A personal blog post on roman.pt details a first-hand encounter with a backdoor hidden within a LinkedIn job offer, a social-engineering attack vector that security researchers have documented but that remains underreported in mainstream tech circles. The incident illustrates how attackers exploit the inherent trust of professional recruiting interactions to deliver malicious code to developers. The post serves as a practical reminder to run untrusted interview code only in isolated, sandboxed environments.
As open-source AI models have grown explosively, model security has become an issue that can no longer be ignored. Traditional machine learning model formats…