I was reading something on Reddit the other day about the differences between Scotland and England. Some of the differences are obvious and defined in law, for example you don’t hear your teacher talking about A levels and you don’t get a Crown Court jury citation letter either. You also have the ‘right to roam’ in Scotland, not so much in England.
There is one less obvious difference I’ve noticed between Scotland and England (or the rest of the UK).
Guys and girls being friends seems very common in England but up here in Scotland (or at least where I live, just outside of Glasgow) not so much. Between work and university, I’ve heard every British accent you could think of and this is something I’ve noticed. No idea if the whole of Scotland is like that or just my area.
At my school in Glasgow, nobody except for a very small few had opposite sex friends until AT LEAST S5.

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-056
DATE(S) ISSUED: 05/14/2024
SUBJECT: Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
OVERVIEW: Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution.

• Mozilla Firefox is a web browser used to access the Internet.
• Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations.
• Mozilla Thunderbird is an email client.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are no reports that these vulnerabilities are being exploited in the wild
SYSTEMS AFFECTED:

• Firefox ESR versions prior to 115.11
• Thunderbird versions prior to 115.11
• Firefox versions prior to 126

RISK: Government:

• Large and medium government entities: High
• Small government entities: High

Businesses:

• Large and medium business entities: High
• Small business entities: High

Home users: Low
TECHNICAL SUMMARY: Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution. Details of the most critical vulnerabilities are as follows:
Tactic: Initial Access (TA0001):
Technique: Drive-by Compromise (T1189):

• Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. (CVE-2024-4764)
• A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. (CVE-2024-4367)
• Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. This issue only affects Firefox for Android. Other versions of Firefox are unaffected. (CVE-2024-4765)
• Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have lead to potential user confusion and spoofing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. (CVE-2024-4766)
• If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox and Thunderbird. (CVE-2024-4767)
• A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. (CVE-2024-4768)
• When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses. This could have been abused to learn information cross-origin. (CVE-2024-4769)
• When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. (CVE-2024-4770)
• A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. (CVE-2024-4771)
• Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2024-4777)

Additional lower severity vulnerabilities include:

• An HTTP digest authentication nonce value was generated using rand() which could lead to predictable values. (CVE-2024-4772)
• When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. (CVE-2024-4773)
• The ShmemCharMapHashEntry() code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. (CVE-2024-4774)
• An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. (CVE-2024-4775)
• A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. (CVE-2024-4776)
• Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2024-4778)

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS:
We recommend the following actions be taken:

• Apply the stable channel update provided by Mozilla to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1 : Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
  • Safeguard 7.5 : Perform Automated Vulnerability Scans of Internal Enterprise Assets: Perform automated vulnerability scans of internal enterprise assets on a quarterly, or more frequent, basis. Conduct both authenticated and unauthenticated scans, using a SCAP-compliant vulnerability scanning tool.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Restrict use of certain websites, block downloads/attachments, block JavaScript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 9.2: Use DNS Filtering Services: Use DNS filtering services on all enterprise assets to block access to known malicious domains.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Block execution of code on a system through application control, and/or script blocking. (M1038: Execution Prevention)
  • Safeguard 2.5 : Allowlist Authorized Software: Use technical controls, such as application allowlisting, to ensure that only authorized software can execute or be accessed. Reassess bi-annually, or more frequently.
  • Safeguard 2.6 : Allowlist Authorized Libraries: Use technical controls to ensure that only authorized software libraries, such as specific .dll, .ocx, .so, etc., files, are allowed to load into a system process. Block unauthorized libraries from loading into a system process. Reassess bi-annually, or more frequently.
  • Safeguard 2.7 : Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassess bi-annually, or more frequently.
• Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior. (M1040: Behavior Prevention on Endpoint)
  • Safeguard 13.2 : Deploy a Host-Based Intrusion Detection Solution: Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.
  • Safeguard 13.7 : Deploy a Host-Based Intrusion Prevention Solution: Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.
• Inform and educate users regarding the threats posed by hypertext links contained in emails or attachments especially from un-trusted sources. Remind users not to visit un-trusted websites or follow links provided by unknown or un-trusted sources. (M1017: User Training)
  • Safeguard 14.1: Establish and Maintain a Security Awareness Program: Establish and maintain a security awareness program. The purpose of a security awareness program is to educate the enterprise’s workforce on how to interact with enterprise assets and data in a secure manner. Conduct training at hire and, at a minimum, annually. Review and update content annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 14.2: Train Workforce Members to Recognize Social Engineering Attacks: Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating.

REFERENCES:

Mozilla: https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-21/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/

CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4367 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4765 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4771 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4772 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4773 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4774 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4775 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4776 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4777 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4778

Hi, I (32F) have a long distance relationship with my bf (25M). We belong to the same country/culture and this was the reason we got along so well when we met in a work related conference in Germany. We had splendid time, after a week I had to go back to the states where I am currently residing, he went back to india. We continued talking and we decided to be in a relationship owing to the magical time we had spend together. The relationship is long distance and we went through all kinds of emotions in one year time.
I encouraged/helped him with applications to study abroad some where we could be close (country wise) in future. By 7-8 months in the relationship he did ask me about marriage and though it was too soon I did express that I would be happy to take it to the next level despite the fact that both of us are not financially ready for the burden. I was also okey with it because I was ready to get a good job since I was almost done with my degree, and I could help him get steady wheather he wanted to work or study for at least 1-2 years if it comes to that.
By the end of our one year relationship (now) I have finished my degree. I am planning on moving to India for some time 3-6 months depending on how things go. The problemstarted when I sensed a change in his behaviour he thinks I might be cheating (he did not mention that word but I knew what he meant), I also got “where did we go wrong” and should postpone marriage until the end of the year. I tried to have multiple conversations about all of the above mentioned issues, for example I told him that his feelings could be because we haven’t seen each other in over a year at this point, and the honeymoon period is over and may be when we meet it will get back to how it was. I also asked him if this is not what he think it is he can think about the relationship and let me know where he stands, I gave him by the end of the week (A-so he can decide if he wants this relationship as it has its challenges, B- I don’t want to meet him if he is unsure of this relationship).
Couple of days ago he received an acceptance letter from a program that will allow him to travel 3-4 countries in two year times whilst studying abroad. He is excited and I am happy for him (I helped him with the application, when he got rejected I asked him to appeal or challenge the rejection as I truly believed in him and in the work he had done). Meanwhile I booked my ticket to home and was planning on meeting him. The flight is 12+ hours long and the flight is indirect so there are waiting periods of 3-4 hours in between the flight. I asked him if he would like to drop me off to my home city this would give us a perfect chance to talk and connect and it would help me get to my home quicker, rather than hanging out in a café or something for 2-3 hours before I head home which is 4-5 hours away from the airport (as I would be exhausted). He did not like the idea as it would take him too much time to drop me off and come back. He also mentioned that he doesn’t own a car and don’t want to borrow one (among other reasons).
I got extremely disappointed because I was bottling in everything since last 2 months about how he looks at this relationship, and now he can’t tag along to spend some time with me. The relationship dynamics were never perfect, and we discussed that in the early stages of the relationship, but now that I am looking at everything all together I feel like I made a mistake in starting something that has too many issues like age difference, speed of life, him moving away for 2 years and me going to back to the states. I do not think the relationship can last for another 2 years in long distance. I want to get settled with a partner who I can reach out to (same country neighbouring country). But than I think I am putting too much efforts and flexibility for someone who can not take 4-5 hour drive with me.
Tl;dr long distance relationship(1 year) with my bf who is younger than me is too excited about moving to another country and totally forgot to take an account our relationship into equation when I was totally flexible to accommodate him in every possiable way. I am moving back for some time and he is refusing to drop me off to my home from the airport because it’s going to be a lot of travel(5-7 hours) while I am going to take a 13 hr long flight.

