yhlee: a stylized fox's head and the Roman numeral IX (nine / 9) (hxx ninefox)


Candle Arc #1, color version, at [community profile] candlearc just to keep it corralled. Note that it's viewer discretion advised on account of cuss words, violence, and hexarchate-typical awfulness.

Eventually will be added to the off-DW site at Candle Arc (candlearc.com) but I'm currently buried under orchestration homework.

I have the Kablam setup in progress so fingers crossed I can make it available via print-on-demand at Indyplanet in the nebulous future.

Preview & update notifications at Buttondown. (This is an email newsletter, but it's archived online. You do not need to sign up.)

Investigating a forged PDF

Sep. 24th, 2025 12:24 pm[personal profile] mjg59
I had to rent a house for a couple of months recently, which is long enough in California that it pushes you into proper tenant protection law. As landlords tend to do, they failed to return my security deposit within the 21 days required by law, having already failed to provide the required notification that I was entitled to an inspection before moving out. Cue some tedious argumentation with the letting agency, and eventually me threatening to take them to small claims court.

This post is not about that.

Now, under Californian law, the onus is on the landlord to hold and return the security deposit - the agency has no role in this. The only reason I was talking to them is that my lease didn't mention the name or address of the landlord (another legal violation, but the outcome is just that you get to serve the landlord via the agency). So it was a bit surprising when I received an email from the owner of the agency informing me that they did not hold the deposit and so were not liable - I already knew this.

The odd bit about this, though, is that they sent me another copy of the contract, asserting that it made it clear that the landlord held the deposit. I read it, and instead found a clause reading SECURITY: The security deposit will secure the performance of Tenant’s obligations. IER may, but will not be obligated to, apply all portions of said deposit on account of Tenant’s obligations. Any balance remaining upon termination will be returned to Tenant. Tenant will not have the right to apply the security deposit in payment of the last month’s rent. Security deposit held at IER Trust Account., where IER is International Executive Rentals, the agency in question. Why send me a contract that says you hold the money while you're telling me you don't? And then I read further down and found this:
Text reading ENTIRE AGREEMENT: The foregoing constitutes the entire agreement between the parties and may bemodified only in writing signed by all parties. This agreement and any modifications, including anyphotocopy or facsimile, may be signed in one or more counterparts, each of which will be deemed anoriginal and all of which taken together will constitute one and the same instrument. The followingexhibits, if checked, have been made a part of this Agreement before the parties’ execution:۞Exhibit 1:Lead-Based Paint Disclosure (Required by Law for Rental Property Built Prior to 1978)۞Addendum 1 The security deposit will be held by (name removed) and applied, refunded, or forfeited in accordance with the terms of this lease agreement.
Ok, fair enough, there's an addendum that says the landlord has it (I've removed the landlord's name, it's present in the original).

Except. I had no recollection of that addendum. I went back to the copy of the contract I had and discovered:
The same text as the previous picture, but addendum 1 is empty
Huh! But obviously I could just have edited that to remove it (there's no obvious reason for me to, but whatever), and then it'd be my word against theirs. However, I'd been sent the document via RightSignature, an online document signing platform, and they'd added a certification page that looked like this:
A Signature Certificate, containing a bunch of data about the document including a checksum or the original
Interestingly, the certificate page was identical in both documents, including the checksums, despite the content being different. So, how do I show which one is legitimate? You'd think given this certificate page this would be trivial, but RightSignature provides no documented mechanism whatsoever for anyone to verify any of the fields in the certificate, which is annoying but let's see what we can do anyway.

First up, let's look at the PDF metadata. pdftk has a dump_data command that dumps the metadata in the document, including the creation date and the modification date. My file had both set to identical timestamps in June, both listed in UTC, corresponding to the time I'd signed the document. The file containing the addendum? The same creation time, but a modification time of this Monday, shortly before it was sent to me. This time, the modification timestamp was in Pacific Daylight Time, the timezone currently observed in California. In addition, the data included two ID fields, ID0 and ID1. In my document both were identical, in the one with the addendum ID0 matched mine but ID1 was different.

These ID tags are intended to be some form of representation (such as a hash) of the document. ID0 is set when the document is created and should not be modified afterwards - ID1 initially identical to ID0, but changes when the document is modified. This is intended to allow tooling to identify whether two documents are modified versions of the same document. The identical ID0 indicated that the document with the addendum was originally identical to mine, and the different ID1 that it had been modified.

