Pentest Harness for AI Security Testing

23 09 2026
Pentest Harness for AI Security Testing

This is a dark-mode web UI for running authorized penetration tests with multiple LLM providers. It uses a plugin architecture to manage shell access, web research, and durable session states. You bring your own API keys for any OpenAI-compatible model.

The setup is straightforward if you have Node 20 and pnpm installed. It requires explicit authorization for every engagement, so it is not for casual curiosity. The interface is dense and assumes you know what you are doing.

more: https://github.com/S1N6H/pentest-harness

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Security, TechReview

Knap template engine for Markdown generation

23 09 2026
Knap template engine for Markdown generation

Knap is a template language that converts data into Markdown using variables, filters, and logic. It parses templates into an AST and interprets them without eval or arbitrary JavaScript execution. The library requires Node.js 20 or later for the CLI.

Useful if you need safe templating for data pipelines without sandboxing risks. It lacks a browser build, limiting use to server-side or Node environments. Not for generating HTML or complex front-end logic.

more: https://github.com/obsidianmd/knap

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Programming, TechReview

AI interviews push job candidates to exaggerate

22 09 2026
AI interviews push job candidates to exaggerate

Job seekers embellish their qualifications more often when they believe an AI is evaluating their video rather than a human. The study found that candidates felt disoriented by the lack of social cues and strategically overstated their skills to match what they imagined the algorithm wanted.

Humans naturally penalize this dishonesty, but the AI system tested scored exaggerated answers the same as authentic ones. Knowing exactly which metrics the AI uses, such as sentiment analysis and keywords, encourages applicants to behave authentically instead of gaming the system.

more: https://www.futurity.org/ai-job-interviews-3345682/?utm_source=rss&utm_medium=rss&utm_campaign=ai-job-interviews-3345682

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Business

pgbot adds read-only Postgres health checks

22 09 2026
pgbot adds read-only Postgres health checks

This is a single static binary that connects to Postgres using a read-only role and prints a findings-first health report. It calculates cache hits, lock waits, and transaction age locally, writing a baseline file to track changes between runs. The tool runs entirely on your machine without requiring external agents, time-series databases, or write privileges.

It is useful for immediate insight into database performance without deploying new infrastructure. However, the human-readable output is explicitly unstable, so you must parse the versioned JSON contract for any automated scripts. If your workflow relies on the terminal text directly, you will face breaking changes.

more: https://github.com/pgrundev/pgbot

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Programming, TechReview

Little Red Dots May Be Black Hole Stars

22 09 2026
Little Red Dots May Be Black Hole Stars

Astronomers using the James Webb Space Telescope have identified a class of objects called little red dots that shine as brightly as entire galaxies despite being tiny. Two recent studies propose these are not standard black holes but black hole stars, massive lumps of hydrogen enveloping a central singularity. These sources appear so exotic that researchers claim no similar object has been detected by ground-based telescopes.

The existence of these objects remains unconfirmed, with a subset of astrophysicists arguing the data fits standard active galactic nuclei instead. If they are real, they rewrite the timeline of early universe structure, but the field is currently divided on interpretation.

more: https://www.quantamagazine.org/black-holes-or-black-hole-stars-astronomers-spar-over-webb-telescopes-little-red-dots-20260914/

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Science

Bird counts miss evolutionary history in Indonesian forests

22 09 2026
Bird counts miss evolutionary history in Indonesian forests

Researchers analyzed 422 bird species across 1,410 sites in seven Indonesian islands and found that high species richness does not guarantee ecological health. They measured phylogenetic diversity to assess how distantly related the coexisting birds are, revealing that forest condition depends on these evolutionary distances rather than simple headcounts.

