Showing posts with label ai. Show all posts
Showing posts with label ai. Show all posts

Tuesday, November 3, 2026

Intelligence Without Consequences

 


AI can make mistakes without taking responsibility. Humans cannot.

Yet we are building a world increasingly willing to trust the former while leaving the latter to carry the consequences.

An old human problem wearing a new technological face.

Humanity has always been fascinated by power. We build tools to extend our reach, machines to multiply our strength, and systems to make decisions beyond the limits of individual minds.

Every generation believes its newest invention will help us overcome the weaknesses of the previous one.

Now we have artificial intelligence. It can process information at a scale we cannot comprehend, recognize patterns we might never notice, and make recommendations faster than any human could.

But there is something we have not solved.

The ability to make a decision has never been the same as the willingness to take responsibility for it.

A machine can produce a wrong answer without hesitation. It can recommend a disastrous course of action without understanding the human cost. It can influence decisions that affect thousands of lives without having a life of its own to lose.

And when the consequences arrive, the machine does not stand in the room.

A human does.

A developer. An executive. A doctor. A government official. Sometimes an ordinary person who never had a meaningful say in the decision.

We talk about human error as if removing humans from the process would remove the problem. But machines are not born from nothing. They are shaped by human decisions, human incentives, human data, and human definitions of what matters.

Our assumptions become their logic. Our biases become their patterns. Our shortcuts become their operating principles.

We may automate the decision, but we cannot automate away the human origins of that decision.

There is an even more uncomfortable possibility.

Perhaps we do not always want machines to be accountable. Perhaps we want something else: a convenient distance between ourselves and the consequences of our choices.

When a decision succeeds, we claim the intelligence of the system. When it fails, we question the data, the model, the operator, or the implementation. Responsibility moves from one place to another, sometimes disappearing into the complexity of the architecture.

We have become very good at building systems in which everyone participates, but nobody feels entirely responsible.

AI may simply make this human weakness harder to hide.

The real question, then, is not whether machines will eventually become intelligent enough to make better decisions than humans.

It is whether humans will remain wise enough to accept responsibility for the decisions they choose to delegate.

Intelligence gives us the ability to do more. Power gives us the ability to affect more. But neither automatically gives us the wisdom to understand what we are doing, or the courage to answer for it.

We are racing to build machines that can think.

Perhaps we should spend a little more time understanding why the people building them so often struggle to take responsibility for their own decisions.

Because the machine may eventually become intelligent enough to make decisions on our behalf.

But it will not be the one who has to live with them.

Monday, October 19, 2026

Justice without power is meaningless. Power without justice is tyranny

 

Life doesn't guarantee that hard work will be rewarded, that the deserving will win, or that wrongdoing will have consequences. Too often, the outcome depends less on what's right than on who holds the power.

The computer world is no exception.

A lone developer can spend years building something genuinely useful, only to be overshadowed by a well-funded company deploying thousands of AI agents and repackaging familiar ideas. Innovation and recognition don't always go to the same person.

Competitive programming and hacking face their own version of this struggle. On Codeforces, LeetCode, and AtCoder, what does a submission prove when AI can produce the solution? In CTFs, from Hack The Box, TryHackMe, and WeChall to DEF CON CTF, how do we distinguish human skill from machine capability?

Organizers are already experimenting with answers. DEF CON CTF has drawn boundaries around autonomous AI participation, while NorthSec has announced separate regular and AI CTF scoreboards for 2027.

AI-assisted solving isn't automatically cheating. The real issue is whether the rules are clear and enforced fairly. When someone can reportedly shrug off a suspension by switching accounts, what exactly is the sanction supposed to achieve?

A leaderboard can remain online long after it loses its credibility.

I've spent enough time in this world to know that skill and influence are different currencies. The best work doesn't always get the recognition. Breaking the rules doesn't always bring consequences.

AI is changing the game, but the old imbalance remains: those with more money, infrastructure, and control often get to decide what counts as success.

Perhaps the machines aren't creating a new human weakness. They're making an old one harder to hide.

Humanity has seen this game before. Only the tools have changed.

Saturday, September 26, 2026

Down the Tubes - Solved!!!

It haunted me for 21 years. A challenge so hard that even the most powerful AI/LLMs couldn't solve it.

And tonight, it's solved! 🔥🔥🔥

"Down the Tubes" on TheBlackSheep.

If you're old enough, to be called "uncle" by the new uber admin on WeChall - @rayaseiren, maybe you'll know this chall.

