In this article I will introduce the second OT PLC cyber security workshop case study : the ARP Spoofing Attack on Railway Sensor-Signal State Monitoring HMI . This case study will comprehensively cover the attack tactics, techniques, and procedures (TTPs) and will include practical demonstrations on the OT Human Machine Interface in the train operation HQ. If you are interested about other case study, please refer to below links:False Data/Command Injection AttackOT-Network ARP Spoofing At...

Project Design Purpose : The Cyber Exercise Service and Resource Health Monitor is designed as an integrated monitoring and observability toolset to support middle-scale cyber exercises and cyber drill events. It is designed to provide the real-time visualization software for showcasing the availability, status, and performance of resources—including hardware, virtual machines (VMs), containers, applications, and software services—throughout the lifecycle of an exercise.The system is...

Project Design Purpose : For the cyber range/twin (such as Power Grid, Airport Runway, Traffic Lights) used in the attack and defense cyber exercise, most of time the Red/Blue/Yellow Teams focus more on the Operational Technology (OT) system, but some times there are also requirements for building a simple company IT system (such as the internal ERP & HR service) to simulate the attack initial access through weaknesses in the corporate IT network before pivoting into OT networks such as IT-t...

Project Design Purpose : In this article, I will share the design and deployment of a distributed multiple OpenClaw AI assistants cluster connected to one or two locally hosted Large Language Models (LLMs) running on one GPU-enabled server or gaming laptop. Instead of relying on using the cloud-based AI APIs. I used the open-source models such as `Qwen 3.5` or `DeepSeek-R1` to provide inference services for multiple OpenClaw agents, so we can reduces cloud AI token costs and compare the per...

Project Design Purpose : The robot arms are widely used in the different kinds of Industry 4.0 scenario such as create smart factories with the interconnection of systems that can exchange data, integrate the entire production chain and make decentralized decisions. We want to create a simple robot arm control software ( with UI ) which allows the user can remote control the Braccio++ Robot Arm via Serial port, UDP or TCP and let the robot arm do some complex actions sequence ( such as grab a bo...

Recently, a claim emerged that GPT-5 (developed by OpenAI) had “found solutions” to several long-standing open problems listed on ErdosProblems.com. The claim began with a tweet by an OpenAI researcher which stated that GPT-5 had solved 10 previously unsolved Erdős problems and made progress on more. However, Thomas Bloom—the creator and maintainer of ErdosProblems.com—responded swiftly, calling the claim “a dramatic misinterpretation.” He clarified that the label “open” on his site simply means he personally was unaware of a published solution, not that the problem is truly unsolved. He asserted that GPT-5 had only surfaced existing research papers that he had missed. This incident has sparked discussion about how to interpret AI contributions in mathematics, the difference between finding existing proofs and generating new ones, and how announcements about AI breakthroughs should be communicated responsibly.

As code agent with AI capability becoming more and more popular, it seems can help programmers complete lots of tasks from code suggestion and bug hunt. Does your company allow use this kind of code agent? What is allowed? Any concern on security and privacy? Share your experience.

A workaholic superstar refers to someone in the workplace who relentlessly “overworks themselves” or competes excessively on effort alone—often seen in tech companies as the extreme overachiever or workaholic. If your team just have someone joining as workaholic superstar, how would you deal with it?

For example, The Social Network

GoLang is often criticized by people on lacking of features and bad error handling style. What are some of the bad comments people have on GoLang?