Papers

Librarian Catches Thief: Surfacing Supply Chain Attack Campaigns via Document Similarity in an AI Agent Skill Registry

Gale Fagan. SCORED ’26: Conference on Software Supply Chain Offensive Research and Ecosystem Defenses, Prague, October 6, 2026. Published under CC BY 4.0. Preprint, code and data.

In early 2026, attackers uploaded hundreds of malicious skills to ClawHub, a registry for the OpenClaw agent framework. Mass production leaves a trace: lots of nearly identical files. I ran MinHash over 31,634 skill files with no security tuning at all, and every cluster of 20 or more files came back malicious. All 337 known malicious skills in the corpus landed in a cluster.

GEORDI: A Handheld Tool for Remote System Administration

Stephen Okay and Gale Pedowitz. LISA ’01: 15th Systems Administration Conference, San Diego, December 2001. Paper.

Diagnose and fix a server from a Palm handheld, using ssh and sudo and nothing else on the server. I published this one as Gale Pedowitz.

Resilience and Threat Mitigation

Gale Pedowitz. International Conference on Civil Protection and Crisis and Emergency Management, Prague, April 2014.

An introduction to the CERT Resilience Management Model as a tool for increasing organizational resilience in emergency response organizations. The proceedings aren’t online. Ask me for a copy.