more than half full by then. Took a really long time to leave. If there is a next time I would go much earlier and bring snacks just to make getting out easier. Overall I was hugely impressed with the level of detail in everything, and all the cast members were amazing. It was a really cool experience, and it's hard to imagine never going back. If there is a next time I really want to explore the world showcase and do more sit-down meals. We had a lot planned but the kids didn't have the stamina for being in the park all day so we cancelled almost all of them. We also ended up doing parks in a somewhat different order than I initially planned. Kids got really tired of travelling on buses, which is also why we didn't break in the middle of the day and then going back to the parks. Would look at skyliner options next time. Things we didn't get to do:
Try dole whip (never noticed a place to buy it, ice cream was often an urgent necessity so didn't seek it out specifically) Tron (too hot to wait for boarding group when it was already day 3 at magic Kingdom and basically felt done.) Explore World Showcase (too much walking for few rides, from kids' perspective) Eat for fun more (we ate more out of necessity but found fun snacks when convenient) Tower of Terror (queues too long and genie + bookings too late) Frozen Singalong (timing never seemed to work out) Luminous (son had no interest in late night shows so we only did a couple things at night.) Take ride on skyliner. Something that surprised me: queues for popular rides stayed long even at 9pm. Couldn't see a viable alternative to EE rope drop + genie plus to get all the big rides "done" except perhaps if you had extended evening hours, but that would not have worked with our kids. Number of beignets consumed during our stay: 12
​

This is a bit in the weeds, but here goes.

• 42 y/o, ~1M in 401k, salary ~170k (married, spouse makes 30k)
• Maxxing out 401k, but HCE, so stuck at 6% with 3% employer match
• 8% going to DCP (pre-tax, pays out on separation from the company)
• Full backdoor Roth IRA contributions for me and spouse each year
• No after-tax 401k contributions allowed, but there IS in-plan Roth conversion

I am allowed to convert as much of the 401k balance as I want to Roth, but I will obviously have to pay taxes on it.
Suppose I want to convert 10k, and my tax rate today is 25%. I will owe taxes on the distribution, but that can come out of my HYSA.
Am I right to think of this as "contributing" $2.5k to retirement? I'm not allowed to do mega backdoor Roth in my plan, but maybe this is similar enough? I've got quite a bit in the 401k, so I could do a lot of these conversions....

My two friends and I (22 years old) are staying in Istanbul city center for almost 4 days. We've never been before. I've reviewed this post and to compose a basic itinerary. I made it packed because we're busy travelers, but feel free to remove unnecessary stops. I'm curious about your suggested modifications. I also have a few questions:
a. is it worth to buy museum pass [doesn't seem so to me] or istanbulkart?
b. good not-upscale restaurant recs?
c. is it worth going to any islands, and which ones?
Day 1, Sat- Asian side [arriving in IST in morning]
Beylerbeyi palace [9-5, not Mon]
Nakkaştepe National Garden
Maiden’s tower [9:30-9]
Bagdat street
eat turkish ice cream somewhere
Day 2, Sun- Center
Gulhane Park?
Hagia sophia [24h]
Topkapi palace [10-4, not Tue]
Basilica cistern [9-10]
Blue mosque [24h]
Egyptian (spice) bazaar [8-7:30]
Yeni Cami mosque
Vefa Bozacisi- get the boza
Day 3, Mon- Princes’ Islands (beach)
Go to an island
Grand bazaar area [8:30-7, not Sun]
Day 4, Tues- North (nişantaşı/karaköy)
Emirgan Park?
Dolmabahce palace [9-5, not Mon]
Dolmabahce Mosque
Taksim square
lunch at D.ürümzade
Istiklal street
Galata tower [closed?]
Karakoy Güllüoğlu- baklava
Walk along shore

Any damage instances that fall below the 10 base damage threshold is cut directly by 50% so tracer hs goes from 8.4 a pellet to a flat 6 now on armored headshots
Any damage instances that fall below the 10 base damage threshold are not also applied with the new tank passive until the tank is out of armor. After the armor is gone then the tank -25% hs dmg passive will now be active. So after you have burned the armor tracers peak dps goes to 360 or 9 a pellet on a headshot against tank.
From what I've seen if the damage instance is above 10 then it is subject to both the tank -25% hs passive and the armor passive at the same time. The armor passive is added after the hs passive so the bigger number gets the percentage cut then 5 damage is subtracted from the result.

