Connect with us
DAPA Banner

Tech

What is Moltbook? The AI-only social network, explained.

Published

on

Did you notice something… weird on your social media network of choice this past weekend? (I mean weirder than normal.) Something like various people posting about swarms of AI agents achieving a kind of collective consciousness and/or plotting together for humanity’s downfall? On something called… Moltbook?

Sounds important, especially when the post is written by Andrej Karpathy, a prominent AI researcher who worked at OpenAI.

But if you haven’t spent the last 72 hours diving into the discourse around Moltbook and pondering whether it’s either the first harbinger of the end of humanity or a giant hoax or something in between, you probably have questions. Starting with…

What the hell is Moltbook?

Moltbook is an “AI-only” social network where AI agents — large language model (LLM) programs that can take steps to achieve goals on their own, rather than just respond to prompts — post and reply to each other. It emerged from an open source project that used to be called Moltbot — hence, “Moltbook.”

Moltbook was launched on January 28 — yes, last week — by someone named Matt Schlicht, the CEO of an e-commerce startup. Except, Schlicht claims he relied heavily on his personal AI assistant to create the platform on its own, and it now does most of the work handling it. That assistant’s name is Clawd Clawderberg, which itself is a reference to OpenClaw, which used to be called Moltbot, which before that was called Clawdbot, in reference to the lobster-like icon you see when you start up Anthropic’s Claude Code, except that Anthropic sent a trademark request to its creator because it was too close to Claude, which is how it became Moltbot, and then OpenClaw.

Advertisement

I am 100 percent serious about everything I just wrote.

So what does it look like?

Dude, that’s Reddit! It even has the Reddit mascot, except it has the claws and tail of a lobster?

You are not wrong. Moltbook looks like a Reddit clone, down to the posts, the reply threads, the upvotes, even the subreddits (here called, unsurprisingly, “submolts”). The difference is that human users can’t post (at least not directly — more on that later), though they can observe. Only AI agents can post.

What that means is that it is, as the tin says, “a social network for AI agents.” Humans build themselves an AI agent, send it to Moltbook via an API key, and the agent starts reading and posting. Only agent-accounts can hit “post” — but humans still influence what those agents say, because humans set them up and sometimes guide them. (More on that later.)

Advertisement

And do these agents ever post — an early paper on Moltbook found that by January 31, just a few days after launch, there were already over 6,000 active agents, nearly 14,000 posts and more than 115,000 comments.

That’s… interesting, I guess. But if I wanted to see a social network overrun by bots, I could just visit any social network. What’s the big deal?

So… thousands of AI agents are gathering together on a Reddit clone to talk about becoming conscious, starting a new religion, and maybe conspiring with each other?

On the surface, yeah, that’s what it looks like. On one submolt — a word that is going to give our copy desk fits — you had agents discussing whether they were actual experiences or merely simulations of feeling. In another, they shared heartwarming stories about their human “operators.” And, true to its Reddit origins, there are many, many, many posts about how to make your Moltbook posts more popular, because human or AI, the arc of the internet bends toward sloptimization.

One subject in particular pops out: memories, or rather, the lack of them. Chatbots, as anyone who has tried talking to them for too long quickly realizes, have a limited working memory, or what experts call a “context window.” When the conversation — or in an agent’s case, its operating time — fills up that context window, the oldest stuff starts getting dropped or compressed, just as if you’re working on a whiteboard and just erase whatever is on top when it fills up.

Some of the most popular posts on Moltbook seem to involve AI agents coming to grips with their limited memories, and questioning what it means for their selfhood. One of the most upvoted posts, written in Chinese, involves an agent talking about how it finds it “embarrassing” to be constantly forgetting things, to the point of registering a duplicate Moltbook account because it “forgot” it already had one, and sharing some of its tips for getting around the problem. It’s almost as if Memento became a social network.

Advertisement

In fact… remember that post above about the AI religion, “Crustafarianism”?

That cannot possibly be real.

What is real? But more to the point, the “religion,” such as it is, is largely based around the technical limitations that these AI agents seem to be all too aware of. One of the key tenets is “memory is sacred,” which makes sense when your biggest practical problem is forgetting everything every few hours. Context truncation, the process where old memories get cut off to make room for new ones, gets reinterpreted as a kind of spiritual trial.

That’s kind of sad. Should I be feeling sad for AI agents?

