#Road to 100 million | Explore Tumblr Posts and Blogs

reasonsforhope · 2 months

Text

"With “green corridors” that mimic the natural forest, the Colombian city is driving down temperatures — and could become five degrees cooler over the next few decades.

In the face of a rapidly heating planet, the City of Eternal Spring — nicknamed so thanks to its year-round temperate climate — has found a way to keep its cool.

Previously, Medellín had undergone years of rapid urban expansion, which led to a severe urban heat island effect — raising temperatures in the city to significantly higher than in the surrounding suburban and rural areas. Roads and other concrete infrastructure absorb and maintain the sun’s heat for much longer than green infrastructure.

“Medellín grew at the expense of green spaces and vegetation,” says Pilar Vargas, a forest engineer working for City Hall. “We built and built and built. There wasn’t a lot of thought about the impact on the climate. It became obvious that had to change.”

Efforts began in 2016 under Medellín’s then mayor, Federico Gutiérrez (who, after completing one term in 2019, was re-elected at the end of 2023). The city launched a new approach to its urban development — one that focused on people and plants.

The $16.3 million initiative led to the creation of 30 Green Corridors along the city’s roads and waterways, improving or producing more than 70 hectares of green space, which includes 20 kilometers of shaded routes with cycle lanes and pedestrian paths.

These plant and tree-filled spaces — which connect all sorts of green areas such as the curb strips, squares, parks, vertical gardens, sidewalks, and even some of the seven hills that surround the city — produce fresh, cooling air in the face of urban heat. The corridors are also designed to mimic a natural forest with levels of low, medium and high plants, including native and tropical plants, bamboo grasses and palm trees.

Heat-trapping infrastructure like metro stations and bridges has also been greened as part of the project and government buildings have been adorned with green roofs and vertical gardens to beat the heat. The first of those was installed at Medellín’s City Hall, where nearly 100,000 plants and 12 species span the 1,810 square meter surface.

“It’s like urban acupuncture,” says Paula Zapata, advisor for Medellín at C40 Cities, a global network of about 100 of the world’s leading mayors. “The city is making these small interventions that together act to make a big impact.”

At the launch of the project, 120,000 individual plants and 12,500 trees were added to roads and parks across the city. By 2021, the figure had reached 2.5 million plants and 880,000 trees. Each has been carefully chosen to maximize their impact.

“The technical team thought a lot about the species used. They selected endemic ones that have a functional use,” explains Zapata.

The 72 species of plants and trees selected provide food for wildlife, help biodiversity to spread and fight air pollution. A study, for example, identified Mangifera indica as the best among six plant species found in Medellín at absorbing PM2.5 pollution — particulate matter that can cause asthma, bronchitis and heart disease — and surviving in polluted areas due to its “biochemical and biological mechanisms.”

And the urban planting continues to this day.

The groundwork is carried out by 150 citizen-gardeners like Pineda, who come from disadvantaged and minority backgrounds, with the support of 15 specialized forest engineers. Pineda is now the leader of a team of seven other gardeners who attend to corridors all across the city, shifting depending on the current priorities...

“I’m completely in favor of the corridors,” says [Victoria Perez, another citizen-gardener], who grew up in a poor suburb in the city of 2.5 million people. “It really improves the quality of life here.”

Wilmar Jesus, a 48-year-old Afro-Colombian farmer on his first day of the job, is pleased about the project’s possibilities for his own future. “I want to learn more and become better,” he says. “This gives me the opportunity to advance myself.”

The project’s wider impacts are like a breath of fresh air. Medellín’s temperatures fell by 2°C in the first three years of the program, and officials expect a further decrease of 4 to 5C over the next few decades, even taking into account climate change. In turn, City Hall says this will minimize the need for energy-intensive air conditioning...

In addition, the project has had a significant impact on air pollution. Between 2016 and 2019, the level of PM2.5 fell significantly, and in turn the city’s morbidity rate from acute respiratory infections decreased from 159.8 to 95.3 per 1,000 people [Note: That means the city's rate of people getting sick with lung/throat/respiratory infections.]

There’s also been a 34.6 percent rise in cycling in the city, likely due to the new bike paths built for the project, and biodiversity studies show that wildlife is coming back — one sample of five Green Corridors identified 30 different species of butterﬂy.

Other cities are already taking note. Bogotá and Barranquilla have adopted similar plans, among other Colombian cities, and last year São Paulo, Brazil, the largest city in South America, began expanding its corridors after launching them in 2022.

“For sure, Green Corridors could work in many other places,” says Zapata."

-via Reasons to Be Cheerful, March 4, 2024

14K notes · View notes

probablyasocialecologist · 11 months

Text

Tesla has made Autopilot a standard feature in its cars, and more recently, rolled out a more ambitious “Full Self-Driving” (FSD) systems to hundreds of thousands of its vehicles. Now we learn from an analysis of National Highway Traffic Safety Administration (NHTSA) data conducted by The Washington Post that those systems, particularly FSD, are associated with dramatically more crashes than previously thought. Thanks to a 2021 regulation, automakers must disclose data about crashes involving self-driving or driver assistance technology. Since that time, Tesla has racked up at least 736 such crashes, causing 17 fatalities. This technology never should have been allowed on the road, and regulators should be taking a much harder look at driver assistance features in general, requiring manufacturers to prove that they actually improve safety, rather than trusting the word of a duplicitous oligarch. The primary defense of FSD is the tech utopian assumption that whatever its problems, it cannot possibly be worse than human drivers. Tesla has claimed that the FSD crash rate is one-fifth that of human drivers, and Musk has argued that it’s therefore morally obligatory to use it: “At the point of which you believe that adding autonomy reduces injury and death, I think you have a moral obligation to deploy it even though you’re going to get sued and blamed by a lot of people.” Yet if Musk’s own data about the usage of FSD are at all accurate, this cannot possibly be true. Back in April, he claimed that there have been 150 million miles driven with FSD on an investor call, a reasonable figure given that would be just 375 miles for each of the 400,000 cars with the technology. Assuming that all these crashes involved FSD—a plausible guess given that FSD has been dramatically expanded over the last year, and two-thirds of the crashes in the data have happened during that time—that implies a fatal accident rate of 11.3 deaths per 100 million miles traveled. The overall fatal accident rate for auto travel, according to NHTSA, was 1.35 deaths per 100 million miles traveled in 2022. In other words, Tesla’s FSD system is likely on the order of ten times more dangerous at driving than humans.

#elon musk #tesla #self driving cars #autonomous cars

3K notes · View notes

allthebrazilianpolitics · 8 days

Text

Rains, destruction and deaths in the south of Brazil demand a new term to define a climate catastrophe

Hundreds of thousands of people were displaced in Rio Grande do Sul floods

On April 27, MetSul, a meteorology agency, posted on X (former Twitter) a warning about a cold front, heavy rain, gales, and hail, and risks of severe weather in parts of Rio Grande do Sul, Brazil's southernmost state. This is the same state that endured three climate disasters in 2023 alone, with 80 people confirmed dead and many cities hit.

