Pinboard (rcrowley)
https://pinboard.in/u:rcrowley/public/
recent bookmarks from rcrowleyGitHub - zizmorcore/zizmor: Static analysis for GitHub Actions · GitHub2026-06-01T21:07:08+00:00
https://github.com/zizmorcore/zizmor
rcrowleyzizmor github githubactions securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:ffba00af92cf/Everything Is Broken. Once upon a time, a friend of mine… | by Quinn Norton | The Message | Medium2026-05-04T22:33:26+00:00
https://medium.com/message/everything-is-broken-81e5f33a24e1
rcrowleycomputing security privacyhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:c25db0dd724c/A Cryptography Engineer’s Perspective on Quantum Computing Timelines2026-04-26T19:24:19+00:00
https://words.filippo.io/crqc-timeline/
rcrowleycrypto postquantum quantum securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:4843480564be/OAuth 2.0 vs OAuth 2.1: What changed, why it matters, and how to upgrade — WorkOS2026-04-26T16:55:59+00:00
https://workos.com/blog/oauth-2-1-vs-oauth-2-0
rcrowleyoauth security auth authentication authorizationhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:11be1c61cab2/Delve sets the record straight on anonymous attacks | Delve2026-04-24T03:18:44+00:00
https://delve.co/blog/delve-sets-the-record-straight-on-anonymous-attacks
rcrowleydelve compliance soc2 iso27001 security fraudhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:3059277263a6/Response to Misleading Claims | Delve2026-04-24T03:13:37+00:00
https://delve.co/blog/response-to-misleading-claims
rcrowleydelve compliance soc2 iso27001 security fraudhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a09e6fbcc4ca/If it could have, why didn't it? · Alex Gaynor2026-04-22T15:00:49+00:00
https://alexgaynor.net/2026/apr/13/why-didnt-it/
rcrowleyvulnerability staticanalysis security alexgaynorhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:cd897835d13f/Brocards for vulnerability triage2026-04-14T12:27:08+00:00
https://blog.yossarian.net/2026/04/11/Brocards-for-vulnerability-triage
rcrowleysecurity vulnerabilityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:6757a755b70e/Claude Mythos Preview red.anthropic.com2026-04-10T22:27:47+00:00
https://red.anthropic.com/2026/mythos-preview/
rcrowleyanthropic claude mythos ai ml llm vulnerability zeroday securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:75778ad9983e/How We Hacked McKinsey's AI Platform — CodeWall.ai2026-03-12T04:06:20+00:00
https://codewall.ai/blog/how-we-hacked-mckinseys-ai-platform
rcrowleymckinsey security aihttps://pinboard.in/https://pinboard.in/u:rcrowley/b:e78a9c2b91d8/A GitHub Issue Title Compromised 4,000 Developer Machines | grith2026-03-06T04:34:52+00:00
https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another
rcrowleysecurity github githubactions ai llm agent npm cline openclawhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:7d9a555ac208/20 Years of Digital Life, Gone in an Instant, thanks to Apple | hey.paris2025-12-14T16:05:08+00:00
https://hey.paris/posts/appleid/
rcrowleyapple icloud security identity fraudhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:16abc4e129c1/We should all be using dependency cooldowns2025-11-29T22:18:02+00:00
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
rcrowleydeps supplychain securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:391549946d20/SupaPwn: Hacking Our Way into Lovable's Office and Helping Secure Supabase | Hacktron AI2025-11-19T01:16:11+00:00
https://www.hacktron.ai/blog/supapwn
rcrowleysupabase postgres securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:efbaade71555/Fil-C2025-11-15T17:37:14+00:00
https://fil-c.org/
rcrowleyc c++ fil-c memory safety security compilerhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:066d6e890453/White Noise2025-09-23T17:31:29+00:00
https://www.whitenoise.chat/
rcrowleywhitenoise nostr security privacy chat bitcoinhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:8c87a9df71c7/La Suite numérique2025-04-24T16:26:12+00:00
https://lasuite.numerique.gouv.fr/en
rcrowleyproductivity wordprocessing googledocs google microsoft antitrust security privacy francehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:b5910f09a493/CVE Foundation2025-04-16T15:46:17+00:00
https://www.thecvefoundation.org/
