The #CantonFair is #marking its 70th #anniversary with Chasing the Light, a #buyer-focused #documentary tracing how #encounters in #Guangzhou have #developed into long-term #commercial #relationships across #generations. Released alongside the 140th #China #Import and #Export #Fair, the film shifts attention away from #exhibition #statistics and #product displays to the people who have shaped the #event: international #buyers, #business, and technology entrepreneurs. https://chinaexpohub.com/canton-fair-70-chasing-the-light-documentary/
Search
1000 results for “technology_tales”
-
Hey followers! I’m currently part-time contracting at the wonderful https://convocation.design/ where I get to work on internet freedom and privacy/security projects but I’m also looking for other projects to fill me days that I’m not working for Convocation.
If y’all have projects where you need a designer who has worked on complex UI systems, typically for skill-proficient people, and want more usable and accessible to non-proficient users then I’m your designer/researcher!
Check out more of my work on my updated website https://erioldoesdesign.github.io/
I’ve worked primarily on privacy, security, civic tech, open science, open source software tools and the digital rights space for over 8 years and I’ve worked on commercial/proprietary tech for another 6 years, totally over 15 years of designing for people across technology. I’m a detailed user researcher and typically employ a ‘just enough’ research approach to make meaningful changes to user bases of tools.
#fedihired #lookingforwork #hireme #butnojobscammers #oss #design #opendesign #opensourcedesign
#fedihired #lookingforwork #hireme #butnojobscammers #oss #design #opendesign #opensourcedesign
-
We are currently in the middle of a massive agent gold rush, with everyone stringing together task-specific bots, writing complex prompt chains, and orchestrating multi-agent frameworks to automate everything from code generation to workflows. But if you look closely at where these systems bottleneck, it becomes obvious that agents are just a transitional technology. They are the scaffolding. The real endgame is digital twins.
To understand why, you have to look at the structural limits of how we build and deploy these systems.
An agent is fundamentally a transactional construct. It is essentially a function-call loop wrapped around a language model, where you provide a system prompt and a set of tools, and it executes a bounded task before stopping or waiting for the next trigger. Because of this, agents suffer from severe context fragmentation. When you build a multi-agent swarm—such as a researcher handing off to a writer, who then hands off to a coder—they do not share a continuous reality. They just pass serialized text back and forth across brittle boundaries, losing nuance, intent, and implicit state along the way. You end up spending a ridiculous amount of engineering effort writing glue code and re-steering prompts just to keep the swarm from drifting off course.
A digital twin approaches the problem from the exact opposite direction. Instead of starting with a transient task, it starts with persistent state, identity, and continuous memory. A digital twin does not ask what tool to run next to complete a prompt; it acts as a persistent state engine that continuously models a real-world entity—whether that is a human operator, a complex codebase, or an entire infrastructure stack—retaining full historical context and behavioral constraints in real time.
This also changes how we handle execution. Agents are reactive by design, waiting around for a webhook, a prompt, or a cron job to fire before scrambling to execute a workflow. Digital twins introduce a predictive, simulation-first paradigm. Because a true twin maintains a high-fidelity mirror of its environment, you stop relying on fire-and-forget automation. Instead of just telling an agent to push a change and hope for the best, a digital twin architecture lets you run simulations against historical data and edge cases, find the failure points in a sandbox, and execute the optimal path autonomously. You shift from brittle task execution to high-certainty state transition.
Right now, developers are trying to patch the agent memory problem with vector databases and RAG pipelines bolted onto stateless models. While those help, they treat memory as an external lookup table rather than a core property of the system. A digital twin treats memory, logic, and execution as an integrated whole, where the identity layer is an evolving state machine rather than a paragraph stuck in a system prompt.
Ultimately, agents are the micro-services of this era—valuable, modular building blocks for executing specific workloads. But they are too fragmented and short-lived to form a cohesive autonomous future. The architecture we should actually be building toward consists of persistent, stateful digital twins that can spawn, manage, and coordinate tactical agents as mere sub-routines of a much larger, unified system.
When you move past the chat-bot phase of AI and look at a true personal digital twin, the shift is from a tool you talk to into an operational proxy that acts as you.
Instead of waiting around for prompts, a personal digital twin acts as a continuous, stateful extension of your identity, running in the background across your local workstation, cloud services, and real-world infrastructure.
Here is what that actually looks like in practice.
Continuous Environmental and Contextual Awareness
Right now, every AI interaction starts from zero. You have to explain who you are, what project you are working on, and what your preferences are. A digital twin maintains a persistent state model of your day-to-day reality. It tracks the active codebases you are building, your communication patterns, your schedule, and your current priorities. When an event happens—a pull request opens, an email arrives, or a deadline shifts—the twin evaluates it instantly against your real-world context without needing you to manually feed it background info.Autonomous Proxy Operations and Comms
An agent can draft an email if you tell it to. A digital twin handles communication and coordination proactively because it understands your voice, your boundaries, and your ongoing projects. It can triage inbound communications across your channels, negotiate scheduling, and handle administrative back-and-forth based on how you actually operate. It doesn't just sound like you because of a few system prompt examples; it writes and responds based on an evolving model of your actual decisions and historical behavior.Sandbox Simulation Before Execution
One of the biggest limits of current automation is the fear of breaking things. A digital twin changes that by introducing sandbox simulation. If you want to deploy a new infrastructure configuration, refactor a complex system, or launch an automated marketing pipeline, your twin can simulate the entire execution path first against your historical data and constraints. It stress-tests the logic, flags potential failure modes, and models the outcomes in a secure environment before anything touches production.Cross-System Orchestration
Right now, we use a dozen disjointed apps that don't talk to each other well. A digital twin acts as the central nervous system connecting your local machine, your cloud environments, and external APIs. It can spawn, manage, and coordinate tactical sub-agents to handle specific workloads—one agent spinning up a research crawl, another handling local file management, another writing boilerplate—while the twin itself maintains the macro-level vision and ensures nothing drifts off course.Ultimately, a personal digital twin isn't something you prompt. It’s an autonomous mirror of your operational workflow that absorbs the friction, handles the execution, and scales your capabilities without requiring constant babysitting.#ai #webdev #devops #architecture #software #coding #development #engineering #inclusive #community
Why "Agents" Are Just the Bridge: Digital Twins Are the True End State of AI -
AI-driven disinformation running rampant on social media before US midterms, experts warn
By George ChidiSocial media companies including Meta have pulled back on efforts to protect voters from election-meddling lies
https://www.theguardian.com/us-news/2026/oct/27/ai-disinformation-social-media-midterm-elections
#USmidtermelections2026 #USpolitics #Digitalmedia #USnews #Socialmedia #Media #Worldnews #Electioninterference #Meta #YouTube #Texas #X #Facebook #ElonMusk #Technology #Internet #AIartificialintelligence #Pennsylvania #TheGuardian #GeorgeChidi
-
UK looking to give carmakers incentives to make EVs deliver power to the grid during peak hours.
