Top all-time · #13580
John Stawinski IV
Personal blog · johnstawinski.comsecurityai
John Stawinski IV's personal blog at johnstawinski.com covers security and ai. Since 2024, 5 different Hacker News readers have linked it 7 times, most often “Breaching Microsoft via DeepSpeed GitHub Repository”. It is still writing: the last post was on 2026-06-18, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Cited as a precedent: a post about Facebook accidentally leaking information through self-hosted CI runners, a common mistake the commenter says people make.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Making Hacking Accessible
Most-linked posts?
- Breaching Microsoft via DeepSpeed GitHub Repository2 people · 2 mentions · first linked 2024-04-15
- A supply chain attack on PyTorch2 people · 2 mentions · first linked 2024-01-12
What Hacker News says?
Not that long ago Facebook was accidentally leaking information through their self hosted runners, through a very common mistake people make. https://johnstawinski.com/2024/01/11/playing-with-fire-how-w... That's the second time for PyTorch, to the best of my knowledge. I know someone who found that (or something very much like it) back in 2022 and reported it, as I had to help him escalate through a relevant securi…
Comment linking /2024/01/11/playing-with-fire-how-we-executed-a-critical-supply-chain-attack-on-pytorch/
on “Backdoor attempt on Exolabs GitHub repo through an innocent looking PR”Submitted A supply chain attack on PyTorch as a story · 463 points
HN discussionSubmitted Breaching Microsoft via DeepSpeed GitHub Repository as a story · 6 points
HN discussionSubmitted Fixing typos and breaching Microsoft's perimeter as a story · 5 points
HN discussionSubmitted Self-hosted CI worker exploits as a story · 5 points
HN discussionSubmitted Repo-Jacking Anthropic's Claude Community Plugins (and the SHAs That Saved Them) as a story · 1 points
HN discussionSubmitted Unauthorized Prompt Injection to RCE in Anthropic's Claude Code Action as a story · 1 points
HN discussion