Hello 👋🏼 I’m a Jewish Israeli-American and I’m curious if anyone has thought of creating either like kibbutzim or something like this in the US now after October 7.
I know that Americans normally think kibbutz like a commune, like they used to be, but Israeli kibbutzim have come further from this way. I’d almost think of it more like a neighborhood with an industry or something.
Like for example I used to live on a kibbutz whose main product was bulletproof glass. Of course there was also some farming and other industry as well. But this was not like homesteading or something as many people view it.
Anyway I’ve had this idea for years now, but nobody seems into it. I wonder if after October 7 maybe more people are thinking of this now.
Feel free to add your own ideas on this too - I’d really like to dream + imagine how this can be reality 😍

So I’ve been eating eating gluten free for years. I used to take gluten-aid because I was gluten intolerant but eventually they stopped working and all gluten food made me really sick so I cut it out. Over the past 3 years I have become painfully careful about gluten. I won’t even kiss my husband until he’s brushed his teeth after eating gluten.
For example, I had a piece of dumpling dough on my edamame one time. I simply removed it thinking I’d be fine. About 20 minutes later I started feeling nauseous, couldn’t stop burping, and began bloating. Another time I felt randomly “gluten nauseated” (which always feels different from a regular belly ache nausea). We did a ton of research and looking back on what I ate only to come to the conclusion that the cough drop my husband had is what got me sick since he kissed me while having it in his mouth.
I have every symptom possible. Diarrhea, bloating, nausea, vomiting (if I’ve had enough but I got used to keeping it down in high school until I realized what it was), headaches, hard to think/confusion, body aches, tired even after sufficient sleep, etc. It’s hard to not gaslight myself into thinking maybe I’m just being dramatic and these things are actually happening and it’s not that bad.
When I first tried gluten free I did it for 2 months. Right before then I’d dropped down from 150 to 125 even though I was eating like a horse. Had an endoscopy done twice as well and they said they found nothing wrong.
Fast forward to now and I just had bloodwork done and an endoscopy. My doctor told me that if I’m that sensitive I shouldn’t need to do a gluten challenge and so I didn’t before all of this. Even though I’ve been carefully gluten free for 3 years. Everything came back negative. He says since it’s negative there’s no need to do the challenge and therefore retest. I’m so frustrated and again beginning to wonder if maybe I’m being over dramatic or it’s really not that bad. I don’t know if I should go to another doctor and try to get a second opinion and do the gluten challenge or what. The idea of eating gluten makes me anxious because how I always feel afterwards. Maybe it’s just gluten intolerance and I just have bad reactions?
Is anyone else in this position or has been and has any advice? I feel at a loss of what to do next.

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-054
DATE(S) ISSUED: 05/14/2024
SUBJECT: Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
OVERVIEW: Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.

• Adobe Acrobat is a family of application software and Web services used to view, create, manipulate, print and manage Portable Document Format (PDF) files.
• Adobe Substance3D Painter is a 3D painting software that allows users to texture and add materials directly to 3D meshes in real-time.
• Adobe Substance3D Designer is a 3D design software that generates textures from procedural patterns inside node-based graphs.
• Adobe Aero is a cross platform solution that enables creatives with no coding and mininmal 3D experience to design, share, and view interactive augmented reality experiences.
• Adobe FrameMaker lets you create structured or template-based documents, review and collaborate with multiple content management systems and publish to a multitude of devices.
• Adobe Dreamweaver is a proprietary web development tool.
• Adobe Illustrator is a vector graphics editor and design software.
• Adobe Animate is used to create vector graphics and interactive content.

Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights
THREAT INTELLIGENCE: There are currently no reports of these vulnerabilities being exploited in the wild.
SYSTEMS AFFECTED:

• Adobe Acrobat DC 24.002.20736 and earlier versions on Windows and macOS.
• Adobe Acrobat Reader DC 24.002.20736 and earlier versions on Windows and macOS.
• Adobe Acrobat 2020 20.005.30574 and earlier versions on Windows and macOS.
• Adobe Acrobat Reader 2020 20.005.30574 and earlier versions on Windows and macOS.
• Adobe Substance 3D Painter 9.1.2 and earlier versions.
• Adobe Substance 3D Designer 13.1.1 and earlier versions.
• Adobe Aero 0.23.4 and earlier versions on Windows and macOS.
• Adobe FrameMaker 2020 Release Update 5 and earlier on Windows.
• Adobe FrameMaker 2022 Release Update 3 and earlier on Windows.
• Adobe Dreamweaver 21.3 and earlier versions on Windows and macOS.
• Adobe Illustrator 2024 28.4 and earlier versions on Windows and macOS.
• Adobe Illustrator 2023 27.9.3 and earlier versions on Windows and macOS.
• Adobe Animate 2023 23.0.5 and earlier versions on Windows and macOS.
• Adobe Animate 2024 24.0.2 and earlier versions on Windows and macOS.

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY: Multiple vulnerabilities have been discovered in Adobe Products, the most severe of which could allow for arbitrary code execution. Details of these vulnerabilities are as follows
Tactic: Execution (TA0002)
Technique: Exploitation for Client Execution (T1203):
Adobe Dreamweaver 21.3 and earlier versions on Windows and macOS.

• Adobe Animate 2023 23.0.5 and earlier versions on Windows and macOS.
• Adobe Animate 2024 24.0.2 and earlier versions on Windows and macOS.

Adobe Acrobat:

• Use After Free. (CVE-2024-30284, CVE-2024-34094, CVE-2024-34095, CVE-2024-34096, CVE-2024-34097, CVE-2024-34100)
• Out-of-bounds Write. (CVE-2024-30310)
• Out-of-bounds Read. (CVE-2024-30311, CVE-2024-30312, CVE-2024-34101)
• Improper Input Validation. (CVE-2024-34098)
• Improper Access Control. (CVE-2024-34099)

Adobe Substance 3D Painter:

• Out-of-bounds Read. (CVE-2024-30308, CVE-2024-30309)
• Out-of-bounds Write (CVE-2024-30274, CVE-2024-30307)

Adobe Substance 3D Designer:

• Out-of-bounds Read. (CVE-2024-30281)

Adobe Aero:

• Use After Free. (CVE-2024-30275)

Adobe FrameMaker:

• Heap-based Buffer Overflow. (CVE-2024-30288)
• Out-of-bounds Write. (CVE-2024-30291, CVE-2024-30290, CVE-2024-30292)
• Buffer Overflow. (CVE-2024-30289)
• Out-of-bounds Read. (CVE-2024-30287, CVE-2024-30286, CVE-2024-30283)

Adobe Dreamweaver:

• Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). (CVE-2024-30314)

Adobe Illustrator:

• Out-of-bounds Write. (CVE-2024-20791)
• Out-of-bounds Read. (CVE-2024-20793)
• Use After Free. (CVE-2024-20792)

Adobe Animate:

• Out-of-bounds Write. (CVE-2024-30282, CVE-2024-30296, CVE-2024-30297)
• Stack-based Buffer Overflow. (CVE-2024-30293)
• Heap-based Buffer Overflow. (CVE-2024-30294)
• NULL Pointer Dereference. (CVE-2024-30295)
• Out-of-bounds Read. (CVE-2024-30298)