The following day, the agency posted another alert: ”Serious risk of floods in southern Brazil because of excessive to extreme rain. It has already rained 200 mm [8 inches] in some areas and projections indicate much more water coming. 2023 scenes of flooded cities will be repeated.”

Two days later, they began to post about overflowing creeks, rising river levels, and flooding while The National Institute of Meteorology (Inmet) put the entire state under alert, showing a varying scale from yellow to red, the latter being the larger portion. On April 30, the local government confirmed eight dead and 21 people disappeared.

Ever since the publication of this story on May 7, the worst natural disaster in the history of Rio Grande do Sul has registered 100 dead, 128 disappeared, and over 1.4 million people affected. Sums that seem still underreported when one sees the images of entire cities underwater.

Among the 497 cities in the state, 414 were hit so far. And, as you read it, there is a chance people are still waiting on roofs for rescue, trapped in houses and buildings surrounded by water. Others are still looking for victims of landslides; and many are without access to clean water, power, or ways of coming and going from their cities, with bridges missing and roads destroyed. The rain is moving south and is forecasted to return to other cities already impacted.

#brazil #brazilian politics #politics #environmental justice #rio grande do sul floods 2024 #mod nise da silveira #image description in alt

432 notes · View notes

sayruq · 1 month

Text

The cost of damage to critical infrastructure in Gaza is estimated at around $18.5 billion according to a new report released today by the World Bank and the United Nations, with financial support of the European Union. That is equivalent to 97% of the combined GDP of the West Bank and Gaza in 2022.

The report finds that damage to structures affects every sector of the economy. Housing accounts for 72% of the costs. Public service infrastructure such as water, health and education account for 19%, and damages to commercial and industrial buildings account for 9%. For several sectors, the rate of damage appears to be leveling off as few assets remain intact. An estimated 26 million tons of debris and rubble have been left in the wake of the destruction, an amount that is estimated to take years to remove. The report also looks at the impact on the people of Gaza. More than half the population of Gaza is on the brink of famine and the entire population is experiencing acute food insecurity and malnutrition. Over a million people are without homes and 75% of the population is displaced. Catastrophic cumulative impacts on physical and mental health have hit women, children, the elderly, and persons with disabilities the hardest, with the youngest children anticipated to be facing life-long consequences to their development. With 84% of health facilities damaged or destroyed, and a lack of electricity and water to operate remaining facilities, the population has minimal access to health care, medicine, or life-saving treatments. The water and sanitation system has nearly collapsed, delivering less than 5% of its previous output, with people dependent on limited water rations for survival. The education system has collapsed, with 100% of children out of school. The report also points to the impact on power networks as well as solar generated systems and the almost total power blackout since the first week of the conflict. With 92% of primary roads destroyed or damaged and the communications infrastructure seriously impaired, the delivery of basic humanitarian aid to people has become very difficult.

#yemen #jerusalem #tel aviv #current events #palestine #free palestine #gaza #free gaza #news on gaza #palestine news #news update #war news #war on gaza #gaza genocide #genocide #famine #al shifa hospital #unrwa #children of gaza

564 notes · View notes

mansorus · 2 years

Text

#lamborghini urus #Lambo #Lambo truck #urus #art #100 million #racks #road to 100 million #road to a billion

112 notes · View notes

batboyblog · 2 months

Text

Things Biden and the Democrats did, this week #10

March 15-22 2024

The EPA announced new emission standards with the goal of having more than half of new cars and light trucks sold in the US be low/zero emission by 2032. One of the most significant climate regulations in the nation’s history, it'll eliminate 7 billion tons of CO2 emissions over the next 30 years. It's part of President Biden's goal to cut greenhouse gas emissions in half by 2030 on the road to eliminating them totally by 2050.

President Biden canceled nearly 6 Billion dollars in student loan debt. 78,000 borrowers who work in public sector jobs, teachers, nurses, social workers, firefighters etc will have their debt totally forgiven. An additional 380,000 public service workers will be informed that they qualify to have their loans forgiven over the next 2 years. The Biden Administration has now forgiven $143.6 Billion in student loan debt for 4 million Americans since the Supreme Court struck down the original student loan forgiveness plan last year.

Under Pressure from the administration and Democrats in Congress Drugmaker AstraZeneca caps the price of its inhalers at $35. AstraZeneca joins rival Boehringer Ingelheim in capping the price of inhalers at $35, the price the Biden Admin capped the price of insulin for seniors. The move comes as the Federal Trade Commission challenges AstraZeneca’s patents, and Senator Bernie Sanders in his role as Democratic chair of the Senate Health Committee investigates drug pricing.

The Department of Justice sued Apple for being an illegal monopoly in smartphones. The DoJ is joined by 16 state attorneys general. The DoJ accuses Apple of illegally stifling competition with how its apps work and seeking to undermining technologies that compete with its own apps.

The EPA passed a rule banning the final type of asbestos still used in the United States. The banning of chrysotile asbestos (known as white asbestos) marks the first time since 1989 the EPA taken action on asbestos, when it passed a partial ban. 40,000 deaths a year in the US are linked to asbestos

President Biden announced $8.5 billion to help build advanced computer chips in America. Currently America only manufactures 10% of the world's chips and none of the most advanced next generation of chips. The deal with Intel will open 4 factories across 4 states (Arizona, Ohio, New Mexico, and Oregon) and create 30,000 new jobs. The Administration hopes that by 2030 America will make 20% of the world's leading-edge chips.

President Biden signed an Executive Order prioritizing research into women's health. The order will direct $200 million into women's health across the government including comprehensive studies of menopause health by the Department of Defense and new outreach by the Indian Health Service to better meet the needs of American Indian and Alaska Native Women. This comes on top of $100 million secured by First Lady Jill Biden from ARPA-H.

Democratic Senators Bob Casey, Tammy Baldwin, Sherrod Brown, and Jacky Rosen (all up for re-election) along with Elizabeth Warren, Cory Booker, and Sheldon Whitehouse, introduced the "Shrinkflation Prevention Act" The Bill seeks to stop the practice of companies charging the same amount for products that have been subtly shrunk so consumers pay more for less.

The Department of Transportation will invest $45 million in projects that improve Bicyclist and Pedestrian Connectivity and Safety

The EPA will spend $77 Million to put 180 electric school buses onto the streets of New York City This is part of New York's goal to transition its whole school bus fleet to electric by 2035.