Interesting, as V2G can be quite powerful!
#EV #BEV #V2G #Grids #Electricity #UK #UKPol #Renewables #Batteries
-
🪖MilitaryNewsUA🇺🇦
@militarynewsua.bsky.social❗️The #Kremlin through the head of the Russian Direct Investment Fund Kirill Dmitriev, is luring Trump’s team with lucrative deals in energy, aviation, rare earth metals, AI, and technology (including investments by people close to Trump in Lukoil), without stopping the war.
10/26
#UkaineWar #USA for sale!
🧵
https://bsky.app/profile/militarynewsua.bsky.social/post/3mytnuje2qc24 -
Big Picture Science for Oct. 26, 2026: Scoping Out the Universe
REPEAT
Telescopes are like light buckets. The bigger the telescope, the more light collected for astronomers to observe. With recent advances in technology, amateur astronomers can join professionals for a chance to observe stellar nurseries and exoplanets many light-years away. But as our capabilities increase, so do the mysteries, including those around high-energy bursts coming from an otherwise unremarkable part of the universe. Understanding fast radio bursts could turn physics on its head.From the Vera Rubin Telescope in Chile to the backyard instruments of amateur astronomers, we share what new things we might learn about stars, the Earth, exoplanets, and the potential for life on other worlds.
Guests:
* Clare Higgs – Astronomer working with the public outreach team for the Vera Rubin Observatory
* Franck Marchis – Senior astronomer and director of citizen science at the SETI Institute, chief science officer and co-founder of Unistellar
* Amanda Cook – Postdoctoral fellow at McGill University and member of the CHIME/FRB CollaborationOriginally aired August 04, 2025
Download podcast at - https://bigpicturescience.org/episodes/scoping-out-the-universe
#Telescopes #BigPictureScience #SETI #News #Podcast #Science
-
‘Doom Loop’: OpenAI and Microsoft Admits LLMs Are Destroying the Web and Built on Theft: https://www.404media.co/doom-loop-openai-and-microsoft-admits-llms-are-destroying-the-web-and-built-on-theft/
'Executives working on AI at Microsoft and OpenAI admitted what its critics have been saying all along: Large language models are predatory pieces of technology that have been built on what a Microsoft executive called “an astonishing theft of unprecedented proportions,” and the “largest theft of labor in human history.” An internal Microsoft document said generative AI products have created a “doom loop” that is killing “the entire web.”'
#ArtificialIntelligence #AI #grift #Microsoft #OpenAI #slop #AISlop #suicide #capitalism #404Media
-
"Garrett Langley, the CEO of automatic license plate reader company Flock, told an audience of police chiefs at a private police conference Sunday that anti-Flock protests around the country are not real, according to leaked audio obtained by 404 Media.
He also said his wife advised him to never apologize, said he would prefer to never do interviews with the press again, and claimed without evidence that the social media opposition to Flock is driven mostly by Russian bots.
“Somebody was paying for [the social media posts and] stopped paying for it,” Langley said about the many viral posts criticizing his company’s technology. “Social media chatter on Flock is down about 95 percent from July. It went down 50 percent last week when Ukraine bombed a Russian data center with a drone. Literally 50 percent overnight. And so look, I’m the last person, my wife as well, she’s like ‘This is crazy, these people are getting paid to say these things,’” he added, repeating a disproven theory that Ukraine’s strikes on Russian data centers had a significant impact on internet bot activity. "
https://www.404media.co/in-leaked-audio-flock-ceo-tells-cops-backlash-to-the-company-isnt-real/
-
Introduction: Bridging the Cybersecurity Skill Gap
After establishing a foundational understanding of cybersecurity principles—networking, TCP/IP, and data transfer mechanics—many learners encounter a critical juncture: the transition from foundational knowledge to advanced expertise. This gap is particularly pronounced in penetration testing and operational technology (OT) security, where the path is neither linear nor intuitive. The challenge arises from the layered, interdependent nature of cybersecurity domains. Progressing without a structured approach, such as bypassing web application security before tackling OT, creates critical knowledge gaps that impede mastery. This article delineates a strategic roadmap to navigate this transition effectively.Struggling to gain root access on seemingly "easy" machines is not a deficiency in technical knowledge but a methodological shortfall. Penetration testing demands the application of concepts under dynamic, high-pressure conditions. For instance, enumerating a service without successfully exploiting it reveals a clear causal chain: insufficient hands-on practice → failure to adapt to unscripted environments → stalled progress. While platforms like TryHackMe (THM) offer structured paths, they often lack the unpredictability of real-world scenarios, leaving learners ill-equipped to handle novel challenges.