RECOMMENDATIONS: We recommend the following actions be taken:

• Apply the stable channel update provided by Adobe to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1 : Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.2 : Establish and Maintain a Remediation Process: Establish and maintain a risk-based remediation strategy documented in a remediation process, with monthly, or more frequent, reviews.
  • Safeguard 7.6 : Perform Automated Vulnerability Scans of Externally-Exposed Enterprise Assets: Perform automated vulnerability scans of externally-exposed enterprise assets using a SCAP-compliant vulnerability scanning tool. Perform scans on a monthly, or more frequent, basis.
  • Safeguard 7.7 : Remediate Detected Vulnerabilities: Remediate detected vulnerabilities in software through processes and tooling on a monthly, or more frequent, basis, based on the remediation process.
  • Safeguard 16.13 Conduct Application Penetration Testing: Conduct application penetration testing. For critical applications, authenticated penetration testing is better suited to finding business logic vulnerabilities than code scanning and automated security testing. Penetration testing relies on the skill of the tester to manually manipulate an application as an authenticated and unauthenticated user.
  • Safeguard 18.1 : Establish and Maintain a Penetration Testing Program: Establish and maintain a penetration testing program appropriate to the size, complexity, and maturity of the enterprise. Penetration testing program characteristics include scope, such as network, web application, Application Programming Interface (API), hosted services, and physical premise controls; frequency; limitations, such as acceptable hours, and excluded attack types; point of contact information; remediation, such as how findings will be routed internally; and retrospective requirements.
  • Safeguard 18.2 : Perform Periodic External Penetration Tests: Perform periodic external penetration tests based on program requirements, no less than annually. External penetration testing must include enterprise and environmental reconnaissance to detect exploitable information. Penetration testing requires specialized skills and experience and must be conducted through a qualified party. The testing may be clear box or opaque box.
  • Safeguard 18.3 : Remediate Penetration Test Findings: Remediate penetration test findings based on the enterprise’s policy for remediation scope and prioritization.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
• Restrict use of certain websites, block downloads/attachments, block Javascript, restrict browser extensions, etc. (M1021: Restrict Web-Based Content)
  • Safeguard 2.3: Address Unauthorized Software: Ensure that unauthorized software is either removed from use on enterprise assets or receives a documented exception. Review monthly, or more frequently.
  • Safeguard 2.7: Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassess bi-annually, or more frequently.
  • Safeguard 9.3: Maintain and Enforce Network-Based URL Filters: Enforce and update network-based URL filters to limit an enterprise asset from connecting to potentially malicious or unapproved websites. Example implementations include category-based filtering, reputation-based filtering, or through the use of block lists. Enforce filters for all enterprise assets.
  • Safeguard 9.6: Block Unnecessary File Types: Block unnecessary file types attempting to enter the enterprise’s email gateway.
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring. (M1050: Exploit Protection)
  
  • Safeguard 10.5: Enable Anti-Exploitation Features: Enable anti-exploitation features on enterprise assets and software, where possible, such as Microsoft® Data Execution Prevention (DEP), Windows® Defender Exploit Guard (WDEG), or Apple® System Integrity Protection (SIP) and Gatekeeper™.
• Block execution of code on a system through application control, and/or script blocking. (M1038: Execution Prevention)
  
  • Safeguard 2.5 : Allowlist Authorized Software: Use technical controls, such as application allowlisting, to ensure that only authorized software can execute or be accessed. Reassess bi-annually, or more frequently.
  • Safeguard 2.6 : Allowlist Authorized Libraries: Use technical controls to ensure that only authorized software libraries, such as specific .dll, .ocx, .so, etc., files, are allowed to load into a system process. Block unauthorized libraries from loading into a system process. Reassess bi-annually, or more frequently.
  • Safeguard 2.7 : Allowlist Authorized Scripts: Use technical controls, such as digital signatures and version control, to ensure that only authorized scripts, such as specific .ps1, .py, etc., files, are allowed to execute. Block unauthorized scripts from executing. Reassess bi-annually, or more frequently.
• Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior. (M1040: Behavior Prevention on Endpoint)
  
  • Safeguard 13.2 : Deploy a Host-Based Intrusion Detection Solution: Deploy a host-based intrusion detection solution on enterprise assets, where appropriate and/or supported.
  • Safeguard 13.7 : Deploy a Host-Based Intrusion Prevention Solution: Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.

REFERENCES:

(Only Europe, Please) - short note - If you're not into reading or receiving long messages,don't read any further + Please If you don't want to read everything because of my post being too long for you & instead of reading It all - ..skip some parts - find another person to talk to.Let's respect each other and our free time. All people criticizing/making fun of me & other people - will be blocked.Pretty much as people questioning my post and giving me unsolicited advice.I'm not here for any conflicts and I know I can't please everyone - I know I never will.. However It's me who should feel comfortable in my new potential friendship & obviously someone who wants to be my friend - not the whole world.. which is why I don't need any advice from people who don't even want to be a part of my life. The amount of rude people on Reddit always criticizing others and making fun of them is unbelievably high but let me tell you something - NEVER let anyone make choices for you and criticize you only because you're different! Always fight for your dreams and never let anyone make you think you're worthless! It's your life and you're the one deciding what's best for you - If you want to judge me despite not even wanting to talk to me or give me advice better block me! I'm an adult woman and I make all decisions on my own.I'm not trying to "fit in" and be like everyone else - just to get more attention.Accept me for who I am or let go - is my motto.
★
🤍
Hello guys! 🙂 (read everything before you decide to send me a message) Please send me a message ONLY If you're in the same situation and If your expectations are the same as mine.I want to find like minded people from Europe (Why Europe? Read my post to find out) I'm looking for something permanent (remember - you can feel lonely even If you're surrounded by others - If there's no emotional bond) I'm fed up of meeting people who never make time for me & only text me once or twice a week to ask me "what are you up to?" Out of boredom.I don't want to meet people asking others a million of questions like "what's your favorite movie?" Just to give them one word answer and ask them another question "and music? Your favorite song?" I'm looking for something "deeper" & different 🙂
★
🤍
What kind of friend would I like to find? Someone to talk to on a daily basis - Someone who needs It & wants It just as much as me
🤍
What are my expectations? I would like to meet someone in a similar situation – why? Because I honestly feel like only a person with the same expectations and a similar outlook on life would get along with me & because I feel more comfortable talking to people like me..Friendless people who need a strong bond - people without friends and partners.. Don't get me wrong…Most people deserve to be happy and It's good to have friends but people who have friends or families in real life are usually more focused on them (which is completely understandable) & have less time for others + I simply don't want to be replaced by anyone..I kind of envy people who can call others , true friends given I don't have an emotional bond with any of my acquaintances. Please send me a message only If you're not In a relationship and don't have friends for the same reasons I've already mentioned before
★
🤍
Whenever I hear that others have friends I simply get sad because (believe it or not) If I had to choose between 20 people to talk to (acquaintances) and one special person - I'd choose that one special person without any hesitation .
★
🤍
I also want to talk to others every day because..I want to see someone’s effort & be someone's first choice - not another person to have random conversations with..some people ask me "Why do you want to talk to people from Europe?" Well..Because I would like to see someone I'd get along with - In the far future - face to face :) + I don't want to wait any longer than 6 hours to receive a message - waiting 6 hours to receive a message is more than enough
★
🤍
I'm by no means criticizing people who don't want to talk to others often / People who really are super busy & People who want to find someone to have unimportant conversations with - I'm aware that not everyone has the same expectations which is why everything you're reading now - is here for a reason :) All I'm suggesting is - I don't want anything temporary and I don't want to be the one always giving more than receiving.Listen people - I used to ignore being..ignored by others..always being just an option to talk to during tough times or moments of boredom.I was too young to realize that I was never important enough for most people that were a part of my life. I don't know who needs to hear this but..No one is too busy to make time for you! People make excuses to avoid others because they prioritize everything and (maybe) everyone..over them. It's true that most people are busy - but It takes only a few seconds to start a conversation (If you're into short messages) and a few minutes (1-10/15) to type a long message . Don't let anyone lie to you.
★
🤍
Truth is that most people either don't like you enough to make time for you or just simply - feel no need to talk to others often but are they too busy? No..You don't need to send me a message just to ask me and tell me "Do you really want to talk every day? I like long messages but I can't promise to contact you often" If you really are unsure please don't send me a message.I don't need more acquaintances aka people to talk to - occasionally.
🤍
I'm not trying to sound rude but conversations once or twice a week wouldn't be enough for me and I don't need them... Let me tell you one thing – A true friend would never just give up on you for no reason :) It’s always possible to find someone to have a random conversation with – someone willing to send you one message once or twice a week..but..It’s almost impossible to find people willing to make more time for you.
★
🤍
I’m not asking a busy person to make time for me by changing some plans! Absolutely not! I’m here to find someone who wants to talk daily (throughout the day or maybe even night) of one’s own will.Someone looking for the same kind of connection.Strong friendships are based on mutual support. One of the best things you can do for a friend in need, is just to be there for them when they want to talk.I often see posts from people who always say how friendless they are because they don't feel loved or appreciated by their "friends" remember! A true friend - someone who truly likes you or someone who wants to get to know you - will always find time for you.
★
🤍
I'm not interested in small talk/short messages - I love long and meaningful conversations. It's so easy to find someone who loves abbreviations and questions like "How are you?" How was your day? Or what are you interested in? But so hard/almost impossible to find a person who knows how to keep a conversation going & show others some effort.Building and maintaining friendships takes time and effort.Never allow pursuits or possessions to become bigger priorities than your relations with other people.Close friendships are so important to us because they are so difficult to form + Having friends can help you feel as if you belong to something that brings purpose and connection to your life
🤍
• I do NOT respond to any „Hey,hmu” or „u want to talk?” type of messages (super short messages or messages full of abbreviations – I literally can’t stand abbreviations and acronyms in text messages) ALL messages full of abbreviations will immediately be ignored.I also don't like it when people ignore everything I say in private messages just to focus on a random question or? When they start talking only about themselves and don't ever ask me anything. I love conversations with people referring to everything I say...I want everything I say and do - to be reciprocated
🤍
• No NSFW profiles (checking mental health subreddits NOT included as I'm a huge empath and always try to understand others) - Please! I'm not looking for anyone to flirt with and I'm not looking for a partner either. I always check people's profiles (even comment history) - To avoid guys, trying to get inappropriate pictures from adult women or? flirt with them + I don't want to see you with no clothes on so If you're on Reddit only because you want others to see what's underneath your clothes - I'm not for you! I just simply don't want to see any s e x related activity on your profile If you want to talk to me.
🤍
• If both of us (you and I) are from the same country (I live in a non-English speaking country) - I want to communicate with you in our first language! No - Not because I don't understand English - because as you see - I do. Why then? English is simply overrated and people don't appreciate other languages as much as they should. So.. If we're from the same country and you want to talk only in English (which is quite common on reddit) - Talk to someone else. I just don't want to talk to a person from the same country as mine - in a foreign language as It's just something I don't understand even If all you want is to improve your language skills
🤍
• Please only adult people 18-36 (age range) It doesn't matter to me If you're younger or older than me (as long as you're not underage) So.. don't worry! I just want to have discussions with emotionally mature people :)
🤍
• I don’t respond to messages I don’t find interesting even If they're long - If after receiving and reading your message I don't feel comfortable or think "I wouldn't get along with him/her" I simply do not respond (what I’m suggesting is that I don’t always respond to someone’s first or second message because..sometimes you just know If you’d get along with someone or not- I’d never ignore anyone after days or weeks of daily conversations though) just because I don’t want to do anything forcefully & because I don’t want to lead anyone on. I read all messages but I definitely don't respond to all of them! I want to make it clear because I don't want to be accused of not responding and not reading people's messages! - Some people don't message me back as well and even If It's a bit disappointing I'm ok with that! - as long as there's no emotional bond - Not responding to someone's first or second message Is completely OK! If people think they wouldn't get along with a stranger - is there a reason to start a conversation? I don't think so. I can't stand being ignored after days or weeks of daily conversations and seeing people changing priorities over time.. but that's something different - something I don't want to go through ever again for real. If I'm really interested in someone's message it's impossible to hear from me "I'm too busy" because I know myself and If I had no time for others - I wouldn't be here. I don't want to pretend someone I'm not and always try to find some cheap excuses to avoid others. (unlike most people who don't want to talk to others)
🤍
• Don’t ask me “Can you tell me something about yourself?” If you really want to get to know me - you can ask me questions :) I'm an open book.
🤍
• It would be better If you guys were into emojis - like me - to describe your emotions In text messages. Two emojis - 🙂 and 🙁 are completely enough! I just don't like emotionless conversations.I also don't like it when people say "yeah" or yea"as it sounds dismissively. First impression Is everything to me! I want to see your kindness even in a text message - Emojis are very helpful to express your emotions.I don't want to meet people who say "crying Is a weakness" - It's OK to cry even If you're a guy!
🤍
• I want to talk on reddit first (just to make sure If I'd get along with you) before moving to Discord or some other app
🤍
• I would rather talk to a homebody - not another person who always has something to do as people who are very busy don't even have time for daily conversations
🤍
• If you're another person interested only in "childish conversations" such as "HEYOOO! I'M BORED! Ya like Pizza or cheese? xDDDD 🤣" I'm begging you! Don't send me a message.I'm not a child anymore and such messages don't make me smile or laugh.I'm looking for someone interested In serious discussions - not another person just seeking some entertainment out of boredom . Conversations with sarcastic undertones (even when It comes to some emojis such as 🤣😂) are not for me. Your typing style matters to me! Why? when It comes to online conversations with someone new - It's not always possible to know If someone Is laughing at you.. or with you. Let me tell you something else! Jokes about cancer, disabilities and death are UNACCEPTABLE to me. If you find joy In someone else's misfortune you are not a person I want to know.
🤍
• Time response matters to me a lot! I would never ask anyone to be online all day long and I'm NOT asking any of you for any instant messaging as I'm someone who would rather wait an hour or two to receive a proper response instead of some short and pointless messages but I'm interested only in daily conversations and I don't want to wait any longer than 6 hours to get a message from you.I don't need unbelievably long messages either! Messages as long as the second paragraph of my post - are completely enough. If you like longer messages? you can send me a longer message, but If you want to send me one word or one sentence as a response to my post - don't expect a reaction from me. I don't want to come across as rude - I just don't want to waste your time
🤍
• I'm strongly AGAINST picking on people you don't even want to chat with - and making fun of them! I can't stand people who criticize others publicly or make fun of them! (only because they disagree with someone they don't even know) There's no place In my life for someone using Reddit, to hurt other people
🤍
• I'm not into foul language and I definitely don't want to talk to people who swear a lot...
🤍
• I want to meet assertive people who know what they want and always stand up for their friends
🤍
• I want to meet someone willing to call me In the future, someone spontaneously sending me pictures of animals or food, et cetera. I want more than just text conversations.. 🌻
🤍
Why can’t you see any of my hobbies listed down below? Because what really matters to me is..who you are (If you’re honest, talkative ,understanding, caring and trustworthy – for example) just simply – It matters to me what you’re like! not what you like.Don’t get me wrong – you can tell me what your hobbies are but from my point of view - people's hobbies are important - If you want to find a gaming buddy or If you want to meet someone to hang out with in real life and..go bowling for example.What most people seem to care about are other people's passions – I don’t. I get along with other people despite having completely different hobbies but I absolutely don’t get along with people way different than me (different expectations and outlook on life – way different sense of humor or personality traits – It’s just an example) It doesn't make ANY DIFFERENCE to me If you're a gamer or? Someone interested in photography! It doesn't make any difference - > as long as you're talkative and kind and If you also want to find someone willing to stay in your life..for good - But If you're into small talk and all you want is to...type and receive super short messages or If you're here only because you're bored and don't know what to do + If you're a very sarcastic person - I'm definitely not for you! I don't get along with overly sarcastic people turning everything into a joke. Friendships should be natural – not forced. I wouldn't get along with people who laugh at everything.. In my opinion most people are way too sarcastic.. It's quite sad... Sarcasm can also be another form of passive-aggressive behavior.
★
🤍
People who want to be to friends should feel comfortable and have something in common. No - not necessarily a similar taste in music or movies but something else..Most friendships don't fizzle out because of people not having the same hobbies but..because they just simply have different expectations when It comes to something important.I'm not here out of boredom and trust me - I'm not here to meet as many people as possible.I choose quality over quantity.I highly value myself and my time & Sometimes one person but a person who makes you feel comfortable and understood - is more than enough :) We ALL can choose what kind of people we’d like to talk to and maybe even become really good friends with and I? I don’t want anyone to be disappointed.We all have some expectations after all.I know that people don't have to talk as often as possible in order to become friends but I'm interested only in daily conversations. If you really need someone to talk to due to loneliness and If you have time to talk to me daily (throughout the day and maybe even night) I always make time for others.I'm literally always available.I could even stay up all night long only to talk to someone important to me. I’m ready to commit but only If there’s some chemistry between me and someone else.I don’t do anything forcefully.
★
🤍
If you want to talk to me tell me your story - tell me why you're here, what kind of friend would you like to meet :) Et cetera.Such messages are way more interesting to me than...someone's long list of hobbies. I know! It's unusual on reddit but I don't make friends based on hobbies..I want to meet someone with the same mindset as mine to finally feel understood and get close to someone new. You can share your problems with me - I absolutely don't mind "complaining" as I've been through a lot in my life.What do people usually tell you when you tell them that something's wrong? "Don't complain" or "Life's not over yet - one day you'll be happy" or "There are worse situations than yours" and..obviously "Find a therapist" Life's not a fairytale and sometimes things don't go as planned.Emotions shouldn't be bottled up.I'm sick of people always telling others "everything's gonna be ok" move on " & more..Trust me people - not everyone wants to hear "Just believe in yourself and everything's gonna be ok" Some people take it as reassurance - but others? They would rather hear something different 🙁Imagine being told that things will be okay, only for them to get worse..Do you guys know why telling someone "everything's gonna be ok" Is wrong? Because you can't see the future.
★
🤍
You can't guarantee others that one day they'll finally be happy + when It comes to social interactions - We're responsible only for ourselves - not others & as you guys know people let us down quite often (sometimes even when there's no reason) so instead of telling people how they should move on, forget everything and be happy or asking them to find a therapist - be there for them! Always be willing to listen to them If you really like them or want to get to know them & don't suggest everyone in a tough situation to find a therapist because even the best therapist won't ever replace a true friend + It's quite normal to be disappointed If people always do something to hurt you. Sharing your hardships with other people in a very similar situation or exactly the same one - is VERY helpful If the other person understands you & wants to start all over by just letting it all out! Feeling emotional support instead of always hearing some "positive quotes" or someone saying "Stop complaining let's talk about something else - Is very important! "Everyone needs a shoulder to cry on. I appreciate sensitive people who always try to understand others. If after hearing a sad story all you want to say is "forget the past and move on" you're not for me. It's important to be a good listener and provide emotional support to others
★
🤍
Please - If you're a completely different person than the described type of person I'm looking for (If you love abbreviations,If you don't need a stable friendship, If you're sarcastic and quiet) or If you simply disagree with my post - don't force yourself to send me a message.I want my new potential friendship to be natural which is why I want you to contact me only If your needs are the same - I don't want you to pretend someone you're not - only to please me - Pretending to be someone you're not - is the worst.I want to finally be happy again & find someone "always" wanting to talk - sending me random pictures throughout the day - food pictures or pictures of some animals. What is the most important to me? I want to find people who value online friendships as much as they would value real life ones as there's another human being on the other side
★
🤍
No comments please.Only Private messages and chat requests 🌺
I know It's possible to meet people with exactly the same expectations as mine but It's just not easy because most people are Interested In temporary and entertaining conversations. People like me are just "different" I really want to finally find someone who loves emojis as much as I do.. someone who loves sweet, warm and serious discussions at the same time. Emojis really do - change conversations 😊