rcrowleycve security mitre vulnerabilityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a7ab2d58294d/"No way to prevent this" say users of only language where this regularly happens - Xe Iaso2025-03-26T17:15:38+00:00
https://xeiaso.net/shitposts/no-way-to-prevent-this/CVE-2025-0725/
rcrowleyc memory safety securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:f310aae95270/Centralize root access for member accounts - AWS Identity and Access Management2024-11-25T15:14:49+00:00
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-enable-root-access.html
rcrowleyaws organizations iam sts securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:3922e921a3c0/Speeding up Linux disk encryption2024-11-13T07:45:58+00:00
https://blog.cloudflare.com/speeding-up-linux-disk-encryption/
rcrowleylinux dmcrypt luks crypto security perf cloudflarehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:88c473025f20/Huge performance impact of dm-crypt on SSD RAID : r/linuxadmin2024-11-13T07:45:42+00:00
https://www.reddit.com/r/linuxadmin/comments/m3gy8a/huge_performance_impact_of_dmcrypt_on_ssd_raid/
rcrowleylinux dmcrypt luks crypto security perfhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a4a8af7f2aaa/Home | MIT Secure Hardware Design2024-11-11T15:42:21+00:00
https://shd.mit.edu/
rcrowleymit hardware securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:5ad4682f4f3d/Why I Came Out of (Pseudo) Retirement to Help Solve the Non-Human Identity Challenge as Aembit's CISO Why I Came Out of (Pseudo) Retirement to Help Solve the Non-Human Identity Challenge2024-10-16T06:18:39+00:00
https://aembit.io/blog/why-i-came-out-of-pseudo-retirement-to-help-solve-the-non-human-identity-challenge-as-aembits-ciso/
rcrowleysecurity identity iam marioduartehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:176c38f7e773/Macaroons Escalated Quickly · The Fly Blog2024-08-16T23:45:02+00:00
https://fly.io/blog/macaroons-escalated-quickly/
rcrowleymacaroons flyio security cryptohttps://pinboard.in/https://pinboard.in/u:rcrowley/b:2d1a6c02abe7/GEOMYS, A BLUEPRINT FOR A SUSTAINABLE OPEN SOURCE MAINTENANCE FIRM2024-07-09T04:23:15+00:00
https://words.filippo.io/dispatches/geomys/
rcrowleyopensource geomys golang security cryptohttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a60e903d8c16/Blog - Private Cloud Compute: A new frontier for AI privacy in the cloud - Apple Security Research2024-06-11T03:41:51+00:00
https://security.apple.com/blog/private-cloud-compute/
rcrowleyapple encryption ai ml sgx pcc security privacyhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:1f56931d3581/Shortridge Makes Sense of the 2024 Verizon DBIR | Sensemaking by Shortridge2024-05-02T05:25:20+00:00
https://kellyshortridge.com/blog/posts/shortridge-makes-sense-of-verizon-dbir-2024/
rcrowleyverizon dbir securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:efb6dc557773/ongoing by Tim Bray · OSQI2024-04-22T04:58:59+00:00
https://www.tbray.org/ongoing/When/202x/2024/04/01/OSQI
rcrowleyosqi timbray software supplychain safety security quality qa opensource infrastructurehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:ba7219da3b4e/#1068024 - revert to version that does not contain changes by bad actor - Debian Bug report logs2024-04-02T03:35:33+00:00
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024
rcrowleyxz linux debian security packaging versioninghttps://pinboard.in/https://pinboard.in/u:rcrowley/b:810c75fc6635/amlweems/xzbot: notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)2024-04-02T03:25:33+00:00
https://github.com/amlweems/xzbot
rcrowleyxz linux securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:4f2abaadcfd8/How to find the AWS Account ID of any S3 Bucket2024-02-28T20:44:27+00:00
https://tracebit.com/blog/2024/02/finding-aws-account-id-of-any-s3-bucket/
rcrowleyaws cloudtrail iam s3 security sidechannelhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:af5cdd37e711/Summit Route - Managing AWS root passwords and MFA2023-11-24T22:40:03+00:00
https://summitroute.com/blog/2018/06/20/managing_aws_root_passwords_and_mfa/?ck_subscriber_id=512833553
rcrowleyaws security 2fa totphttps://pinboard.in/https://pinboard.in/u:rcrowley/b:355b5a821b08/maxgoedjen/secretive: Store SSH keys in the Secure Enclave2023-11-15T22:54:11+00:00