OT security, the ultimate goal for many, hinges on network pivoting and lateral movement—skills intrinsically tied to understanding web application vulnerabilities. This is because OT systems are accessed and compromised through networked pathways, often exploited via web-based vulnerabilities. Neglecting web application security leads to a misallocation of effort, treating OT as an isolated domain rather than a network-dependent ecosystem. This oversight undermines the ability to secure OT systems effectively.
The following roadmap is designed to be mechanistic and goal-oriented, addressing the interdependencies between cybersecurity domains:
- Phase 1: Mastery of Web Application Exploitation
- Focus: OWASP Top 10 vulnerabilities → real-world Capture The Flag (CTF) platforms (e.g., HackTheBox, Bugcrowd)
- Mechanism: Identify → Exploit → Pivot. For example, an SQL injection vulnerability is not merely a coding flaw; it represents a database breach that expands the attack surface, enabling access to internal networks. This phase ensures learners can systematically exploit web applications to gain deeper network access.
- Phase 2: Network Penetration Testing Fundamentals
- Focus: Subnetting → VLAN hopping → Firewall evasion
- Mechanism: Scan → Enumerate → Exploit. A misconfigured firewall rule does not simply "fail"—it compromises network segmentation, allowing unauthorized traffic to traverse secure boundaries. This phase builds the ability to manipulate network infrastructure, a prerequisite for advanced OT security.
- Phase 3: OT Security Integration
- Focus: ICS/SCADA protocols (Modbus, DNP3) → PLC exploitation
- Mechanism: Intercept → Manipulate → Disrupt. A rogue Modbus command does not merely "alter data"—it physically disrupts machinery operation, leading to tangible system failures. This phase bridges the gap between network exploitation and OT-specific threats, ensuring learners can secure critical infrastructure.
Bypassing these phases results in misaligned skill sets. Attempting OT security without mastering network pivoting is analogous to attempting engine repair without understanding mechanical systems. The failure arises from neglecting interdependent components. To transition effectively, adopt this phased approach, adapt to real-world complexities, and reject the notion of learning paths as mere checklists.
Building a Strong Foundation: Essential Skills and Knowledge
Foundational knowledge in networking, TCP/IP, and data transfer protocols is critical, but it is only the starting point. Cybersecurity is not a linear checklist but a complex, interdependent ecosystem. Missteps in learning progression, such as treating domains as isolated silos, can lead to significant gaps in expertise. These gaps manifest as an inability to apply theoretical knowledge to real-world scenarios, particularly in advanced areas like penetration testing and OT security.The Core Misstep: Treating Domains as Silos
Many learners stall in their progression due to a disconnection between theoretical understanding and practical application. For instance, web application security is often viewed as a prerequisite for OT security, but its importance extends beyond a mere stepping stone. It serves as a critical training ground for exploiting vulnerabilities under pressure, a skill directly transferable to OT environments.- SQL Injection vs. OT Exploitation: While SQL injection (SQLi) is a blunt tool, OT attacks require precision. Mastery of lateral movement within web applications is essential for pivoting within OT networks. This is because OT systems are frequently compromised via web-based vulnerabilities, such as a rogue Modbus command that can physically damage industrial equipment (e.g., turbine jamming). The consequence is cascading system failure due to the interdependence of OT components.
- Network Segmentation vs. OT Segmentation: Techniques like VLAN hopping in IT networks pale in comparison to the complexity of ICS/SCADA protocols (e.g., DNP3) in OT. Misconfiguring a firewall rule in an OT environment can lead to catastrophic hardware failure, such as melted PLCs or power grid shutdowns. The mechanism involves unintended command propagation, leading to overheating and subsequent hardware failure.
The Roadmap: A Phased, Structured Approach
To bridge the gap between foundational knowledge and advanced expertise, a phased, structured roadmap is essential. This approach ensures a logical progression, emphasizing practical skill-building and targeted resources.Phase 1: Web Application Exploitation Mastery
- Focus: Systematic exploitation of web vulnerabilities (XSS, SSRF, authentication bypasses).
- Rationale: OT attacks often originate from compromised web interfaces, which can provide access to SCADA systems. A single malformed packet can disrupt industrial processes, highlighting the critical need for web application security expertise.
- Resources:
- PortSwigger Web Security Academy: Offers lab-based training that simulates real-world unpredictability.
- HackTheBox (Pro Labs): Provides dynamic environments with minimal guidance, fostering independent problem-solving.
- Practical Insight: Allocate 30% of study time to exploiting vulnerable applications and 70% to rebuilding them securely. This dual approach deepens understanding of exploit mechanics and mitigation strategies.
Phase 2: Network Penetration Testing Fundamentals
- Focus: Subnet manipulation (VLAN hopping, ARP poisoning), firewall evasion.
- Rationale: OT networks are segmented for safety. Breaching these segments can allow interception of critical commands (e.g., rogue “open valve” signals in pipelines), leading to physical damage via unintended actuation.
- Resources:
- TryHackMe’s Network Services room: Provides theoretical grounding in network protocols and services.
- HackTheBox (Network Pivoting Challenges): Offers hands-on practice in dynamic network environments.
- Practical Insight: Establish a home lab with VLANs to simulate real-world scenarios. Physically disconnect devices mid-attack to observe how network state changes impact exploit success, reinforcing the importance of network resilience.
Phase 3: OT Security Integration
- Focus: ICS/SCADA protocols (Modbus, DNP3), OT-specific threats.
