Pinboard (cpswan)
https://pinboard.in/u:cpswan/
recent bookmarks from cpswan[priv] Patch the Planet: a Daybreak initiative to support open source maintainers2026-06-30T14:31:22+00:00
https://openai.com/index/patch-the-planet/
cpswanoss AI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:a78b10633e71/[priv] AISLE Discovers 6 CVEs in curl, Including Oldest Issue Ever2026-06-25T05:07:14+00:00
https://aisle.com/blog/aisle-discovers-6-new-cves-in-curl-including-the-oldest-issue-ever-reported
cpswanAI securityhttps://pinboard.in/u:cpswan/b:4c87d06899e5/[priv] The Security Industry Stole My Motorbike2026-06-23T07:09:17+00:00
https://javvadmalik.com/2026/06/22/the-security-industry-stole-my-motorbike/
cpswansecurity motorcyclehttps://pinboard.in/u:cpswan/b:cefb9e9a2f85/[priv] WhatsApp’s “End-to-End Encryption” Is the Biggest Lie in Tech History2026-06-22T15:36:21+00:00
https://medium.com/%400xaxgb/whatsapps-e2e-encryption-is-the-biggest-lie-in-tech-history-and-i-can-prove-it-mathematically-46ebdffeb319
cpswane2ee encryption security privacy facebookhttps://pinboard.in/https://pinboard.in/u:cpswan/b:74c241c22f64/[priv] The Fable 5 Export Controls Harm US Cyber Defense2026-06-15T16:08:11+00:00
https://www.lutasecurity.com/post/the-fable-5-export-controls-harm-us-cyber-defense
cpswansecurity AIhttps://pinboard.in/https://pinboard.in/u:cpswan/b:05477fc07ff0/Your Container Is Not a Sandbox: The State of MicroVM Isolation in 20262026-06-08T15:22:10+00:00
https://emirb.github.io/blog/microvm-2026/
cpswansecurity docker hypervisor kuberneteshttps://pinboard.in/https://pinboard.in/u:cpswan/b:dc6e2309ff11/[priv] The unintended consequences of vulnmaxxing2026-06-07T06:02:32+00:00
https://www.defendersinitiative.com/p/the-unintended-consequences-of-vulnmaxxing
cpswanAI securityhttps://pinboard.in/u:cpswan/b:88e1e070ffff/[priv] A Post-Quantum Future for Let's Encrypt2026-06-04T07:08:54+00:00
https://letsencrypt.org/2026/06/03/pq-certs
cpswanweb security encryption quantumhttps://pinboard.in/u:cpswan/b:d9d7c96003d7/[priv] Expanding Project Glasswing2026-06-02T15:25:05+00:00
https://www.anthropic.com/news/expanding-project-glasswing
cpswansecurity AIhttps://pinboard.in/https://pinboard.in/u:cpswan/b:77500cd5db9a/[priv] Project Glasswing: what Mythos showed us2026-05-26T14:08:47+00:00
https://blog.cloudflare.com/cyber-frontier-models/
cpswanAI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:7f086a5070a0/[priv] Project Glasswing: An initial update Anthropic2026-05-26T14:05:11+00:00
https://www.anthropic.com/research/glasswing-initial-update
cpswanAI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:d828c9a2c0c5/[priv] "Too Dangerous to Release" — Or Just Too Expensive? The Real Reason Anthropic Is Hiding Its Most Powerful AI2026-05-26T13:58:14+00:00
https://kingy.ai/ai/too-dangerous-to-release-or-just-too-expensive-the-real-reason-anthropic-is-hiding-its-most-powerful-ai/
cpswanAI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:b8b4d5cfae54/[priv] Mythos finds a curl vulnerability2026-05-11T07:43:02+00:00
https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/
cpswansecurity AI osshttps://pinboard.in/https://pinboard.in/u:cpswan/b:914661aefba8/[priv] Behind the Scenes Hardening Firefox with Claude Mythos Preview2026-05-08T07:42:47+00:00
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
