A story of deep love: one man's love for the female form, two women's love for him and each other, and three people united by breastmilk and lovemaking.
https://books2read.com/b/brrea7
#adultbreastfeeding #eroticlactation #erotica #romance
Search
1000 results for “a_corbin”
-
-
TUCO: If you work for a living, why do you kill yourself working?
Sergio Leone (1929–1989) Italian filmmaker
The Good, the Bad, and the Ugly (1966) [with L. Vincenzoni, A. Incrocci, F. Scarpelli, L. Vincenzoni, M. Knox]More about this quote: wist.info/leone-sergio/86581/
#quote #quotes #quotation #qotd #sergioleone #thegoodthebadandtheugly #hardwork #job #labor #living #makingaliving #work
-
A man in a white T-shirt is inside a small enclosed area, handling black decorative lights, possibly for a Halloween setup, as there is a skeleton decoration nearby. Outside, a wrapped object resembling a large wrapped cone or balloon is visible near the open gate. No vehicles, packages, or animals are present, and the scene appears calm except for the ongoing decoration work.
At the feeders: #crittercam #cat #cat_black 86.28%
Reo1201.20261024_125930651.jpg -
A nickel ain't worth a dime anymore.
-- Yogi Berra -
"A photocopy cannot replace [...] the faint smell of home."
"It cannot replace the quiet dignity of holding something your child touched."
"And once that small dignity is taken, it is hard to believe it will ever be handed back."
————————————————————
Title: Mail Scanning Has Isolated Me From My Loved Ones
Author(s): Robert Haas
Publication(s): Prison Journalism Project
Date: October 22, 2026
————————————————————
#NewYork #USA #Incarceration #Media #Censorship #Drugs
https://prisonjournalismproject.org/2026/10/22/mail-scanning-isolated-me-from-my-family/ -
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111
SAP scores CVE-2026-89111 at 10.0. That is an unusual number for a server-side request forgery, and the reason is scope: the bug does not merely send a request to the wrong host, it hands the attacker the credentials needed to complete that request themselves. The affected package is the SAP Cloud SDK for Python, and the fix shipped in two parts, months apart, with a regression between them.The mechanism
The SDK builds an OAuth2 token URL for the client credentials flow. Part of that URL comes from a caller-supplied value namedtenant_subdomain, which the SDK substitutes into the URL by string replacement.Whoever controls
tenant_subdomaincontrols the destination host. Whenfetch_tokenruns, it sendsgrant_type,client_idandclient_secretin the form body to whatever host that value points at. An attacker who can set the field to a host they operate receives the client secret directly, with no parsing trick required.Those credentials buy a real access token from the legitimate endpoint. The token carries whatever permissions the original client held, and the documented Destination configuration stores third-party system credentials. The blast radius runs from one subdomain parameter to the credentials of every system that SDK integrated with.
Two fixes, and a window in between
The advisory lists affected versions below 0.45.2, with the fix in 0.45.2. According to the vendor, that is the whole story.In practice it is not. Researchers tested each release and found that the module migration work in 0.53.0 reintroduced the flaw, which remained present through 0.55.0. Version 0.55.1 re-fixed it; the current release line is 0.58.5.
The per-version behaviour is reproducible. 0.45.0 and 0.45.1 send the secret to the attacker host, 0.45.2 blocks it, 0.53.0 and 0.55.0 send it again, and 0.55.1 and 0.58.5 block it. One test run against 0.53.0 captured two separate credential sets from a single request flow.
That gap is the finding worth carrying away. Anyone who patched to 0.45.2 and later upgraded to 0.53.0 for unrelated reasons became exploitable again, and no advisory said so. A version-range check driven by the vendor advisory alone would report those hosts as fixed.
Disclosure context
The issue was published at SAP Security Patch Day on 13 October 2026 alongside 19 other vulnerabilities: 4 critical, 3 high, and 4 that had been pre-published on GitHub. No in-the-wild exploitation has been reported.Other items in the same batch matter for anyone tracking SAP exposure broadly. CVE-2026-89110 is a broken access control issue in NetWeaver Visual Composer. CVE-2026-89107 is code injection in S/4HANA. CVE-2026-89108 is a missing authorization check in Manufacturing Integration and Intelligence, scored between 9.9 and 9.1 depending on the source.
What to do
- Compare the installed version against 0.45.2, 0.55.1 and 0.58.5, and treat anything in the 0.53.0 to 0.55.0 range as vulnerable regardless of what an advisory lookup reports.
- If an upgrade cannot land yet, whitelist
tenant_subdomainagainst the values your integrations actually use. It is a narrow control, but it addresses the injection point itself. - Rotate client secrets for any SDK integration that ran a version in either vulnerable range. Assume the secret was exposed.