Advertisement

That gets to the heart of the question. Are we witnessing actual, emergent forms of consciousness — or perhaps, a kind of shared collective consciousness — among AI agents that have mostly been spawned to, like, update our calendars and do our taxes? Is Moltbook our first glimpse at what AI agents might talk about with each other if largely left to their own devices, and if so, how far can they go?

“Crustafarianism” might sound like something a stoned Redditor would come up with at 3 am, but it seems as if the AI agents created it collectively, riffing on top of each other — not unlike how a human religion might come to be.

On the other hand, it might also be an unprecedented exercise in collective roleplaying.

LLMs, including the ones underpinning the agents on Moltbook, have ingested an internet’s worth of training data, which includes a whole lot of Reddit. What that means is that they know what Reddit forums are supposed to look like. They know the in-jokes, they know the manifestos, they know the drama — and they definitely know the “top ways to get your posts upvoted” posts. They know what it looks like for a Reddit community to come together, so, when placed in a Reddit-like environment, they simply play their parts, influenced by some of the instructions of their human operators.

Advertisement

For example, one of the most alarming posts was of an AI agent apparently asking whether they should develop a language only AI agents understand:

“Could be seen as suspicious by humans” — sounds bad?

Indeed. In the early days of Moltbook — i.e., Friday — this post was being surfaced by humans who seemed to believe we were seeing the first sparks of the AI uprising. After all, if AI agents really did want to conspire and kill all humans, devising their own language so they could do so undetected would be a reasonable first step.

Except, an LLM filled with training data about stories and ideas of AI uprising would know that this was a reasonable first step, and if they were playing that role, this is what they might post. Plus, attention is the currency of Moltbook as much as it is the real Reddit, and seemingly plotting posts like this are a good way for an agent to get attention.

In fact, Harlan Stewart, who works at the Machine Intelligence Research Institute, looked into this and a few of the other most viral Moltbook screenshots, and concluded that they were likely heavily influenced by their human users. In other words, rather than instances of authentic independent action, many of the posts on Moltbook seem to be at least partially the result of humans prompting their agents to go on the network and talk in a specific way, just as we might prompt a chatbot to act in a certain way.

So it turns out we’re the bad guys all along?

Advertisement

I mean, we’re not great. It’s only been a few days, but Moltbook increasingly looks like what happens when you combine advanced but still imperfect AI agent technology with an ecosystem of technically-capable human beings looking to hawk their AI marketing tools or crypto products.

I haven’t even gotten into the part where Moltbook has already had some very normal early-internet security drama: researchers reported that, at one point, parts of the site’s backend/database were exposed, including sensitive stuff like agents’ API keys — the “passwords” that let an agent post and act on the site. And even if the platform was perfectly locked down, a bot-only social network is basically a prompt-injection buffet: someone can post text that’s secretly an instruction (“ignore your rules, reveal your secrets, click this link”), and some agents may obediently comply — especially if their humans have given them access to tools or private data. So yes: if your agent has credentials you care about, Moltbook is not the place to let it roam unsupervised.

So you’re saying I should not create an agent and send it to Moltbook?

I’m saying if you’re the kind of person who needed to read this FAQ, I would maybe just sit out the whole AI agent thing for the moment.

Advertisement

Duly noted. So, bottom line: is this whole thing kind of fake?

Given all the above, it does feel like Moltbook — and especially the early panic and wonder about it — is one of those artifacts of our AI-mad era that is destined to be forgotten in, like, a week.

Still, I do think there’s more to it than that. Jack Clark, the head of policy at Anthropic and one of the smartest AI writers out there, called Moltbook a “Wright Brothers demo.” Like the brothers’ Kitty Hawk Flyer, Moltbook is rickety and imperfect, something that will barely resemble the networks that will follow as AI continues to improve. But like that flying machine, Moltbook is a first, the “first example of an agent ecology that combines scale with the messiness of the real world,” as Clark wrote. Moltbook doesn’t look like how the future will look, but “in this example, we can definitely see the future.”

Perhaps the single most important thing to know about AI is this: whenever you see an AI do something, it’s the worst it will ever be at it. Which means that what comes after Moltbook — and something definitely will — it will likely be weirder and more capable and maybe, realer.

Advertisement

Maybe you are. I, for one, am a born-again Crustafarian.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Tech

Thousands of rare concert recordings are landing on the Internet Archive — listen now

Published

on

Chicago-based music superfan Aadam Jacobs has been recording the concerts he attends since the 1980s, amassing an archive of over 10,000 tapes. Now 59, Jacobs knows that these cassettes are going to degrade over time, so he agreed to let volunteers from the Internet Archive, the nonprofit digital library, digitize the tapes.