https://github.com/maxgoedjen/secretive
rcrowleyssh tpm hsm security mac macoshttps://pinboard.in/https://pinboard.in/u:rcrowley/b:f9354a8c582e/GitHub - primeharbor/sensitive_iam_actions: Crowdsourced list of sensitive IAM Actions2023-09-27T19:37:09+00:00
https://github.com/primeharbor/sensitive_iam_actions
rcrowleyaws iam securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:3bf08ac9be7a/Tools That Use AWS Logs to Help with Least Privilege2023-09-27T01:17:33+00:00
https://blog.symops.com/2022/05/06/least-privilege-policies-from-aws-logs/
rcrowleyaws iam leastprivilege security policyhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:e23dae0504c4/Defining the Sensitive IAM Actions - Chris Farris2023-09-03T20:55:21+00:00
https://www.chrisfarris.com/post/sensitive_iam_actions/?ck_subscriber_id=512833553
rcrowleyaws securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:c1c5fe3a7dfc/GitHub - Netflix/weep: The ConsoleMe CLI utility2023-07-07T21:35:42+00:00
https://github.com/Netflix/weep
rcrowleynetflix aws iam security aaahttps://pinboard.in/https://pinboard.in/u:rcrowley/b:507ec969e698/GitHub - Netflix/consoleme: A Central Control Plane for AWS Permissions and Access2023-07-07T21:34:58+00:00
https://github.com/Netflix/consoleme
rcrowleynetflix aws iam security aaahttps://pinboard.in/https://pinboard.in/u:rcrowley/b:b04a51d914b7/All About TPMs2023-05-23T22:37:06+00:00
https://smallstep.com/blog/trusted-platform-modules-tpms/
rcrowleysmallstep tpm crypto security secureboot linux pkcs11https://pinboard.in/https://pinboard.in/u:rcrowley/b:af3781b72bdd/Prompt injection: What’s the worst that can happen?2023-05-03T16:42:47+00:00
https://simonwillison.net/2023/Apr/14/worst-that-can-happen/
rcrowleyai ml llm openai chatgpt gpt3 gpt4 simonw promptinjection securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:c61467bdfb59/April King — Refresh vs. Long-lived Access Tokens2023-04-19T18:37:04+00:00
https://grayduck.mn/2023/04/17/refresh-vs-long-lived-access-tokens/
rcrowleyoauth oauth2 oauthoidc securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:9a7df60be43d/Fish in a Barrel2023-04-15T14:52:32+00:00
https://fishinabarrel.github.io/
rcrowleymemory c++ c memorysafety security fuzzing cve alexgaynorhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:b29781997c2d/Opal | Access Management Platform | Scalable Least Privilege2023-03-26T17:18:54+00:00
https://opal.dev/
rcrowleyacl authorization aaa opal security approval workflow indenthttps://pinboard.in/https://pinboard.in/u:rcrowley/b:0f09d0b35b28/Antimatter provably secures customer data in B2B SaaS2023-03-09T06:47:03+00:00
https://www.antimatter.io/
rcrowleyantimatter ekm securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:68d9b51cb97f/Let's build a Chrome extension that steals everything2023-02-23T01:55:06+00:00
https://mattfrisbie.substack.com/p/spy-chrome-extension
rcrowleychrome extension security exfiltrationhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:ead4053f2af1/macos - How to remove Quarantine from file permissions in OS X - Super User2023-02-09T19:24:54+00:00
https://superuser.com/questions/526920/how-to-remove-quarantine-from-file-permissions-in-os-x
rcrowleymacos mac xattr security quarantine apple safarihttps://pinboard.in/https://pinboard.in/u:rcrowley/b:3935f67c2fd9/Building the first memory safe distro2023-02-06T05:31:22+00:00
https://www.chainguard.dev/unchained/building-the-first-memory-safe-distro-wolfi
rcrowleychainguard wolfi linux rust rustls tls curl memory safety securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:0a0bda4dd695/[2211.03622] Do Users Write More Insecure Code with AI Assistants?2023-01-20T18:22:14+00:00
https://arxiv.org/abs/2211.03622
rcrowleyai openai codex stanford danboneh securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:aab29a522787/Prompt injection attacks against GPT-32022-12-06T21:30:39+00:00
https://simonwillison.net/2022/Sep/12/prompt-injection/
rcrowleyai gpt gpt3 chatcpt promptinjection securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:6e26186181a9/OpenSSL gave everyone alarm fatigue - Xe2022-11-02T03:39:20+00:00
https://xeiaso.net/blog/openssl-alarm-fatigue