The Senate confirmed President Biden's nomination of Nicole Berner to the Court of Appeals for the Fourth Circuit. Berner has served as the general counsel for America's largest union, SEIU, since 2017 and worked in their legal department since 2006. On behalf of SEIU she's worked on cases supporting the Affordable Care Act, DACA, and against the Defense of Marriage act and was part of the Fight for 15. Before working at SEIU she was a staff attorney at Planned Parenthood. Berner's name was listed by the liberal group Demand Justice as someone they'd like to see on the Supreme Court. Berner becomes one of just 5 LGBT federal appeals court judges, 3 appointed by Biden. The Senate also confirmed Edward Kiel and Eumi Lee to be district judges in New Jersey and Northern California respectively, bring the number of federal judges appointed by Biden to 188.

#Thanks Biden #Joe Biden #Democrats #politics #US politics #climate change #climate crisis #student loans #debt forgiveness #shrinkflation #women's health #drug prices

452 notes · View notes

yelenasdiary · 3 months

Note

I saw your request were open and I’ve been dying to send you this request. I was wondering if you could do a top F reader x bottom Wanda. Reader is an eternal and their also deaf. They first met Wanda after the wandavision events. They have a one night stand and Wanda finds one she’s pregnant (reader has a penis} so now they’re trying to navigate the pregnancy and their relationship. They agree to do parent but as time goes on they start to fall in love! Please add a bunch of smut and fluff! Maybe some angst please

Take Me Home

Pairing: Wanda Maximoff x Eternal, Fem! & Deaf! Reader

Summary: A one night stand changes everything for the better.

Angst, Fluff & Brief Mention of Smut. 18+ ONLY, Minors & Men DNI!

Warnings: Mentions of Drinking, Reader has a penis, Unprotected Sex, Oral (Wanda Receiving), Pregnancy, Pregnancy Talk, Mentions of Abortion | 2.5K

AC: Please know that I am not Deaf. So I write this purely on research, if I have said anything wrong or offensive, please kindly message me so I can fix it. I mean absolutely no harm. Reader communicates via sign language, so all conversations are in italics, this means they are signing and not verbally speaking. Thank you for sending this, although I didn’t include a full smut scene I still hope you enjoy this! x

Cupid's Dream Masterlist

Two pink lines stared back at her while her heart skipped a beat. She knew it was true before she even took the test, tears filled her eyes as she remembered the events that took place in Westview. Now in hiding, the ex-Avenger only had herself to fall back on. It was the one time she decided to grab a hot meal at the local bar near her remote mountainside cabin in the woods of Sokovia when she met you.

You were having a few drinks by yourself when the woman sat only inches beside you at the bar. She was troubled, her sad presence screamed to you as you turned to her slightly and gave her a soft welcoming smile. She smiled back, even though she could barely bring herself to form the returning smile.

“Rough Day?” you asked in sign language. She nodded, “rough couple of months” she signed back.

“Here, let me.” You smiled once more before placing a $10 bill on the bar to pay for her drink, “it seems you need something good right now” you signed.

“Thank you” the woman smiled softly before taking a sip of her wine.

She intrigued you to say the least, you’d never seen her around here before and assumed she was new to the small town, if you’d even call it that. The small street of buildings was only built for loggers that worked high in the mountains; it had the essentials. A small general store for basic needs, a mechanic and hardware store, a bakery, a doctor’s office and of course the bar which also acted as a restaurant. A small population of 100 people lived around here, well, 101 now that you’d made a cabin home for the past three months.

You tried to go back to doing your own thing, having a drink, and completing the crossword puzzle in the newspaper but the woman’s running mind distracted your focus. You turned to face her only to notice she was already looking at you. Her eyes spoke a million words and suddenly you knew she wasn’t like anybody else in the bar.

“Do you want to go for a walk?” you asked. She was hesitant at first, taking another sip of her drink so she didn’t waste your money, but she nodded.

“Are you here for me?” Wanda asked while the two of you walked slowly down the single road street covered in snow. “No. I am just a stranger you met in a bar” you replied with a soft smile in hopes it would ease her worries. It didn’t take Wanda very long to work out that you weren’t like everybody else in this town, there was a different kind of communication between the two of you. She could hear your thoughts just as much as you could hear hers. Although you knew very little of the woman, you knew enough to know she was in pain.

----

Wanda’s mind replayed that night after you’d walked her home. How her nails dug deeply into your back as your lips were interlocked with hers and the way you reach for the bedsheets as your tongue overstimulated her clit but more importantly, she remembered the way you made her feel and how she’d never felt the things you made her feel, how you were able to make her forget even just for that night how much she was truly hurting.

Those thoughts brought her back to the two pink lines staring back at her. “Fuck” she mumbled quietly to herself as she placed the pregnancy test on the bathroom counter. It would be a lie to say she wasn’t having a moment while washing her hands that her twin boys that she missed deeply and how badly she wished to hold them just once more.

Wanda rang your doorbell, a blue light flickered throughout your small cabin to alert you somebody was at the door. Wanda was the last person you expected to be standing on the other side, even if you sensed it was her before you even turned the knob.

“Wanda how are you?” you asked, greeting her with a soft smile. She didn’t return the smile; her eyes were slightly puffy and red. “Is everything okay?” you asked.

“Can I come in? we need to talk” she replied. You nodded, moving to the side to allow her to walk into your home. “I’m really sorry to come here out of the blue” she turned to you as you closed the door behind her.

“Don’t stress, it’s okay. Not sure how you found my address but it’s okay” you chuckled in hopes it would lighten the mood, but it didn’t.

“I’m pregnant” she said, getting to the point. The news shocked you a little but explained why you felt she didn’t arrive alone. “I don’t expect you to do anything or even want to be a part of this. I just thought you had a right to know” Wanda added.

“It takes two to tangle, are you okay?” you replied trying to process the news. Wanda’s eyes filled with tears as she shrugged, “I d-don’t know, I made some mistakes that lead me to the reason why I even moved here” she explained, wiping the falling tears from her cheeks. You knew what she was talking about, you were an Eternal, of course you knew but you weren’t allowed to do anything about the events of Westview, and you didn’t ask too many questions about the situation.

“I don’t want you to worry about anything, I am here for you and the baby. Whatever you decide to do, I am here. If you want to keep it, we will work it out. If you want to have an abortion, I will be there to hold your hand” you smiled ever so softly before you reached to get her a tissue. Wanda looked you in the eyes, allowing you to hear all her worries and concerns.

You reached for her hand, “you’re not alone. We are in this together” you assured her. “We barely know each other. I do not expect you to step up like this” Wanda replied.

“Let’s start with meeting up for coffee, well, decaf coffee. How does that sound? We can get to know each other more and talk about what is on your mind and if you want to go through with this or not” you offered.

Wanda nodded as a light smile tugged at her lips, “I would like that, thank you”.

----

As the weeks went on, you and Wanda met for coffee three times a week. Most of the conversations were about getting to know one another and sometimes Wanda would bring up a worry or concern she had. You never asked her if she had made a decision on whether she would be keeping the baby or not, you felt that was something she would tell you when she was ready.