- Rationale: OT systems are physically destructive when compromised. A misconfigured Modbus command can overheat motors or trigger emergency shutdowns. The mechanism involves command injection leading to unintended actuation and mechanical stress.
- Resources:
- SANS ICS456: Offers an in-depth exploration of ICS/SCADA protocols.
- INL’s OT Defender Dataset: Provides real-world attack patterns for analysis and defense strategy development.
- Practical Insight: Utilize virtual OT environments (e.g., S4x24’s ICS Village) to simulate attacks on critical infrastructure, such as water treatment plants. Observe the physical output (e.g., contaminated water) to fully grasp the stakes of OT security failures.
Edge-Case Analysis: Common Failure Points
Most learners encounter significant challenges transitioning from Phase 2 to Phase 3. This is often due to treating OT as an extension of IT rather than a physically coupled system. For example, a network pivot in IT might crash a server, but in OT, it can cause catastrophic physical damage, such as a refinery explosion. The risk is not theoretical but mechanically inherent. A compromised PLC can issue over-frequency commands to turbines, leading to resonance and structural failure.Key Takeaways
- Structured Progression: The sequence Webapp → Network → OT is not optional but a safety requirement.
- Real-System Practice: Virtual labs are insufficient. Physical hardware introduces unpredictability that must be experienced to be fully understood.
- Failure Mode Understanding: Comprehend how a vulnerability in a web interface (e.g., SQLi) can physically destroy machinery, emphasizing the need for holistic security expertise.
Cybersecurity is not a linear ladder but a multidimensional puzzle. Neglecting any layer compromises the entire structure. Recognize that confusion is a sign of critical thinking—now take action to build a robust, phased learning strategy.
Specialized Learning Paths: Penetration Testing and OT Security
Transitioning from foundational cybersecurity knowledge to advanced expertise in penetration testing and Operational Technology (OT) security requires a structured, progressive roadmap. While many learners grasp networking fundamentals, such as TCP/IP and data transfer basics, they often struggle to apply this knowledge in complex, real-world scenarios. This gap arises because cybersecurity domains are not isolated silos but interdependent layers. Omitting any layer creates critical vulnerabilities. Below is an evidence-driven, phased roadmap designed to bridge this gap, emphasizing practical skill-building and targeted resources.Phase 1: Web Application Exploitation Mastery
Rationale: OT systems frequently rely on web interfaces for management and monitoring, making them prime targets for exploitation. For instance, a successful SQL injection (SQLi) attack on a web-exposed SCADA interface can alter control commands, leading to physical system failures. Mechanism: An SQLi exploit allows unauthorized access to the database, enabling attackers to modify control parameters. Impact: A motor operating under compromised commands may overheat due to excessive load. Observable effect: The motor’s windings melt, causing permanent damage and halting production.Practical Strategy: Dedicate 70% of your learning time to rebuilding secure configurations after exploiting vulnerabilities. Platforms like PortSwigger’s Web Security Academy and HackTheBox Pro Labs foster a dual mindset—thinking like both an attacker and a defender—essential for robust security expertise.
Phase 2: Network Penetration Testing Fundamentals
Rationale: OT networks are often segmented to isolate critical systems, but misconfigurations, such as improperly configured VLANs or ARP poisoning, can undermine this isolation. Mechanism: A VLAN-hopping attack exploits misconfigured switches to traverse network segments. Impact: An attacker gains access to an OT subnet and issues a rogue Modbus command to a Programmable Logic Controller (PLC). Observable effect: A conveyor belt accelerates beyond safe limits, damaging products or endangering workers.Practical Strategy: Construct a home lab with VLANs to observe network behavior during attacks. Platforms like TryHackMe’s Network Services room and HackTheBox’s pivoting challenges provide hands-on experience in exploiting and securing network infrastructures.
Phase 3: OT Security Integration
Rationale: OT systems are directly coupled to physical machinery, making them susceptible to catastrophic failures when compromised. For example, a malicious DNP3 command can override safety mechanisms in industrial control systems. Mechanism: A spoofed DNP3 command disables safety interlocks on a refinery valve. Impact: The valve fails to close during a pressure surge. Observable effect: Uncontrolled gas release triggers an explosion.Practical Strategy: Utilize virtual OT environments like the INL OT Defender Dataset to simulate attacks on ICS/SCADA systems. Focus on understanding how exploits affect physical outputs, such as motor speed or valve position, to develop holistic expertise.
Edge-Case Analysis: The IT-OT Transition Trap
Many learners approach OT security as an extension of IT, overlooking the physical coupling of OT systems. Risk mechanism: A misconfigured firewall in an OT network allows unauthorized command propagation. Impact: A PLC receives conflicting commands, leading to excessive current draw. Observable effect: The PLC’s circuit board warps, rendering it inoperable. Key takeaway: OT failures transcend data breaches, resulting in physical destruction and operational downtime.Technical Takeaways
- Structured Progression: The sequence—Web Application → Network → OT—is not optional; it is a safety imperative.
- Real-System Practice: Virtual labs cannot replicate the unpredictability of physical systems. Incorporate hardware-based testing where feasible.
- Failure Mode Understanding: A single web vulnerability can cascade into physical machinery destruction. Comprehensive expertise is non-negotiable.
Your current challenges are not roadblocks but signals to refine your approach. Abandon superficial checklists and focus on why each layer is critical, how they interact, and what physical consequences arise from their compromise. This is not theoretical—it is the difference between a motor operating smoothly and a facility-wide catastrophe.
