passwords – How do sites detect credential sniffing, and what is the purpose of this attack?

We can’t know how Unsplash detected it unless they tell us. However, many large websites have some sort of abuse tooling to automatically detect patterns. For example, Unsplash may import compromised credentials from public databases and match logins on those accounts from certain shared IP addresses. Clearly they’ve seen this pattern before since they have a pre-canned email about it.

In general, any site of reasonable size that has a social aspect where there can be likes or ranking of items is subject to abuse from bots who sell paid likes. As for who would want this, consider being able to put on your resume that you’re one of the top ten most popular photographers on Unsplash. That would be very appealing indeed. It may also cause search engine rankings for your user ID or name to be better, especially if they show up on a favorites or top photos page.

As for why the attackers uploaded images, because it’s very easy to find empty accounts that only give out likes. If a user engages in a variety of types of activity, it makes it seem less suspicious, so the site is less likely to catch on to the pattern. They also may like unrelated accounts to make it less obvious who’s paying them if they do get detected. Most sites don’t permit gaming the system in this way (or using automated systems to do this) and the attackers’ service wouldn’t be very popular if many of their customers’ accounts got cancelled.

Best hook to use to detect new members added to group?

What is the best way to make a hook that only fires when new members are added to a group?

I have a function that exports group memberships to moodle course enrolments. Right now I have it bound to _user_presave:

function mymodule_user_presave (User $user) {

  // Gather data.
  $userid = $user->id();
  $group_memberships = Drupal::service('group.membership_loader')->loadByUser($user);
  foreach ($group_memberships as $group_membership) {
    $group = $group_membership->getGroup();
    $groupid = $group->id->value;
    $roles = $group_membership->getRoles();
    // Get roles.
    foreach ($roles as $rolename => $value) {

I bound it to user_presave after I realized that adding members to a group also calls this hook. But this seems unnecessarily inefficient, since it always returns all group memberships of the user, instead of just the latest one.

Is there a way to detect a new GroupMembership directly and hook into that?

operating systems – My Nmap can’t detect OS

I’m trying to use Nmap, so I download its application. Then my target is: “” and I use Intense Scan
But something went wrong, after I check, my Nmap can’t show its OS (OS detection not performed). When I use my friend’s PC with same target and same Intense Scan, the result can show its OS.
But when I try other target with my PC, Nmap can detect its OS

Then when I try to scan my network, at first Nmap only detect 2 hosts including my PC and its OS.
Then I scan again with Quick Scan its showed 1 more host, I think its my phone. BUT Nmap can’t detect ALL hosts’ OS.
Then I scan again with Quick Scan Plus, its showed all 3 hosts with its OS, EXC my phone’s OS.

autofocus – Does the number of phase detect auto-focus points affect focus accuracy in mirrorless cameras?

Does the number of phase detect auto-focus points affect focus accuracy in mirrorless camera? And if so, how and why?

I am considering burying either a Nikon Z6 II or a Z7 II. They have 273 and 493 AF points respectively. For comparison, the Sony A7iii has 693 AF points, a lot more. I have read/heard that the Z6 struggles a bit with focusing the iris of the eye. Does this have anything to do with how many AF points? Perhaps less focus points means a lower chance the point will be in the right position on the subject?
Or maybe the contrast detect will work together with phase detect and the issue is not the number of points?

I will appreciate any informed answers.

assembly – How do I detect the side of collision?

I got a simple method of detecting collision between two objects. The next step is to figure out what side of the hitbox was hit so I know whether I need to push the other object back in X or Y axis. I am using 6502 assembly to keep things simple. This means that some modern methods are too slow. Here is some known information about the objects:

  • object X/Y positions
  • object A begin above/below and to left/right of object B
  • object X/Y speeds
  • hitbox top/left/bottom/right bound distance from object position
  • the amount of hitbox overlap in X/Y axis

Also there should be a way to detect if a corner is hit so that can be treated differently (eg. when hitting top corner favor pushing object on top of the other object, landing on it, rather than pushing the object aside and falling)

is it possible to detect genter using machine learing in flutter

is it possible to detect gender using firebase ML or any face API in flutter, if possible please give some source. I tried very much but not find any API in flutter please help me thanks.