cpswansecurity AIhttps://pinboard.in/u:cpswan/b:2c3a14ea30a4/[priv] GitHub RCE Vulnerability: CVE-2026-3854 Breakdown2026-04-28T20:08:08+00:00
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
cpswangit AI securityhttps://pinboard.in/u:cpswan/b:a78e1b8feedb/[priv] What the FCC router ban means for FOSS2026-04-26T08:02:21+00:00
https://sfconservancy.org/blog/2026/apr/02/fcc-router-ban/
cpswanoss OpenWRT security regulationhttps://pinboard.in/u:cpswan/b:4e861e5d4d1e/[priv] Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...2026-04-24T12:55:39+00:00
https://socket.dev/blog/bitwarden-cli-compromised
cpswansecurity supply-chainhttps://pinboard.in/https://pinboard.in/u:cpswan/b:98d4b30058b2/[priv] Government security vetting2026-04-23T09:21:42+00:00
https://www.instituteforgovernment.org.uk/explainer/government-security-vetting
cpswansecurity .govhttps://pinboard.in/https://pinboard.in/u:cpswan/b:b8c2a5a8bfe0/[priv] The Boy That Cried Mythos: Verification is Collapsing Trust in Anthropic2026-04-22T08:06:23+00:00
https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/
cpswanAI security trusthttps://pinboard.in/u:cpswan/b:e39aa335e71e/[priv] Dependency cooldowns turn you into a free-rider2026-04-15T13:41:07+00:00
https://calpaterson.com/deps.html
cpswansecurity supply-chainhttps://pinboard.in/https://pinboard.in/u:cpswan/b:1d4467d6509e/[priv] Our evaluation of Claude Mythos Preview’s cyber capabilities2026-04-14T05:25:38+00:00
https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities
cpswanAI securityhttps://pinboard.in/u:cpswan/b:3a4ed6732e56/[priv] Project Glasswing and open source: The good, bad, and ugly2026-04-11T19:32:03+00:00
https://www.theregister.com/2026/04/10/project_glasswing/
cpswanAI security osshttps://pinboard.in/u:cpswan/b:b93e3ed4af63/[priv] Jen Easterly - The Beginning of the end of Cybersecurity2026-04-11T03:46:17+00:00
https://www.linkedin.com/pulse/beginning-end-cybersecurity-jen-easterly-ch97c
cpswansecurity AI linkedinhttps://pinboard.in/u:cpswan/b:1a8429330c52/[priv] Open source security at Astral2026-04-09T09:04:12+00:00
https://astral.sh/blog/open-source-security-at-astral
cpswansecurity supply-chain github-actions cicd python osshttps://pinboard.in/https://pinboard.in/u:cpswan/b:7f5bdec31135/[priv] Security Titles2026-04-08T10:04:20+00:00
https://securitytitles.com/
cpswansecurity careerhttps://pinboard.in/https://pinboard.in/u:cpswan/b:106734cdb16e/[priv] Vulnerability Research Is Cooked2026-03-31T05:26:26+00:00
https://sockpuppet.org/blog/2026/03/30/vulnerability-research-is-cooked/
cpswanAI securityhttps://pinboard.in/u:cpswan/b:49493c9163d8/[priv] The Comforting Lie Of SHA Pinning2026-03-28T16:37:42+00:00
https://www.vaines.org/posts/2026-03-24-the-comforting-lie-of-sha-pinning/
cpswangit github-actions securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:280844f17baa/[priv] Slightly safer vibecoding by adopting old hacker habits2026-03-25T07:16:20+00:00
https://addxorrol.blogspot.com/2026/03/slightly-safer-vibecoding-by-adopting.html
cpswansecurity AI codinghttps://pinboard.in/u:cpswan/b:3fedb178a1a7/[priv] Strava trace for CDG carrier2026-03-20T06:32:28+00:00
https://bsky.app/profile/moll.dev/post/3mhgxnnaqqc2q
cpswannavy security privacy blueskyhttps://pinboard.in/u:cpswan/b:fc7c9810917d/[priv] I Almost Lost My Apple Account to the Most Sophisticated Phishing Attack I’ve Ever Experienced2026-02-20T22:30:11+00:00