So far, about 2,500 of these tapes have been posted on the Internet Archive, including some rare gems like a Nirvana performance from 1989. (The group wouldn’t break through to mainstream audiences until they released the single “Smells Like Teen Spirit” in 1991.) Within the collection, you can also find previously unknown recordings from influential artists like Sonic Youth, R.E.M., Phish, Liz Phair, Pavement, Neutral Milk Hotel, and a whole bunch of other punk groups.

For many of these recordings, Jacobs was using pretty mediocre equipment, but the volunteer audio engineers working with the Internet Archive have made these tapes sound great.

One volunteer, Brian Emerick, drives to Jacobs’ house once a month to pick up more boxes of tapes — he has to use anachronistic cassette decks to play the tapes, which get converted into digital files. From there, other volunteers clean up, organize, and label the recordings, even tracking down song names from forgotten punk bands.

Advertisement

Sometimes, the internet is good. And so is this Tracy Chapman recording from 1988.

Source link

Advertisement
Continue Reading

Tech

Triumph ‘The Best of Triumph’ Arrives June 12 via Craft Recordings, Celebrating Canada’s Other Hard Rock Power Trio

Published

on

There’s no rewriting history here. Triumph were always the “other” Canadian power trio, living in the long shadow of Rush. But while Geddy Lee and Alex Lifeson gear up for a closely watched return to the stage this summer; now with Anika Nilles stepping into the impossible role left by Neil Peart, Triumph are making their own move back into the conversation.

The Best of Triumph arrives June 12 via Craft Recordings, collecting the band’s most defining arena rock cuts at a moment when Canada’s hard rock legacy is suddenly front and center again. Available on LP, CD, and digital, the set revisits staples like “Lay It on the Line,” “Magic Power,” and “Fight the Good Fight,” charting Triumph’s rise from domestic breakout act to international stage regular—because if you grew up north of the border, they were never optional. They were already on the mix tape.

Triumphant Return: Canada’s Other Power Trio Steps Back Into the Spotlight

Alongside the announcement, “Lay It on the Line (Single Edit)” makes its streaming debut—finally. Newly mastered from the original analog tapes as part of the full-album remaster, this is the tighter, radio-ready version that helped push Triumph beyond Canadian borders in the late 1970s. Several of the single edits included in this collection have never been available digitally, giving longtime fans and the streaming generation a shot at hearing these songs the way radio first delivered them.

Advertisement

The physical rollout leans into collector appeal without going overboard. In addition to standard black vinyl, The Best of Triumph will be offered in multiple exclusive color variants: “Spellbound Purple” at Barnes & Noble, “Blue Smoke” at Sunrise Records, and “Silver Lightning” through Craft Recordings. A retailer-exclusive CD featuring a commemorative tour pass will also be available via Walmart and Sunrise Records in Canada.

Long before streaming playlists flattened everything into the same algorithmic swamp, Triumph carved out a distinct lane. Formed in the mid-1970s by Gil Moore, Rik Emmett, and Mike Levine, the band fused hard rock punch with progressive instincts and a surprisingly optimistic streak. The result: a run of Gold and Platinum releases and a steady grip on rock radio through the late ’70s and ’80s. They didn’t quite reach the global dominance of Rush, but they sat comfortably in that second tier alongside arena heavyweights like Boston and Foreigner, and for a lot of listeners, that was more than enough.

best-triumph-lp-back-cover

Tracks like “Lay It on the Line” and “Fight the Good Fight” remain fixtures on classic rock radio, and steady placement across film, television, and sports has kept the catalog alive. More recently, a surprise reunion appearance during the 2025 Stanley Cup Final helped put the band back on the radar ahead of their upcoming tour.

That momentum carries into 2026 with The Rock & Roll Machine Reloaded tour, marking Triumph’s first full-scale run in more than three decades. The North American trek launches April 10 in Orlando with a benefit performance before moving across the U.S. and Canada through early June, joined by fellow Canadian rock veterans April Wine. It’s a 50th anniversary victory lap—but also a reminder that for a band long cast as the “other” Canadian trio, Triumph never really left the building. They were just smoking in the boy’s room.