rcrowleyopenssl security vulnerability incidentresponsehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:23e421fc49e2/PostgreSQL: Documentation: 14: 5.8. Row Security Policies2022-10-04T06:22:14+00:00
https://www.postgresql.org/docs/current/ddl-rowsecurity.html
rcrowleypostgres sql securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:870d5b000a74/PostgreSQL Row Level Security (RLS): Basics and Examples2022-10-04T06:21:08+00:00
https://satoricyber.com/postgres-security/postgres-row-level-security/
rcrowleypostgres securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:aefcf784e297/VivoKey Cryptobionic Identity2022-09-20T16:53:57+00:00
https://www.vivokey.com/
rcrowleybiometric implant 2fa securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:029549b91a64/Go Vulnerability Management - The Go Programming Language2022-09-20T03:44:22+00:00
https://go.dev/security/vuln/
rcrowleygolang securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:df4d80b1b238/Securing the Software Supply Chain: Recommended Practices Guide for Developers - ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.PDF2022-09-17T04:20:35+00:00
https://media.defense.gov/2022/Sep/01/2003068942/-1/-1/0/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.PDF
rcrowleysecurityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:74af02fe85ed/Securing the Supply Chain of Nothing | Kelly Shortridge2022-09-17T04:09:36+00:00
https://swagitda.com/blog/posts/securing-the-supply-chain-of-nothing/
rcrowleysecurityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:6f0fd3e49afe/Skyflow - What if privacy had an API?2022-08-19T12:48:33+00:00
https://www.skyflow.com/
rcrowleyekm skyflow security privacyhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:6358dc7a9c86/A Roadmap to Zero Trust Architecture2022-08-19T04:13:58+00:00
https://zerotrustroadmap.org/
rcrowleyarchitecture security zerotrust cloudflarehttps://pinboard.in/https://pinboard.in/u:rcrowley/b:aaf099af0c22/Pluralistic: 15 Aug 2022 – Pluralistic: Daily links from Cory Doctorow2022-08-15T20:01:02+00:00
https://pluralistic.net/2022/08/15/deere-in-headlights/#doh-a-deere
rcrowleyjohndeere security defcon fvsrhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:9801fd685bcb/SLSA • Supply-chain Levels for Software Artifacts2022-08-09T15:21:55+00:00
https://slsa.dev/
rcrowleyslsa security supplychain chainguardhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:5ad5ab30f9f0/Starting Up Security2022-08-06T19:16:47+00:00
https://scrty.io/
rcrowleysecurityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:2f7b51d57dad/SOC2: The Screenshots Will Continue Until Security Improves · Fly2022-07-13T13:53:33+00:00
https://fly.io/blog/soc2-the-screenshots-will-continue-until-security-improves/
rcrowleysoc2 compliance fly securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:d185aeec5844/When Soatok Used Bugcrowd - Dhole Moments2022-06-16T08:16:27+00:00
https://soatok.blog/2022/06/14/when-soatok-used-bugcrowd/
rcrowleybugcrowd bugbounty security cryptohttps://pinboard.in/https://pinboard.in/u:rcrowley/b:9a0d2e4b1c88/Throw Away The Password To Your AWS Account - Alestic.com2022-05-18T22:21:20+00:00
https://alestic.com/2014/09/aws-root-password/?ck_subscriber_id=512833553
rcrowleyaws password securityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a67ef424b23c/Secure Your Cloud. Identity First. - Ermetic2022-05-13T03:41:42+00:00
https://ermetic.com/
rcrowleyermetic aws gcp azure iam security ciemhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:e8611cf1f5f6/Ockam | Homepage2022-05-02T04:50:45+00:00
https://www.ockam.io/
rcrowleyockam smallstep nebula security identityhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:4d36f1b4479e/Minimum Viable Secure Product2022-04-28T04:31:01+00:00
https://mvsp.dev/
rcrowleysecurity questionnaire infosec compliance risk mvsp caiqhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:a2f3332969e4/CVE-2022-21449: Psychic Signatures in Java – Neil Madden2022-04-20T02:00:20+00:00
https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/
rcrowleyjava jvm crypto security ecdsahttps://pinboard.in/https://pinboard.in/u:rcrowley/b:d2a1a45217b5/Common Fate2022-04-20T00:41:11+00:00
https://commonfate.io/
rcrowleycommonfate aws iam security ciemhttps://pinboard.in/https://pinboard.in/u:rcrowley/b:0d41747c7e91/