不困世俗窠臼，做自己天地的掌舵人 所谓野生，不是桀骜乖张，是守住自我，把人生选择权握在自己手中。 (评论: 野生姑娘)
豆友17Q67r-4r4评论: 野生姑娘
评价: 还行
via 豆瓣最受欢迎的乐评 (author: 豆友17Q67r-4r4)
豆友17Q67r-4r4评论: 野生姑娘
评价: 还行
via 豆瓣最受欢迎的乐评 (author: 豆友17Q67r-4r4)
Mary isn't emotionally well (评论: Forever Howlong)
有缺评论: Forever Howlong
评价: 推荐
via 豆瓣最受欢迎的乐评 (author: 有缺)
有缺评论: Forever Howlong
评价: 推荐
via 豆瓣最受欢迎的乐评 (author: 有缺)
Sputnik‑star: 专辑封面背后的金属星故事 (评论: Automatic for the People)
都挺好评论: Automatic for the People
评价:
via 豆瓣最受欢迎的乐评 (author: 都挺好)
都挺好评论: Automatic for the People
评价:
via 豆瓣最受欢迎的乐评 (author: 都挺好)
专辑：Ingrid Chavez —《May 19,1992》和Prince完整关系 (评论: May,19,1992)
孙同學评论: May,19,1992
评价: 推荐
via 豆瓣最受欢迎的乐评 (author: 孙同學)
孙同學评论: May,19,1992
评价: 推荐
via 豆瓣最受欢迎的乐评 (author: 孙同學)
This $45 JBL Speaker Is Small Enough for a Bag and Tough Enough for the Beach
via Lifehacker (author: Pradershika Sharma)
via Lifehacker (author: Pradershika Sharma)
Telegraph
This $45 JBL Speaker Is Small Enough for a Bag and Tough Eno…
We may earn a commission from links on this page. Deal pricing and availability subject to change after time of publication. The JBL Go 5 is down to $44.95 from $54.95 on Amazon, and price trackers show that this is its lowest price so far. At roughly four…
GitHub Is Down
If you're trying (and failing) to access GitHub Monday morning, you aren't alone. According to Downdetector, the hosting provider has over 3,000 user reports indicating issues or downtime with the service. Whether you're a developer trying to update your repository, or you're a user trying to access one, GitHub may give you trouble.
If the comments on Downdetector are any indication, this is not the first time GitHub has had service issues. One comment reads: "Cmon [GitHub] get your sh*t together...this is getting old." (The user added their own asterisks.) Scrolling through the comment history, users reported errors one or twice a week throughout August. I'm not a regular GitHub user, so I can't attest personally to repeated downtimes, but it does seem as though this isn't wholly unusual.
As such, even though it isn't clear why GitHub is down right now, chances are good that the company will get the site up and running shortly. Assuming nothing catastrophic is happening behind the scenes, developers and users alike should be able to access the site sometime today. But I will continue to update this piece if GitHub's downtime extends longer than normal.
via Lifehacker (author: Jake Peterson)
If you're trying (and failing) to access GitHub Monday morning, you aren't alone. According to Downdetector, the hosting provider has over 3,000 user reports indicating issues or downtime with the service. Whether you're a developer trying to update your repository, or you're a user trying to access one, GitHub may give you trouble.
If the comments on Downdetector are any indication, this is not the first time GitHub has had service issues. One comment reads: "Cmon [GitHub] get your sh*t together...this is getting old." (The user added their own asterisks.) Scrolling through the comment history, users reported errors one or twice a week throughout August. I'm not a regular GitHub user, so I can't attest personally to repeated downtimes, but it does seem as though this isn't wholly unusual.