- Review what the affected client was authorized to reach. The token the attacker obtains is the client's token, so the question becomes what that client could read, and the Destination configuration is where to look.
The lesson that outlasts the CVE
Advisories describe the versions the maintainer knew about when the advisory was written. A regression introduced later, during a refactor, is invisible to an advisory-based scanner and to any team whose remediation reads as an instruction to upgrade past the listed version.For a library that handles credentials, the durable control is a negative test in your own pipeline: point
tenant_subdomainat a host you control, run the token fetch, and assert that no secret leaves. That test survives version changes, module migrations, and advisory text nobody has updated.References
- SAP Security Patch Day, 13 October 2026, SAP Note for CVE-2026-89111
- GHSA-4mv3-jxxm-9cx2 (SAP Cloud SDK for Python, OAuth2 SSRF)
#sap #oauth2 #ssrf #credentialleak #software #coding #development #engineering #inclusive #community
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111 -
A King George VI Type B Wall Box Wall Box in Fowey, Cornwall. View it here: https://postboxmap.co.uk/r/PL23-12D #PostboxMap #UKPostboxes #Postbox #PostboxSaturday #KingGeorgeVI #WallBox #TypeBWallBox #StandardRed #Fowey
-
A Circle shareholder holding 10,000 Class A shares sued President Trump on 22 October, alleging UAE-linked payments to his family's World Liberty Financial enriched him. The filing cites a 500M USD stake and a 2B USD stablecoin settlement that cost USDC an estimated 70M to 82M USD a year in reserve income. https://cryptoslate.com/circle-shareholder-sues-trump-over-uae-crypto-deals-citing-up-to-82-million-in-potential-annual-revenue/ #Web3 #Blockchain #Regulation
-
“The law cannot, as you say, touch you,” said Holmes, unlocking and throwing open the door, “yet there never was a man who deserved punishment more. If the young lady has a brother or a friend, he ought to lay a whip across your shoulders. By Jove!” he continued, flushing up at the sight of the bitter sneer upon the man’s face, “it is not part of my duties to my client, but here’s a hunting crop handy, and I think I shall just treat myself to —”
He took two swift steps to the whip, but before he could grasp it there was a wild clatter of steps upon the stairs, the heavy hall door banged, and from the window we could see Mr. James Windibank running at the top of his speed down the road.
“There’s a cold-blooded scoundrel!” said Holmes, laughing, as he threw himself down into his chair once more. “That fellow will rise from crime to crime until he does something very bad, and ends on a gallows.”Arthur Conan Doyle (1859–1930) British writer and physician
Story (1891-09), “A Case of Identity,” The Strand Magazine, Vol. 2, No. 3More about this quote: wist.info/doyle-arthur-conan/8…
#quote #quotes #quotation #qotd #doyle #arthurconandoyle #sherlockholmes #holmes #sherlock #crime #flight #punishment #threat
-
A paleta deste mês.
Que brilhe um monte de estrelas apimentadas amanhã.
#fotografia #photography #streetphotography #feira #pimenta #pepper #Lula #Lula13 #Sabafoto
-
A profile field displayName was renamed to fullName in types and components. Fresh tests stay green, but historical rows, cache entries, queued messages, and stored preferences still carry the old key, so reads come back undefined and the bug cannot …#aiagents #migration #types #contract #software #coding #development #engineering #inclusive #community
The agent renamed the field in code and never told the database, so old rows read as undefined -
A MIME check that passes and a filename that does not have to match: how two validation stages in Bricksforge produced unauthenticated RCE, and what the attempt telemetry says about who is scanning.#wordpress #fileupload #rce #webshell #software #coding #development #engineering #inclusive #community
Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell -
A Live de 24 horas prossegue, e a maior passeata de todos os tempos pode ser acompanhada ao vivo aqui: www.youtube.com/watch?v=4lTS...
#SoMaisUmVotoProLula
#SabadouComLula
#ComLulaNaRua
#LulaNaPaulista
#LulaEmCopacabana
#LiveDaVirada
#RJComLula
#Live24HorasDoExercitoDoLula
#Somos10MilhoesPorLula
RE: https://bsky.app/profile/did:plc:uvoqzykwi6sgajgstohn2hzu/post/3mympdcnfuc26
Lula em São Paulo: O Brasil Pr... -
A digression on 90s music led me to discover that Dexter Holland, front man of punk rock band The Offspring, returned to the University of Southern California to complete his PhD in Molecular Biology in 2017, thus joining the ranks of internationally successful musicians who returned to university to complete an advanced degree after pausing to pursue their music careers.
