Pinboard (nathansmith)
https://pinboard.in/u:nathansmith/public/
recent bookmarks from nathansmithThe U.S. Government Is Lying About Anthropic's Mythos2026-06-15T03:30:36+00:00
https://johnqcryptid.substack.com/p/the-us-government-is-lying-about
nathansmithai justice psychology securityhttps://pinboard.in/u:nathansmith/b:7b08396c120a/Postmortem: TanStack npm supply-chain compromise | TanStack Blog2026-05-22T17:52:30+00:00
https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
nathansmithjavascript securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:c454ffbd84b2/TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...2026-05-16T16:19:56+00:00
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
nathansmithsecurity javascript node react share_with_kidshttps://pinboard.in/https://pinboard.in/u:nathansmith/b:67e25d08cea1/A single PR just hijacked the NPM registry... - YouTube2026-05-15T19:50:49+00:00
https://www.youtube.com/watch?v=gwTQLZSIlsU
nathansmithjavascript github node securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:b71ca5dc8fa5/Twin brothers wipe 96 gov't databases minutes after being fired - Ars Technica2026-05-15T16:15:43+00:00
https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
nathansmithsecurity humor justicehttps://pinboard.in/u:nathansmith/b:c270a6960952/How GitHub could secure npm - Human Who Codes2026-05-13T23:56:29+00:00
https://humanwhocodes.com/blog/2026/01/how-github-could-secure-npm/
nathansmithgit node securityhttps://pinboard.in/u:nathansmith/b:a86f62809eef/Hack Shuts Down Canvas, an Online System Used by Thousands of Schools | PCMag2026-05-08T14:31:43+00:00
https://www.pcmag.com/news/hack-shuts-down-canvas-an-online-system-used-by-thousands-of-schools
nathansmitheducation security psychologyhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:65d855aeab62/Researcher claims Claude Desktop installs “spyware” on macOS | Malwarebytes2026-04-29T12:11:58+00:00
https://www.malwarebytes.com/blog/news/2026/04/researcher-claims-claude-desktop-installs-spyware-on-macos
nathansmithai securityhttps://pinboard.in/u:nathansmith/b:b32ec81edb88/Manipulating AI memory for profit: The rise of AI Recommendation Poisoning | Microsoft Security Blog2026-03-24T15:29:11+00:00
https://www.microsoft.com/en-us/security/blog/2026/02/10/ai-recommendation-poisoning/
nathansmithai securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:50eaebd9684d/Troy Hunt: 2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned2026-03-09T19:35:40+00:00
https://www.troyhunt.com/2-billion-email-addresses-were-exposed-and-we-indexed-them-all-in-have-i-been-pwned/
nathansmithemail security googlehttps://pinboard.in/https://pinboard.in/u:nathansmith/b:aa301fab508b/Iran may be activating sleeper cells outside the country, alert says - ABC News2026-03-09T19:28:14+00:00
https://abcnews.com/US/iran-activating-sleeper-cells-alert/story?id=130897687
nathansmithpolitics war securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:99b9c08590f4/Proton Helped the FBI Unmask a Protester. Then Said They Didn't.2026-03-08T17:50:39+00:00
https://www.sambent.com/proton-helped-the-fbi-unmask-a-protester-then-said-they-didnt/
nathansmithsecurity justice share_with_kidshttps://pinboard.in/u:nathansmith/b:04d2970f24da/An Exploit ... in CSS?! | CSS-Tricks2026-02-27T13:33:51+00:00
https://css-tricks.com/an-exploit-in-css/
nathansmithcss security browsershttps://pinboard.in/https://pinboard.in/u:nathansmith/b:031e943d2a83/Firefox 148's setHTML: The XSS Protection We Should Have Had Years Ago | Muhammad Khan2026-02-27T02:57:19+00:00
https://mkweb.dev/blog/firefox-sethtml-xss-protection
nathansmithhtml javascript security browsershttps://pinboard.in/u:nathansmith/b:207e11e7473e/PoC Released for Critical Chrome 0-day Vulnerability Exploited in the Wild2026-02-27T02:56:41+00:00