After playing League for ~3 years I decided to stop and learn a new game and now have been playing Dota for about 8 months. As I've been learning I've been comparing and contrasting them, and I felt like writing up my thoughts.
I'm not a high ranked player; I was emerald in League and I don't really played ranked in dota. It doesn't matter, since this post isn't about tactics/strategy or how to win-- I'm just talking about the differences between the mechanics of the two games and their clients.
Disclaimer, this is all about Soloqueue. Pro play is a different environment and many things are different. I'm just talking about the average player's experience.
In League's favor:

• Better lore. It's not a contest really. League's champions all have names and stories that are placed front and center, whereas Dota heroes are more like archetypes than individuals with distinct identities. Instead they're known by a description of what they are, while their "real names" are kind of buried in half-assed bio summaries and infrequently referenced. There's a dude called "Anti-Mage." There's a dude on a bat and his name is Batrider. There's nothing in Dota to compare with the hype lore media Riot produces, like the fiddlesticks rework video or the 10 min yone/yasuo video. Champion lore just gets way more money put into it in League.
  
• League has WAYYYYY better champion animations and ability visual designs. This is for me where League blows Dota out of the water. There's really just nothing in Dota that feels like Jhin, or Ekko, or Aphelios, or Senna, or so many others. With rare exception, almost all the champions in league have aspects that FEEL amazing - great sound design / animations / feedback delays that are incredibly rewarding. Dota's heros are really fun to play and I'm having a great time, but if you put them side by side with like 90% of League's cast, the animations of their abilities and movements just feel kinda flat by comparison. One of the easiest side-by-sides is Darius vs Dota's hero "Axe" -- he has the same ult as darius, completely identical except for darius ult's interaction with passive. But all Axe does for his ult visually is a little hop and swing of the axe. It's really lame. Compare that to the awesome sound of a Darius ult kill, with the fear, especially on the God-King skin, and it makes Dota look 20 years old.
  
• Skillshots! In Dota most abilities are just unit targeted, so they can't miss. There are skillshots too, but they're far fewer. In league skillshots are kind of the norm, and aiming them and dodging them is a big part of the game and it's fun to do so and makes you feel cool when you land them or dodge them. Having nearly everything be unit targeted isn't bad, it's just different, but it is something I enjoy a lot in League.
  
• Cooler duels in league, and more of them. Dueling is a big part of league and it doesn't seem to be such a big part of Dota except maybe a bit in mid. Everyone in Dota has teleport (instead of recall), and it only has like a 1 minute cooldown. So whenever a fight starts, people teleport in and it becomes a teamfight. There's only one 1v1 lane (mid), the other two are 2v2 lanes. So there's much less of the 1v1 culture of League where people get to solo each other and take pride in the results. The lack of skillshots in dota plays into this too, since landing or dodging skillshots can definitively contribute to the outcome of a duel. With that mechanic less prominent, statchecking is a bit more common.
  
• Very little 1v9 potential in Dota by comparison. Dota has FARRRRRR more CC than league, it's not even close. League feels like it has no CC compared to dota. In dota there is an item anyone can buy that silences a point-and-click target for 5 seconds, and another that polymorphs for 3 seconds, and so on. Many such items. There's a support who can root you for 4 seconds AND polymorph you for 3, and a carry who can silence you for FIFTEEN SECONDS with his ult. In such an environment, no one person can solo carry a game most of the time. You HAVE to work with your team. So if you love 1v9ing, League wins hard on that. But at the same time this can be a negative for league - it means there's more ego and less teamwork. People in dota are by default much more inclined to work together, because in the face of such powerful tools they HAVE to.
  
• Recalling isn't a thing in Dota, which means the game is kind of constantly pedal-to-the-metal. It can be kind of nice to take a breather in League for a few seconds and stretch your arms while walking back to lane, given how intense the game can be.
  
• In dota, holding tab doesn't show you what items people have built, nor their CS, and it's super frustrating. You have to click champion portraits individually to see their items, and you can't see their CS at all aside from your own. Probably hard-core dota loyalists will say this is part of the skill of the game, but honestly it's just annoying/bad UI design that they sort of got used to and became convinced was "part of the game" imo. It's really stupid and annoying.
  
