# the_smart_ape (X account)

X handle: `@the_smart_ape`. Displayed as "The Smart Ape".

Not a blog in the classical sense — threads on X. Treating as an entity here because the writing pattern is identifiable enough to follow: long single-author threads on security, identity, and SaaS-operator failure modes, anchored in a specific named-victim case study and unfolding from there into the architectural argument. Voice is lowercase, declarative, and short-sentence. Sources tend to be named (Truffle Security disclosures, Andrew Spinks / Terraria, Salesloft/Drift) rather than vague.

## Ingested threads

- [[dont-sign-in-with-google]] (2055941633179283523) — what happens when Google suspends an account that's been stacked behind every SaaS in the business; covers the Truffle Security domain-takeover disclosure, multilogin refresh-token replay, consent phishing, and the rule for when SSO is actually fine.

## Notes

- Sources are not linked in the threads themselves. Quoted industry numbers (e.g. "31% of M365 breaches in 2025 were token theft") should be re-verified before being repeated as fact in derived pages.
- x.com WebFetch returns 402 in this account; threads have to be retrieved via the Jina reader proxy (`https://r.jina.ai/<url>`) or another archive.