https://cybersecuritynews.com/chrome-0-day-vulnerability-poc/
nathansmithsecurity google css browsershttps://pinboard.in/u:nathansmith/b:61ab2cf935cb/Meta Director of AI Safety Allows AI Agent to Accidentally Delete Her Inbox2026-02-24T03:37:19+00:00
https://www.404media.co/meta-director-of-ai-safety-allows-ai-agent-to-accidentally-delete-her-inbox/
nathansmithai humor securityhttps://pinboard.in/u:nathansmith/b:d915f68738c4/Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site2026-02-02T02:11:37+00:00
https://www.404media.co/exposed-moltbook-database-let-anyone-take-control-of-any-ai-agent-on-the-site/
nathansmithai humor securityhttps://pinboard.in/u:nathansmith/b:9c856a546d71/ClawdBot Skills Just Ganked Your Crypto | OpenSource Malware Blog2026-01-30T23:06:37+00:00
https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
nathansmithai security humor financehttps://pinboard.in/https://pinboard.in/u:nathansmith/b:d12ac2b411c0/How a Single Email Turned My ClawdBot Into a Data Leak | by William Peltomäki | Jan, 2026 | Medium2026-01-26T23:33:59+00:00
https://medium.com/@peltomakiw/how-a-single-email-turned-my-clawdbot-into-a-data-leak-1058792e783a
nathansmithsecurity ai humorhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:dbece53859c5/CodeBreach: Supply Chain Vuln & AWS CodeBuild Misconfig | Wiz Blog2026-01-26T14:49:21+00:00
https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild
nathansmithsecurity regex amazon githubhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:70e0b0e857e1/Gmail Account Lockout Hack Has No Fix — Google ‘Looking Into’ It2025-12-25T22:23:24+00:00
https://www.forbes.com/sites/daveywinder/2025/12/07/google-looking-into-gmail-hack-locking-users-out-with-no-recovery/
nathansmithgoogle securityhttps://pinboard.in/u:nathansmith/b:08086a082bb1/“New Ways to Corrupt LLMs” - by Gary Marcus - Marcus on AI2025-12-16T19:13:50+00:00
https://garymarcus.substack.com/p/new-ways-to-corrupt-llms
nathansmithai security humorhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:09c1c43b9729/Critical Security Vulnerability in React Server Components – React2025-12-04T17:24:23+00:00
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
nathansmithreact security javascript nodehttps://pinboard.in/https://pinboard.in/u:nathansmith/b:20edb1a92d89/GitLab discovers widespread npm supply chain attack2025-12-02T04:27:56+00:00
https://about.gitlab.com/blog/gitlab-discovers-widespread-npm-supply-chain-attack/
nathansmithjavascript node securityhttps://pinboard.in/u:nathansmith/b:c7c0821855ab/unwrap() Is Not the Villain - by Siddharth - Rust Everyday2025-11-22T00:09:41+00:00
https://rusteveryday.substack.com/p/unwrap-is-not-the-villain
nathansmithsecurity humor rusthttps://pinboard.in/https://pinboard.in/u:nathansmith/b:2eb528ba6dc7/Cloudflare outage on November 18, 20252025-11-22T00:09:34+00:00
https://blog.cloudflare.com/18-november-2025-outage/
nathansmithsecurity humor rusthttps://pinboard.in/https://pinboard.in/u:nathansmith/b:1f4726f16b33/Gmail can read your emails and attachments to train its AI, unless you opt out | Malwarebytes2025-11-21T21:46:25+00:00
https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off
nathansmithgoogle security ai justice emailhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:ffcc28fd8ee6/Removing XSLT for a more secure browser | Web Platform | Chrome for Developers2025-11-20T01:35:29+00:00
https://developer.chrome.com/docs/web-platform/deprecating-xslt
nathansmithxml security history google browsers javascripthttps://pinboard.in/https://pinboard.in/u:nathansmith/b:d98871a5e4e3/FFmpeg to Google: Fund Us or Stop Sending Bugs - The New Stack2025-11-13T12:32:13+00:00
https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-sending-bugs/