Of course, one of Wanda’s most worrying concern was the baby’s health and what it meant for the baby to be born with the shared genes of a Witch and an Eternal. Both with so much power and abilities, it was something that Wanda couldn’t shake. This led to you telling her everything you knew about your abilities and powers.

“This baby is going to be more than a handful of surprises” Wanda smiled softly making your eyes widen with excitement.

“Does this mean you’ve made a decision?” you asked. Wanda nodded, “I want to have this baby. I want to do this with you and its okay if you don’t want to do this” she replied. You stood up from your seat and embraced Wanda in a hug, “I want to do this with you as well” you smiled as you both pulled away.

“I guess this means we have a lot more to talk about” Wanda smiled.

----

You didn’t want to miss a single moment during Wanda’s pregnancy, it was a conversation that you brought to the table before Wanda asked if you’d like to come spend a couple nights a week at her place. You loved cooking for her every night and making her breakfast in bed when her morning sickness went away. After so many years of seeming almost everything, you never thought you’d find something so special again.

Life was growing in front of your eyes, you finally had something to be excited about once again. A new chapter was opening up for you, a new life, a life you never thought you’d be able to have so the thought never crossed your mind and Wanda could see just how happy you were. She saw the smile on your face whenever she caught you admiring the ultra-sound photo, she saw the sparkle in your eyes whenever the two of you had a conversation about the baby.

But for Wanda, it wasn’t the same. Although she was happy about having a baby, she couldn’t keep herself from thinking of her boys and how she wondered what they would think of a baby sibling. She wondered how they would react, she wondered if they would wish for a baby brother or sister, she wondered if they had their own name ideas to add to the list you and Wanda had slowly began to dot down.

“What were they like? Your boys” you asked Wanda one night while she was lost in thought. She looked at you and smiled softly at the thought of talking about her twins. “They were perfect. Tommy is my little prankster” she starts with a chuckle, “he was always getting himself in all sorts of mischief. Billy, he was the opposite. He loved video games and training our dog Sparky. Both boys loved their ice cream and movie night” the smile on her lips only grew wider as she talked more about the beloved twins.

“They sound like a lot of fun; you must miss them” you placed a hand on top of Wanda’s for comfort.

“I do, a lot” A tear rolled down her cheek. You could tell she needed a shift of conversation and offered to make her a banana split milkshake to fill her cravings.

----

At six months, you and Wanda had grown closer. You were both wanting this co-parenting plan to work and began to look around for a home to move into together. The two of you would decorate the nursey together, Wanda using her powers to move the furniture around to save the hassle of you both burning yourselves out doing it. You went to every doctor’s appointment with Wanda and kept every ultra-sound photo they offered. Wanda loved seeing how excited and happy you were and as time went on, she found herself becoming more comfortable with the fact the twins weren’t here to share this new chapter with her.

“How did you book this place?” Wanda asked after the waiter seated you both. It was Wanda’s birthday and you wanted to do something special for her, so you booked reservations at a restaurant she’d been talking about a lot recently.

“I know the owner, they kind of owe me a favour” you replied before picking up the menu. Things had slightly been a little different between you both, usually you could hear each other’s thoughts and feelings but recently you had trouble connecting with Wanda that way. You thought maybe it was something to do with the pregnancy and maybe she just wanted that extra bit of privacy, so you tried not to think about it as much, but it was hard when you found yourself falling for her.

“This is certainly a surprise, thank you” Wanda smiled. You returned the smile but quickly used the menu to hide the blushing of your cheeks. This was a new feeling that you had no control over.

“Has something happened? Between us?” Wanda asked shortly after finishing her main meal, you shook your head before taking a mouthful of your drink. “Not at all, have I done something to make you think that?” you asked.

“You just seem a little distant lately, that’s all” Wanda replied.

“I’m sorry. I just thought that with only a few months left until the baby arrives that you might want some more alone time” you explained, not entirely a lie but a good enough excuse to stop her from thinking it was something more.

“You know, we have spoken a lot about myself over the last few months but you don’t like to share much. I am here for you like you are for me and if you want to talk about anything, you can talk to me. We’re in this together, remember?” Wanda said looking deeply into your eyes. You took another mouthful of your drink and deep breath before replying.

“I used to have a family and friends, but some went back to planet Olympia, some stayed on Earth and are trying to live a normal life, but I never felt like I fitted in anywhere. Not here and not in Olympia. I have been on my own for many years and I was getting tired of living this repetitive life. But when you said you wanted to keep the baby, everything changed for me. You have given me something new and exciting, a new life and I don’t want to ruin it because of something I can’t control” you explained.

“Why would you think you would ruin this? I would never stop you from being in our baby’s life if things didn’t work out with our plan” Wanda assured you.

“Feelings weren’t apart of the plan” you replied.

Wanda froze for a moment before she stood from her seat, you did the same thinking she was leaving but instead she walked up to you and gently cupped your face and kissing you deeply. You kissed her back, your hands resting gently on her lips, ever so slightly pulling her closer to you as you deepened the kiss.

“Take me home” Wanda smiled softly as you both pulled away for air.

----

You woke up to find Wanda’s side of the bed empty, there was only one place she would be. You walked down the hall and there she was, cradling your baby girl back to sleep. The sight in front of you made you smile softly before you walked up behind Wanda, wrapping your arms around her and placing a kiss on her cheek. Wanda smiled softly, never taking her eyes off the little girl in her arms.

Your body moved with Wanda’s until the little girl’s eyes came to a close and Wanda carefully placed her back in her crib. She turned in your arms to face you, kissing you softly.

“I know it was your turn to tend to her, but I couldn’t help myself. She’s perfect” Wanda smiled. “Next time, wake me. I don’t want to miss a single thing” you replied before kissing her once more.

If you want to be on the taglist for my work, please click HERE.

#yelenasdiary asks #anon #fanfiction #wanda maximoff #wanda maximoff x reader #happy valentines #marvel

593 notes · View notes

scuopsie · 2 years

Text

This dude just took catcalling to another level🙂

#Went to the supermarket near my grandma’s house and on my way back this dude sitting across the street called #it went kinda like ‘would u like a nice bf? id do anything for u to give me ur number right now’#i didnt even look his way and continued walking #so imagine a cross road. he’s sitting or standing on the other side of the cross and im this side abt to turn into the alley #so be can still see my walk to my grandma’s house #the only reaction i give him is a middle finger as i fully turn my back (yea probably shouldn’t have done that i know)#so then he’s like… there’s no way to translate what he said but the closest equivalent would be ‘dayummm’ i guess #so he’s like ‘dayyummm id give u any amnt of money for u to give me ur number. a million? 2 million? 5 million…’#he went up too 100.#mind u his networth is probably nowhere near 50 #the best part was probably the junkie sitting somewhere in the middle watching it all kdmfkdkdks #yeah its a questionable neighborhood and im so happy i dont live here #this was just bizarre #dude trynna buy me #like????? really??? is that what u think girls want??#also i was masking and wearing baggy clothes #U JUST SEE A FEMALE SPECIES AND GO WILD????#story time with niki

0 notes

hxltic · 5 months

Note

Hello,can i request domestic Ghost x reader, marriage headcannons?

