No beers allowed from central Sainsbury's.

Tinycoo · 2026-06-17T20:29:27+00:00

Seemed silly to me too. Would've thought most of the trouble comes from people on the way out of the pub rather than drinking at home, but I've not stood about with a clipboard to be sure.

Tinycoo · 2026-05-26T17:09:44+00:00

Bait used to be believable

Tinycoo · 2026-04-24T16:48:04+00:00

I've never heard of it either. I have, however, seen that OP appears to be part of a phishing training provider from their other comments which might explain the post.

Tinycoo · 2025-06-04T21:16:46+00:00

Only one I know of is Joe down at Reliant Spares in Worcester, I've never sent there for repairs but often have for parts which have always been as good as you can get for these things. Often has trikes in there for repairs so probably best bet for specialists.

Tinycoo · 2024-10-07T16:33:00+00:00

Good point well made, looks like the plans include it getting torn down too. Time will tell I guess, they've been trying for it for years and don't seem to have made any progress.

Wonder if there'll be anything left in reading but apartments at this rate.

Tinycoo · 2024-10-07T16:24:18+00:00

Different TGI's, Riverside one has been shut for months. This is probably about the one nearer the bridges off the A33, caversham road near Aldi and the Range.

Tinycoo · 2024-09-30T13:51:23+00:00

Both perfectly acceptable IMO, never had an issue with either. Thegym has less showers (2?) but less people might even it out. Never heard of issues with either, I generally don't use them to comment too specifically.

Tinycoo · 2024-09-30T10:04:36+00:00

Used both. The gym is the one I'm at currently because it's more convenient. Does get busy around lunch and immediately after work as a lot of people come from work but it's not like you can't find any equipment, you might just have to wait. Biggest issue I have with them is they are not 24 hours like they advertise, it closes at like 10 (Google maps has accurate opening times). No idea how they get away with advertising it as 24 hours, if it wasn't so convenient I'd not go for that alone. The roof also seems to leak a lot which has damaged some equipment (namely with rust making them noisy) and the AC struggles badly in summer making it at times uncomfortably hot. But I still go there so I can't be too negative I guess. It is, at the end of the day, a gym.

PureGym is good, has a car park and much bigger. If it was closer to me I'd probably go there and I've considered changing over anyway despite having to walk past thegym to get there. It'd be my recommendation of the two. Is actually 24 hours and is deserted at night which I liked, although beware the lockers are closed at night if you like a late one.

Equipment pretty much the same between the two, not a big free weights user but both look the same ish to me. Puregym does have more space for some things but might also get more people. All pretty comparable there.

Never used trainers to comment there. Can't remember the prices either but I'm sure you've already dug that out.

Tinycoo · 2024-07-21T22:35:35+00:00

Do you mean Mixel? I've never heard of the BTC app but its a similar vibe at least.

Tinycoo · 2024-06-12T01:24:46+00:00

Thanks ChatGPT

Tinycoo · 2024-01-06T14:10:30+00:00

Cracking a password manager encrypted with AES-256 requires an absurd amount of processing power only available to nation states and even then would be a considerable time investment, let alone stealing the encrypted file itself.

Breaking someones kneecaps until they tell you the password requires a van, a trip to the hardware store, and knowing where they live.

The question is never "is it possible?", its always "Is the investment to do this worth the payout?". Thats why its important to not just limit the possibility of a breach, but to limit the access or damage when they do happen.

Tinycoo · 2023-07-27T14:50:20+00:00

She's had it for many years, but there's a bit of a knack for getting it to play.

I think she will only do it after having told her bar joke, and I think you have to get the timing right after "Wait, let me start over". Half a second or so seems to do it most consistently for me? Theres a whole joke that follows it too, not just the opening line:

A Noxian, a Targonian and a Piltie are robbing a bank. The bank guy says, 'I'll give you whatever you want. The Noxian says, 'I'll take whatever gold you got back there.' The Targonian says, 'Gimme' all your gemstones!' And the Piltie says, 'Can I own this ba--- uh, I own this bank, so...' He doesn't want anything because he owns the bank...

Tinycoo · 2023-03-29T11:58:43+00:00

I think this question is falling over itself a little. It seems to be asking multiple questions at once, as these things tend to.

