Project Design Purpose : This article will introduce the detailed design methodology and functional objectives for implementing the Warning, Alarm, and Fault Alert Sub-System within the Mini OT Aviation CAT-II Airport Runway Lights Management Simulation System (version : v_0.2.2). This subsystem plays a crucial role in supporting cyber exercise and incident response training which focused on airport operational technology (OT) safety, reliability, and cybersecurity awareness by using the cyber r...

Program Design Purpose: The primary objective of this program is to leverage AI-LLM technology to streamline the processing of human language-based threat scenario documents, including technical blogs, CTI reports, online threats introduction materials and cyber attack training notes. The goal is to succinctly summarize the attack flow path outlined within such materials via mapping the attack behaviors to the MITRE-ATT&CK Matrix and matching the vulnerabilities to the MITRE-CWE Tree. To ach...

Project Design Purpose : This article is the second write up of using the Kypo-CRP for building cyber security CTF challenges or hands on exams environment. I will use the penetration test CTF game “The Secret Laboratory” from Masaryk University’s Spring 2020 semester course PV276 – Seminar on Simulation of Cyber Attacks and as a case study, this article demonstrates two key objectives:How to build and deploy a custom CTF or teaching-assignment sandbox on the KYPO-CRP pla...

Project Design Purpose : This project is designed to create a lightweight, extensible camera-simulation service program that exposes a Motion-JPEG (MJPEG) video stream over HTTP(s) via a Flask web interface for using in the cyber ranges, red/blue exercises, and research where realistic camera endpoints are required without physical hardware. The simulated video stream can be generated from five different type of source:Local physical camera (embedded webcam or USB camera).External live stream (R...

In this case study, I will demonstrate the application of Arm Trust-Zone technology in building a "Trust IoT" device. The primary objective is to safeguard critical data, including encryption keys for communication channels and the IoT firmware attestation program, against potential information leaks and firmware attacks.Project Design: The primary goal of this project is to utilize the Raspberry Pi as the foundation platform for constructing a secure "Trust IoT device", employing ARM Trust-Zone...

Recently, a claim emerged that GPT-5 (developed by OpenAI) had “found solutions” to several long-standing open problems listed on ErdosProblems.com. The claim began with a tweet by an OpenAI researcher which stated that GPT-5 had solved 10 previously unsolved Erdős problems and made progress on more. However, Thomas Bloom—the creator and maintainer of ErdosProblems.com—responded swiftly, calling the claim “a dramatic misinterpretation.” He clarified that the label “open” on his site simply means he personally was unaware of a published solution, not that the problem is truly unsolved. He asserted that GPT-5 had only surfaced existing research papers that he had missed. This incident has sparked discussion about how to interpret AI contributions in mathematics, the difference between finding existing proofs and generating new ones, and how announcements about AI breakthroughs should be communicated responsibly.

As code agent with AI capability becoming more and more popular, it seems can help programmers complete lots of tasks from code suggestion and bug hunt. Does your company allow use this kind of code agent? What is allowed? Any concern on security and privacy? Share your experience.

A workaholic superstar refers to someone in the workplace who relentlessly “overworks themselves” or competes excessively on effort alone—often seen in tech companies as the extreme overachiever or workaholic. If your team just have someone joining as workaholic superstar, how would you deal with it?

For example, The Social Network

GoLang is often criticized by people on lacking of features and bad error handling style. What are some of the bad comments people have on GoLang?