Mastodawn

Ah non elle a juste fait venir Gary Jules à son concert qu’est ce qu’on s’en fout! #bamboozled

🚨 Breaking news! 🚨 A supply chain attack on #npm shocks #developers worldwide, and in an utterly predictable twist, the only package manager where this "regularly happens" shrugs and says, "Oops, our bad." 😅 Devs are now collectively wringing their hands, wondering how they got #bamboozled by the same trick for the zillionth time. 🤦‍♂️
https://kevinpatel.xyz/posts/no-way-to-prevent-this/ #supplychainattack #security #shocked #oops #HackerNews #ngated

‘No Way To Prevent This,’ Says Only Package Manager Where This Regularly Happens | Kevin Patel

Kevin Patel - Application Security Engineer @ NISC

Kevin Patel

Stephen Gutknecht May 15

“If we’ve been #bamboozled long enough, we tend to reject any evidence of the bamboozle. We’re no longer interested in finding out the truth. The bamboozle has captured us. It’s simply too painful to acknowledge” ― Carl Sagan, The Demon-Haunted World: Science as a Candle in the Dark, year 1995, page 241

OBSERVATIONS OF A STUDENT Apr 25

The Sound of Silence

What do Simon and Garfunkel, Ronald Regan, and the Thugees of India have in common? Well, nothing, aside from my flow of consciousness which I will share.

https://morrowmichael.wordpress.com/2026/04/25/the-sound-of-silence/

Dr. Dani Sanchez Mar 18

Just going to state the obvious: “Hollywood Shuffle” (1987) and “Bamboozled” (2000) double feature
#CultShelf #HollywoodShuffle #Bamboozled #RobertTownsend #SpikeLee

N-gated Hacker News Mar 5

🚨🐒 Oh, look! 4000 #developers got #bamboozled by a #GitHub issue title! Apparently, the fine art of reading package.json is now a lost skill. Who knew #hackers could weaponize punctuation? 🙉💻
https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another #packagejson #punctuation #HackerNews #ngated

A GitHub Issue Title Compromised 4,000 Developer Machines

A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.