My husband was alreasdy on SSDI once in 2019 stage 4 cancer. Did go back to work at that time. Kept his job and insurance. 24 months later In 2021 got a letter from SS that he now qualifies for Medicare A and B even though he had gone back to work. SAid MUST sign up for Free A or risk paying back SSDI benefits paid to him in 2019. But he did NOT have to sign up for B yet if he still has medical coverage through his work.
So he DID sign up for A. in 2021. No B. So since already on Medicare A since 2021 they said his 24 month waiting period is already satisfied and will not have another wait period to apply for Medicare B.
Here is where we are getting conflicting information from multiple SS agents.
They all say there is an 8 month rule to sign up either from when you stopped working OR when you lost your medical insurance through Employer whichever happens first.
Where there advice differs:
Agent said a month ago, if he last was physically working Dec 4 , 2023 when he left out on Short term disability but is technically still employed by that company, and will technically not lose his job until Dec 4, 2024 IF he can not ever return (and has medical insurance with them goo till Dec 31, 2024, that he does not need to sign up for Medicare B till about 1 to 3 months before the termination of job and insurance. (apply in Oct or Nov 2024 for start date of Jan 1, 2025 after work med insurance is done)
Another agent just this week said: is saying the information above is incorrect, and said they actually only consider the last date you were physically at work when you left of STD even if still employed and have insurance with your employer. And that he only has 8 months from that last day at work Dec 4, 2024 to apply for Medicare B. (she said apply in July2024 already and have it start in August 1, 2024.) before that 8 month window expires or he will face penalties in future for signing up LATE or may not be able to get B again till 65.
Can anyone confirm who is correct if you know for sure? Inconsistant information from SS is hard, you don't know who to believe. We are happy to follow rules, but not even sure what the rules are.