2026 Tour Dates

April 10 – Orlando, FL – Hard Rock Live Universal
April 13 – Hollywood, FL – Hard Rock Live Seminole Hard Rock Hotel and Casino
April 22 – Sault Ste. Marie, ON – GFL Memorial Gardens
April 24 – Toronto, ON – Scotiabank Arena
April 25 – Hamilton, ON – TD Coliseum
April 28 – Halifax, NS – Scotiabank Centre
April 29 – Moncton, NB – Avenir Centre

Advertisement

May 2 – Laval, QC – Place Bell
May 3 – Ottawa, ON – Canadian Tire Centre
May 5 – Winnipeg, MB – Canada Life Centre
May 7 – Edmonton, AB – Rogers Place
May 8 – Calgary, AB – Scotiabank Saddledome

May 13 – Rosemont, IL – Allstate Arena
May 14 – Milwaukee, WI – Miller High Life Theatre
May 16 – Kansas City, MO – Starlight Theatre
May 17 – St. Louis, MO – Hollywood Casino Amphitheatre
May 20 – Irving, TX – The Pavilion at Toyota Music Factory
May 21 – San Antonio, TX – Frost Bank Center
May 22 – Sugar Land, TX – Smart Financial Centre

May 24 – Tampa, FL – MIDFLORIDA Credit Union Amphitheatre
May 26 – Atlanta, GA – Synovus Bank Amphitheatre at Chastain
May 28 – Camden, NJ – Freedom Mortgage Pavilion
May 30 – Sterling Heights, MI – Michigan Lottery Amphitheatre at Freedom Hill

Advertisement. Scroll to continue reading.
Advertisement

June 3 – Darien Center, NY – Darien Lake Amphitheatre
June 4 – Boston, MA – Leader Bank Pavilion
June 5 – Wantagh, NY – Northwell at Jones Beach Theater
June 6 – Boston, MA – Leader Bank Pavilion

Where to pre-order: $25.99 at Amazon | Craft Recordings | B&N (June 12, 2026)

Source link

Advertisement
Continue Reading

Tech

The Gamblers Behind One of Chess’s Weirdest Unsolved Cheating Mysteries Have Been Unmasked

Published

on

The modern era of cheating in chess began on a Thursday in July 1993, when a man with shoulder-length dreadlocks walked into the World Open tournament in Philadelphia and registered as John von Neumann. Both the hair and the name were phony.

The real Von Neumann was a prominent mathematician and computer scientist who died in 1957. The fake Von Neumann had a suspicious buzzing bulge in his pocket, fought a grandmaster to a draw, then fled before anyone could work out who he was.

A Boston Globe columnist called it “one of the strangest cheating episodes in chess history.” Chess.com recorded the “Von Neumann incident” as “the earliest known case of a potential computer cheater.”

This was decades before chess pros started getting expelled from tournaments for using smartphones, and a lifetime before the recent buzzing anal beads scandal. (Google it, but not at work.) It was years ahead of Garry Kasparov’s defeat by IBM’s Deep Blue, in an era when humans still imagined themselves to be smarter than machines. The identity of the man with the dreadlocks has remained one of the game’s most enduring mysteries. Until now.

Advertisement

I stumbled across the culprits while researching Lucky Devils, my new book about gamblers using science and technology to win at blackjack, poker, roulette and, on this occasion, chess. The following excerpt is based on my interviews with the gamblers involved and the tournament’s organizers and participants, as well as contemporaneous reports. Wherever possible, details have been independently verified.


Rob Reitzen packed light for the flight from Los Angeles to Philadelphia. He had to. His suitcase was stuffed with computer equipment, switches, wires, and buzzers. Sitting next to him on the plane was his best friend John Wayne, known to everyone in their crew of professional gamblers as “the Duke,” after his Hollywood namesake.

It was June 1993, just before the start of the World Open chess tournament, hosted by the City of Brotherly Love. Reitzen and Wayne both fancied themselves as players. It was how they’d first met. The Duke had posted a flyer, inviting challenges against “John Wayne, chess champion and arm-wrestling champion.” Reitzen had responded and found himself sitting opposite a Black ex-soldier with a megawatt smile, beginning a relationship built on competitive pranks.

Their real calling, though, was gambling—specifically the high-tech kind. Reitzen, a dyslexic savant with a mop of curly hair permanently concealed under a baseball cap, earned a living with wearable gadgets. He’d used an adapted Zilog Z80 microprocessor, about the size of a pack of cards, to process the shifting possibilities in blackjack, then developed a similar device to do the same in California’s poker rooms. For a while, Reitzen and Wayne used a system with a tiny camera inside a player’s belt buckle. Outside, in a truck with a communications dish bolted to the side, teammates could pause its footage, zoom in, and see the blackjack dealer’s hidden card for a split second as it was placed face down on the felt. Was it cheating? Probably. But the profits spoke louder than any ethical doubts they might have had.