This suggests conservation targets must account for unique lineages that may be highly vulnerable despite a seemingly lush habitat. The study covers specific Indonesian islands, so broader global applicability remains unproven, and the data relies on a specific 2010-2022 timeframe for forest cover changes.

more: https://theconversation.com/hutan-yang-ramai-kicau-burung-belum-tentu-sehat-riset-membuktikannya-lewat-pohon-evolusi-290821

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Science

Chronic Stress Increases Heart Attack Risk 43%

22 09 2026
Chronic Stress Increases Heart Attack Risk 43%

A UK study of almost 480,000 adults found that people with the highest chronic inflammation—measured by the blood marker GlycA—had a 43 % higher risk of heart attack and stroke than those with the lowest levels. The same group showed subtle heart changes: thicker walls, smaller chambers and poorer filling. These changes can develop years before any symptoms appear.

The finding links everyday stress and social disadvantage to silent heart damage, suggesting that inflammation is a pathway by which inequality and mental strain raise cardiovascular risk. It does not prove causation, and the study’s observational design cannot rule out other factors. Further work is needed to see if lowering inflammation can actually prevent heart events, but the data highlight the importance of managing stress, smoking and weight.

more: https://www.sciencedaily.com/releases/2026/09/260920222354.htm

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Health

Pinloop CLI Terminal Job Search

22 09 2026
Pinloop CLI Terminal Job Search

Pinloop CLI is a Node‑based command‑line tool (requires Node 22+) that lets you search millions of worldwide job postings from the terminal. It fetches listings hourly from company hiring systems and major boards, stores your resume and preferences locally, and can call an LLM to score each posting against your profile. The tool is installed with a single npm global install and interacts with Pinloop’s servers for search, filtering, and account management.

If you already work with coding agents and prefer staying in the shell, Pinloop can be a convenient alternative to web job boards, though the free tier caps you at five pulls and 150 LLM judgments per month. The reliance on external servers and a paid Pro plan for higher limits means it isn’t a standalone solution for heavy job hunting, and it won’t help if you need a full UI or offline access.

more: https://github.com/pinloop-ai/pinloop-cli

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Programming, TechReview

AgentSafe Proxy Enforces Decionis Authorization

22 09 2026
AgentSafe Proxy Enforces Decionis Authorization

AgentSafe is a lightweight HTTP proxy (v0.2.0) that you can install via Homebrew, Docker, or Helm. It intercepts each request from an AI agent or service, forwards the intent to the Decionis control plane, and only forwards the request onward when Decionis returns an ALLOW grant. The proxy records every decision as a signed dossier and never makes its own policy decisions.

If you need a clear authority boundary for autonomous agents, AgentSafe gives you a reproducible test harness and a single‑use grant model. It depends on a running Decionis service (and optionally the Presence layer) and only works for HTTP traffic, so it isn’t a drop‑in for non‑HTTP workloads or environments without those services.

more: https://github.com/decionis/agent-safe-pipeline

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Security, TechReview

Cybermes CLI and MCP Server

22 09 2026
Cybermes CLI and MCP Server

Cybermes is a Go‑based offensive security framework released on GitHub (v0.9.1) that bundles more than 200 modular playbooks and a native Model Context Protocol (MCP) server. It can be run as a standalone CLI for headless CI pipelines or as an MCP service that streams security tools into AI‑assisted IDEs such as Gemini, Claude, and Cursor. The package includes Docker support, Windows PowerShell installers, and a health‑check script that validates dependencies and API keys. It aims to replace ad‑hoc script collections and manual tool chaining with a single, versioned pipeline.

If you already have a mature suite of custom scripts, Cybermes adds little beyond convenience and may feel heavyweight for small bug‑bounty jobs. The MCP integration works only with supported AI clients, so environments without those assistants get only the CLI path. It’s a solid time‑saver for teams that need repeatable, AI‑augmented assessments, but not essential for solo developers who prefer direct tool control.

more: https://github.com/Zyrexnn/Cybermes

my other side: ivo.blogspot.com


Comments : Leave a Comment »

Categories : Security, TechReview

« Previous Entries Next Entries »