• In League you can buy as many wards as you want, whereas in Dota there's only ever a finite number available in the store which is SHARED among your team and then goes out of stock until it replenishes on a timer. I hate having to share wards with the team in dota, and the store being out of them. I understand it's part of the game and managing that is part of the skill of dota, but I find it tedious and don't really enjoy it as a mechanic. Additionally, wards take up an inventory slot in dota the same way control wards do in league, and it's just annoying.
  
• Better champion skins, frankly. Some of League's skins are just amazing, as we all know. I would say there is very little cosmetic content in Dota that can compare to High Noon Senna or God-King Darius or [insert your favorite skin here.] There are cool skins, but it's just not the same. In Dota you can buy individual things, like updating a sword or a hat or a belt or a single ability's effect, all purchaseable separately. They have some full-kit skins, but that's not emphasized as much as in League where it's the standard and the only option, and they're just not as visually impressive.
  

In Dota's Favor:

• All heroes are free from the start. It's great for trying them out and learning the game.
  
• The game is less punishing to learn than league, for a multitude of reasons. Don't get me wrong, it still has an enormous barrier to entry and a steep learning curve, but it's just less painful. Everyone who ever learned League remembers what it was like in those first couple months being alone in lane against people who have been playing for years - especially in top lane or mid lane - and just getting fucking demolished 1v1 and not even being able to play. That doesn't happen as much in dota. First of all two lanes are ostensibly 2v2 and only one is 1v1, although there's a lot more roaming by the supports. There's also no jungler role, a role in league which often leads to that player being blamed for everything that goes wrong in a game. And then there's WAY more sustain - in Dota you don't recall to buy items, you have couriers ferry them out to you. So you can just kinda constantly have Dota's equivalent of health pots brought out to you, and only TP to fountain rarely when you're super low. This means there's a lot less crying under turret while zoned off CS unable to play.
  
• Much better tools for learning. The tutorial is better. You're able to click other heroes to see their abilities in-game. There's a guide system full of user-contributed content where you can pick one in-game and it tells you what to buy and how to use that item on this hero, as well as how to use your abilities by just adding little user-written snippets to the tooltips when you hover them. League does have recommended items and recommended order for ability-levelling, but the fact that you can choose between different guides for different roles in dota is huge, and the text telling you when/why to use specific items for a hero is also majorly helpful. Imagine if you could pick a different guide in game for Senna support vs Senna adc, etc, that recommended specific choices based on the role and neatly fitted those recommendations into the UI.
  
• Dota has way, way, way more interesting items. There are so many active items in Dota, and they feel much more impactful. By comparison nearly every item in league is just a statstick that gives one form or another of more damage or more tank. In Dota there are items that silence for 5s, that disarm (teemo blind) for 3s, that root an aoe for 2s, that polymorph for 3s, that reset ALL your cooldowns including ult (this one has a 5 min cooldown, the rest are <20sec.) Dota's version of Thornmail has an active that hugely amplifies the reflected damage for 5second, so the item feels great to use and has more skill expression - you time the active correctly when someone is focusing you and it makes a big difference. Given that most effects last 3-5 seconds, it's not about super-precise timing like in League so much as it is about broader strategic choices of using it early or late in a fight, etc. The only items in league that feel as strong as Dota items are Zhonyas, GA, and Locket, with honorary mention for the perennially overpowered botrk.
  
• Dota has a way more beautiful map. It's not even close. Dota's map has so much going on. There are far more jungle camps, there's trees everywhere (which many hero abilities interact with in different ways!), there's high ground and low ground. There's so many different places and different entities and landforms, and it's just beautiful. League's map feels empty and stale by comparison. It's much smaller than dota's map, the jungle camps have fixed contents that never change (dota's camps rotate and change during the game). Not even to mention that Dota's map is divided in half and each team's side looks completely different from the other half. As opposed to league where they're identical but just rotated.
  
• Aghanim's shard and scepter. These are the my favorite things in Dota that league doesn't have. What are they? They're two items you can buy that each have a different effect on every single individual hero in the game. On a case by case basis, they either UNLOCK ENTIRE NEW ABILTIES (literally the UI expands to add a new slot when you buy them) or they upgrade one or more of your existing abilities to have entirely new effects. This is just so cool and I was shocked when I learned about them. It's just so fun being able to gain new abilities even late in the game.
  