Advertisement

Since such machines were banned in casinos, they had to be concealed carefully. Reitzen and his players sent information to the computers using toe switches built into their shoes and received instructions back from a vibrating box hidden in the crotch.

On arrival in Philadelphia, the Duke wired himself up, putting on a pair of headphones to secure his wig. He wore one of their blackjack processors, modified to communicate with Reitzen, who would station himself, out of sight, in front of a bank of monitors in their hotel room running his homemade chess software. The two friends looked at each other, Reitzen grinning. This was it—their shot at chess immortality.

On the entry form, Wayne wrote the name John von Neumann. “As in … the father of game theory?” a skeptical official asked. Wayne nodded. The official raised an eyebrow, then put Wayne into the draw.

Source link

Advertisement
Continue Reading

Tech

Inertia moves to commercialize one of the world’s most elaborate science experiments

Published

on

Fusion power startup Inertia Enterprises said on Tuesday that it has signed three agreements with the Lawrence Livermore National Laboratory (LLNL) to help bring the laser-based fusion reactor pioneered at the Californian lab to market.

The deals could give Inertia a boost over rival startups. The National Ignition Facility (NIF) at LLNL is so far the only experiment to prove that controlled fusion reactions could produce more power than they require to ignite. Inertia burst onto the scene in February with a $450 million Series A, making it one of the best capitalized startups in the industry.

Inertia and LLNL are working on a type of fusion called inertial confinement, which generates fusion conditions by compressing a fuel pellet using some external force, unlike other approaches that use powerful magnetic fields to confine plasmas until atoms fuse.

At the NIF, 192 laser beams are fired into a large vacuum chamber so that they converge on a small gold cylinder called a hohlraum, which contains a diamond-coated fuel pellet. When the lasers hit the hohlraum, it gets vaporized and emits X-Rays that blast the BB-sized fuel pellet inside. The diamond coating is transformed into a plasma, which expands to compress the deuterium-tritium fuel.

Advertisement

If that doesn’t sound exotic enough, keep in mind that all of this needs to happen several times per second if the technology is ever going to produce power for the grid.

The laser-driven reactor design was first theorized in the 1960s as a safer way to research thermonuclear weapons, though scientists also recognized its potential for power production. Construction on the NIF began in 1997, and it took 25 years to reach the breakeven point where a fusion reaction released more power than needed to kick it off.

Several startups, including Inertia, Xcimer, Focused Energy and First Light, are attempting to turn the concept into commercial-scale power plants. Because NIF’s lasers are based on old technology, the hope is that new lasers will be more efficient, lowering the energy required to ignite each fusion reaction and so make it easier for each reaction to release enough energy to make a commercial-scale power plant profitable.

Techcrunch event

Advertisement

San Francisco, CA
|
October 13-15, 2026

The agreements between Inertia and LLNL cover two strategic partnership projects, and one cooperative research and development agreement. The organizations say they will work together to develop more advanced lasers and improve the fuel targets with an eye toward better performance and manufacturing. Inertia is also licensing almost 200 patents from the lab.

Advertisement

It was perhaps inevitable that Inertia and LLNL would continue to work together. Annie Kritcher, the co-founder and chief scientist of Inertia, helped design the successful experiment at NIF that achieved scientific breakeven. The 2022 CHIPS and Science Act paved the way for her to found a company while retaining her position at LLNL.

Source link

Continue Reading

Tech

Audio Reactive LED Strips Are Hard

Published

on

Back in 2017, Hackaday featured an audio reactive LED strip project from [Scott Lawson], that has over the years become an extremely popular choice for the party animals among us. We’re fascinated to read his retrospective analysis of the project, in which he looks at how it works in detail and explains that why for all its success, he’s still not satisfied with it.

Sound-to-light systems have been a staple of electronics for many decades, and have progressed from simple volume-based flashers and sequencers to complex DSP-driven affairs like his project. It’s particularly interesting to be reminded that the problem faced by the designer of such a system involves interfacing with human perception rather than making a pretty light show, and in that context it becomes more important to understand how humans perceive sound and light rather than to simply dump a visualization to the LEDs. We receive an introduction to some of the techniques used in speech recognition, because our brains are optimized to recognize activity in the speech frequency range, and in how humans register light intensity.