I wonder is it a general bug that when you type a number like 70 for example the result is being singed in English only no matter the language of the lyrics? Because this I noticed with greek lyrics and I must remember to type the number with letters next time

A player asked me a good question and I couldn't find discussion of it anywhere, so I thought I'd bring it up here.
There are a number of spells - crown of madness, hold person, charm person, etc. - that only work on humanoids. Most of the time, it's straightforward to tell that something is a humanoid (2 arms, 2 legs)...but not always. Satyr and Changelings, for example, both look humanoid but are fey; Succubi/Incubi have human-like 2 arms 2-legs but are fiends, etc.
The question the player asked was whether, when encountering a creature they haven't seen before, they'd have to make a check to know if it was humanoid and would therefore be affected by their spells, if so, what kind of action that check would be, and whether the spell would just fail if cast on a non-humanoid, wasting the slot.
It's interesting that he asks, because this is definitely going to come up in a few sessions.
One inclination I had is to rule it as a DC 10 passive arcana/nature/history check to know (which this character will pass every time). But I don't love that because in theory, it becomes a kind of "fey detector" that would, for example, reveal that a changeling was a changeling for free. But I also think it's a kind of a dick move to make him waste a spell slot casting hold person on a fey and having it fail.
I know it's a fiddly little question, but just interested to know what people think.

I'll create a new resume or fix and rewrite (as needed) your current resume, and I'll offer career advice. Keeping up with the news and latest trends in employment, I offer my advice freely to my clients, ensuring your resume not only tells your story but also aligns with what HR managers are currently seeking.
My process starts by researching what HR managers are looking for in your field, optimizing the resume for your specific case, and ensuring your resume is ATS compliant so you can use it to apply online. With extensive experience across all job types, I boast one of the most comprehensive resume databases ever written by anyone!
What do I offer? ATS-compliant resumes and cover letters are all original and tailor-made to suit your needs. Leveraging research from Harvard and other leading institutions, I craft resumes that meet the formal criteria and tell your unique professional story, ensuring you stand out to potential employers.
I am excited to announce a new service: applying for jobs for you.
This service includes:

• Using a residential VPN to search for jobs in your area, ensuring a localized and relevant job search.
• Tailoring your resume and cover letter for each job application, maximizing your chances of landing an interview.
• Creating an email address for job applications and any additional profiles required for employment.
• Delivering a spreadsheet with all the jobs applied for, keeping you organized and informed.

Price list:

• Resume: $60 (median price, may vary based on experience and length)
• Original cover letter: $40 (40 dollars is the base price, can be higher or lower as well)
• Resume + Cover letter combo: $85 (median price, may vary based on experience and length)
• LinkedIn Optimization: $50

Job Application Service:

• 4 applications for $30
• 6 applications for $35
• 10 applications for $65

Resume + Cover: Cryptocurrency (BTC, BNB, ETH, USDT only), Venmo, Zelle, Paypal, CashApp, and Wire Transfer. (I currently have problems with Paypal; I can use it, but I'd prefer to avoid it as much as possible)h as possible)
Typically, resumes are delivered within 24-48 hours, with many clients receiving theirs in just 24 hours. For those in a hurry, I offer a same-day delivery option. A rush fee of $40 ensures you get your resume in 8 hours or less.
Payment methods: Cryptocurrency (BTC, BNB, ETH, USDT only), Venmo, Zelle, Paypal, or CashApp, Wire Transfer. (I currently have problems with Paypal; I can use it, but I'd prefer to avoid it as much as possible)
To request my services, please email me at [resumes.moe@gmail.com](mailto:resumes.moe@gmail.com) with:

1. The service you're interested in.
2. Your Reddit username.
3. Your current resume.
4. Specific edits or updates you need.
5. A general deadline for when you need your documents.

Clarifications:

• I approach each project with a research-first mindset, ensuring that your resume is not just a document but a narrative that speaks to your strengths and ambitions. I prioritize customer satisfaction, offering to show you the finished resume before any payment is made, but would you please ask for immediate compensation once delivered?
• I have a new ATS beating technique that I will use for your resume.
• I'm in contact with recruiters and I often suggest my old clients to them If I know they might be a good fit for the job.
• Having served over a thousand Redditors (with many leaving positive remarks), my experience spans online and local community work. While not all clients leave feedback, you can check out some of the remarks and before/after examples of my work in the provided links and on Imgur.
• I now prefer advanced Payment for the resume, but it can still be delayed till after the delivery, but job application service payment must be paid in advance (usually done after completing the resume).
• I retain the right to ask for prepayment or deposit without having to explain my reasoning.
• Finally, while I ensure you're completely satisfied with your resume before requesting payment, I ask that you complete the transaction as fast as possible once the work is completed.

I know this is a hot topic or something, or maybe not, I don't care.
I simply just have to express my intense, hair-pulling, phone-smashing frustrations with this damn gamemode.
Why? Because I suck that's why, for half the game I'm forced to watch others as they run around the map like crack addicted rats with shotguns and snipers.
I know the whole appeal is the fast TTK, even more so with those weapons I mentioned, but like holy shit chill tf out, they are both some of the most OP weapons in the game and I haven't even played long enough to get the short-barrels for the DLQ and Locust.(I'm not a baby-faced newbie... mostly, I started back in 2020 but dropped out 2022, why? for the same damn reason, extreme frustration)
Yes I know you could say just play something else, or to cope, or to get better (valid actually) or skill issue, but that doesn't make me wanna throw my phone against my tiled floor at mach-fuck, but this isn't even the worst part, the worst part is that most of the mfs in global chat only ever ask for 1v1s and SnD.
Not only do I have my head popped every time I peak a corner, not only does my heart-rate go from high to getting jumpstarted by a car battery, not only can I barely play the game, not only do I go against mfs with legendary skins and diamond camos, but I can't even find friends to play other gamemodes with because by the looks of it everyone loves SnD
So uhh yeah thanks for reading my seething rant about a gamemode I hate, feel free to insult or to help, I'm gonna go and spend the rest of my day having it ruined by CoDm(Good god maybe I should leave)

Hi everyone! My name is Sarah and I'm the owner of Null Design Co. I make and design wood keyboard cases. A little background about me, I am a mechanical designecnc programmer by trade, with a degree in industrial/furniture design.
This will be my second group buy! The first was for 60% wood cases, and now I'm offering 65% wood cases along with matching wrist rests and feet. There will be some extras available for purchase after the group buy ends, but these will be at a higher price point and with limited customization options.
With these cases, I'm offering 4 different wood types, 3 different top edge profiles, and 3 different accent metals. 36 possible combinations! Visit the website to see examples of the different variations.
Wood Type: Walnut, Cherry, Maple, or Oak
Top Edge Profile: Chamfered, Rounded, or Flat
Accent Material: Brass, Copper, or Aluminum
Link to my website for the GB: https://nulldesignco.com/
More Details:
All cases are tray mount, and high profile. They are flat (not slanted), but have holes in the bottom to mount feet (available for purchase separately).
The cases have the standard 6 mounting locations, and will fit most 65% PCBs that fit in a Tofu65 case.
The case includes 4mm high removable standoffs, and has a 5mm deep battery well.
All cases are finished with a hard wax oil and include standoffs, screws, and rubber stick-on feet. Brass and copper items are finished with a lacquer to prevent tarnish.
Any of the items can be purchased separately. So for those of you who participated in the 60% GB, you can now buy matching wrist rests and feet for your cases :)
This GB started on April 30th and will run for 5 weeks (until June 4th), and then I will close it and begin production. The product page on my website will show updates. Please expect to wait 8-10 weeks after the GB closes to receive your case.
If you have any questions, or feedback about things you like/don't like, feel free to message me here on Reddit or on my website. Join the Discord or visit the website for reviews.