A chall created by BaRa, who was well known for his creative and unconventional stegano challenges. It was the only stegano chall on TBS that I couldn't solve for 21 years.

With the recent advances in AI, I have been able to solve many challs I couldn't solve or didn't have the patience to solve before. But Down the Tubes was so different.

I tried throwing the most powerful AI/LLMs I could at it: Claude, ChatGPT, Gemini, Grok... Burned a ridiculous amount of tokens 🔥. Still nothing.

It was so crazy that I started wondering if it would keep haunting me for many more years. Or could be forever.

Then recently, an old buddy solved it. And he admitted something interesting: He couldn't fully understand how it worked.

So I stopped asking the machines. I went back to the challenge.

No AI. No LLM.

Just me, the clues, and 21 years of accumulated stubbornness.

And finally...

Solved!!!! 🏴‍☠️🔥🔥

The solution itself is just a string of characters. But after 21 years, it feels like something much bigger.

Some challenges test your technical skills. Some test your patience.

And some become part of your history.

"Down the Tubes" was one of those.

It haunted me for 21 years.

Tonight, the ghost is finally gone!!!

Friday, May 15, 2026

Some Challenges Take A Few Hours To Solve. Others Take 15 Years To Finally Put To Rest.


If you are a seasoned CTF player or an old-school challenger, you might remember the golden era of IRC.
Back in 2011, a bunch of us were hanging out on irc.idlemonkeys.net, solving wargames and collaborating.
To make the time more entertaining, a few guys started writing IRC bots for blackjack, hangman, and even Idle RPGs.

But Gizmore (the founder of WeChall) and I thought we could push the limits of IRC further.
We built richer, more fully-featured RPGs.

I created bbq RPG, and Gizmore created Shadowlamb.
While mine eventually faded, Shadowlamb survived the test of time, kept alive entirely by Gizmore's incredible dedication.

Shadowlamb is a text-based, Shadowrun-flavored universe living entirely inside an IRC channel.
You interact with a bot named Lamb3 to grind nuyen (the in-game currency), level up stats (strength, quickness, magic), fight monsters, and run quests across cyberpunk cities like Redmond, Seattle, and Chicago.

But here is the twist: Gizmore embedded 4 CTF challenges inside the game (with increasing difficulties).
To capture the flags, you had to actually play the RPG and use your infosec skills to reverse and exploit the game mechanics.

Back then, I only played casually for fun. I never managed to beat the challenges.
But recently, much like closing out other two-decade-old wargames I've been revisiting, I decided it was time to settle the score.

I was going to beat Shadowlamb.

But as a lazy elite, I wasn't about to grind it manually.
I was going to build an AI-assisted bot to play it for me.

---

PHASE 1: THE PROTOTYPE

It started as a quick-and-dirty script.
It logged into IRC, listened to Lamb3’s NOTICE messages, and blindly spammed #attack on a loop.

It worked, mostly.
My character died - a lot.

But brute force was enough to scrape past Chapter I.

---

PHASE 2: THE ARCHITECTURE

This was when I put more efforts into the bot. The script evolved into a robust, modular Python system.

I built a proper autonomous agent:

- State Management: Tracked full game state in memory (HP, MP, karma, nuyen, weight capacity, busy timers).

- Combat AI: Added tactical logic for handling complex mob encounters.

- Smart Equipment: Wrote a gear-scoring algorithm that dynamically parsed #cmp stats to evaluate and equip the best loot.

- Economy Routing: Built a heuristic pathfinder to automatically travel to the nearest blacksmith to offload junk when overweight.

- Remote Command: Set up an admin relay channel so I could remote-control the bot from a different IRC nick while it was running.

By the time the bot reached Chicago, the game had become a nightmare.
The mobs were brutal, the travel times were agonizing even with top-tier gear, and inventory weight limits were a constant bottleneck.

But the architecture held up. The bot optimized the grind, survived the nightmare, and helped me capture the final flag.

To date, only 34 people in the world have managed to beat the final Shadowlamb chapter.

To me, writing this bot was more than just ticking a box on a CTF platform.
It was a perfect collision of nostalgia and modern engineering.

We used to grind these games manually, typing until our fingers went numb.
Today, we can architect modular, AI-assisted agents to conquer them for us.

The game hasn't changed, but as tech professionals, our tools and mindsets have.

Sometimes, the best way to solve a 15-year-old problem is to build a modern machine to do it for you.