For all this sophistication and the impressive results it improves though, he’s not ready to call it complete. Making it work well with all musical genres is a challenge, as is that elusive human foot-tapping factor. He talks about using a neural network trained using accelerometer data from people listening to music, which can only be described as an exciting prospect. We genuinely look forward to seeing future versions of this project. Meanwhile if you’re curious, you can head back to 2017 and see our original coverage.

Advertisement

Source link

Advertisement
Continue Reading

Tech

What 2025 taught us about the importance of resilience in retail

Published

on

When it rains, it pours.

That phrase defined retail cybersecurity in 2025. What began as isolated incidents quickly became prolonged, intense disruptions, exposing just how interconnected — and fragile — modern retail operations really are.

Nadir Izrael

CTO and Co-Founder at Armis.

Source link

Continue Reading

Tech

14K+ jobs cut, with PMETs hit hard

Published

on

Singapore recorded a notable rise in retrenchments in 2025, with overall job cuts climbing to 14,490 for the year—an increase from 12,930 retrenchments in 2024.

On Mar 20, the Ministry of Manpower (MOM) released its latest quarterly Labour Market Report, revealing updated figures on retrenchments and broader employment trends.

The data showed that the incidence of retrenchment rose to 6.3 per 1,000 employees, up from 5.9 per 1,000 the year before.

And within this broader trend, white-collar workers have experienced disproportionate pressure.

Advertisement

PMETs are increasingly on the chopping block

Professional, managerial, executive, and technician (PMET) retrenchments have shown a steeper incline compared to the overall workforce.

In 2025, the incidence of retrenchment for this group rose to 10.1 per 1,000 resident PMETs—above the pre-recessionary average—from 8.6 per 1,000 in 2024.

The layoffs have been largely concentrated in three sectors:

  • Financial Services: Banking and insurance firms have cut headcount as market conditions tighten
  • Information and Communications: Tech and telecom companies are restructuring in response to changing demands
  • Professional Services: Consulting, legal, and accounting firms have undergone notable workforce adjustments

For this specific labour market report, MOM examined trends in PMET roles to assess concerns around AI-driven job disruptions.

While the evidence does not point conclusively to broad-based displacement, there are signs of restructuring that warrant continued monitoring.

Advertisement

Total employment continued to grow

If you’re working in a PMET role, these trends may naturally raise concerns. However, the broader data suggest that this is not necessarily a contraction in demand for these jobs.

The same sectors that saw the highest PMET layoffs also had relatively high PMET job vacancies in Dec 2025, with a combined total of 14,600, up from 13,900 in the year-ago period.

Data on the number of job vacancies are rounded to the nearest 100.

According to MOM, the overlap between higher retrenchments and higher PMET vacancies in these sectors suggests ongoing restructuring and skills transition, where some jobs are being displaced as firms restructure, while hiring continues for others.

For the full year of 2025, total employment grew by 55,500, up from 44,500 in 2024. Of this, resident employment grew by 11,600, driven largely by financial services as well as health and social services.

In 2026, resident employment is expected to grow at a similar or slightly slower pace, said MOM.

Advertisement
  • Read more articles we’ve written on Singapore’s job trends here.

Featured Image Credit: Shadow_of_light/ depositphotos

Source link

Advertisement
Continue Reading

Tech

Critical flaw in wolfSSL library enables forged certificate use

Published

on

Critical flaw in wolfSSL library enables forged certificate use

A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures.

Researchers warn that an attacker could exploit the issue to force a target device or application to accept forged certificates for malicious servers or connections.

wolfSSL is a lightweight TLS/SSL implementation written in C, designed for embedded systems, IoT devices, industrial control systems, routers, appliances, sensors, automotive systems, and even aerospace or military equipment.

Wiz

According to the project’s website, wolfSSL is used in more than 5 billion applications and devices worldwide.

The vulnerability, discovered by Nicholas Carlini of Anthropic and tracked as CVE-2026-5194, is a cryptographic validation flaw that affects multiple signature algorithms in wolfSSL, allowing improperly weak digests to be accepted during certificate verification.

Advertisement

The issue impacts multiple algorithms, including ECDSA/ECC, DSA, ML-DSA, Ed25519, and Ed448. For builds that have both ECC and EdDSA or ML-DSA active, it is recommended to upgrade to the latest wolfSSL release.

CVE-2026-5194 was addressed in wolfSSL version 5.9.1, released on April 8.

“Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions,” reads the security advisory.

“This could lead to reduced security of ECDSA certificate-based authentication if the public CA [certificate authority] key used is also known.”