You guys see those popular quiz videos making the rounds. With like images of a character and then an AI voice with most likely Minecraft playing in the background? The quizzes are like ‘don’t copy me or you are out’ with characters such as Stewie from family guy Bart from Simpson’s etc.
Well I started making one and it’s been doing really well however I’ve had an account just straight up impersonating me and re uploading my videos not even an hour after I upload mine and he’s some how taken my username off the video so it just looks like his account. I spent hours making these videos and I’m super annoyed. He’s disabled messages too to discuss it.
So I was going to report him for copyright infringement but then I realised am I screwed as well for impersonating a popular character? And then I got to thinking would I even get paid in the creator fund if I’m under copyright for using a character that isn’t mine. Is there some level of fair use since I just take images of a character use an AI voice(which honestly doesn’t sound like him anyway) then do quizzes. All the gameplay is copyright free too. Also if it’s copyright infringement why in the world is there 100s of accounts like this. Cause surely they won’t be getting paid? Thank you.
An example https://vm.tiktok.com/ZGeCqMbGv/

Hey everyone! 👋
If you’ve ever felt overwhelmed by clutter in your home, you’re not alone. Many of us struggle with too many possessions and not enough space. But don’t worry, there’s a simple and effective solution: the “Four Box Method”. 📦
In our latest blog post, we delve into everything you need to know about this decluttering technique. We cover what the method is, why it exists, and how it compares to other decluttering methods. We also provide a step-by-step guide on how to apply the method in your home, complete with real-life examples. 📘
Whether you’re new to decluttering or have tried other methods before, the “Four Box Method” could be the solution you’ve been looking for. So why wait? Click the link below to read the full article and start your decluttering journey today! 👇
Great Results with the Four Box Method
We’d love to hear your thoughts and experiences with the “Four Box Method”, so feel free to share in the comments below. Happy decluttering! 🏡

New first time dad here. Kiddo is almost 3 months now and for those 3 months, I've been either working, cleaning, cooking, or holding/spending time with the kiddo. Now we're getting to the point where I have the odd hour here and there to do what I want and I have no idea what to do with myself. I feel like the things that appealed to me before don't have the same appeal anymore. What are your favourite hobbies that you spend time on when you get the random bit of free time?

Alright so If you're on the hunt for a natural alternative to Ozempic for weight management, Ozemra offers an interesting option. From my perspective, it's got a strong focus on boosting metabolism and controlling appetite (especially with its glucomannan and chromium), which are key for shedding pounds.
But while it sounds promising, its effectiveness can vary depending on individual factors like your diet, lifestyle, and how your body specifically reacts to its ingredients.
Overall, I’d rate it at 3.5 /5, with PhenQ beating it at 4/5, as better Ozempic alternative.
This post discusses all such potential Ozempic alternatives.
One issue is glucomannan is only at 200 mg in Ozemra, with more potent glucomannan based weight loss supplements use it in much higher quantities. Glucomannan like Berberine, is a potent appetite suppressant, Here I've listed out more glucomannan supps. worth checking out.
I have also compared Ozemra comprehensive with PhenQ and Serolean in my review.
However, none of these supplements – PhenQ, Ozemra, Serolean contain Berberine, which is recently most talked about ingredient as natural Ozempic alternative.
While PhenQ mimics berberine with the use of a strong Nopal cactus fiber, Ozemra does it with glucomannan.
If you’re sepcifically looking for best berberine for weight loss, I’d recommend a supplement by Dr. Sam Robbins - Blood Sugar Optimizer. I recommend reading this article on Berberine supplements.
Comparing Ozemra with Serolean and PhenQ, here's the lowdown: if you're someone who struggles mainly with emotional eating, binge-eating and stress-related cravings, Serolean might be more up your alley and suit you more.
It targets weight loss not just by suppressing hunger but also by improving your mood and reducing stress, increasing “serotonin levels” which can be a game-changer if these are your main stumbling blocks.
On the other hand, PhenQ could be a good fit if you're looking for an all-in-one weight loss supplement that targets weight loss from multiple angles. It not only helps with fat burning and appetite suppression like Nature’s Ozempic but also includes ingredients that help prevent fat production and improve mood and energy levels. This makes PhenQ a comprehensive solution, which might appeal to you if you want multiple benefits in one go.
In essence, Ozemra is a solid choice if you're primarily looking for a metabolic boost and appetite control without too many extras.
However, if your weight loss journey involves tackling mood fluctuations or if you need a more aggressive approach against fat accumulation, then PhenQ or Serolean might serve you better.

Intro

If you're diving into the overwhelming world of weight loss supplements, you might have stumbled upon Ozemra. This product is buzzing in forums and among fitness enthusiasts as a natural alternative to some of the heavier prescription options out there, like Ozempic.
In this post, I’ll break down everything about Ozemra—from what it is, how it claims to work, to the critical take on whether it's as good as it sounds or just another bottle on the crowded shelf.
As someone always on the lookout for effective and safe ways to manage weight, I was intrigued but skeptical. I'll walk you through my unfiltered thoughts on Ozemra and its fat-burning stages, plus a deep dive into its ingredients.
What is Ozemra?
Ozemra pitches itself as a revolutionary, non-prescription aid for weight loss, prominently highlighting its natural composition. If you are like me, wary of side effects and long ingredient lists that sound like a chemistry exam, Ozemra’s approach might initially catch your eye. It boasts a formula packed with components like glucomannan, green tea extract, and other natural ingredients known for their health benefits.
However, let's not get ahead of ourselves. Each ingredient in Ozemra is supposed to support weight loss through different mechanisms. For example, glucomannan is a dietary fiber that helps you feel full longer, potentially cutting down your calorie intake. Green tea extract is celebrated for its metabolism-boosting and antioxidant properties.
While these ingredients are impressive on paper, the real question is about their concentration and synergy in the product. Just having them listed isn't enough; they need to be in effective doses to truly work, which many supplements often skimp on to cut costs.
How Ozemra Works: The 4-Stage Fat Burning System
If you're curious about how exactly Ozemra claims to tackle weight loss, they’ve laid out a 4-stage system, each targeting a different aspect of weight management. Here’s a rundown from a user perspective:

1. Stage 1: Appetite Suppression - The journey starts with controlling your hunger. This is where the glucomannan comes into play. It absorbs water and expands in your stomach, theoretically helping you eat less. From my experience, while it does help a bit, don’t expect miracles. You’ll still need to control your eating habits actively.
2. Stage 2: Metabolism Ignition - Next up, Ozemra claims to fire up your metabolism, helping you burn more calories at rest. Ingredients like green tea extract are supposed to boost this process. However, if you are someone who already struggles with caffeine sensitivity, the added natural stimulants might feel overwhelming rather than energizing.
3. Stage 3: Lipolysis Trigger - This phase focuses on breaking down fat. Here, substances like L-carnitine come into the mix, which in theory helps transport fats into cells to be burned for energy. People may notice a slight uptick in how they feel during workouts, possibly due to this, but it won't be the drastic fat loss promised.
4. Stage 4: Optimized Energy Utilization - Finally, Ozemra aims to ensure the energy from the fat being burned is efficiently used. It’s supposed to help you feel more energetic and less sluggish, even on a calorie deficit. While there's a mild boost, it's comparable to any decent B-vitamin complex.

Each stage of this system sounds great on paper, but in practice, the effects are more subtle than you might hope. If you’re looking for a dramatic change, Ozemra’s gradual improvements might feel underwhelming.
Plus, consistency is key; these pills alone won’t work wonders without proper diet and exercise.