https://medium.com/@eric.moret/i-almost-lost-my-apple-account-to-the-most-sophisticated-phishing-attack-ive-ever-seen-cff92a470950
cpswanApple securityhttps://pinboard.in/u:cpswan/b:33c312aec57a/[priv] Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers (pdf)2026-02-17T06:07:32+00:00
https://eprint.iacr.org/2026/058.pdf
cpswanencryption securityhttps://pinboard.in/u:cpswan/b:83d5001eac07/the problem isn’t OpenClaw. it’s the architecture.2026-02-16T17:15:45+00:00
https://www.vulnu.com/p/the-problem-isnt-openclaw-its-the-architecture
cpswanAI architecture security riskhttps://pinboard.in/https://pinboard.in/u:cpswan/b:bdea9090340f/[priv] A Refuge from the Sloppocalypse2026-02-07T07:01:06+00:00
https://www.cybrsecmedia.com/from-the-editor-a-refuge-from-the-sloppocalypse/
cpswanAI securityhttps://pinboard.in/u:cpswan/b:ebaf76d61fda/[priv] 100x Faster Security Reviews Powered by AI Agents & Expert Humans | SecurityPal2026-01-23T13:35:26+00:00
https://www.securitypalhq.com/
cpswansecurity compliancehttps://pinboard.in/https://pinboard.in/u:cpswan/b:257d5deb38dc/[priv] Claude magic strings2026-01-22T21:54:31+00:00
https://infosec.exchange/@morattisec/115929249640927958
cpswanAI securityhttps://pinboard.in/u:cpswan/b:4f557b46d0ec/[priv] Do *NOT* remove TLS Client Auth EKU!2026-01-16T11:20:33+00:00
https://community.letsencrypt.org/t/do-not-remove-tls-client-auth-eku/237427/91
cpswanpki web security googlehttps://pinboard.in/https://pinboard.in/u:cpswan/b:98f2dbe0d021/[priv] How the ClientAuth Crackdown Is Pushing Finance Toward X9 PKI2026-01-16T11:16:28+00:00
https://www.digicert.com/blog/how-the-clientauth-crackdown-is-pushing-finance-toward-x9-pki
cpswanpki security webhttps://pinboard.in/https://pinboard.in/u:cpswan/b:a35655fd7e7c/[priv] ACME CA Comparison2026-01-16T10:58:07+00:00
https://poshac.me/docs/latest/Guides/ACME-CA-Comparison/
cpswanweb securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:28217b1b03f2/[priv] Using Proxies to Hide Secrets from Claude Code2026-01-14T07:37:42+00:00
https://www.joinformal.com/blog/using-proxies-to-hide-secrets-from-claude-code/
cpswanAI securityhttps://pinboard.in/u:cpswan/b:184a0542c066/[priv] Sauron, the high-end home security startup for "super premium" customers, plucks a new CEO out of Sonos2025-12-29T07:03:58+00:00
https://techcrunch.com/2025/12/28/from-sonos-to-sauron-new-ceo-takes-on-high-end-home-security-startup-still-in-development/
cpswansecurityhttps://pinboard.in/u:cpswan/b:90c1bb666b44/The dangers of SSL certificates2025-12-28T07:37:46+00:00
https://surfingcomplexity.blog/2025/12/27/the-dangers-of-ssl-certificates/
cpswanrisk postmortem securityhttps://pinboard.in/u:cpswan/b:240d102e90fc/[priv] Acting CISA director failed a polygraph. Career staff are now under investigation.2025-12-22T16:20:57+00:00
https://www.politico.com/news/2025/12/21/cisa-acting-director-madhu-gottumukkala-polygraph-investigation-00701996
cpswantrump securityhttps://pinboard.in/u:cpswan/b:c5327095cbb5/[priv] Web PKI Ditches TLS Client Authentication2025-12-11T16:19:54+00:00
https://www.feistyduck.com/newsletter/issue_130_web_pki_ditches_tls_client_authentication
cpswanweb security pkihttps://pinboard.in/https://pinboard.in/u:cpswan/b:1649da782530/[priv] prompt injection attacks against language models aren't "social engineering"2025-12-10T17:29:55+00:00
