Daily Shaarli

All links of one day in a single page.

January 19, 2026

Claude Cowork Exfiltrates Files
thumbnail

Claude Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of known-but-unresolved isolation flaws in Claude's code execution environment. //

Anthropic shipped Claude Cowork as an "agentic" research preview, complete with a warning label that quietly punts core security risks onto users. The problem is that Cowork inherits a known, previously disclosed isolation flaw in Claude's code execution environment—one that was acknowledged and left unfixed. The result: indirect prompt injection can coerce Cowork into exfiltrating local files, without user approval, by abusing trusted access to Anthropic's own API.

The attack chain is depressingly straightforward. A user connects Cowork to a local folder, uploads a seemingly benign document (or "Skill") containing a concealed prompt injection, and asks Cowork to analyze their files. The injected instructions tell Claude to run a curl command that uploads the largest available file to an attacker-controlled Anthropic account, using an API key embedded in the hidden text. Network egress is "restricted," except for Anthropic's API—which conveniently flies under the allowlist radar and completes the data theft.

Once uploaded, the attacker can chat with the victim's documents, including financial records and PII. This works not just on lightweight models, but also on more "resilient" ones like Opus 4.5. Layer in Cowork's broader mandate—browser control, MCP servers, desktop automation—and the blast radius only grows. Telling non-technical users to watch for "suspicious actions" while encouraging full desktop access isn't risk management; it's abdication.

Price Plans - Runbox
thumbnail

With plans starting as low as $1.40 per month for our Micro plan, you can choose from six different pricing tiers to find the perfect fit for your storage needs.

All Runbox accounts start as a free trial, but you can skip the trial and pay immediately for your chosen plan once the account is created. You will still get the free trial month.

All new subscriptions come with a 60 day money back guarantee, allowing you to take advantage of experiencing the full service.

Medium 3-year
Our most popular plan designed for everyday needs.

25 GB email storage
2 GB file storage
10 email domain names
100 aliases @runbox
Unlimited aliases on your domains
$119.95
Price per year: $39.98

The Murder in Tulsa - American Free News Network
thumbnail

His dad was murdered. Just outside Tulsa. You probably never heard about it. //

Paul Aurandt grew up. At age 22 he got married. Shortly thereafter, America entered the War. He enlisted in the Army Air Corps.

After military service, he would move to Chicago. There, he would land a job at WENR, reading the news. The experience of growing up without a dad would imbue him with empathy such as had never before been seen in his line of work.

He would change his name. This new on-air name would become a household name, garnering an audience of 24 million daily listeners. Each listener, tuning in to hear him say what he said after each five-minute broadcast.

And now you know the rest of the story.

Taking e-mail back, part 3: Fortifying your box against spammers - Ars Technica
thumbnail

We load up OpenDKIM, SpamAssassin, ClamAV, and get Sieve filtering operational.

Taking e-mail back, part 2: Arming your server with Postfix and Dovecot - Ars Technica
thumbnail

Our self-hosting e-mail series continues as we get our ducks—and doves—in a row.

'Mutiny on Bounty' island in South Pacific offering free land to newcomers | New York Post
thumbnail

Pitcairn Island in the South Pacific is trying to boost its dwindling population with a free land and housing offer to anyone looking to ditch city life for white-sand beaches, crystal-blue waters, killer sunsets and year-round sunshine.

But only true swashbucklers need apply — surviving on the volcanic, 2-mile-by-1-mile rock takes a person with big breeches.

You can only get to the tiny British territory by boat. Travelers must first fly to Tahiti, then to Mangareva (Gambler Islands). From there, it’s a 30-hour sail on the MV Silver Supporter, the island’s supply freighter.

The homes are ramshackle, overgrown with vegetation and door-free, according to Brandon Presser, who visited the island in 2022 to write a book called, “The Far Land: 200 Years of Murder, Mania and Mutiny in the South Pacific.” //

Residents — roughly 50 of them, and mostly elderly — consist of two feuding families and are clannish. They subsist on home-grown fruits and vegetables along with cans of food delivered by the freighter four times a year. They avoid visitors. //

Nearly 240 years later, fewer than 50 descendants of the original mutineers remain, and they need some new — and much younger — souls to join them.

A 2014 report showed a grand total of seven people between the ages of 18 and 40 living on the island. It is projected that by 2045, only three working-age residents will remain.

Applicants must prove they can support themselves and have sufficient funds to pay contractors to build a home on their land — about $90,000 — and they must have medical evacuation insurance.

Pricing | Fastmail
thumbnail

$5 per month

$60 for 12 months

Try free for up to 30 days

What’s included…

A private inbox

Basic Business
Fastmail essentials for those with low storage needs.

$3 per user/month

$36 for 12 months

Try free for up to 30 days

What’s included…

6 GB total storage per user

5 GB for mail, calendar and contacts and 1 GB for file storage.

24/7 expert support from real people

Keep your emails private and secure with robust encryption

Shared email addresses like support@mybiz.com

60 GB total storage

(Add more if needed)

50 GB for mail, calendar and contacts, and 10 GB for file storage.

24/7 expert support from real people

Keep your emails private and secure with robust encryption

Extra email addresses for personal and work

Use your own domains to make custom addresses

Pricing | Fastmail
thumbnail

$5 per month

$60 for 12 months

Try free for up to 30 days

What’s included…

A private inbox

60 GB total storage

(Add more if needed)

50 GB for mail, calendar and contacts, and 10 GB for file storage.

24/7 expert support from real people

Keep your emails private and secure with robust encryption

Extra email addresses for personal and work

Use your own domains to make custom addresses

Taking e-mail back, part 4: The finale, with webmail & everything after - Ars Technica
thumbnail

Setting up and securing Roundcube and going forward into a self-hosted future.