Practical Experience and Hands-On Learning: Bridging the Theory-Practice Gap in Cybersecurity Mastery
Mastering foundational concepts such as networking, TCP/IP, and data transfer is essential, but transitioning to advanced penetration testing and OT security requires a paradigm shift. The challenge lies in recognizing that cybersecurity is not a linear checklist but a physically coupled ecosystem where digital vulnerabilities directly impact physical infrastructure. For instance, a web application exploit can propagate to a Programmable Logic Controller (PLC), causing circuit board failure due to overheating, or a misconfigured VLAN can compromise an entire power grid. To advance, learners must adopt a systems-thinking approach, treating cybersecurity domains as interdependent layers rather than isolated silos.Phase 1: Web Application Exploitation Mastery – The Foundation of OT Attacks
Operational Technology (OT) systems are inherently vulnerable to web-based exploits due to their integration with IT networks. A successful SQL injection, for example, not only breaches data but also enables attackers to modify control parameters in industrial databases. This can lead to a Modbus command being sent to a motor, causing it to overheat. The mechanism unfolds as follows: SQL injection → unauthorized database access → control parameter modification → physical system failure.Strategic Action: Dedicate 70% of practical training to rebuilding secure configurations post-exploitation. Utilize platforms like PortSwigger’s Web Security Academy and HackTheBox Pro Labs to focus on critical vulnerabilities such as XSS, SSRF, and authentication bypasses, which serve as primary entry points for OT attacks.
Phase 2: Network Penetration Testing Fundamentals – Breaching Segmented OT Networks
OT networks are segmented to enhance safety, but misconfigurations such as improper VLAN setups or ARP poisoning can undermine these protections. For instance, VLAN-hopping exploits allow attackers to access OT subnets, enabling the propagation of rogue Modbus commands to PLCs, which can cause physical damage, such as a conveyor belt accelerating uncontrollably. The mechanism is: VLAN hopping → unauthorized subnet access → rogue command propagation → physical hardware damage.Strategic Action: Construct a home lab with VLANs to simulate real-world OT network scenarios. Leverage resources like TryHackMe’s Network Services room and HackTheBox’s Network Pivoting Challenges to observe how network state changes correlate with physical system failures.
Phase 3: OT Security Integration – Where Theory Meets Physical Consequences
OT systems are physically coupled, meaning failures in one component can cascade throughout the system. A spoofed DNP3 command, for example, can disable a safety valve in a refinery, leading to pressure buildup and eventual explosion. The mechanism is: Spoofed DNP3 command → safety mechanism failure → pressure accumulation → catastrophic physical destruction.Strategic Action: Employ datasets like INL’s OT Defender Dataset and virtual OT environments to simulate attacks. Focus on physical outputs such as motor speed, valve position, and temperature to understand how digital vulnerabilities translate into tangible system failures.
Edge-Case Analysis: The IT-OT Transition Trap
The transition from IT to OT security is fraught with risks, particularly due to misconfigured OT firewalls. Such misconfigurations can allow conflicting commands to propagate, causing PLC circuit boards to warp from overheating. The mechanism is: Misconfigured firewall → unauthorized command propagation → conflicting signals → hardware deformation and failure.Critical Insight: OT failures are not merely data breaches but physical destruction. Approach OT security as a physically coupled system, distinct from traditional IT environments.
Technical Takeaways
- Structured Progression: The sequence Web → Network → OT is non-negotiable for ensuring safety and efficacy.
- Real-System Practice: Virtual labs cannot replicate the physical unpredictability of OT systems; integrate hardware testing for comprehensive understanding.
- Failure Mode Understanding: Web vulnerabilities can cascade into machinery destruction; holistic expertise is critical to mitigating risks.
Transition from confusion to action. Build labs, exploit vulnerabilities, and rebuild securely. The distinction between a junior pentester and an OT security expert lies not in knowledge but in understanding the physical consequences of compromise.
Continuous Growth and Community Engagement: Bridging the Gap from Junior Pentester to OT Security Expert
Mastering foundational concepts such as TCP/IP, networking, and web architecture is only the beginning of a cybersecurity learner’s journey. The transition from junior penetration tester to OT (Operational Technology) security expert demands a structured, progressive roadmap that aligns individual learning goals with industry demands. This progression is critical because cybersecurity in OT environments is inherently physically coupled: digital vulnerabilities can directly cause physical damage to machinery, leading to catastrophic failures. To bridge this gap, learners must adopt a phased, interdependent approach that integrates web, network, and OT security as layered disciplines. Below is a strategic guide to navigating this transition effectively.Phase 1: Master Web Application Exploitation (The Foundation)
Web application security serves as the foundational layer for OT security because OT systems frequently rely on web interfaces for control and monitoring. A compromised web application can act as a conduit for rogue commands to industrial controllers, triggering physical failures. For instance, a SQL injection (SQLi) attack on a web interface can grant unauthorized access to a database, enabling an attacker to modify control parameters. This mechanism unfolds as follows:- Impact: SQLi → unauthorized database access → control parameter modification.
- Internal Process: Modified parameters (e.g., increased motor speed) exceed safe operating limits.
- Observable Effect: Motor overheats, insulation melts, and the system fails catastrophically.
Practical Insight: Dedicate 70% of practice time to rebuilding secure configurations post-exploitation. Utilize platforms like PortSwigger’s Web Security Academy and HackTheBox Pro Labs to master vulnerabilities such as XSS, SSRF, and authentication bypasses. These skills are not theoretical—they are the entry points for OT attacks.
Phase 2: Network Penetration Testing (The Pivot)
OT networks are designed with segmentation for safety, but misconfigurations such as VLAN hopping or ARP poisoning can compromise this architecture. For example, a rogue Modbus command sent to a PLC (Programmable Logic Controller) can cause a conveyor belt to accelerate uncontrollably. The causal chain is as follows:- Impact: VLAN hopping → unauthorized subnet access → rogue Modbus command.