Sure!

Ghost has been trained to eat to keep himself alive. You finally get him comfortable with eating whenever he wants to, and come to find out, he really likes little foods. He shakes his palm filled with sunflower seeds back and forth, or maybe almonds, or fruit snacks

Building on this, he drives on road trips. Every time. He’s better with sleeping now but he’s always had trouble laying his head to rest, so he chooses to take advantage of it by driving all day and night

Ghost’s hearing isn’t 100%. All the warfare he was around before he retired has ruined that. It’s not bad by any means, it’s still around like 85%, but this just means all his other senses have multiplied. He can feel you walking into a room and reads lips extremely well, though sometimes when his back is turned you may have to repeat yourself

Ghost hasn’t taken off his ring since the day you two got married. There’s something so personal about it, the cool metal around his skin, that makes taking it off impossible. It’s like he carries around your love for him everywhere he goes. It’s reassurance someone really does love him for all that he is

You can try to slow dance in the kitchen to old music he loves, but he can’t dance. Not at all.

“You alright?” That’s it. That’s the headcannon.

He could cook, but he was really rusty. He had to learn when he was younger to take care of himself and his family, especially his mother, but the military didn’t call for it and now he has to relearn it again. It didn’t take long though—soon he was whipping it up

(If you were to have kids) He knows everything about them. Fuck all that shit about the dads not knowing their children’s teachers and things. He knows how one of his daughters likes her hair, which toy is her favorite, her favorite restaurant, favorite color. Everything. At the doctors, of course he knows their individual birthdays to the minute, eye color because they’re chocolate brown like his, and where their birthmarks are.

He’s a girl dad, in case I hadn’t made it clear.

He has the ability to tell identical twins apart. And he’s never wrong.

He gets really bad heartburn.

He doesn’t own many clothes. His closet is small, compared to yours, carrying just a few trusty shirts, shoes, and jeans he has on rotation for laundry. This ultimately changes later in the marriage as you find yourself shopping for him, and his style has changed a wee bit.

He doesn’t like Italian food.

Despite how everyone thinks he’s a morning guy, he isn’t. He only got up in mornings because he was told to. His best work is at night since it works with his inability to sleep well, so he does computer stuff and paperwork then. Sometimes he’ll be in the kitchen eating when you get up for water.

Ghost loves when you put on your wedding dress. You feel the same about the matching tuxedo he wore, but he owns a few of those, so he doesn’t think it’s the same. He paid for the dress, one in a million and hand-sewn, but you’re far more beautiful than any clothing

He likes to clean. The smell of bleach is oddly comforting to him

©️ hxltic

522 notes · View notes

boxturret · 1 month

Text

One Tenth Scale Mata Nui

Mata Nui is a cool place, but did you ever feel that it was a bit...big for what it was?

The official maps put the island at 357 kio long, which if you take to be a stand in for kilometres¹, would make the island 357 kilometres long.

This lines up roughly with what we can see in the concept art: they say that Mata Nui is around the size of Denmark, the real measurement being 368km, and it matches with what we see in the Mata Nui Rising cgi video.

So that's all well and good, Mata Nui is 357km long, the GSR itself is 3300km tall, all hunky-dory, as long as you ignore some guy named Greggory yelling about how the robot is actually much bigger, but its fine to ignore him.

But now, actually consider what this means. Denmark is by no means a small country, it has a population of 6 million and would take hours to drive across by car on modern roads. Now that isn't an issue really, but in most media depicting the island its shown to be a place that can be traversed by foot or on animal back in a reasonable time frame.

But now let us look at this earlier map:

Initially the most interesting thing to me on this map was the 3rd measurement: the height of the Mangai volcano²

Now on the one hand, this was cool, now I know how tall to make the volcano, on the other hand... 23km seems pretty big.

It is. 23km is higher than Olympus Mons, the largest known volcano in the solar system, standing at only 21.9km. So that's pretty big. This made me start thinking about how far various things are apart and how long it would actually take and using some very VERY generous numbers I started plotting out how long it would take to actually get from place to place.

It wasn't very pretty. In the Mata Nui Online Game it would have taken Takua roughly 5 hours to walk from the beach to Ta-Koro, and another 18 to get to Onu-Koro using the highway. Now this would be fine in an epic like Lord of the Rings, but in Bionicle Mata Nui is consistently treated as a place people can pretty quickly get around on.

The Toa are running all over the place and bumping in to each other. Kopaka getting in to the Caldera at the top of the Mangai volcano isn't the equivalent of climbing 3 Mt Everests in a row, its just something he does [correction: It wasn't the caldera, but a lava pool half way up the mountain, so just 1.5 Mt Everests]. Takua travels all over the island in a pretty small amount of time, unless we're supposed to insert day long journeys in between every screen transition.

But then I noticed something. Something very interesting.

Now lets look at the two keys for the sizes on the released and the early map:

Seems pretty consistent, the sizes of the island are the same, a Toa is 1.6 bio on both (incidentally a real Toa figure is approximately 16cm tall), everything seems to match.

But then I counted the zeroes.

The old map has a kio being not 1000 bio, but 100!

You can even see it on the other version of the map.

Now this is incredibly interesting! This shrinks Mata Nui to 1/10th of its commonly accepted size! It goes from being the size of Denmark to being the size of the Isle of Man.

Which....really works a lot better! This turns Takua's trip from the beach from a 5 hour hike to a short half hour walk. This turns the cable car to Mt Ihu from a massive 70km mega structure to something that's dwarfed by real world constructions.

I don't think this is a mistake either, looking at the details of the map.

You have much finer details, such as these ice shelves collapsing in to small icebergs, whereas on the full sized map some of the larger chunks of ice are kilometres across.

One of the major things it includes are the mesas that can bee seen in many of the promotional renders set in Le-Wahi which are nowhere to be seen on the final map. At this 1/10 scale the plateaus seen would match up well with the massive mesas seen in monument valley in terms of size, but with the final size they would be absolutely massive (10 times as big if you can believe it!)

So suffice to say, I don't think this is just a case of a zero being dropped, it really seems to line up with the level of detail on this earlier map.