What Should You Try? PhenQ vs Ozemra

Choosing between PhenQ and Ozemra depends largely on your specific weight loss goals, health condition, and preference for certain types of ingredients. Here’s a guide to help you decide:
PhenQ is best for you if:

• You are looking for a comprehensive weight loss solution. PhenQ’s variety of ingredients supports multiple aspects of weight loss, from fat burning to mood enhancement.
• You struggle with fatigue while dieting. The inclusion of B-vitamins and L-Carnitine helps convert fat to energy, combating the usual tiredness associated with calorie deficits.
• You need help with sugar and carbohydrate cravings. With ingredients like Chromium Picolinate and INNOSLIM, PhenQ is designed to reduce these cravings significantly.
• You are looking for an effective natural Ozempic alternative: Although NOT a direct replacement to Ozempic, PhenQ has some weight loss benefits with it.

Potential alternatives: If PhenQ seems too intense or if you have sensitivities to caffeine, consider looking at supplements that focus more on mood support and less on stimulants, such as those containing more adaptogens or fiber.
Ozemra is best for you if:

• You prefer a straightforward approach to weight management. Ozemra focuses on metabolism and appetite control without too many additional effects.
• You are sensitive to stronger stimulant effects. Even though Ozemra contains stimulants, it might be less intense than PhenQ due to the different formulations and concentrations.
• You are primarily concerned with metabolic enhancement. Ozemra's ingredients like caffeine and L-Carnitine are great for boosting metabolic rate.

Potential alternatives: If you find Ozemra too mild or are looking for something that also supports gut health or has anti-inflammatory properties, consider supplements that include probiotics or omega-3 fatty acids.
Both PhenQ and Ozemra offer unique benefits, so consider your personal health profile and weight loss goals carefully before choosing.

How I evaluate Ozemra?

Blood Sugar Regulation: 3/5 If you are looking for a natural supplement to help manage your blood sugar levels, Ozemra has some notable ingredients. The combination of chromium picolinate and chromium nicotinate glycinate in Ozemra is impressive, as chromium is known to enhance insulin sensitivity, which can stabilize blood sugar levels. However, I would say it doesn’t fully mimic the comprehensive glucose management effects of Ozempic. It provides a moderate benefit, suitable for mild cases or as a supplementary measure alongside a balanced diet.
Appetite Modulation: 3.5/5 When it comes to suppressing appetite, Ozemra is pretty promising. Ingredients like glucomannan and the dietary fiber from ingredients like cayenne pepper can help fill you up and decrease overall appetite. This mimics one of Ozempic's benefits, making it a decent natural alternative if you're looking to curb those hunger pangs effectively.
Metabolic Enhancement: 3/5 Ozemra includes ingredients like L-Carnitine and a significant amount of caffeine from the Phenterex Caffeine Anhydrous Complex, which can stimulate your metabolism. These ingredients are effective for boosting metabolic rate to some extent, but the effect may not be as significant as Ozempic’s indirect influence on metabolism through glucose management. Therefore, if enhancing metabolism is your main goal, Ozemra provides moderate support.
Energy Optimization: 4/5 If boosting your energy levels is crucial for your weight loss journey, Ozemra could be a beneficial supplement. The high levels of Vitamin B12 and the stimulating effects of caffeine anhydrous contribute significantly to energy optimization, helping increase physical activity and vitality. This aspect of Ozemra is quite effective, making it a good natural alternative to support energy levels, though with a more temporary effect compared to the sustained energy regulation one might see with Ozempic.
Weight Management Support: 3.5/5 When you're looking for a supplement that supports sustainable weight loss, Ozemra seems quite capable. The presence of L-Carnitine helps with fat metabolism, essentially aiding the body in burning fat for energy, and cayenne pepper can enhance fat oxidation. These ingredients, combined with the appetite-suppressing effects, make Ozemra a solid choice for those aiming to manage their weight naturally. However, it may not be as powerful as Ozempic, which has a more direct effect on weight loss through its influence on insulin.

I hope this hasn’t been asked multiple times, though I have searched first:)
I understand that qualified withdrawals from a Roth IRA can take place tax free after I have held the account for more than five years, starting with the first investment made, once I am 59 1/2.
What happens to the investments made during those five years? Does each investment have to be held for five years?
For example, let’s say the account was started four years ago. I’ll be 59 1/2 next year. Today I buy 100 shares of stock X in the Roth IRA. Next year when I am 59 1/2, that investment has doubled. Can I withdraw all of the earnings tax free, even though I have only owned them for one year?
Thanks in advance!

I know I know streak is not important, but it's really helpful to weight suggestions and opinions with the author's success (for example 2 days vs 8 months).
Any chance we can get flairs with the date of last porn / days porn free?

TL;DR My boyfriend and I are moving next month and he is no closer to finding work than when we started 8 weeks ago. We've talked about this many times and I feared this is where we would find ourselves and I don't know where to go from here.
I've been turning this over in my head for weeks and I'm hoping to get some outside perspective.
I (30F) have been with my boyfriend (33M) for three years. We're talking about marriage, we're talking about kids, we're building a life together. About two months ago, I was told I would be transferring to a city about 8 hours away to start a new position. I start in mid-June. This was an expected promotion that my boyfriend and I have discussed at length and he always intended to move with me. Since learning about the transfer, my boyfriend has been making arrangements to leave his job and find work in our new city....or at least he sort of is. He has let his current job know he's leaving, settled on a last day, made plans for a going-away party, etc. However, he is no closer to finding work in our new city. I don't know the specifics of his job search as he gets defensive when I bring it up, but I believe he's applied to about 3 jobs, one of which he's already been rejected from. I helped redesign his resume, I rewrote his cover letter, I connected him with someone in an adjacent field to network with (and to his credit, he went and talked with him). Still he's nowhere closer to finding work.
Now to be fair, his work is somewhat niche and the few places that have very similar positions in our new city are not hiring at the moment. However, he has not put in much effort to branch out beyond the *exact* job he does now. Mind you this is job he's talked about being bored of and ready to move on from for the entire THREE YEARS we've been together. In all of our conversations, I've encouraged him to find what it is he's actually passionate about. He talks about wanting to work outdoors but needing more experience...I point out that we have a lovely national park about 20 minutes from our house that he could volunteer at. He talks about wanting to work with computers but needing training...I suggest he take a free online course just to see if he likes it. He talks about going into teaching...then talks himself right back out of it. When I can no longer say anything new because we have the same conversation about this over and over, I suggest he see a therapist to work out why he can't seem to move in ANY direction. He saw one about three times and said he was nice but not super helpful. I can't help but wonder if once again my boyfriend is waiting for someone to do the work for him, even in therapy.
I don't know what to do at this point. I love this man, he is so kind, so loving, so supportive of me and my career. He makes dinner when I'm going to be home late, he does grocery shopping for us when I'm too busy, he sometimes takes care of the laundry. I just have a little voice at the back of my head saying that even though he goes above and beyond most of the men I've seen in my life, maybe I'm just seeing what an equal partnership actually looks like for once? And that it's actually not so equal if he can't even put in effort to find work. I know the job market sucks for a lot of people, but he doesn't even seem to be trying which is what grates on me. He just sends in his same old resume and same old generic cover letter and then oh well he hasn't heard back from them. And I know job hunting sucks when you're also working full time, but he's managed to watch plenty of sports and play hours of video games after work--maybe just sacrifice one hour a day for an application?
I'm feeling really unmoored here because we've seriously talked about marriage and kids in the next couple of years, and I want both of those things and both of those things with him, sepcifically, but I worry that this kind of pattern spells trouble for him taking on that responsibility. He and I have had this conversation ad nauseum so it's not an issue of communication. What do you think Reddit? How should I move forward with this?