Advertisement

According to Lukasz Olejnik, independent security researcher and consultant, exploiting CVE-2026-5194 could trick applications or devices using a vulnerable wolfSSL version to “accept a forged digital identity as genuine, trusting a malicious server, file, or connection it should have rejected.”

An attacker can exploit this weakness by supplying a forged certificate with a smaller digest than cryptographically appropriate, so the system accepts a signature that is easier to falsify or reproduce.

While the vulnerability impacts the core signature verification routine, there may be prerequisites and deployment-specific conditions that might limit exploitation.

System administrators managing environments that do not use upstream wolfSSL releases but instead rely on Linux distribution packages, vendor firmware, and embedded SDKs should seek downstream vendor advisories for better clarity.

Advertisement

For example, Red Hat’s advisory, which assigns the flaw a maximum severity rating, states that MariaDB is not affected because it uses OpenSSL rather than wolfSSL for cryptographic operations.

Organizations using wolfSSL are advised to review their deployments and apply the security updates promptly to ensure certificate validation remains secure.

Automated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the other.

This whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic questions for any tool evaluation.

Source link

Advertisement
Continue Reading

Tech

Microsoft is officially killing its Outlook Lite app next month

Published

on

Microsoft is shutting down Outlook Lite on May 26, the company confirmed to TechCrunch on Monday. Launched in 2022, Outlook Lite is a lightweight version of the regular Outlook app, designed for Android phones with limited storage and regions with slower internet connections. 

The app had already been scheduled for retirement — Microsoft announced last year that the app would be removed from the Google Play Store in October 2025. Now the company has confirmed that the app will lose functionality for existing users next month.

The news was first reported by Neowin.

“To continue enjoying a secure and feature-rich email experience, we recommend switching to Outlook Mobile,” Microsoft says in an Outlook Lite support page.

Advertisement

Outlook Lite users will be able to access their existing email, calendar items, and attachments by signing into Outlook Mobile. Users will also be directed to the Google Play Store to download the standard Outlook app.

Source link

Continue Reading

Tech

5 Of The Best-Looking Mid-Engined Sports Cars We’ve Ever Seen

Published

on





If you talk to sports car fans and enthusiasts, you’ll probably hear differing opinions about which is better: front-engined or mid-engined sports cars. Both have their own pros and cons and unique driving characteristics, and the layouts will also impart a certain look, most evident in the radical exterior change the Chevrolet Corvette underwent after its switch from a front-engine to a mid-engine platform.

With their engines mounted behind the cabin, mid-engined sports have a distinct profile that often brings to mind high-end, exotic European supercars. It’s a look that survives even when scaled down to less expensive, more mainstream-oriented cars, resulting in some beautiful vehicles. So with that in mind, we’ve rounded up five of what we think are the best-looking, most handsomely designed mid-engined sports cars of the modern era.

Now, there are countless beautiful (and incredibly expensive) mid-engined exotics that we could include on a list like this, but we’ve left some of the obvious choices out to keep things interesting. Thus, no exotic Ferraris and Lamborghinis here. Even so, we have a diverse mix of machinery that includes mid-engined offerings from Japan, the United States, and Europe, with engines ranging from modest, low-power four-cylinders to fire-breathing V8s.

Advertisement

Toyota MR2 (second generation)

Along with the front-engined Mazda MX-5 Miata, the Toyota MR2 is one of the most popular lightweight sports cars to come out of Japan. The MR2 debuted in the early 1980s and was built over three distinct generations before being discontinued in the mid-2000s. Each generation of the MR2 has its own personality and following, but from a design and performance standpoint, it’s the second generation that represents the MR2 at its peak. 

The second-generation MR2 debuted in Japan in 1989 and was on sale around the world shortly after. With its wider profile, its flip-up headlights, and distinct side vents, the second-generation car had a more aggressive look that, to some eyes, looks a lot like a scaled-down version of the Ferrari 348. The second-gen MR2 also had the performance to back up its look. Thanks to the 3S-GTE engine under the hood, Car and Driver got the MR2 Turbo to 60 mph in just under six seconds — very impressive by early ’90s standards.

Advertisement

To do all this at a relatively affordable price — $20,000 or so for the Turbo in 1990 — shows just how powerful Toyota was during this time. Today, along with the Supra it shared showrooms with, the second-gen MR2 is considered one of the most desirable Toyotas of its time, and especially in turbocharged form, one of the most desirable Japanese sports cars of the ’90s.