nathansmithgoogle security workflow financehttps://pinboard.in/u:nathansmith/b:1fb32ed0a54b/Apple Accidentally Published App Store Web Source Code Online2025-11-12T16:21:39+00:00
https://www.macobserver.com/news/apple-accidentally-published-app-store-web-source-code-online/
nathansmithjavascript humor apple securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:e0216da11c67/One Tech Tip: Modern cars are spying on you. Here's what you can do about it2025-11-07T04:17:18+00:00
https://apnews.com/article/auto-car-privacy-3674ce59c9b30f2861d29178a31e6ab7
nathansmithbusiness securityhttps://pinboard.in/u:nathansmith/b:ab4d2ce15c9d/Gmail Passwords Confirmed Part Of 183 Million Account Infostealer Leak2025-10-29T02:31:06+00:00
https://www.forbes.com/sites/daveywinder/2025/10/27/gmail-passwords-confirmed-as-part-of-183-million-account-data-breach/
nathansmithgoogle securityhttps://pinboard.in/u:nathansmith/b:17cd1d22b8d2/Secret Service dismantles threat around UN capable of crippling NYC cell service | AP News2025-09-24T12:19:26+00:00
https://apnews.com/article/unga-threat-telecom-service-sim-93734f76578bc9ca22d93a8e91fd9c76
nathansmithsecurity politicshttps://pinboard.in/u:nathansmith/b:2f36e59d396d/Pentagon Bans Tech Vendors From Using China-Based Personnel2025-09-19T11:38:39+00:00
https://www.propublica.org/article/pentagon-dod-microsoft-digital-escorts-china-ban-cybersecurity
nathansmithmicrosoft security justice politicshttps://pinboard.in/u:nathansmith/b:10a719785ca7/The Productivity Paradox of AI Coding Assistants | Cerbos2025-09-17T10:59:51+00:00
https://www.cerbos.dev/blog/productivity-paradox-of-ai-coding-assistants
nathansmithai security workflowhttps://pinboard.in/u:nathansmith/b:f7ffb5b61057/CrowdStrike npm Packages Compromised in Ongoing Supply Chain Attack2025-09-16T19:05:16+00:00
https://cybersecuritynews.com/npm-supply-chain-attack-crowdstrike/
nathansmithnode javascript securityhttps://pinboard.in/u:nathansmith/b:083ccc6f70ac/US tech companies enabled the surveillance and detention of hundreds of thousands in China2025-09-09T11:11:05+00:00
https://apnews.com/article/chinese-surveillance-silicon-valley-uyghurs-tech-xinjiang-8e000601dadb6aea230f18170ed54e88
nathansmithjustice business security politicshttps://pinboard.in/u:nathansmith/b:c1b05c56f0fa/South Koreans feel betrayed after hundreds of workers were detained in a plant raid in Georgia2025-09-08T16:20:00+00:00
https://apnews.com/article/south-korea-us-georgia-raid-hyundai-24d990562f5ac20e7d3e983a77a4f7ff
nathansmithsecurity politics business justicehttps://pinboard.in/u:nathansmith/b:e2de32a9d8b5/Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet | Brave2025-09-07T15:21:26+00:00
https://brave.com/blog/comet-prompt-injection/
nathansmithai humor security share_with_kidshttps://pinboard.in/u:nathansmith/b:07a7746ded2e/DOD: Microsoft’s Use of China-Based Engineers Was “Breach of Trust”2025-08-31T18:37:14+00:00
http://DOD:%20Microsoft%E2%80%99s%20Use%20of%20China-Based%20Engineers%20Was%20%E2%80%9CBreach%20of%20Trust%E2%80%9D
nathansmithmicrosoft security politicshttps://pinboard.in/u:nathansmith/b:295eafa613e4/Apple vs. Facebook is Kayfabe - Infrequently Noted2025-08-27T03:23:48+00:00
https://infrequently.org/2025/08/apple-vs-fb-kayfabe/
nathansmithsecurity apple mobilehttps://pinboard.in/u:nathansmith/b:72dfe1c05705/SpyVPN: The Google-Featured VPN That Secretly Captures Your Screen | Koi Blog2025-08-20T16:18:19+00:00
https://koi-security.webflow.io/blog/spyvpn-the-vpn-that-secretly-captures-your-screen
nathansmithsecurity browsers googlehttps://pinboard.in/u:nathansmith/b:71f16d433ef6/These Dangerous Scammers Don’t Even Bother to Hide Their Crimes | WIRED2025-08-13T18:41:33+00:00
https://www.wired.com/story/yahoo-boys-scammers-facebook-telegram-tiktok-youtube/