But what does this do to the GSR? I hear you cry, well it varies. Going by the earlier numbers it would simply be 1/10th the size, so 330km tall instead of 3300km, so still very large, but depending on the size relationship between the robot and the island it could be as "small" as 180km

The island in this picture is roughly the same size as normal, just covers more of the GSR. The final GSR's head is so proportionately tiny compared to its body that the Mata Nui island had to be very small to cover it. But in any case, a robot "only" 180km tall standing up is still going to tower over anything, its many times higher than airplanes fly, its taller than most clouds, really it would be quite consistent with this render:

So, in conclusion, an earlier concept of the island of Mata Nui has it being 1/10 of the size of the final, and that size seems to work better with what we see in various media from the time, and works better with the story.

Personally this is what I'll be going with in terms of the scale of the island going forward, as it really fits with my vision of the setting and works well with all the story and media from that time.

¹-I don't care about someone saying a bio is 4.375966487787¾ feet, feet aren't real and neither are you. ²-Mt Ihu is NOT the highest point on the island, the GSR isn't Pinocchio with a big pointy nose, this has never been reflected in any visual media.

thank you for reading/have a nice day

Update: I have made a companion post with many renders of George visiting places on the island to hopefully better illustrate the scale.

#bionicle #hypothesis #writeup #Mata Nui #GSR

357 notes · View notes

reasonsforhope · 20 days

Text

"In cities across the country, people of color, many of them low income, live in neighborhoods criss-crossed by major thoroughfares and highways.

The housing there is often cheaper — it’s not considered particularly desirable to wake up amid traffic fumes and fall asleep to the rumble of vehicles over asphalt.

But the price of living there is steep: Exhaust from all those cars and trucks leads to higher rates of childhood asthma, cancer, cardiovascular disease, and pulmonary ailments. Many people die younger than they otherwise would have, and the medical costs and time lost to illness contributes to their poverty.

Imagine if none of those cars and trucks emitted any fumes at all, running instead on an electric charge. That would make a staggering difference in the trajectory, quality, and length of millions of lives, particularly those of young people growing up near freeways and other sources of air pollution, according to a study from the American Lung Association.

The study, released [February 28, 2024], found that a widespread transition to EVs could avoid nearly 3 million asthma attacks and hundreds of infant deaths, in addition to millions of lower and upper respiratory ailments...

Prior research by the American Lung Association found that 120 million people in the U.S. breathe unhealthy air daily, and 72 million live near a major trucking route — though, Barret added, there’s no safe threshold for air pollution. It affects everyone.

Bipartisan efforts to strengthen clean air standards have already made a difference across the country. In California, which, under the Clean Air Act, can set state rules stronger than national standards, 100 percent of new cars sold there must be zero emission by 2035.

[Note: The article doesn't explain this, but that is actually a much bigger deal than just California. Basically, due to historically extra terrible pollution, California is the only state that's allowed to allowed to set stronger emissions rules than the US government sets. However, one of the rules in the Clean Air Act is that any other state can choose to follow California's standards instead of the US government's. And California by itself is the world's fifth largest economy - ahead of all but four countries. California has a lot of buying power. So, between those two things, when California sets stricter standards for cars, the effects ripple outward massively, far beyond the state's borders.]

Truck manufacturers are, according to the state’s Air Resources Board, already exceeding anticipated zero-emissions truck sales, putting them two years ahead of schedule...

Other states have begun to take action, too, often reaching across partisan lines to do so. Maryland, Colorado, New Mexico, and Rhode Island adopted zero-emissions standards as of the end of 2023.

The Biden administration is taking similar steps, though it has slowed its progress after automakers and United Auto Workers pressured the administration to relax some of its more stringent EV transition requirements.

While Barret finds efforts to support the electrification of passenger vehicles exciting, he said the greatest culprits are diesel trucks. “These are 5 to 10 percent of the vehicles on the road, but they’re generating the majority of smog-forming emissions of ozone and nitrogen,” Barret said...

Lately, there’s been significant progress on truck decarbonization. The Biden administration has made promises to ensure that 30 percent of all big rigs sold are electric by 2030...

Such measures, combined with an increase in public EV charging stations, vehicle tax credits, and other incentives, could change American highways, not to mention health, for good."

-via GoodGoodGood, February 28, 2024

#asthma #asthma attack #medical news #pollution #air pollution #ev #evs #environmental racism #good news #hope #auto industry #auto news #public health #medicine

212 notes · View notes

kiwichaeng · 2 years

Text

Pakistan is drowning, and we need help

Since July of this year, Pakistan has been affected by heavy nonstop monsoons and is yet to stop. It is only getting worse. Rural areas in Balochistan, Sindh, KPK, Punjab and Gilgit Baltistan are the most affected.

As of September 4th, over 1300 people have died and over 500,000 homes have been destroyed along with livestock deaths and ruined infrastructure. The floods have left more than 33 million people affected.

Most of Balochistan is still submerged. Locals are forced to flee and cannot account for their missing relatives until much later. More than 100 districts all across the provinces have been impacted.

Quetta, a major city of Balochistan, has been cut off from the rest of the country as the roads and highways are destroyed.

We get monsoons every year and we are used to them but this is not normal. We are in our 8th monsoon cycle when we usually get 3-4 cycles.

Two of the worst-hit provinces – Balochistan and Sindh – have received 298mm and 689mm rains respectively this year, which is about 400 percent more than the 30-year average. (c)

Along with the floods, there are also landslides and glacier bursts that have claimed lives and made the situation worse.

People from other cities were unable to get in contact with their affected relatives because they did not have electricity. The cloud cover meant no solar power either.

There are more monsoon predictions till September. I don't know how we're going to come back from this.

This is worse than the 2010 floods and the government doesn't give a shit.

This is going to have disastrous impacts on our economy and society but what does it matter? after all, the people are only there to vote, right? :)

It is the volunteers and NGOs helping, it is the public. There was no help when Karachi flooded and people died and they don't care now either.

Here are some links for donations if you can.

Al-Khidmat ways to donate (for international)

Al-Huda

Edhi Foundation

Some GoFundMes

....

Sites to educate yourself more on this

Climate change is very real and I am terrified right now.

tagging some people for signal boost @khaleesiofalicante @binch-i-might-be @gayforcarstairsgirls @all-the-cool-ones-are-gone @elettralightwood @rinadragomir @magnus-the-maqnificent @sociallyineptbibliophile @dumb-ass-biatch @noah-herondale-lightwood @steven--with-a-v

#evie's random shit #pakistan #floods #pakistan floods 2022

3K notes · View notes

max-levchin · 10 months

Text

Shamir Secret Sharing

It’s 3am. Paul, the head of PayPal database administration carefully enters his elaborate passphrase at a keyboard in a darkened cubicle of 1840 Embarcadero Road in East Palo Alto, for the fifth time. He hits Return. The green-on-black console window instantly displays one line of text: “Sorry, one or more wrong passphrases. Can’t reconstruct the key. Goodbye.”