Well, ok, that seems like a pretty strong demonstration. I had the "I have a very particular set of skills" conversation with the agency and pointed these facts out, that they were an extremely strong indication that my copy was authentic and their one wasn't, and they responded that the document was "re-sealed" every time it was downloaded from RightSignature and that would explain the modifications. This doesn't seem plausible, but it's an argument. Let's go further.

My next move was pdfalyzer, which allows you to pull a PDF apart into its component pieces. This revealed that the documents were identical, other than page 3, the one with the addendum. This page included tags entitled "touchUp_TextEdit", evidence that the page had been modified using Acrobat. But in itself, that doesn't prove anything - obviously it had been edited at some point to insert the landlord's name, it doesn't prove whether it happened before or after the signing.

But in the process of editing, Acrobat appeared to have renamed all the font references on that page into a different format. Every other page had a consistent naming scheme for the fonts, and they matched the scheme in the page 3 I had. Again, that doesn't tell us whether the renaming happened before or after the signing. Or does it?

You see, when I completed my signing, RightSignature inserted my name into the document, and did so using a font that wasn't otherwise present in the document (Courier, in this case). That font was named identically throughout the document, except on page 3, where it was named in the same manner as every other font that Acrobat had renamed. Given the font wasn't present in the document until after I'd signed it, this is proof that the page was edited after signing.

But eh this is all very convoluted. Surely there's an easier way? Thankfully yes, although I hate it. RightSignature had sent me a link to view my signed copy of the document. When I went there it presented it to me as the original PDF with my signature overlaid on top. Hitting F12 gave me the network tab, and I could see a reference to a base.pdf. Downloading that gave me the original PDF, pre-signature. Running sha256sum on it gave me an identical hash to the "Original checksum" field. Needless to say, it did not contain the addendum.

Why do this? The only explanation I can come up with (and I am obviously guessing here, I may be incorrect!) is that International Executive Rentals realised that they'd sent me a contract which could mean that they were liable for the return of my deposit, even though they'd already given it to my landlord, and after realising this added the addendum, sent it to me, and assumed that I just wouldn't notice (or that, if I did, I wouldn't be able to prove anything). In the process they went from an extremely unlikely possibility of having civil liability for a few thousand dollars (even if they were holding the deposit it's still the landlord's legal duty to return it, as far as I can tell) to doing something that looks extremely like forgery.

There's a hilarious followup. After this happened, the agency offered to do a screenshare with me showing them logging into RightSignature and showing the signed file with the addendum, and then proceeded to do so. One minor problem - the "Send for signature" button was still there, just below a field saying "Uploaded: 09/22/25". I asked them to search for my name, and it popped up two hits - one marked draft, one marked completed. The one marked completed? Didn't contain the addendum.

Perth

Sep. 24th, 2025 09:42 pm[personal profile] cosmolinguist

We're halfway(ish) home.

Fun fact: I didn't know there was a Perth besides the one in Australia until a few years ago. Possibly when the other two started breaking this journey here.

The trip was uneventful if hard on poor D, who hates driving and is exhausted. I'm glad he got a little nap on the ferry. The weather was beautiful: fluffy clouds, sun glittering in the blue water of the Minch as we crossed it. I didn't doze this time but listened to podcasts about baseball and had lots of feelings (I'm having so many baseball feelings lately!).

We've just been in so many places lately; all I wanted from this one is for there not to be too many weird stairs and there weren't any! Our room is cute and cozy. I also hope the shower isn't too haunted but I'm not awake enough or stinky enough to try that tonight.

Wild to think we'll be home tomorrow night. I am not excited to go back to work but I'm excited to know where everything is and how the shower works.

evil_plotbunny: (hallie)
My final five were:

Pennington Wise - Carolyn Wells
Girl Scouts Series - Margaret Vandercook
The Four Corners Series - Amy Ella Blanchard
Brooklyn Dodgers Series - John R. Tunis
Callendar Family Series - John Verney

So three from the long list and 2 that I thought of after. But I have nommed and placed these in the spreadsheet so I would have to make changes in several places if I change my mind.