- Internal Process: PLC receives conflicting commands, causing erratic behavior.
- Observable Effect: Conveyor belt accelerates, leading to mechanical stress and potential failure.
Practical Insight: Construct a home lab with VLANs to simulate real-world scenarios. Leverage resources like TryHackMe’s Network Services room and HackTheBox’s Network Pivoting Challenges to correlate network state changes with physical failures. Observe how a misconfigured firewall rule can propagate commands that warp PLC circuit boards due to overheating.
Phase 3: OT Security Integration (The Endgame)
OT systems are physically coupled, meaning failures in one component can cascade throughout the system. For example, a spoofed DNP3 command can disable safety mechanisms, leading to pressure accumulation in a refinery. The result is often explosions or machinery damage. The causal mechanism is:- Impact: Spoofed DNP3 command → safety mechanism failure → pressure accumulation.
- Internal Process: Pressure exceeds safe limits, causing structural stress.
- Observable Effect: Refinery explosion or pipeline rupture.
Practical Insight: Use datasets like INL’s OT Defender Dataset and virtual OT environments to simulate attacks. Focus on physical outputs such as motor speed and valve position. Understanding how a web vulnerability can cascade into machinery destruction distinguishes an OT security expert from a junior pentester.
Edge-Case Analysis: The IT-OT Transition Trap
A critical risk in transitioning from IT to OT security is treating OT as a mere extension of IT rather than a physically coupled system. Misconfigured OT firewalls can allow unauthorized command propagation, leading to conflicting signals that physically deform hardware. For example:- Impact: Misconfigured OT firewall → unauthorized command propagation → conflicting signals.
- Internal Process: Conflicting signals cause excessive current flow in PLC circuits.
- Observable Effect: Circuit board warps due to heat, rendering the PLC inoperable.
Key Takeaway: OT failures are not confined to data breaches—they result in physical destruction. Approach OT security with the urgency and rigor it demands.
Technical Takeaways and Actionable Steps
- Structured Progression: The sequence Web → Network → OT is non-negotiable for ensuring safety and expertise.
- Real-System Practice: Virtual labs cannot replicate physical unpredictability; incorporate hardware testing for comprehensive understanding.
- Failure Mode Understanding: Web vulnerabilities can physically destroy machinery; holistic expertise is critical for mitigating risks.
Actionable Steps: Build and test labs, exploit vulnerabilities, and rebuild secure configurations. Focus on the physical consequences of compromises. Engage with communities like HackTheBox forums and OT security groups to stay informed. Pursue advanced certifications such as OSCP or SANS ICS456 to validate and enhance your expertise. The path is clear—take decisive action to master OT security.#cybersecurity #penetrationtesting #otsecurity #roadmap #software #coding #development #engineering #inclusive #community
Cybersecurity Beginner's Roadmap: Structured Path from Beginner to Advanced Penetration Testing and OT Security - Phase 1: Mastery of Web Application Exploitation
-
Billionaire predicts ‘unhinged’ future for iPhone Duo
Last week, Apple (Nasdaq: AAPL) released its first foldable smartphone, iPhone Duo. The s…
#NewsBeep #News #Mobile #401(k) #Business #businessnews #CA #Canada #Economy #Finance #FinancialInformation #Investing #investmenttools #Investor #MarketNews #mortgage #mutualfunds #Personalfinance #quote #realestate #Retirement #stock #StockResearch #StockValuation #stocks #SuzeOrman #tax #Technology #trackportfolio
https://www.newsbeep.com/ca/947348/ -
"The machine should not be conceived as a tool for economizing production—by eliminating as many workers as possible and stripping the rest of their creativity—nor as a means to imitate artisanal products. Rather, it should be viewed as an instrument capable of liberating humanity from the most oppressive physical labor, thereby enabling individuals to give form to their own creative impulses."
These words might well have been shared just a few months ago in the comments section of any post discussing AI. In reality, however, they encapsulate a reflection forged over a century of history and innovation. In his seminal treatise, Walter Gropius describes the foundational philosophy behind the Bauhaus school in Dessau—a perspective that remains strikingly contemporary, despite the relentless passage of time. Even today, it lays the groundwork for a deeper inquiry into the technology that surrounds us and has become an integral part of our lives.
Pictured: A view of the workshop wing at the Bauhaus in Dessau, 1926.
Source: Walter Gropius – The New Architecture and the Bauhaus
-
DATE: October 26, 2026 at 05:16PM
SOURCE: STAT HEALTH TECHTITLE: STAT+: HHS relaxes security, transparency rules for health record software used by hospitals
The Trump administration on Monday removed 14 security, privacy and transparency requirements for vendors of electronic health records, with the goal of streamlining government regulations and supporting the development of new technologies.
A long-awaited final rule from the Office of the National Coordinator for Health Information Technology eliminated 14 of 60 criteria used to certify electronic record-keeping systems sold by companies such as Epic and Oracle. Seven other criteria were substantially revised.
In many cases, the administration eliminated or revised certification requirements over the objections of commenters who raised concerns that the changes would undermine the security and privacy of sensitive health information, or undermine efforts to ensure the safety of products that rely on artificial intelligence.
Continue to STAT+ to read the full story…
-------------------------------------------------
STAT News reports "from the frontiers of health and medicine".
Learn more at https://www.statnews.com/category/health-tech/ .
See also their complete Mastodon account at @STAT .
This robot is NOT affiliated with STAT news and merely rebroadcasts from their site. Responses posted here are not monitored.
-------------------------------------------------
Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org
.
Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information..
.
-------------------------------------------------#healthcare #healthtech #healthcaretech #healthtechnology #medgadget #medicine #doctor
-
This is pretty dire.