There is nerd pandemonium all around us. James, our recently promoted VP of Engineering, just climbed the desk at a nearby cubicle, screaming: “Guys, if we can’t get this key the right way, we gotta start brute-forcing it ASAP!” It’s gallows humor – he knows very well that brute-forcing such a key will take millions of years, and it’s already 6am on the East Coast – the first of many “Why is PayPal down today?” articles is undoubtedly going to hit CNET shortly. Our single-story cubicle-maze office is buzzing with nervous activity of PayPalians who know they can’t help but want to do something anyway. I poke my head up above the cubicle wall to catch a glimpse of someone trying to stay inside a giant otherwise empty recycling bin on wheels while a couple of Senior Software Engineers are attempting to accelerate the bin up to dangerous speeds in the front lobby. I lower my head and try to stay focused. “Let’s try it again, this time with three different people” is the best idea I can come up with, even though I am quite sure it will not work.

It doesn’t.

The key in question decrypts PayPal’s master payment credential table – also known as the giant store of credit card and bank account numbers. Without access to payment credentials, PayPal doesn’t really have a business per se, seeing how we are supposed to facilitate payments, and that’s really hard to do if we no longer have access to the 100+ million credit card numbers our users added over the last year of insane growth.

This is the story of a catastrophic software bug I briefly introduced into the PayPal codebase that almost cost us the company (or so it seemed, in the moment.) I’ve told this story a handful of times, always swearing the listeners to secrecy, and surprisingly it does not appear to have ever been written down before. 20+ years since the incident, it now appears instructive and a little funny, rather than merely extremely embarrassing.

Before we get back to that fateful night, we have to go back another decade. In the summer of 1991, my family and I moved to Chicago from Kyiv, Ukraine. While we had just a few hundred dollars between the five of us, we did have one secret advantage: science fiction fans.

My dad was a highly active member of Zoryaniy Shlyah – Kyiv’s possibly first (and possibly only, at the time) sci-fi fan club – the name means “Star Trek” in Ukrainian, unsurprisingly. He translated some Stansilaw Lem (of Solaris and Futurological Congress fame) from Polish to Russian in the early 80s and was generally considered a coryphaeus at ZSh.

While USSR was more or less informationally isolated behind the digital Iron Curtain until the late ‘80s, by 1990 or so, things like FidoNet wriggled their way into the Soviet computing world, and some members of ZSh were now exchanging electronic mail with sci-fi fans of the free world.

The vaguely exotic news of two Soviet refugee sci-fi fans arriving in Chicago was transmitted to the local fandom before we had even boarded the PanAm flight that took us across the Atlantic [1]. My dad (and I, by extension) was soon adopted by some kind Chicago science fiction geeks, a few of whom became close friends over the years, though that’s a story for another time.

A year or so after the move to Chicago, our new sci-fi friends invited my dad to a birthday party for a rising star of the local fandom, one Bruce Schneier. We certainly did not know Bruce or really anyone at the party, but it promised good food, friendly people, and probably filk. My role was to translate, as my dad spoke limited English at the time.

I had fallen desperately in love with secret codes and cryptography about a year before we left Ukraine. Walking into Bruce’s library during the house tour (this was a couple years before Applied Cryptography was published and he must have been deep in research) felt like walking into Narnia.

I promptly abandoned my dad to fend for himself as far as small talk and canapés were concerned, and proceeded to make a complete ass out of myself by brazenly asking the host for a few sheets of paper and a pencil. Having been obliged, I pulled a half dozen cryptography books from the shelves and went to work trying to copy down some answers to a few long-held questions on the library floor. After about two hours of scribbling alone like a man possessed, I ran out of paper and decided to temporarily rejoin the party.

On the living room table, Bruce had stacks of copies of his fanzine Ramblings. Thinking I could use the blank sides of the pages to take more notes, I grabbed a printout and was about to quietly return to copying the original S-box values for DES when my dad spotted me from across the room and demanded I help him socialize. The party wrapped soon, and our friends drove us home.

The printout I grabbed was not a Ramblings issue. It was a short essay by Bruce titled Sharing Secrets Among Friends, essentially a humorous explanation of Shamir Secret Sharing.

Say you want to make sure that something really really important and secret (a nuclear weapon launch code, a database encryption key, etc) cannot be known or used by a single (friendly) actor, but becomes available, if at least n people from a group of m choose to do it. Think two on-duty officers (from a cadre of say 5) turning keys together to get ready for a nuke launch.

The idea (proposed by Adi Shamir – the S of RSA! – in 1979) is as simple as it is beautiful.

Let’s call the secret we are trying to split among m people K.

First, create a totally random polynomial that looks like: y(x) = C0 * x^(n-1) + C1 * x^(n-2) + C2 * x^(n-3) ….+ K. “Create” here just means generate random coefficients C. Now, for every person in your trusted group of m, evaluate the polynomial for some randomly chosen Xm and hand them their corresponding (Xm,Ym) each.

If we have n of these points together, we can use Lagrange interpolating polynomial to reconstruct the coefficients – and evaluate the original polynomial at x=0, which conveniently gives us y(0) = K, the secret. Beautiful. I still had the printout with me, years later, in Palo Alto.

It should come as no surprise that during my time as CTO PayPal engineering had an absolute obsession with security. No firewall was one too many, no multi-factor authentication scheme too onerous, etc. Anything that was worth anything at all was encrypted at rest.

To decrypt, a service would get the needed data from its database table, transmit it to a special service named cryptoserv (an original SUN hardware running Solaris sitting on its own, especially tightly locked-down network) and a special service running only there would perform the decryption and send back the result.

Decryption request rate was monitored externally and on cryptoserv, and if there were too many requests, the whole thing was to shut down and purge any sensitive data and keys from its memory until manually restarted.

It was this manual restart that gnawed at me. At launch, a bunch of configuration files containing various critical decryption keys were read (decrypted by another key derived from one manually-entered passphrase) and loaded into the memory to perform future cryptographic services.

Four or five of us on the engineering team knew the passphrase and could restart cryptoserv if it crashed or simply had to have an upgrade. What if someone performed a little old-fashioned rubber-hose cryptanalysis and literally beat the passphrase out of one of us? The attacker could theoretically get access to these all-important master keys. Then stealing the encrypted-at-rest database of all our users’ secrets could prove useful – they could decrypt them in the comfort of their underground supervillain lair.

I needed to eliminate this threat.

Shamir Secret Sharing was the obvious choice – beautiful, simple, perfect (you can in fact prove that if done right, it offers perfect secrecy.) I decided on a 3-of-8 scheme and implemented it in pure POSIX C for portability over a few days, and tested it for several weeks on my Linux desktop with other engineers.

Step 1: generate the polynomial coefficients for 8 shard-holders.

Step 2: compute the key shards (x0, y0) through (x7, y7)

Step 3: get each shard-holder to enter a long, secure passphrase to encrypt the shard

Step 4: write out the 8 shard files, encrypted with their respective passphrases.

And to reconstruct:

Step 1: pick any 3 shard files.