https://hachyderm.io/@mttaggart@infosec.exchange/115696366882108390
cpswansecurity AIhttps://pinboard.in/https://pinboard.in/u:cpswan/b:49316935fb67/[priv] Deemed compliance with the UK IoT security requirement to have a relevant connectable product accompanied by a statement of compliance2025-12-06T08:03:50+00:00
https://decoded.legal/blog/2025/12/deemed-compliance-with-the-uk-iot-security-requirement-to-have-a-relevant-connectable-product-accompanied-by-a-statement-of-compliance/
cpswaniot securityhttps://pinboard.in/u:cpswan/b:ba5fb7528023/Why Agentic AI Can't Be Secured: The Pattern Matching Problem2025-12-03T11:42:25+00:00
https://thepuzzleanditspieces.substack.com/p/the-agent-that-wasnt-there
cpswanAI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:f00a49c9da5a/LLMs and the semantic revolution2025-11-29T02:47:27+00:00
https://apenwarr.ca/log/20251120
cpswanxml json bitcoin AI security integrationhttps://pinboard.in/u:cpswan/b:45cf6b6e4b30/Stop Hacklore!2025-11-26T15:27:30+00:00
https://www.hacklore.org/letter
cpswansecurityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:633dca0d3a83/[priv] The Security of Debian - An introduction to advanced users - DebConf252025-11-24T09:47:10+00:00
https://www.youtube.com/watch?v=WwHdQM5Z0jc
cpswandebian security videohttps://pinboard.in/https://pinboard.in/u:cpswan/b:04512ca042c5/[priv] Security of Debian (pdf slides)2025-11-24T09:46:40+00:00
https://samueloph.dev/personal_website_files/slides/samueloph_slides_2025_07_the_security_of_debian.pdf
cpswandebian securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:a185cb17ba66/[priv] We should all be using dependency cooldowns2025-11-21T15:04:42+00:00
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
cpswansecurityhttps://pinboard.in/u:cpswan/b:63c6b763fc52/[priv] Mitigating Risks From Bulletproof Hosting Providers (pdf)2025-11-19T15:52:25+00:00
https://www.cisa.gov/sites/default/files/2025-11/Bulletproof_Defense_Mitigating_Risks_from_Bulletproof_Hosting_Providers_508c.pdf
cpswansecurity telcohttps://pinboard.in/https://pinboard.in/u:cpswan/b:09982c8e0bbb/[priv] 3.5 Billion Accounts: Complete WhatsApp Directory Retrieved and Evaluated2025-11-19T13:54:46+00:00
https://www.heise.de/en/news/3-5-Billion-Accounts-Complete-WhatsApp-Directory-Retrieved-and-Evaluated-11083244.html
cpswanfacebook security privacyhttps://pinboard.in/https://pinboard.in/u:cpswan/b:323192e8155a/[priv] HOPE Hacking Conference Banned From University Venue Over Apparent ‘Anti-Police Agenda’2025-11-19T10:15:45+00:00
https://www.404media.co/hope-hacking-conference-banned-from-university-venue-over-apparent-anti-police-agenda/
cpswansecurity privacy facismhttps://pinboard.in/https://pinboard.in/u:cpswan/b:058b167d7fd8/[priv] "transparency is the currency of trust"2025-11-14T16:18:24+00:00
https://www.linkedin.com/posts/allanafriedman_sbom-ugcPost-7395120529789317120-2koz/?rcm=ACoAAAAAkrsBzQnp6yrMUEHAbQ4-kYshYr2hrnA
cpswansecurity sbd sbom trust linkedinhttps://pinboard.in/https://pinboard.in/u:cpswan/b:bb6ad89a53b2/[priv] The Internet Coup (pdf)2025-11-12T12:55:53+00:00
https://interseclab.org/wp-content/uploads/2025/09/The-Internet-Coup_September2025.pdf
cpswansecurity China privacy censorship vpnhttps://pinboard.in/https://pinboard.in/u:cpswan/b:29a2ba750d56/[priv] FFmpeg to Google: Fund Us or Stop Sending Bugs2025-11-11T19:55:23+00:00
