Geeknik’s Lab @geeknik - Tumblr Blog

Joi AI's $2,000 "consultant" stunt pulled 100,000 applications in days. The real product is the viral PR, not the audio feature. Cheap attention buy for a controversial NSFW chatbot.

AI companion startup Joi AI is hiring ten "masturbation consultants," according to a job listing the company posted on social media.

Marcin Pióro’s Army enlistment was a self-own: the citizenship shortcut he sought required the biometric vetting that surfaced Poland’s $47M fraud warrant.

The most-wanted financial fugitive in Poland thought he had found the perfect hiding place. To disappear, Marcin Pióro did not flee to a non-extradition haven or buy a new identity on the black market. He enlisted in the United States Army. The 46-year-old chief executive, accused of running one of the largest fintech frauds in […]

Herdr is tmux rebuilt for AI agents: a single Rust binary that shows which agents are blocked, working, or done, with no GUI or Electron. AGPL with commercial licenses available.

agent multiplexer that lives in your terminal. Contribute to ogulcancelik/herdr development by creating an account on GitHub.

The data center fight in Yukon OK is now electoral risk: recall petitions target mayor and vice mayor as water-use approval hits its second 90-day extension.

A petition to recall Yukon Mayor Brian Pillmore and Vice Mayor Jeff Wootton has been formally filed as opposition grows to a proposed data center development and the city's agreement with BLE Landholdings.

Real edge here: borehole-based splitting instead of random splitting. Most contamination ML quietly leaks spatial info and inflates accuracy. This paper admits where the model actually fails. Rare honesty.

Legacy smelting sites often exhibit strong point-source control, highly right-skewed concentration distributions, and pronounced vertical stratificati…

For prior

users, a malicious notebook link can spoof VSCode webview keystrokes, install an extension, and steal a non-repo-scoped GitHub token.

My blog, mostly about programming

FERMI just turned attosecond pulses into something you can shape on purpose, not pray for shot-to-shot. Microjoule energy, reproducible waveforms. Tabletop HHG keeps the science; billion-dollar FEL facilities now own the control layer.

Nature - Generation of intense attosecond waveforms with independently controllable amplitude and phase is performed by using a seeded free-electron laser.

Autonomous weapons debate is shifting from bans to compliance engineering as ex-GCHQ chief David Omand backs “moral” AI targeting, driven by warfare speed.

Software could make ethically superior decisions to humans in high-pressure moments, claims ex-GCHQ head David Omand

liboqs XMSSMT verification had an attacker-controlled OID heap over-read, found by KAT-seeded fuzzing and fixed in 0.16.0. Post-quantum adopters should update now.

Stateful hash-based signature schemes such as XMSS and LMS are increasingly important in post-quantum cryptographic deployments, yet their verification paths remain difficult to fuzz effectively because key generation is substantially more expensive than verification. This paper presents a structured libFuzzer methodology for testing stateful hash-based signature verification in liboqs. The proposed approach uses pre-computed Known Answer Test (KAT) vectors to initialise valid public key, signature, and message buffers once during harness setup, enabling high-throughput mutation of verification inputs without repeated key generation. Using this methodology, we implemented and upstreamed two fuzz harnesses targeting XMSS/XMSSMT and LMS/HSS-LMS verification paths in liboqs. A ten-minute AddressSanitizer-enabled fuzzing campaign identified an OID-confusion heap-buffer-overflow in xmssmt_core_sign_open, assigned CVE-2026-46344. The flaw occurs when attacker-controlled public-key OID bytes derive a parameter set whose expected signature length exceeds the caller-allocated buffer, resulting in an out-of-bounds read during signature parsing. The issue was reproduced using a five-byte minimal crashing input and a standalone C reproducer, disclosed through the Open Quantum Safe coordinated disclosure process, and fixed in liboqs 0.16.0. We further identify a mutation-distribution bias affecting short-input LMS fuzzing and resolve it using a round-robin field-rotation strategy. The resulting framework provides a reproducible and upstream-integrated methodology for adversarial testing of stateful post-quantum signature verification implementations.

The U.S. Army is hacking its own weapon systems to counter drones because Pentagon procurement software locks prevent radars and interceptors from sharing data.

https://www.wsj.com/politics/national-security/army-jailbreaks-its-own-weapon-systems-to-counter-drone-threats-3f57f032

Senior U.S. Space Force officer's Instagram hijacked by pro-Iran hackers posting Hanoi Hannah propaganda mid-war. Personal social media of top brass is now an active battleground.

Hackers hijacked a top Space Force leader’s Instagram account and briefly filled it with pro-Iran, anti-U.S. propaganda amid rising cyber threats tied to the war.

Piedmont, OK planning commission tabled two data center projects over water and grid concerns, demanding deeper study. Local pushback is now the bottleneck for AI infrastructure buildout, not just capital.

Piedmont’s city planning commission voted Monday to table decisions on two proposed data center developments, instead asking the city council to conduct a deeper study on whether to relocate the ci…

CJNG's 2,000-foot tunnel under a fake discount store shows cartels will invest heavily in covert logistics; detection still hinges on low foot‑traffic anomalies.

Four people were arrested and charged with trafficking more than $45 million in cocaine through the 2,000-foot-long tunnel complete with reinforced walls, ventilation and a rail system.

Your crawl space is an unchecked perimeter.

If you have a large crawl space, you probably don't think about checking it very often, but this story might make you think again.

A Georgia Tech aerospace engineer concludes interstellar travel to Earth is physically infeasible, quietly undercutting the UAP narrative the Pentagon reignited last week.

To assess the plausibility of alien visitors, it’s necessary to understand the obstacles that an extraterrestrial vessel would need to overcome to reach Earth.

Army Cemeteries execute Sept 1: disinterring 12 Native American students from Carlisle Indian Industrial School, returning remains to tribes over a century after forced assimilation deaths.

The Office of Army Cemeteries will begin disinterring 12 Native American students buried at the Carlisle Indian Industrial School more than 100 years ago.

POTUS signed a voluntary AI pre-release review order. Tech lobbyists killed the mandatory version. Companies now choose whether to share models 30 days before launch. Regulation by invitation changes nothing about the power dynamic.

Under new rules, tech companies will be asked to share AI models with government for review before public release

Trending Blogs

Recently Viewed Blogs

Geeknik’s Lab