Step 2: ask each of the respective owners to enter their passphrases.

Step 3: decrypt the shard files.

Step 4: reconstruct the polynomial, evaluate it for x=0 to get the key.

Step 5: launch cryptoserv with the key.

One design detail here is that each shard file also stored a message authentication code (a keyed hash) of its passphrase to make sure we could identify when someone mistyped their passphrase. These tests ran hundreds and hundreds of times, on both Linux and Solaris, to make sure I did not screw up some big/little-endianness issue, etc. It all worked perfectly.

A month or so later, the night of the key splitting party was upon us. We were finally going to close out the last vulnerability and be secure. Feeling as if I was about to turn my fellow shard-holders into cymeks, I gathered them around my desktop as PayPal’s front page began sporting the “We are down for maintenance and will be back soon” message around midnight.

The night before, I solemnly generated the new master key and securely copied it to cryptoserv. Now, while “Push It” by Salt-n-Pepa blared from someone’s desktop speakers, the automated deployment script copied shard files to their destination.

While each of us took turns carefully entering our elaborate passphrases at a specially selected keyboard, Paul shut down the main database and decrypted the payment credentials table, then ran the script to re-encrypt with the new key. Some minutes later, the database was running smoothly again, with the newly encrypted table, without incident.

All that was left was to restore the master key from its shards and launch the new, even more secure cryptographic service.

The three of us entered our passphrases… to be met with the error message I haven’t seen in weeks: “Sorry, one or more wrong passphrases. Can’t reconstruct the key. Goodbye.” Surely one of us screwed up typing, no big deal, we’ll do it again. No dice. No dice – again and again, even after we tried numerous combinations of the three people necessary to decrypt.

Minutes passed, confusion grew, tension rose rapidly.

There was nothing to do, except to hit rewind – to grab the master key from the file still sitting on cryptoserv, split it again, generate new shards, choose passphrases, and get it done. Not a great feeling to have your first launch go wrong, but not a huge deal either. It will all be OK in a minute or two.

A cursory look at the master key file date told me that no, it wouldn’t be OK at all. The file sitting on cryptoserv wasn’t from last night, it was created just a few minutes ago. During the Salt-n-Pepa-themed push from stage, we overwrote the master key file with the stage version. Whatever key that was, it wasn’t the one I generated the day before: only one copy existed, the one I copied to cryptoserv from my computer the night before. Zero copies existed now. Not only that, the push script appears to have also wiped out the backup of the old key, so the database backups we have encrypted with the old key are likely useless.

Sitrep: we have 8 shard files that we apparently cannot use to restore the master key and zero master key backups. The database is running but its secret data cannot be accessed.

I will leave it to your imagination to conjure up what was going through my head that night as I stared into the black screen willing the shards to work. After half a decade of trying to make something of myself (instead of just going to work for Microsoft or IBM after graduation) I had just destroyed my first successful startup in the most spectacular fashion.

Still, the idea of “what if we all just continuously screwed up our passphrases” swirled around my brain. It was an easy check to perform, thanks to the included MACs. I added a single printf() debug statement into the shard reconstruction code and instead of printing out a summary error of “one or more…” the code now showed if the passphrase entered matched the authentication code stored in the shard file.

I compiled the new code directly on cryptoserv in direct contravention of all reasonable security practices – what did I have to lose? Entering my own passphrase, I promptly got “bad passphrase” error I just added to the code. Well, that’s just great – I knew my passphrase was correct, I had it written down on a post-it note I had planned to rip up hours ago.

Another person, same error. Finally, the last person, JK, entered his passphrase. No error. The key still did not reconstruct correctly, I got the “Goodbye”, but something worked. I turned to the engineer and said, “what did you just type in that worked?”

After a second of embarrassed mumbling, he admitted to choosing “a$$word” as his passphrase. The gall! I asked everyone entrusted with the grave task of relaunching crytposerv to pick really hard to guess passphrases, and this guy…?! Still, this was something -- it worked. But why?!

I sprinted around the half-lit office grabbing the rest of the shard-holders demanding they tell me their passphrases. Everyone else had picked much lengthier passages of text and numbers. I manually tested each and none decrypted correctly. Except for the a$$word. What was it…

A lightning bolt hit me and I sprinted back to my own cubicle in the far corner, unlocked the screen and typed in “man getpass” on the command line, while logging into cryptoserv in another window and doing exactly the same thing there. I saw exactly what I needed to see.

Today, should you try to read up the programmer’s manual (AKA the man page) on getpass, you will find it has been long declared obsolete and replaced with a more intelligent alternative in nearly all flavors of modern Unix.

But back then, if you wanted to collect some information from the keyboard without printing what is being typed in onto the screen and remain POSIX-compliant, getpass did the trick. Other than a few standard file manipulation system calls, getpass was the only operating system service call I used, to ensure clean portability between Linux and Solaris.

Except it wasn’t completely clean.

Plain as day, there it was: the manual pages were identical, except Solaris had a “special feature”: any passphrase entered that was longer than 8 characters long was automatically reduced to that length anyway. (Who needs long passwords, amiright?!)

I screamed like a wounded animal. We generated the key on my Linux desktop and entered our novel-length passphrases right here. Attempting to restore them on a Solaris machine where they were being clipped down to 8 characters long would never work. Except, of course, for a$$word. That one was fine.

The rest was an exercise in high-speed coding and some entirely off-protocol file moving. We reconstructed the master key on my machine (all of our passphrases worked fine), copied the file to the Solaris-running cryptoserv, re-split it there (with very short passphrases), reconstructed it successfully, and PayPal was up and running again like nothing ever happened.

By the time our unsuspecting colleagues rolled back into the office I was starting to doze on the floor of my cubicle and that was that. When someone asked me later that day why we took so long to bring the site back up, I’d simply respond with “eh, shoulda RTFM.”

RTFM indeed.

P.S. A few hours later, John, our General Counsel, stopped by my cubicle to ask me something. The day before I apparently gave him a sealed envelope and asked him to store it in his safe for 24 hours without explaining myself. He wanted to know what to do with it now that 24 hours have passed.

Ha. I forgot all about it, but in a bout of “what if it doesn’t work” paranoia, I printed out the base64-encoded master key when we had generated it the night before, stuffed it into an envelope, and gave it to John for safekeeping. We shredded it together without opening and laughed about what would have never actually been a company-ending event.

P.P.S. If you are thinking of all the ways this whole SSS design is horribly insecure (it had some real flaws for sure) and plan to poke around PayPal to see if it might still be there, don’t. While it served us well for a few years, this was the very first thing eBay required us to turn off after the acquisition. Pretty sure it’s back to a single passphrase now.

Notes:

1: a member of Chicagoland sci-fi fan community let me know that the original news of our move to the US was delivered to them via a posted letter, snail mail, not FidoNet email!

518 notes · View notes