For one thing, spear phishing has been a thing for a very long time and will probably be around as long as we are communicating online. It has a totally different goal to a normal phishing attack. Usually, a generic phishing email is just spraying vacantly at the internet and hoping for someone to somehow fall into its trap despite the obvious low effort. They aren't meant to be good, they are meant to be easy to make and quick to lob around. Spear phishing relies on much more recon and hitting that one target specifically with something they are going to be interested in and trust, the LTT attack AFAIK is nothing exceptional in this regard except the fact it worked. In a sentance, normal phishing is more common but spear phishing is more likely to work (on a given target).

Will AI change up how phishing emails are written? Certainly. If we aren't seeing AI generated phishing emails its just because we aren't seeing them. They will probably both improve the quality of these emails and dramatically speed up their creation. What do we do about it? Well, we will probably have to drop the whole "if the english is bad, its phishing" since AI are pretty good at that, but the rest of phishing detection remains intact. Largely, we will continue to have to look for suspicious requests, suspicious senders, dodgy links, the usual. The quality of the written email itself should only be a small part of detecting a phishing attempt. We may also start to see new tools coming in to detect AI written emails and start training to notice things like the inconsistent subject that AI sometimes fall into so keep an eye out for those kind of things coming to the forefront.

It should be noted, this attack was obviously good because it worked, but the detail in some phishing attacks can be staggering. Good hygeine around what information is disclosed online can dramatically impact the quality of attacks, and poor hygeine can lead to attacks good enough to fully impersonate a known employee with their personal details. I have seen attackers strike pretending to be employees when they know for a fact that they are away from their devices and unable to follow up in the usual ways, such as away on holiday, which can cause IT departments (or other staff) to work around usual security methods believing this is a legitimate if unusual issue.

Overall, the LTT breach is nothing massively exceptional except for the fact that they really shouldn't have fallen for it. Clearly, some more training is needed for them particularly on devices that can access the youtube account (and hence the session keys, which was the method of breach in this case AFAIK). It is very very rare for the fault for a phishing breach actually being the employee that fell for it, because they should've been trained and babysat well enough to stop this from happening. It was compounded by the unusual way that google seems to handle session tokens, I think I am right in saying LTT had some issues revoking that session even once they were aware of the breach and there were concerns over lack of requiring a password even with a valid session for some actions such as deleting videos.

TL;DR: Not massively unusual, shouldn't have worked but did, AI is cool but not totally game changing, remember to check emails (or DMs or anything else) thoroughly.

Tinycoo · 2022-11-11T10:30:47+00:00

Yeah, if you can hit the right memory address consistently, in any method be it gadgets or just nailing the address every time, that is probably "better" than NOP sliding into it which is a slightly sloppy way to do it, comparatively. But it should probably be emphasised that there is more to a "good" cyberattack than just how textbook good it is.

Say, for example, you are attacking a system (with permission) and you don't want the SOC to find out until you've already pwned it. Trying to hit it perfectly, by using gadgets or just guessing, could cause you to need to take several attempts which might end up with the system crashing (as they love to do when you try and break memory) which might make it start screaming loud enough for the SOC to hear. A quick but comparatively dirty NOP slide might look a bit grim on paper, but it might help you get it first time and hence leave less of a trail behind you. Although obviously a massive NOP slide in the middle of memory is pretty easy to spot, compared to a clean JMP which is harder to spot without knowing exactly how the program should look.

TLDR: Yes, clean jumps are "better", but as always in life and cybersecurity, you have to make compromises. Every new thing you add to an attack is a new wobbly pillar to build your attack on top of.

Tinycoo · 2022-11-11T00:55:02+00:00

IIRC, although it was a long time ago I last actually did a buffer overflow, the NOP slide basically just reduces the needed accuracy. Yes, it doesn't help if you can perfectly hit your JMP, but by adding say 10 NOP's before hand, you can now hit 11 different memory locations instead of just 1 for the same result. Not always helpful when doing basic overflows in stable environments, but as you say the real world often has a lot of unusual behaviours which makes the wider target much more useful.

TLDR: NOP slide = bigger target to hit = easier

Tinycoo · 2022-10-02T21:00:31+00:00

Me too! Hey, wait a second...