As such, even though it isn't clear why GitHub is down right now, chances are good that the company will get the site up and running shortly. Assuming nothing catastrophic is happening behind the scenes, developers and users alike should be able to access the site sometime today. But I will continue to update this piece if GitHub's downtime extends longer than normal.
via Lifehacker (author: Jake Peterson)
This Malware Can Take Over Web Browsers on macOS, but You Can Protect Yourself
In a new ClickFix attack iteration, hackers are pushing an infostealing malware to macOS users that is capable of hijacking your sessions in Google Chrome, Microsoft Edge, and a number of other Chromium-based browsers. AmnesiaStealer grants remote control of your browser and access to plenty of personal data, so you should know how to spot the campaign and protect your device from compromise.
AmnesiaStealer hijacks your web browser on macOS
As BleepingComputer reports, AmnesiaStealer can copy a victim's Chromium profile, which allows it to collect data across 16 Chromium-based web browsers, access authenticated sessions, and control them remotely. This means threat actors can navigate across websites, export or import cookies, and access online portals as well as grab saved logins, history, bookmarks, extensions, and cryptocurrency wallet data. AmnesiaStealer can also capture your macOS password and gain access to keychain data, Apple Notes, Telegram sessions, documents, and system information.
Researchers at security company Jamf found that hackers are distributing the malware via a password-protected ZIP archive on a fake GitHub page and are gaining this level of access when users run a Terminal command that downloads and installs the payload. The campaign mirrors previously identified Atomic and MacSync infostealers.
How to avoid browser takeover attempts
The best way to protect yourself from AmnesiaStealer is to be vigilant against ClickFix attacks, which use social engineering tactics to deliver malware to your device. Common tricks include fake error messages, CAPTCHA forms, and, as in this case, command prompts that install malicious payloads that can then spy on your activity, steal your data, and take over your machine.
Threat actors count on you believing that these commands do something innocuous (like download legitimate software) or not understanding what you're executing on your device. That's why you should be highly skeptical of any prompts you find online and never execute commands in Terminal from non-official sources. Note that the fake GitHub page being used to distribute AmnesiaStealer has a "Verified Publisher" tag to gain user trust. Fraudsters will also try to impersonate legitimate companies—tech support scams are one example—so you should never copy and paste commands in your system dialogue even if you believe you're interacting with a trusted business or service.
via Lifehacker (author: Emily Long)
In a new ClickFix attack iteration, hackers are pushing an infostealing malware to macOS users that is capable of hijacking your sessions in Google Chrome, Microsoft Edge, and a number of other Chromium-based browsers. AmnesiaStealer grants remote control of your browser and access to plenty of personal data, so you should know how to spot the campaign and protect your device from compromise.
AmnesiaStealer hijacks your web browser on macOS
As BleepingComputer reports, AmnesiaStealer can copy a victim's Chromium profile, which allows it to collect data across 16 Chromium-based web browsers, access authenticated sessions, and control them remotely. This means threat actors can navigate across websites, export or import cookies, and access online portals as well as grab saved logins, history, bookmarks, extensions, and cryptocurrency wallet data. AmnesiaStealer can also capture your macOS password and gain access to keychain data, Apple Notes, Telegram sessions, documents, and system information.
Researchers at security company Jamf found that hackers are distributing the malware via a password-protected ZIP archive on a fake GitHub page and are gaining this level of access when users run a Terminal command that downloads and installs the payload. The campaign mirrors previously identified Atomic and MacSync infostealers.
How to avoid browser takeover attempts
The best way to protect yourself from AmnesiaStealer is to be vigilant against ClickFix attacks, which use social engineering tactics to deliver malware to your device. Common tricks include fake error messages, CAPTCHA forms, and, as in this case, command prompts that install malicious payloads that can then spy on your activity, steal your data, and take over your machine.
Threat actors count on you believing that these commands do something innocuous (like download legitimate software) or not understanding what you're executing on your device. That's why you should be highly skeptical of any prompts you find online and never execute commands in Terminal from non-official sources. Note that the fake GitHub page being used to distribute AmnesiaStealer has a "Verified Publisher" tag to gain user trust. Fraudsters will also try to impersonate legitimate companies—tech support scams are one example—so you should never copy and paste commands in your system dialogue even if you believe you're interacting with a trusted business or service.
via Lifehacker (author: Emily Long)