Fun fact about my noms, the number of books in each series goes as follows:
8,5,8,8,5 (hey, at least I avoided the 20+ book series I'm prone to nominate).

Also L'shana tova | Happy New Year to all who celebrate. I'm going to try to get a general update post up sometime in the next week (new year's resolution).

Skylights

Sep. 20th, 2025 12:07 pm[personal profile] cosmolinguist

Our Airbnb is really nice, but possibly my favorite thing about it is how many skylights there are: each bedroom and the bathroom have one, the bathroom does, and the open-plan kitchen and living room has two or three.

The windows, here in this new-build block of flats, are as small and deep-set as in the blackhouses from hundreds of years ago that we saw in the folk museum. And for the same reason: the wind has been howling since we got here. The skylights allow a lot more natural light without so much wind. My eyes work best in daylight, so this is ideal.

Stirling crew

Sep. 16th, 2025 10:54 pm[personal profile] cosmolinguist

"There's a wee step here," D told me as we made our way out of the cemetery where we'd gone looking for the pyramid monument that he'd been alerted to on Pokémon Go.

He's often warning me of little things, potential hazards, like this as we're walking around so that wasn't remarkable at all.

What I remarked upon was the language. "Do we all get to say 'wee' now that we're in Scotland?" I asked. "I noticed V saying it earlier but didn't know if it applied to us too."

D had a ready answer. "Yes." It sounded very authoritative!

Stirling has been great. The trip here took an hour and a half longer than it should've thanks to spending that time at a standstill on the M6, thirteen miles back from something that'd happened near Tebay. So by the time we got here, checked in, and found some food, it was 8:30 and I was thinning about going to bed soon when D asked if I wanted to join him for a walk. We could walk down to the lively studenty area or uphill to the "Old Town," with things like the castle, a bunch of statues of old dudes with extravagantly Scottish names, and other touristy landmarks that were all closed and in the dark. But I've still enjoyed it a lot, I was introduced to the concept of a paneer burrito which I'm sad I can't have again in a hurry, and we did find a pub (a hotel bar actually) near the castle -- so close to it that it's called The Portcullis, because it was in the castle's portcullis.

And now I can use Scottish words for things, apparently! So that's nice.

andrewducker: (Hold Me)
Facebook reminds me that we had norovirus on this day in 2021 and 2023. Jane has spent the last 24 hours with D+V. What are the odds?

Steòrnabhagh

Sep. 22nd, 2025 11:25 pm[personal profile] cosmolinguist

A quiet day. I didn't sleep so I didn't feel very ambitious this morning. D had to work so I was happy to keep quiet and admire him at the kitchen table with his computer glasses and his headset on. At home he works in his own little room with his back to the door so it was kinda fun to just see him at work. Once he did the finger-snap/finger-guns thing that I recognize as meaning he's managed to do something satisfying on the computer; that was nice to see.

This afternoon V and I went for a little walk around: to An Lanntair ("The Lighthouse," an arts centre) where we bought fridge magnets and socks and admired sculptures wrapped in the distinctive red stripey foil from Tunnocks teacakes, how Scottish can you get. Then on to the sporting goods store, where I bought a t-shirt with a cute line drawing of blackhouses on it; it says "Western Isles." We admired them in the window the other day when the store was closed. They have one with a black pudding too but that isn't nearly as well-drawn or as appealing to me.

We went to Argos quickly to get a hand pump for the tires on V's new rollator, which turned up not long before we left home so this is its first outing. They're very happy with it as the bog-standard one they had before wasn't suited to their needs and caused almost as much pain to use as it alleviated. But one of the things that makes this one better is that it has pneumatic tires, rather than hard rubber ones; they'll absorb some of the shock rather than transferring it directly to poor V's arms. But we hadn't had a chance to pump up the tires before we left and V thought one of them needed it, hence the cheap pump. At home we have an automatic thing that we can use to pump up car and bike tires but we didn't bring it. Once we had the pump, V sat down on a bench outside Argos and I attempted to inflate the tires. They were all in pitiful condition and I marveled that the thing had been as useful for V as it has been. I ended up having to crawl around and just sit on the cool paving slabs to connect the pump, ha. Right there on the high street, I bet we'll be the talk of the town. I know how little it takes to do that in a small town -- I didn't realize quite how small but I just looked it up on Wikipedia and it's under seven thousand people. I feel like I've run into all of them the three times I've been at Tesco since we got here.