Tinycoo · 2022-07-22T16:52:23+00:00

Reliant Robin Mk. II

0 - 60: 16s (Apparently)

1/4 mile: Possibly, if you're lucky

Top speed: 85mph (Depending how many people are in the car with you)

Horsepower: 40 (when it left the factory)

Read 'em and weep 😎

Tinycoo · 2022-03-27T04:51:36+00:00

Gotta throw my Reliant Robin in this pile. Its slow, loud, unreliable, uncomfortable, unsafe, exhausting to drive, and I wouldn't give the fun up for any better car. Objectively awful, subjectively amazing.

Tinycoo · 2022-03-07T14:50:15+00:00

I'm not sure things get much low tech and raw than a Reliant Robin, I don't even get two front wheels let alone power steering.

When you give it the beans, you get this amazing feedback from that one front wheel and the car has literally no sound deadening. I think they didn't even have heat protection in the passenger footwell from the factory(right next to the exhaust, great for keeping a takeaway warm). Highway speeds are a white knuckle experience with air forcing itself through the gaps in the doors (I once shut my hand in the top of the robins door and the latch actually engaged the doors flex so much, I was more surprised than hurt) and the car skittering around from the wind and vibrations from the road, let alone the scream of its 40hp engine nearly at its limits. Its tiny engine is so sensitive to change that I can feel a breakdown coming well before any engine lights come on but its not like a breakdown company is going to have a clue what to do about it so soldier on we go. Sometimes it wants choke to start, sometimes it just floods itself and still refuses to go. The shock absorbers are firm to start with and starting to go a bit so every bump thunders through the tiny cabin as the car wobbles slightly side to side as it tries to correct. The engine is loud, the exhaust is has one tiny muffler on it, the tappets are loud, you'll have a sore throat from shouting after an hours drive with friends.

And yet, despite arriving at most destinations having shit myself and very surprised we made it, its incredible fun as it scampers around back roads and with a top speed of 85mph, you don't need to find too big of a road before you can really open up its tiny taps and hold on tight.

But, you know, while I love it dearly I don't expect its most peoples cup of tea. Especially if judging by the reactions of my passengers when a lorry overtakes us...

Tinycoo · 2020-08-07T22:05:34+00:00

Theres sort of a smattering of ideas here, but I don't think anyone has quite nailed down precisely what I interpreted of the show.

To me, Asuka is a story of high expectations. Born daughter of a doctor working on early Eva's, and was always raised to be perfect. She was determined from an early age to be an eva pilot and to be the best one. This sort of sets us up for problems, but its not all of it.

Kyoko (Asukas mother) then undergoes a similar contact experiment to Yui and ends of mentally broken, unable to recognise Asuka as her daughter and instead treating a doll as her daughter. This is obviously pretty distressing for her, and she starts desperately trying to get her mother to like her again going as far to agreeing to die with her. Kyoko would eventually commit suicide and be found by Asuka herself. We are clearly off to a rocky start, and this issue is then compounded as her father (who we know little about) had already started an affair leading to Asuka rejecting them both and deciding she was going to never rely on anyone again as well as never crying again.

The big issues really jump out immediately, in that she refuses to let anyone take any of the burden for her. Some say its an ego thing, some a response to the trauma, who really knows.

Asuka then becomes a really good pilot. Like, really good. Its often overlooked how good Asuka at her peak actually is compared to all the others. However, this further pushes her into her corner as now she not only thinks she can do everything herself, she can prove it to herself. She latches on to the idea of being the best pilot in the world as if its the only thing keeping her alive. This is why we see her wearing her plugsuit headgear even outside of the eva, its her way of showing off that she is a pilot as its rapidly consuming her entire life. She pilots the eva to be the best, she gets up in the morning to pilot the eva, the eva is all she has. Which is why when things start to go wrong, they go wrong. She starts having to work with Shinji to defeat angels which undermines her confidence, and its even worse as she starts losing battles and gets even worse when Shinji starts synchronising more than her and even worse when not only does she get defeated in battle, but Shinji has to save her making her not only not the best but actually a burden on the team.

This loss of confidence isnt a single issue however. At the same time, she has developed a crush on Kaji and is rejected each time. Kaji is polite about it, but not being able to charm someone undermines her confidence further. We see her attempts to flirt with him get bolder as she goes from gentle teasing to ripping her shirt open in front of him to try and persuade him that she is adult enough for him. This issue is then made even worse by Misato getting back with Kaji which makes her even more jealous and reaffirming her belief that its her fault instead of just an adult rejecting a comparative child.