nathansmithsecurity psychology justicehttps://pinboard.in/https://pinboard.in/u:nathansmith/b:df6256f3bfa9/Teenage boys are dying by suicide after sextortion scams online2025-08-13T17:24:09+00:00
https://www.usatoday.com/story/life/health-wellness/2025/02/25/teenage-boys-mental-health-suicide-sextortion-scams/78258882007/
nathansmithsecurity psychology justicehttps://pinboard.in/https://pinboard.in/u:nathansmith/b:5b45c8349a5b/How Russia reins in the internet by blocking websites and isolating it from the rest of the world2025-08-05T18:45:15+00:00
https://apnews.com/article/russia-internet-censorship-social-media-youtube-web-2b3c7ca90f83573be7af7f3fc20f9ecd
nathansmithpolitics securityhttps://pinboard.in/u:nathansmith/b:76352e3875d0/Microsoft “Digital Escorts” Could Expose Defense Dept. Data to Chinese Hackers2025-07-15T11:23:24+00:00
https://www.propublica.org/article/microsoft-digital-escorts-pentagon-defense-department-china-hackers
nathansmithmicrosoft security interview politicshttps://pinboard.in/u:nathansmith/b:0eb5f7270284/The zero-day that could've compromised every Cursor and Windsurf user2025-07-12T02:42:27+00:00
https://www.bleepingcomputer.com/news/security/the-zero-day-that-couldve-compromised-every-cursor-and-windsurf-user/
nathansmithdevelopment securityhttps://pinboard.in/u:nathansmith/b:85c359cb20a3/Watch "Scammer Freaks Out after Epic Virus Hack!" on YouTube2025-07-03T16:14:43+00:00
https://www.youtube.com/watch?feature=shared&v=yLRJUI5VYOg
nathansmithvideo security humor share_with_kidshttps://pinboard.in/u:nathansmith/b:c2e32944919c/Next: Vanta — Sympolymathesy, by Chris Krycho2025-05-05T12:07:10+00:00
https://v5.chriskrycho.com/journal/next-vanta/
nathansmithdeveloper workflow securityhttps://pinboard.in/u:nathansmith/b:b5b545ac67d5/AI code suggestions sabotage software supply chain • The Register2025-04-20T22:30:00+00:00
https://www.theregister.com/2025/04/12/ai_code_suggestions_sabotage_supply_chain/
nathansmithai security development workflowhttps://pinboard.in/u:nathansmith/b:9109c6c4fdd3/Fake job seekers use AI to interview for remote jobs, tech CEOs say2025-04-12T22:05:51+00:00
https://www.cnbc.com/2025/04/08/fake-job-seekers-use-ai-to-interview-for-remote-jobs-tech-ceos-say.html
nathansmithsecurity justicehttps://pinboard.in/u:nathansmith/b:f3af4e8a882c/Everything you say to your Echo will be sent to Amazon starting on March 28 - Ars Technica2025-03-30T16:01:12+00:00
https://arstechnica.com/gadgets/2025/03/everything-you-say-to-your-echo-will-be-sent-to-amazon-starting-on-march-28/
nathansmithai amazon securityhttps://pinboard.in/u:nathansmith/b:35f055050324/Malware found on npm infecting local package with reverse shell2025-03-26T17:52:30+00:00
https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell
nathansmithnode javascript securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:17da407cec55/AI haters build tarpits to trap and trick AI scrapers that ignore robots.txt - Ars Technica2025-03-24T00:16:54+00:00
https://arstechnica.com/tech-policy/2025/01/ai-haters-build-tarpits-to-trap-and-trick-ai-scrapers-that-ignore-robots-txt/
nathansmithai security humorhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:94e797042377/Cloudflare turns AI against itself with endless maze of irrelevant facts - Ars Technica2025-03-24T00:09:59+00:00
https://arstechnica.com/ai/2025/03/cloudflare-turns-ai-against-itself-with-endless-maze-of-irrelevant-facts/
nathansmithai security humorhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:54ffaa384b7c/Next.js and the corrupt middleware: the authorizing artifact - zhero_web_security2025-03-23T18:31:15+00:00
https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware
nathansmithreact javascript node securityhttps://pinboard.in/u:nathansmith/b:b06fcbef095c/Buying browser extensions for fun and profit | Secure Annex2025-03-19T01:07:27+00:00
https://secureannex.com/blog/buying-browser-extensions
nathansmithbrowsers securityhttps://pinboard.in/u:nathansmith/b:4f604a70927e/Lawsuit Alleges $12 Billion "Unicorn" Deel Cultivated Spy, Orchestrated Long-Running Trade-Secret Theft & Corporate Espionage Against Competitor | Rippling2025-03-17T20:46:01+00:00
https://www.rippling.com/blog/lawsuit-alleges-12-billion-unicorn-deel-cultivated-spy-orchestrated-long-running-trade-secret-theft-corporate-espionage-against-competitor
nathansmithbusiness security justicehttps://pinboard.in/u:nathansmith/b:34058f298bb9/Password reuse is rampant: nearly half of observed user logins are compromised2025-03-17T16:38:21+00:00
https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/
nathansmithsecurity workflowhttps://pinboard.in/u:nathansmith/b:0c377c7cdc22/Developer convicted for “kill switch” code activated upon his termination - Ars Technica2025-03-16T03:16:38+00:00
https://arstechnica.com/tech-policy/2025/03/fired-coder-faces-10-years-for-revenge-kill-switch-he-named-after-himself/
nathansmithsecurity justicehttps://pinboard.in/u:nathansmith/b:a88e9d2c13e7/Apple patches 0-day exploited in “extremely sophisticated attack” - Ars Technica2025-03-12T11:41:42+00:00
https://arstechnica.com/security/2025/03/apple-patches-0-day-exploited-in-extremely-sophisticated-attack/
nathansmithapple ios mobile securityhttps://pinboard.in/u:nathansmith/b:fa36ab03340d/AI fakers exposed in tech dev recruitment: postmortem2025-03-11T18:36:09+00:00
https://newsletter.pragmaticengineer.com/p/ai-fakers
nathansmithinterview security workflowhttps://pinboard.in/u:nathansmith/b:5c56facd104b/Abusing VS Code's Bootstrapping Functionality To Quietly Load Malicious Extensions :: Cas van Cooten2025-03-04T23:59:10+00:00
https://casvancooten.com/posts/2025/02/abusing-vs-codes-bootstrapping-functionality-to-quietly-load-malicious-extensions/
nathansmithmicrosoft security workflowhttps://pinboard.in/u:nathansmith/b:878d60bb1749/Magento Credit Card Stealer Disguised in an <img> Tag2025-02-21T05:36:35+00:00
https://blog.sucuri.net/2025/02/magento-credit-card-stealer-disguised-in-an-tag.html
nathansmithsecurity html javascripthttps://pinboard.in/u:nathansmith/b:596852cb6411/almost_pwned.md · GitHub2025-01-27T11:00:21+00:00
https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4
nathansmithgoogle securityhttps://pinboard.in/u:nathansmith/b:0015b8af21a6/AI with "voice theft" audio cloning2025-01-05T20:39:01+00:00
https://www.linkedin.com/posts/amanmibra_its-2025-and-voice-theft-is-here-and-its-ugcPost-7280625368284184577-8V22
nathansmithvideo ai share_with_kids securityhttps://pinboard.in/u:nathansmith/b:81606a25e674/Every public gathering is a large target and a small act of defiance2025-01-02T19:21:21+00:00
https://www.washingtonpost.com/sports/2025/01/02/sugar-bowl-fans-safety/
nathansmithwriting security psychologyhttps://pinboard.in/u:nathansmith/b:87c1ca452c9a/Exposing the Honey Influencer Scam2024-12-24T01:34:06+00:00
https://www.youtube.com/watch?v=vc4yL3YTwWk&feature=youtu.be
nathansmithvideo share_with_kids securityhttps://pinboard.in/u:nathansmith/b:a1fe30a1d96f/Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack2024-12-23T05:25:54+00:00
https://thehackernews.com/2024/12/rspack-npm-packages-compromised-with.html
nathansmithjavascript security nodehttps://pinboard.in/u:nathansmith/b:e474db767781/Obama says passwords aren’t strong enough, urges use of 2FA – Sophos News2024-12-13T18:37:37+00:00
https://news.sophos.com/en-us/2016/02/12/obama-says-passwords-arent-strong-enough-urges-use-of-2fa/
nathansmithpolitics history securityhttps://pinboard.in/https://pinboard.in/u:nathansmith/b:81950381754a/