
Via Kansas City Zoo
Porn sites are hiding code in .svg files:
Unpacking the attack took work because much of the JavaScript in the .svg images was heavily obscured using a custom version of “JSFuck,” a technique that uses only a handful of character types to encode JavaScript into a camouflaged wall of text.
Once decoded, the script causes the browser to download a chain of additional obfuscated JavaScript. The final payload, a known malicious script called Trojan.JS.Likejack, induces the browser to like a specified Facebook post as long as a user has their account open.
“This Trojan, also written in Javascript, silently clicks a ‘Like’ button for a Facebook page without the user’s knowledge or consent, in this case the adult posts we found above,” Malwarebytes researcher Pieter Arntz wrote. “The user will have to be logged in on Facebook for this to work, but we know many people keep Facebook open for easy access.”
This isn’t a new trick. We’ve seen Trojaned .svg files before.
My humor blog this week saw the end of Sonic the Hedgehog fan fiction for a while and the start of something I bet you haven't seen from me before! Also, a bunch of nonsense that I'm blaming on the heat wave making me think goofily. Here's the roster:
With that done, or started, let me share the rest of those Marvin's October pictures.
I know I've taken pictures of it before but have you ever really looked at the Vigorous Strength and Healthy Color by this Vibratory Doctor?
A promise made by the Vibratory Doctor. Apparently it's literally a vibrating machine and it only looks like someone's hooked a firehose up to his ding-dong.
And you know, I didn't remember the wooden dinosaur skeletons.
Banner for Walt Disney Animated Pictures's Dinosaur! Remember that? Even if you worked on the movie do you have any memory of it at all? Yeah, I agree, this movie does not exist.
Animatronic player at a dusty old piano way up past where you could reach or even see apart from the dusty mirror perched above it. This is maybe the Marvin's experience distilled.
The figure on the left claims to be a Honkey Tonk Piano and from the weird way the arms attach I'm supposing that it's supposed to rhythmically twitch while music plays.
Lollipop-style weight scale that the sign observes didn't actually get used very long because people might pay a penny to weigh themselves on the street but they didn't want people around them seeing what their weight was.
bunnyhugger bows to ask Frith to intercede on behalf of the museum.
This is the row of mechanical stuff that's one aisle back from Pinball Row. You can see the coin-op carousel in the center background.
The sign saying how you're reentering the grim reality was not over the exit but rather over the start of that row I showed you in the picture above.
More of looking up at Marvin's; there's a banner advertising how they have a The Cardiff Giant.
Oh, and posters for a couple other Disney movies that don't exist, The Tigger Movie and Return to Never-Land. Remember them? No, not even you who worked on them.
Trivia: James Heerbrand, a professor of theology in the German city of Tübingen, accused Pope Gregory XIII of being the Roman Antichrist, and that the Gregorian calendar was designed to trick real Christians into worshipping on the incorrect holy days. He called the pope Gregorius calendarifex, ``Gregory the calendar maker''. Source: The Calendar: The 5000-Year Struggle to Align the Clock with the Heavens --- And What Happened to the Missing Ten Days, David Ewing Duncan.
Currently Reading: Threads of Life: A History of the World Through the Eye of a Needle, Clare Hunter.
The election has opened!
Every OTW member who joined between July 1, 2024, and June 30, 2025, should have a ballot by now. If you didn't get one, please check your spam folder first, then contact us via our contact form. If you are unsure whether your donation was made before the deadline, please contact our Development and Membership Committee by using the contact form on our website and selecting "Is my membership current/Am I eligible to vote?"
The election will run through August 18, 2025, 23:59 UTC; check this time zone converter to find out what time that will be for you.
Going through old links today, I came across this cover from Weki Meki's Ji Suyeon that I'd set aside to listen to back in February and then forgotten about.
The original, sung by Choi Yu Ree for the Disney+ original series Call It Love is available here, if you're interested. Choi Yu Ree's voice seems to be stronger than Suyeon's, but that could be a side-effect of production — even though they're both singing over the same backing track, they're not recorded under identical conditions, so it's still not completely a 1:1 comparison. If you skip ahead to 3:00, I think Suyeon's voice is stronger on the higher notes (come on: did you really expect me not to find a way to defend Suyeon?), but they both sang really well.
A rundown of Robins
Podfic of Only a Robin by Merfilly.
The Rowan, on music