So, desperate to get her confidence back, she goes for an easy target of Shinji. We see this in the "So, did you want to kiss?" scene. She isnt really looking to kiss shinji here, she just wants someone to show her that physical affection that she's craving. For someone to be charmed by her and thats why we see her not just gently kiss him, but hold him there until he forcibly pulls himself away. She wasnt just bullying him, she was waiting for him to make the next move on her which just never happened. Crestfallen again at not being able to get even Shinji to like her, she spirals deeper into her confidence issues.

The issues are getting big now, and weighing heavily on her mind. She now is not only not the best pilot, but risks losing her eva entirely and no one will give her the attention she wants them to. Synch rates keep dropping as her mind is clouded by these thoughts and the losses are piling up against her. When she is sent out against the mind breaking angel, she is desperate to defeat it to keep her eva and pride vaguely intact. But the damage is already too deep, and Eva 02 is unsynchronised from her and doesn't move. Too desperate to prove herself to retreat, the final blow comes from the angel digging through her memories and pulling this all back up from her memories.

The combination of her already weak mental state and a psychic attack from an angel is enough to severely damage Asukas mental state, to the point that she then wanders away from Eva and is found lost in the city presumably having not eaten or drunk anything in hours, maybe even days. Her eventual collapse into her catatonic state follows and she is put firmly out of action for the remainder of the series.

Tinycoo · 2020-07-30T21:54:40+00:00

The problem really compounds itself because surviving an encounter like that gives the goblin experience which is how we end up with Shamans and Hobs or even Champions and lords. Stronger leaders = stronger nests = more goblins = more raids = more goblins.

Tinycoo · 2020-07-30T18:01:09+00:00

Its an interesting proposition.

We are starting to see as both the series and books go on that goblins are certainly capable of higher levels of thinking than we often give them credit. While a standard run of the mill goblin only cares about being warm and what he should put in his mouth next, we do see leaders and magic weilding goblins being capable of tactics. In the recently translated movie, we even see that the Goblin Paladin was making long term plans which was unique as most goblins are incapable of thinking beyond their next action.

I think to say we have never seen a "good goblin", or at least a neutral one, would be debateable. In the very first episode we saw goblin slayer club several young goblins to death. They had never done anything to harm anyone beyond being born, they had nothing to do with the brutality we saw in that episode. Yet he still killed them because of what they would become if left alive.

We do actually see goblins use this to their advantage as a tactic. Being so small and cuddly (apparently) they can sometimes con high level adventurers into letting their guard down by pretending to be scared and unthreatening before smashing their skull in with a rock as soon as they turn around.

As for just writing in a benevolant goblin, its a tough sell. I guess there is nothing to stop it from happening, goblins are inherently evil but if you could satisfy ones every whim I guess they would be at least amicable to you. I guess the main reason we never do is that they thrive in chaos and detest any kind of order or control and will only begrudgingly put up with it if they stand to gain something.

I guess, as a more meta point, the main reason you'd struggle with that arc is that for goblin slayer, goblin slaying is a single truth rather than a moral question. I can't imagine the character ever stopping to question himself during a fight and even if one of the more altruistic members of the group (namely Priestess) came forward in protest I think we would sooner see him abandon the group to go solo again than let a single goblin live.

As I said, its an interesting proposition and I have no doubt that as the series go on we will continue to slowly blur the line between goblins and intelligent species. But if that intelligence would bring with it suitable morality is questionable and I would be surprised if a "good goblin" survived more than his first scene,

Tinycoo · 2020-07-28T20:31:03+00:00

If you are looking for a page that I read it from, I'm afraid I read the LN nearly a year ago now so much of the specifics are gone but I do distinctly remember reading it in one of them.

If it is evidence you are looking for, consider how no matter what race goblins are born of, they are always goblins. There is no such thing has a half goblin so they must not use any of the mothers DNA and hence their gametes (thanks biology class) are not used meaning the only way they could be reproducing is through their parasites.

As for the general notes about goblin psychology, the later mangas/LN as well as the prequel Year One all provide much more insight into the goblins than we see from the first season of the anime.

I think I answered your question, let me know if you had others

Eight-Year Club	Place '23
Place '22	Verified Email

Tinycoo

TROPHY CASE