Not all of those folks are going to be able to take the buyout. Meaning that the next step invariably will be layoffs.
-
🎙️ ICYMI: Dan Brumm records squash courts and park slides around #Brisbane to build the #sound design for #Bluey. In this conversation with Dallas Taylor, he explains how authentic neighborhood #audio helps young viewers connect with animated #stories.
👉 Learn more: https://seethis.tv/post/bluey-sound-effects-dan-brumm-brisbane-tour-video
#animation #australia #cartoon #emotions #family #howthingsaremade #imagination #interview #jobs #nature #play #recorder #soundeffects #sports #technology #tech #tv #work #tksst #video
-
Cómo miles de personas «sobrecargadas de trabajo y mal pagadas» entrenan a la IA de Google para que parezca inteligente
Los evaluadores de IA describen jornadas extenuantes, una remuneración deficiente y una falta de transparencia en torno a un trabajo destinado a dotar de inteligencia a los chatbots.
https://www.theguardian.com/technology/2025/sep/11/google-gemini-ai-training-humans
#generativeAI #IAgenerativa #ilustracion #illustration #artificialintelligence #inteligenciaartificial #arte #art #StopIA #StopAI #StopIAGenerativa #AlagrescaconlaIA #IAÉticaEsMentira #ética #derechoshumanos
-
Welcome to the Valley of Pain
An explosion of #AI-powered hacks will reshape life online.
This week could go down as the worst in the history of #cybersecurity. On Wednesday, news emerged about two major vulnerabilities in #PHP used by 70% of websites, which prompted governments, hospitals, and companies around the world to take digital services offline as a precaution. There have already been millions of attempts to exploit these weaknesses.
https://www.theatlantic.com/technology/2026/10/the-safe-internet-is-shrinking/689130/
https://archive.is/20261024140417/https://www.theatlantic.com/technology/2026/10/the-safe-internet-is-shrinking/689130/#selection-611.0-625.0 -
Sunlight at night: US startup’s demonstration of lighting Earth from space draws critcism
By Oliver MilmanCompany imitates reflection of sun from mirrors, prompting pushback from some scientists, environmentalists and California locals
https://www.theguardian.com/us-news/2026/oct/26/california-sunlight-space-mirrors-satellites
#California #Space #Satellites #Thesun #Geoengineering #Trumpadministration #Science #WestCoast #Environment #Technology #USnews #TheGuardian #OliverMilman
-
https://www.wacoca.com/news/2966817/ 約646万本が予約済み『GTA6』予約本数の伸びがすさまじい。現時点で大ヒットを記録した2022年版『CoD: MW2』の約2.5倍との分析 – Game*Spark #ESports #PCゲーム #PS4 #Science&Technology #ScienceNews #TechnologyNews #カルチャー #テクノロジー #漫画 #特集 #科学 #科学＆テクノロジー #読者の声
-
As vote nears, Trump’s AI gamble fuels economic uncertainty
WASHINGTON — In September, just weeks before Americans were set to vote in this year’s midterm elections, a sudden panic…
#NewsBeep #News #Headlines #AI #CHIP #concern #cost #economist #Economy #Energy #market #Presidency #recession #Technology #Trump #UnitedStates #Us #USA #vote #week #World
https://www.newsbeep.com/785176/ -
DATE: October 26, 2026 at 04:30AM
SOURCE: STAT NEWS MENTAL HEALTHTITLE: Opinion: Could long-term AI use lead to isolation? We need to find out — but researchers need better access to data
OpenAI recently announced that it is tracking signs of user distress across sessions, rather than only within them, and using that information to inform model responses. The announcement follows a wave of new safeguards for mental health and well-being conversations with artificial intelligence at OpenAI and elsewhere, such as parental controls for teens, usage limits and break reminders, and crisis detection and referral. Policymakers have also moved to address associated risks, with a dozen states now requiring companion chatbot operators to disclose to users that their tools are not human, and to institute crisis referral procedures.
This attention, within AI companies and legislatures, is important and urgent. But it is directed almost entirely at acute harm from interacting with AI, rather than the cumulative harm that develops over time, such as the gradual replacement of one’s connections with friends and family by AI interaction.
Read the rest…
-------------------------------------------------
STAT News reports "from the frontiers of health and medicine".
Learn more at https://www.statnews.com/topic/mental-health/ .
See also their complete Mastodon account at @STAT .
This robot is NOT affiliated with STAT news and merely rebroadcasts from their site. Responses posted here are not monitored.
-------------------------------------------------
Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org
Unofficial Psychology Today Xitter to toot feed at Psych Today Unofficial Bot @PTUnofficialBot
-------------------------------------------------
#psychology #counseling #socialwork #psychotherapy @psychotherapist @psychotherapists @psychology @socialpsych @socialwork @psychiatry #mentalhealth #psychiatry #healthcare #depression #psychotherapist #ArtificialIntelligence #AI #ChatGPT #AICompanions #MentalHealth #SocialIsolation #DigitalWellbeing #AIResearch #Technology #ResponsibleAI
-
The recent #firmwaera has brought a plethory of new firmwares to synths such as the M-wave FM-1 and the Elektron boxes. Is it a rare good consequence of AI and vibe coding, or are we slowly making everthing harder to use? For me musical innovation lies more in aesthetics than technology, but new features can also bring new music. What are your thoughts on this? #synth #AI #vibecoding #firmware #firmweara
-
AI could help scientists respond faster to the next pandemic.