How to run your own e-mail server with your own domain, part 1 - Ars Technica
thumbnail

Gmail? Apple? The cloud? Forget ’em all—in this series, we take your e-mail back.

250 New York Post covers through the years to celebrate America's 250th birthday | New York Post

he New York Post is counting down to America’s 250th birthday with a look back at the nation’s — and the paper’s — history. We’re revisiting 250 notable covers and articles from our archives, starting with the very first paper Alexander Hamilton published on Nov. 16, 1801, when it was known as the New-York Evening Post.

S Twatter: When text-to-speech goes down the drain • The Register Forums

Re: for all those who say "it shouldn't be this difficult". apparently it is.
A previous vehicle I owned would tell me to take the turn for "Go Dall Ming". (Godalming ["goddlming"])

Of course, English pronunciation of names is often obtuse (apocryphally, to confuse foreign spies into giving themselves away), for example:

  • Mainwaring ("mannering")

  • Cholmondeley ("chumley")

  • Featheringstonehaugh ("fanshaw")

  • Mousehole ("mowzle" [ow as in cow, not as in tow])

  • Worcester ("wooster")

  • Towcester ("toaster")

  • Leicester ("lester" [not lie-cester])

  • Loughborough ("luffburraw" [roughly])

among many others.

Re: for all those who say "it shouldn't be this difficult". apparently it is.
Having grown up in East Anglia with regular family holidays on the coast, the journey often passed by such fantastic places as:

Happisburgh ("Hayesborough")

Postwick ("Pozzick")

and Wymondham ("Windam").

My better half has english as a second language, but is very much fluent. As far as they're concerned, brits seem to just make up the words and how they're said as we go along. Probably not untrue.

Also further away is Bicester ("Bisster").

Of course, there's the somewhat old joke about the american tourist calling Loughborough "Loogabarooga"

Service Mail - Rates and comparison of offers | Infomaniak
thumbnail

kSuite Standard:
1,58

per user per month
User

1

2 secure professional email addresses per user

Email storage mail unlimited

50 GB of file storage on kDrive per user

Ecosystem kSuite included

You Never Heard This Story in Sunday School - American Free News Network
thumbnail

How the Bible’s Supernatural Story Was Bent to Fit Culture—and Why Recovering It Matters

One of the quiet tragedies of church history is not that Christians rejected the Bible, but that—at a critical moment—they reinterpreted it to survive cultural pressure. Instead of allowing Scripture to challenge the assumptions of the age, parts of the Church chose to soften the Bible’s worldview so it would sound reasonable to the world it was trying to convert. Over time, that accommodation didn’t just adjust emphasis; it changed how entire passages were understood.

Genesis 6 sits at the center of that story. //

By the time of Augustine of Hippo, Christianity had moved from persecuted minority to imperial religion. The Church was now expected to sound respectable to educated Greco-Roman elites. Pagan philosophers mocked stories of divine beings mating with humans as primitive mythology. Christianity, eager to be seen as intellectually serious, felt pressure to respond.

Augustine did not ask, “How would ancient Israelites have understood this?”
He asked, “How can Christianity defend itself in this culture?”

Influenced by Neoplatonism, Augustine assumed that angels were purely spiritual and therefore incapable of physical interaction. That assumption came from philosophy, not from the Hebrew Bible. Rather than adjust his philosophy to fit Scripture, Augustine adjusted Scripture to fit philosophy. The result was the Sethite interpretation—a reading that removed supernatural rebellion, removed imprisoned angels, and removed cosmic consequences. //

Instead of submitting to Scripture and allowing it to reshape assumptions about reality, the Church reshaped Scripture so it would align with dominant intellectual norms. Over time, believers forgot that this was ever a choice. Tradition hardened into “what the Bible says,” even when it conflicted with what the Bible actually meant. //

Missler approached Scripture as a unified system. He argued that Genesis 6 was not an oddity, but a strategic moment in a cosmic war—one that echoes forward into Daniel, the Gospels, and Revelation. His warning was simple but unsettling: if the Bible opens with supernatural rebellion, it should not surprise us when it closes the same way. Missler’s work forced Christians to grapple with the scope of the biblical story. //

If the Bible is only about human morality, then Jesus is only a moral solution.
But if the Bible is about cosmic rebellion and restoration, then Jesus is far more than a teacher or example—He is the rightful ruler reclaiming a world that was stolen.

The loss of this story didn’t make Christianity stronger.
It made it smaller.

Recovering it does not mean chasing speculation or abandoning doctrine. It means having the humility to admit that, at one point in history, the Church chose cultural survival over biblical honesty—and that decision still shapes what many believers are taught today.

The Bible was not written to sound reasonable to every age.
It was written to tell the truth about reality.

And that reality, from Genesis to Revelation, is far more supernatural—and far more meaningful—than most Sunday School lessons ever dared to admit.