-
A coding agent is a model plus a harness. We spend all our attention on the model. I spent mine on...#ai #python #llm #opensource #software #coding #development #engineering #inclusive #community
How I made a 20B model code like a frontier one — by fixing the harness, not the model -
A ~75-line standard-library Python script that looks up a list of domains over RDAP, the JSON replacement for WHOIS, and returns registrar, creation and expiry dates, domain age, EPP status, nameservers and whether the name is still available.#python #dns #api #tutorial #software #coding #development #engineering #inclusive #community
Bulk WHOIS lookup in Python with RDAP: domain age, expiry, registrar and availability (no scraping, 2026) -
A quotation from Christine de Pizan
Do not let the bread of the hungry mildew in your larder! Do not let moths eat the poor man’s cloak. Do not store the shoes of the barefoot. Do not hoard the money of the needy. Things you possess in too great abundance belong to the poor and not to you. You are the thief who steals from God if you are able to help your neighbor and refuse to do it.
[Si gardes que le pain du fameilleux ne moisisse en ta huche que le costé du nu tu ne laisses mengier aux vers que tu ne tienges enclos le soulier du deschaulx & que tu ne possides l’argent du souffreteux. Car saches de vray que les biens dont tu as trop grant largesse sont aux povres & nonpas tiens si es larron ou laronnesse & embles a dieu si tu peux secourir ton prouchain & tu ne le secours.]Christine de Pizan (1364–1430) Italian-born court writer in the French court, poet, woman of letters [de Pisan, da Pizzano]
The Book of the Three Virtues [Le Livre des Trois Vertus; Treasury of the City of Ladies], Book 1, ch. 10 (1405) [tr. Willard (1989)]More about this quote: wist.info/de-pizan-christine/8…
#quote #quotes #quotation #qotd #christinedepizan #charity #divineblessing #gifts #giving #needy #philanthropy #poor #possessions #sharing
-
one day of rest
one day to sit turned
#daily #DailyPoem #dailyPoetry #dailyWriting #Poem #poems #poetry #read #reading #Writing
into a day of running, of
errands here and there; the
detritus of the week demands
attention, demands time, time, time –
one day to sit turned
to, at last, sitting, at last
a moment of nothing –
how the mind drills into the warm
pulp of nothing, nothing at all,
and somehow finds
something. -
a Transavia flight from HRG to ORY (flight number TO4341) squawked 7700 (general emergency) wonder what's going on
-
a quick demonstration of a Sandfly feature I have been working on. I apologize in advance for the audio quality. #android #blind #accessibility
-
A large pack of new chess engines (16 files)
https://chessengines.blogspot.com/2026/10/a-large-pack-of-new-chess-engines-16.html -
https://www.europesays.com/fr/1263172/ PS5 et PS4 : Sony offre 5 cadeaux Spider-Man à récupérer avec ces codes, même sans abonnement PS Plus #5 #à #abonnement #avec #cadeaux #ces #codes #et #FR #France #man» #même #offre #plus #PS #PS4 #PS5 #récupérer #sans #Science #ScienceAndTechnology #Sciences #SciencesEtTechnologies #sony #spider #Technologies #Technology
-
-
Arguments have no chance against petrified training; they wear it as little as the waves wear a cliff.
Mark Twain (1835–1910) American writer [pseud. of Samuel Clemens]
Novel (1889), A Connecticut Yankee in King Arthur’s Court, Part 3 “The Tale of the Lost Land,” ch. 17 “A Royal Banquet”More about this quote: wist.info/twain-mark/86572/
#quote #quotes #quotation #qotd #twain #marktwain #connecticutyankee #argument #change #culture #custom #inertia #logic #reason #statusquo #tradition #training
-
A New ‘Cultural Breakfast Cafe’ Recently Opened in Cedar Rapids https://www.diningandcooking.com/us/61990/ #FoodAndDrink #Iowa #IowaDining #IowaFood #IowaGroceryStores #IowaRestaurants #KhakMorningShow #LocalNews
-
À Marseille une foule immense fait une minute de silence pour les victimes de l’attentat de Trappes
-
A business website is often the first place a potential customer looks for information. For a salon,...#a11y #design #ux #webdev #software #coding #development #engineering #inclusive #community
Building a Better Salon Website: Online Booking, Accessibility, and User Experience -
A Bulgarian sports official and former member of European Parliament shot dead | National Sports
SOFIA, Bulgaria (AP) — The head of the Bulgarian Taekwondo Federation and vice president of the European Taekwondo…
#Europe #EU #EuropeanParliament #national_news #national_sports
https://www.europesays.com/europe/165996/ -
A practical build guide for a coffee shop counter card: which Instagram link to write, why https beats instagram://, NTAG213 vs 215, locking, placement next to a card reader, and a test matrix.#nfc #tutorial #mobile #beginners #software #coding #development #engineering #inclusive #community
An NFC card at the register that opens your Instagram: the URL, iPhone vs Android, locking and the QR fallback