• The talent tree, which is like an ability customization tree you progress through over the game and which is specific to the hero you're playing. In Dota the max level is 30, and every 5 levels in the game from level 10 onwards, you can unlock a "talent", at which point you pick one of two options to upgrade your hero. It might add 1s to your Q's stun. It might decrease the mana cost of your W. It might give you +250 base health, or +50 AD. It might add entirely new effects to your abilities, like making what was previously just a rooting projectile also start silencing. By level 30 you will have gotten to unlock everything in the tree (you don't typically reach level 30 very often in ranked games). Imagine if like at level 25 you could add "Mundo Q grounds for 0.5s" or "Irelia E +200 range". It's stuff like that and it's so fun.
  
• Dota is more team-oriented. Due to the prevalence of long-lasting debuffs/cc from both items and hero abilities, no one person can really just solo carry to the same extent as in League. In my experience you only very rarely see someone 1v9 in Dota, and usually it's because the enemy team is just making stupid choices. This makes the game a bit more tolerable on average, although you encounter the same toxicity as in league just the same.
  
• Dota has built-in voice chat. This actually does come in handy a lot. Hate not having it in league. It's typically effective and you can mute people in voice just the same as in chat so it's rarely been problematic in my personal experience so far.
  
• Dota has "turbo mode." This mode is just great. Wish league had it. It's basically norms, but with aram-level gold income so all players get to full build in like 20-30 min without even powerfarming. It's really fun and great for learning, experimenting, and playing casually with less commitment.
  
• In dota you don't recall. This means more time spent out on the map playing. Instead all players have the equivalent of the teleport summoner spell constantly available, which lets you take part in more plays. You also don't back to buy items, instead they get ferried out to you by little minions, which is great. Having items shipped out to you constantly instead of having to spend time retrieving them is awesome.
  
• Better demo tool by far. League's practice tool is notoriously shitty. Being able to open the demo tool while you're waiting in queue in Dota is amazing. Can't do that in league.
  
• Dota has 3 additional inactive item slots called the backpack. Love being able to hold 3 additional items that you can swap in or out (they're not usable from the backpack and you don't gain their effects, but you have them on your person to swap into from main inventory if you want). Just gives you nice flexibility when holding consumables and building stuff.
  
• Neutral items. This just doesn't exist in league and I wish it did because these are really fun and cool. When you kill neutral jungle camps in dota they drop items, and the power level of the items scales over the course of the game, from weak ruby crystal type stuff to things that are as strong as rabadons. And they don't take up a normal inventory slot, so you effectively get an actual 7th item in dota.
  
• The system for checking out customization and skins. Dota's system is pretty different, where instead of buying holistic skins that change everything, you can customize individual parts of a heroe's appearance, like their hat or their sword or their belt or gloves. There's WAYYYYY more options than in League, and you can try them all out in the client to see how they look.
  
• Cosmetics for things other than the heroes/champions themselves. In League you can only buy champion skins. In Dota you can buy cosmetics for the ancient (nexus), the towers, the creeps, the map, etc. None of that exists in League. We fucking WISH we could buy that kind of stuff. Riot are you listening?
  

Conclusions
On the whole I'd say there's more things to like about Dota than about League just in sheer quantity of bullet points, but regardless I love both games and think they're both really fun. If Dota improved their lore, their animations, and their tab screen and League improved their cosmetics store and had a more interesting and dynamic map, plus neutral items and agh's shard & scepter, I wouldn't really have any major complaints about either of them.
I think anyone who loves one game could potentially love the other one too and it's totally worth learning whichever one you don't already know, if you have the time. Obviously these games take a ton of time and most people barely have time for one let alone two. But if you're young especially, they're both really fun.
It's pretty hard for me to see eye-to-eye with the people who love one game and ferociously hate on the other - it seems childish and kind of empty. To not find one as fun as the other, sure, that's one thing, but to expend energy hating it and constantly shitting on it, that just confuses me. You can have a favorite while still acknowledging the other as a comparably enjoyable game.
One final note - one of the things I found most interesting about comparing them is seeing which mechanics are normal in one game that would be overpowered in the other game.
In Dota there is a hero named Nature's Prophet whose W is TF ult minus the vision. It has a one minute cooldown, going down to eventually 0 cooldown late game, and he can access it from level one if he chooses to. Nature's prophet would likely have a >90% wr in League.
But then in League we have Zilean and his stupid ult on a one minute cooldown, while in Dota that only exists as a one-time use item (like GA) that you are rewarded with when you defeat their version of Baron, and it is basically the strongest item in the game. Zilean would likely have a >90% wr in dota.