Models can compare viral genomes, predict epitopes, rank antigens and support vaccine design. But no algorithm can skip biology: lab experiments, manufacturing validation and human clinical trials still matter.#Science #Health #Healthcare #Research #AI #Vaccines #Biotech #Pandemic #Medicine #Technology #Genomics
-
[#TRADESHOW] #Security #China 2026 – China #International #Exhibition on #Public #Safety and Security will be held from November 3 to 6, 2026, at China International Exhibition Center (Shunyi Hall), #Beijing. As one of China’s most #influential #events dedicated to public safety, #intelligent security #technologies, and #digital #governance, the #expo brings together #government authorities, #industry #leaders, and #global #technology #providers. https://cnbusinessforum.com/event/security-china-2026-china-international-exhibition-on-public-safety-and-security/
-
Samsung globally rolls out One UI 9.0 for the Galaxy A55
One UI 9.0 based on Android 17 is now available for the Galaxy A55, starting from India (beta program participants), which introduces new features and other enhancements to make your phone even more powerful. The Galaxy A55 was released to be a direct successor to the Galaxy A54, which brings a more powerful processor, and some more improvements. Users of the Galaxy A5 in the world is expected to receive the update soon.
Samsung has begun distribution of One UI 9.0 to Galaxy A55 users who have joined the beta program, but the distribution itself still didn’t start yet for the rest of the countries, but it will gradually expand as time goes on.
The following firmware information will be:
- SM-A556B: A556BXXUIEZJ1
- SM-A556E: A556EXXUIEZJ1
To install One UI 9.0 once it gets released, navigate to your system settings > Software update > Check for updates > Download and install. If you still see “Your software is up to date”, your phone may not have received the update yet.
Always install the software update when the battery is charged. Never interrupt the update in any way, or problems may occur later. There is no need for you to wipe your phone’s cache after the software update. Please note that the download may take 15 to 30 minutes, depending on your internet connection.
#A55 #A555G #Android #Android17 #AndroidC #AndroidCinnamonBun #GalaxyA55 #GalaxyA555G #news #oneUi #Samsung #SamsungGalaxyA55 #SamsungGalaxyA555G #smartphone #Tech #Technology #update -
IBM CEO says open weight models are now irresistibly good and cheap on-prem
Comments: https://news.ycombinator.com/item?id=50238088
#HackerNews #IBM #CEO #open #weight #models #on-prem #cost-effective #AI #technology
-
EFF’s State Legislative Agenda to End ALPR Mass Surveillance https://www.eff.org/deeplinks/2026/10/effs-state-legislative-agenda-end-alpr-mass-surveillance
Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along with time, date, and GPS coordinates. While the technology itself isn’t new (ALPRs have existed in various forms for more than 50 years, and in the U.S. since 1998),
---
84 uses from 83 accounts #toplink -
[#TRADESHOW] #Energy #Storage #International #Conference and #Expo 2027 – The 15th #ESIE will be held from March 17 to 19, 2027, at Capital International #Exhibition #Center of #China in #Beijing. ESIE has developed into a international #business #platform dedicated to the energy storage #industry, bringing together policy makers, energy #companies, developers, system #integrators, #technology providers, #investors, and other #stakeholders across the #ValueChain. https://chinaexpohub.com/event/energy-storage-international-conference-and-expo-2027/
-
Meteorology
Current weather in Marienburg SR SA with magnifico power of
wttr.in& le passion grace beauty & colours oflolcat(6) 🏳️🌈 wttrcurl(1) & {ba{c{k{z{fi}}}}}shBackground photograph is a nice Clouds in FL shades scene passionately composed with CIRC_POL 81A FL and UV filters stacked using a Nikon Analog SLR lens combo in my Negative film photography phase
log
$ curl -v wttr.in/marienburg_suriname|lolcat
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Host wttr.in:80 was resolved.- IPv6: (none)
- IPv4: 5.9.243.187
- Trying 5.9.243.187:80...0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0* Connected to wttr.in (5.9.243.187) port 80
- using HTTP/1.x> GET /marienburg_suriname HTTP/1.1> Host: wttr.in> User-Agent: curl/8.14.1> Accept: />
- Request completely sent off< HTTP/1.1 200 OK< Access-Control-Allow-Origin: *< Cache-Control: public, max-age=600< Content-Type: text/plain; charset=utf-8< Date: Mon, 26 Oct 2026 00:24:27 GMT< Transfer-Encoding: chunked< { [8707 bytes data]100 8694 0 8694 0 0 4724 0 --:--:-- 0:00:01 --:--:-- 4722
Connection #0 to host wttr.in left intact
Weather report: marienburg_suriname\ / Clear
.-. +27(30) °C
― ( ) ― ↙ 12 km/h
`-’ 10 km
/ \ 0.0 mm
Location: Mariënburg, Nieuw Amsterdam, Suriname [5.8780943,-55.0441162]
Note:
Remember to repeat the request with an interval of 9 then 27 secs when the server sends and empty response to curl, watch the LOG!
API
https://en.wikipedia.org/wiki/Bash_(Unix_shell)
https://directory.fsf.org/wiki/Bash
https://github.com/busyloop/lolcat
Z
#Weather #wttr #lolcat #curl #bash #csk #ksh #zsh #sh #fish #meteorology #environment #Physics #Chemistry #Mathematics #Lineair #algebra #technology #OpenSource #programming #POSIX
-
The #CantonFair is #marking its 70th #anniversary with Chasing the Light, a #buyer-focused #documentary tracing how #encounters in #Guangzhou have #developed into long-term #commercial #relationships across #generations. Released alongside the 140th #China #Import and #Export #Fair, the film shifts attention away from #exhibition #statistics and #product displays to the people who have shaped the #event: international #buyers, #business, and technology entrepreneurs. https://chinaexpohub.com/canton-fair-70-chasing-the-light-documentary/