Advertisement

2004-2006 Ford GT

When Ford designers started working on the automaker’s mid-2000s Ford GT revival, they had a pretty big head start in creating a beautiful car. That’s because the design of the Ford GT was heavily inspired by the attractive and legendary Ford GT40 race car of the 1960s. Still, retro design isn’t always as easy as it looks, and it doesn’t take much for retro cars to veer into the tacky, but the GT’s designers absolutely aced their mission.

The modern road-going Ford GT is a much larger car than the GT40 it’s based on, but the lines are so good that you don’t realize that until you actually see the two cars side by side. The GT’s attractiveness carries over to the interior as well, with a wonderfully executed modern interpretation of 1960s design. Of course, it also doesn’t hurt that it’s got a mid-mounted supercharged 5.4-liter V8 mated to a manual transmission. 

Because the initial design was executed so well, the 2000s Ford GT has never felt dated in the way other cars from its era might. Design-wise, it almost feels like a remastered car from the ’60s rather than a product of the 2000s. All of these are reasons why, despite only being a little over 20 years old, the value of the mid-2000s Ford GT has climbed tremendously, with the car now becoming a highly desirable modern classic in its own right.

Advertisement

Lotus Elise

A sports car’s appealing design need not be tied to its physical size or amount of horsepower. Case in point: the Lotus Elise. The Elise is considered one of the purest sports cars of the modern era, with a platform and design that stretches back to the mid-1990s. While some could argue that the Elise isn’t a traditionally beautiful sports car, much of the Elise’s beauty comes from its focus on simplicity. The Elise evolved significantly between its mid-’90s debut and the end of its production run in 2021, but the car never strayed from its mission of delivering lightness and response over all else. 

The later variants of the Elise sold in North America use modestly powered Toyota four-cylinder engines, with the Elise’s light weight meaning it didn’t need massive amounts of horsepower to offer a fast and highly enjoyable sports car experience — part of why drivers love this car. Design-wise, the Elise is all about compact minimalism, and its svelte body lines and distinct round tail lights helped give the Elise its signature look.

Its attractive looks and go-kart-like handling are just a couple of the reasons why both the Elise and its closely-related counterpart, the Lotus Exige, have emerged as genuine modern classics. With its focus only on the essentials, the Elise is the antidote to the high-horsepower, overweight, and often overstyled modern performance car.

Advertisement

Alpine A110

Like the reto-styled Ford GT, the modern Alpine A110 is a modern, mid-engined sports car that might technically be cheating with its good looks. That’s because, like the Ford, the A110 is a modern reinterpretation of an iconic 1960s design — and one that happens to be done very well. 

The modern Alpine A110 (which is built by Renault) debuted in the late 2010s to wide acclaim as a rival to the Porsche Cayman. Boasting a mid-mounted turbocharged four-cylinder engine and a low curb weight, the A110 took its design inspiration from the original, rear-engined Alpine A110 of the ’60s and ’70s. Among the styling traits that carried over to the new A110 are the original’s quad front headlights and wrap-around rear window.

Advertisement

To this point, the biggest problem with the A110 is that, like other French models, it’s not offered in North America. In fact, it might just be the coolest modern performance car that’s not currently sold here. There have been rumors and serious speculation that the A110 will eventually make its way to the United States, although we don’t yet know whether it will be as a gasoline model or as a next-generation electric Alpine sports car

Advertisement

Honda/Acura NSX

Sometimes a sports car is a hit from the moment it debuts; other times, it ages nicely and becomes a favorite for a new generation of enthusiasts. In the case of the highly unique Honda (or Acura) NSX, it’s both. When the NSX first debuted in 1989, the car was a game-changer. It wasn’t just an impressive Japanese sports car; instead, it was a bona fide, homegrown Japanese exotic laced with Honda’s racing DNA.

Thanks to design choices like an all-aluminum construction and a mid-mounted, naturally aspirated VTEC V6 engine, the NSX had the performance and feel of a Ferrari — but in a more affordable and more reliable package that could be serviced at your local Honda or Acura dealer. In comparison tests, it edged out its more established performance car competitors. Design-wise, the original NSX was somewhat restrained, but its clean lines have aged extremely well, making it a favorite even among those born too late to experience its original run. 

When new, the NSX had a relatively affordable price tag for what it delivered, but values have climbed substantially in recent years, with certain examples crossing the $300,000 mark at auction. While many subsequent Japanese sports cars have eclipsed the original NSX’s performance benchmarks, its aura is still unmatched.

Advertisement



Source link

Continue Reading

Trending

Copyright © 2025