Detect Success Page on Magento 2

Is there a way to check if am I on Success page on Magento 2?

I know in Magento 1 we can check and compare the action name, for example. But in Magento 2, there is something similar?

dnd 5e – Can the Detect Magic spell detect prepared spells or spellcasters?

The Sage Advice Compendium addresses a related question:

Is the breath weapon of a dragon magical?

If you cast antimagic field, don armor of invulnerability, or use another feature of the game that protects against magical or non-magical effects, you might ask yourself, “Will this protect me against a dragon’s breath?” The breath weapon of a typical dragon isn’t considered magical, so antimagic field won’t help you but armor of invulnerability will.

You might be thinking, “Dragons seem pretty magical to me.” And yes, they are extraordinary! Their description even says they’re magical. But our game makes a distinction between two types of magic:

  • the background magic that is part of the D&D multiverse’s physics and
    the physiology of many D&D creatures
  • the concentrated magical energy that is contained in a magic item or
    channeled to create a spell or other focused magical effect

In D&D, the first type of magic is part of nature. It is no more dispellable than the wind. A monster like a dragon exists because of that magic-enhanced nature. The second type of magic is what the rules are concerned about. When a rule refers to something being magical, it’s referring to that second type. Determining whether a game feature is magical is straightforward. Ask yourself these questions about the feature:

  • Is it a magic item?
  • Is it a spell? Or does it let you create the effects of a spell that’s
    mentioned in its description?
  • Is it a spell attack?
  • Is it fueled by the use of spell slots?
  • Does its description say it’s magical?

If your answer to any of those questions is yes, the feature is magical.

Let’s look at a white dragon’s Cold Breath and ask ourselves those questions. First, Cold Breath isn’t a magic item. Second, its description mentions no spell. Third, it’s not a spell attack. Fourth, the word “magical” appears nowhere in its description. Our conclusion: Cold Breath is not considered a magical game effect, even though we know that dragons are amazing, supernatural beings.

Detect magic, like other game mechanics, operates by this same logic with regard to what is considered magical. The spellcasting abilities of creatures (innate or otherwise) are considered “the background magic that is part of (…) the physiology of many D&D creatures”. Detect magic is designed to detect magical effects, not the background magic that suffuses creatures or the universe.

Chris Perkins confirms this sort of interpretation here:

Can detect magic detect magic potential of spellcasters even if they’re not actively casting a spell?

It’s not a wizard detector, if that’s what you mean.

Given that the question he’s responding to asks about spellcasters in general, it seems clear that his response is not specific to wizards – he’s suggesting that the spell doesn’t automatically detect spellcasters simply due to their magical abilities.

dnd 5e – How does Detect Magic spell see a Warlock’s use of Devil’s Sight invocation?

I assume Eldritch Invocations are detected as magic, because they are magic:

In your study of occult lore, you have unearthed eldritch invocations, fragments of forbidden knowledge that imbue you with an abiding magical ability.

And Detect Magic spell detects magic like this:

For the duration, you sense the presence of magic within 30 feet of you. If you sense magic in this way, you can use your action to see a faint aura around any visible creature or object in the area that bears magic, and you learn its school of magic, if any.

What does Detect Magic reveal about a visible warlock with Devil’s Sight?

I guess there are two cases: the warlock actually “seeing normally in darkness” with the invocation benefit active, and the warlock being in bright light and invocation not doing anything. Let’s leave the murky details of Devil’s sight interaction with dim light and the warlock having or not having darkvision out of scope.

seo – Is Google detect my website paralogism when i edit and reup the content?

My Website has many top rank keyword on Google, but after reviewing I found that some contents are too old and I want to update them. But I wonder that “Is Google state my website is paralogism after editing the contents when many other sites had been copied and reference the same content from my website?” Does my website become paralogism and the other copied it becomes original??? How Google detect?