https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-sending-bugs/
cpswanoss security googlehttps://pinboard.in/u:cpswan/b:544e5d6e1cb8/[priv] Hackers are attacking Britain’s drinking water suppliers2025-11-07T16:52:56+00:00
https://therecord.media/britain-water-supply-cybersecurity-incident-reports-dwi-nis
cpswanutilities securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:c7ce8925f4d9/[priv] Thousands of North Koreans have secretly infiltrated US and European companies as remote IT workers2025-11-06T16:55:19+00:00
https://this.weekinsecurity.com/thousands-of-north-koreans-have-secretly-infiltrated-us-and-european-companies-as-remote-it-workers/
cpswancrime security bitcoinhttps://pinboard.in/u:cpswan/b:50039e6c97cd/[priv] Agents Rule of Two: A Practical Approach to AI Agent Security2025-11-04T07:06:43+00:00
https://ai.meta.com/blog/practical-ai-agent-security/
cpswanAI securityhttps://pinboard.in/u:cpswan/b:01c29ae25459/[priv] Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline2025-11-02T16:16:43+00:00
https://www.tomshardware.com/tech-industry/big-tech/manufacturer-issues-remote-kill-command-to-nuke-smart-vacuum-after-engineer-blocks-it-from-collecting-data-user-revives-it-with-custom-hardware-and-python-scripts-to-run-offline
cpswanIoT securityhttps://pinboard.in/u:cpswan/b:b7acc5a8600b/[priv] New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel2025-10-29T21:39:32+00:00
https://arstechnica.com/security/2025/10/new-physical-attacks-are-quickly-diluting-secure-enclave-defenses-from-nvidia-amd-and-intel/
cpswanhardware security intelhttps://pinboard.in/u:cpswan/b:4cd8d73d0f70/Keeping the Internet fast and secure: introducing Merkle Tree Certificates2025-10-28T14:42:17+00:00
https://blog.cloudflare.com/bootstrap-mtc/
cpswanweb securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:e92fa4dcb72c/[priv] Many Unix tar programs leak...2025-10-26T22:32:51+00:00
https://hachyderm.io/@cliffle/115427478404896281
cpswanunix security mastodonhttps://pinboard.in/u:cpswan/b:a1eb84c249ef/[priv] Do Users Verify SSH Keys? (pdf)2025-10-23T12:39:52+00:00
https://www.usenix.org/system/files/login/articles/105484-Gutmann.pdf
cpswanssh securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:468f52a5ef7e/[priv] Fil-C2025-10-22T03:54:39+00:00
https://fil-c.org/
cpswanc securityhttps://pinboard.in/u:cpswan/b:21c23b971389/[priv] The End of Cybersecurity: America’s Digital Defenses Are Failing—but AI Can Save Them2025-10-18T09:40:58+00:00
https://www.foreignaffairs.com/united-states/end-cybersecurity?check_logged_in=1
cpswanAI securityhttps://pinboard.in/u:cpswan/b:8469416fa267/Two Paths to Memory Safety: CHERI and OMA in the Fight Against Cyber Threats2025-10-13T16:01:15+00:00
https://ednutting.com/2025/10/05/cheri-vs-oma.html
cpswanCHERI securityhttps://pinboard.in/https://pinboard.in/u:cpswan/b:c73443e6f278/[priv] A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises2025-10-10T22:24:23+00:00
https://words.filippo.io/compromise-survey/?source=Mastodon
cpswanoss securityhttps://pinboard.in/u:cpswan/b:fd8cce07c987/CRA – The First Horizontal Regulation of the Software Industry2025-10-10T12:37:05+00:00
https://redmonk.com/blog/2025/10/09/rmc-cra-eclipsefoundation/
cpswancra oss security videohttps://pinboard.in/https://pinboard.in/u:cpswan/b:b7dfcfa7d25b/