We failed to find the temporary location of a store that is run by someone from Minnesota who ended up here, which is the one thing remaining that the others have mentioned really hoping I get to see while I'm here. We have better intel now on exactly where it is, thanks to visiting V's son this evening (and thus I also got to finally meet his tuxedo cat Sam, who I've seen many many photos and videos of). So maybe we can manage that tomorrow, along with a plan to go to the castle. It's our last day here; I'm gonna miss it so much.

Equinox

Sep. 22nd, 2025 09:53 am[personal profile] smokingboot
smokingboot: (lushness)
There's always light, always darkness, always a door. May the turn of the year treat you well XX

Stones and structures

Sep. 21st, 2025 10:18 pm[personal profile] cosmolinguist

Sadly V wasn't well enough to go out with us today, but D and I went to see the Calanais standing stones and the broch Dùn Carloway.

Things so old, no one knows why they're like they were. Why use so much timber in a place with so few trees? Why build it so high?

The broch is 2000 years old and the stones were put there 5000 years ago, longer ago than the time since. And no one knows quite why. These things that will seem precious and exotic to the people on the big cruise ships that dock at Stornoway are so ordinary to the locals that V told me about a house they nearly bought when they lived on the island that had some standing stones on the property so one of the things to be aware of is that people might inadvertently wander through your yard.

Once when my parents were visiting, my mom gushed on the train back from Chester (I think, unless it was York) how neat it is that Ing-ga-land has all this hiss-tree until she said something like "We don't have anything like this at home" and I couldn't help but say something about how that was because of the genocide and colonialization. She changed the subject then.

I had to learn about things like Cahokia all by myself, we didn't get that in school!

Photo cross-post

Sep. 21st, 2025 10:25 am[personal profile] andrewducker
andrewducker: (Default)


We went up the hill. There were roses. Nobody knows why. Gideon has theories involving dead people.
Original is here on Pixelfed.scot.

jack: (Default)
To catch the last possible September afternoon, next weekend we'll be in the garden of the Green Dragon down by the river from about 1pm-5pm.

The pub opens from 12pm including Lebanese street food so some people may arrive earlier.

Everyone is welcome, including partners and children if you think they'd enjoy it. If you're not in Cambridge, you're very welcome but I don't expect you, we'll make time any time you are here! :)

(no subject)

Sep. 20th, 2025 07:21 am[personal profile] smokingboot
smokingboot: (dreams)
The man did not come back but the migraine did and KO'd me for all yesterday, meaning we had to cancel last night's meet up with friends. Annoying. I woke up with the edge of it not long ago. I wish I still had some of the pills they gave me after the op, the ones they warned me not to take unless things got intense. Things did so I did. Result; I am stuck with strong but ordinary painkillers rather than stuff that will send me to the moon.

As I write now, while there is nothing happening beyond a mild ache which hopefully will go away fast. I will walk this morning if I can. The success of my diet relies on me exercising as opposed to impersonating The Death of Chatterton in my front room.

Henry Wallis, Birmingham Museum version

Good dream though. I met Rex Harrison, we had been working on some project, but I have no memory of it. We were walking along and he told me in a very gentlemanly way that if we continued to spend time together, he would begin to have feelings for me/had begun to have feelings for me, something like that. So we parted, and I walked back to where I was staying. It was all thoroughly autumnal, and as I went in, I saw the hallway (which seemed to be in the basement somehow) was full of bicycles parked underneath people's people's coats, but leaves had blown in from the outside, very red and beautiful. Then I realised that I had been in Vietnam (?) for three months and it was time to go. I saw my mother, we were going to eat together and were discussing how to prepare the food delicately. She had no time for Rex's behaviour though, and raised her eyebrows in disapproval when told about it.

latest spinning

Sep. 19th, 2025 07:19 am[personal profile] yhlee
yhlee: Alto clef and whole note (middle C). (Default)
Ah, the art yarn of it all. :3

handspun yarn

2-ply from these singles:

Now I feel like I'm on vacation.

Profile

chess: (Default)
Michelle Taylor

January 2025

S M T W T F S
   1234
567891011
12131415161718
19202122232425
262728293031 

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Sep. 25th, 2025 04:04 am
Powered by Dreamwidth Studios