The IRC servers are still spinning, and Lamb3 is still waiting for new runners.

If you want to test your coding and automation chops, fire up your IRC client, head over to WeChall, and give Shadowlamb a try.
It’s a masterclass in retro game mechanics and backend logic.

---

Also visit: https://quangntenemy.substack.com/p/some-challenges-take-a-few-hours

Monday, April 20, 2026

A World Where Human Is the Suspected Creature



It always starts the same way. You open a page. Maybe your email, maybe social media, maybe just trying to check something quickly.

And before you can proceed, you're stopped.

Not by complexity. Not by logic. But by suspicion.

"Verify that you are human."

Click the box. Select all images with traffic lights. Solve the puzzle. Prove your existence.

And for a brief second, something feels... inverted.

Because once, machines were the ones being tested.

---

There was a time when computers struggled to imitate us.

That was the whole point of the Turing Test: to see if a machine could pass as human.

Now the test has quietly flipped. The burden has shifted. We are the ones being interrogated, filtered, measured against patterns of behavior that define "humanness".

Not consciousness. Not intention. Just patterns.

Move your mouse too smoothly? Suspicious.

Type too fast? Suspicious.

Solve a problem too efficiently? Suspicious.

You begin to realize: the system isn't asking *who you are*.

It's asking whether you behave like the average.

---

And that's where things get uncomfortable.

Because the more skilled, focused, or unconventional you are, the more you deviate from that average.

And deviation, in a system built on statistical trust, starts to look like anomaly. An anomaly starts to look like a threat.

In other words: the more human you become - curious, efficient, unpredictable - the less "human" you appear to the system.

---

This is not just about CAPTCHA boxes.

It's about a quiet philosophical shift in how identity is defined in a digital world.

You are no longer recognized by your thoughts, your intent, or even your consciousness.

You are recognized by your *compliance with expected behavior*.

Humanity, reduced to a behavioral fingerprint.

And anything outside that fingerprint - no matter how authentic - becomes suspect.

---

There's a strange irony here.

We built machines to mimic us. Then we built systems to detect those machines.

And in doing so, we defined ourselves so narrowly that we started failing our own definitions.

The machine doesn't need to become human anymore.

It just needs to stay within the acceptable range.

---

So every time you click "I am not a robot", pause for a second.

Not because it's annoying. Not because it's trivial.

But because, in that moment, you are participating in a quiet ritual: proving your existence to a system that no longer trusts it by default.

A world where humans are the suspected creatures doesn't arrive with a bang.

It arrives with a checkbox.

Also visit: https://quangntenemy.substack.com/ for more interesting thoughts on IT world, cybersecurity and future of AI


Saturday, April 4, 2026

From ASM-Hater to Digital Archaeologist: How AI turned a 20-year-old assembly nightmare into a precision strike

I’ll be honest: I used to hate crackmes! A lot!

For years, the thought of diving into low-level Assembly (ASM) felt like a chore. Staring at dense hex dumps, manually tracking registers, and fighting through obfuscated logic was a "grind" I just didn't have the patience for. It felt more like a battle of attrition than a puzzle. If you’ve ever felt like you were looking at the world through a keyhole - one byte at a time - you know exactly what I mean.

But recently, that changed.

I decided to revisit a “cold case” - a Z80 assembly challenge from 2006 on TheBlackSheep. This thing had been sitting on a dusty shelf of the internet for nearly two decades, a tough challenge that had mocked researchers and frustrated players for years.

Back in 2006, the manual labor required to crack this was a nightmare. But today, the game has changed.

Monday, September 8, 2025

Vegan Dogs and Cybersecurity: How the World Is Burning While We Bark at the Wrong Fires

 


This week’s headline: “New research shows dogs can be vegan too.”

Meanwhile, ransomware groups are institutionalizing, deepfake phishing is now indistinguishable from reality, and generative AI is becoming the go-to tool for low-cost cyberwarfare.

But sure, let’s talk about tofu for terriers.

This isn’t about dogs. It’s about distraction.
We live in a time where the illusion of progress is sold harder than progress itself. Whether it's carbon offsets for corporate jets, "green" data centers hosted by surveillance giants, or now - climate-conscious kibble for pets - we’re drowning in narratives that keep the spotlight off the real vulnerabilities.

Cybersecurity isn’t just a tech issue anymore. It’s a societal one.

We’re patching CVEs while execs re-use passwords.
We’re selling “zero trust” while trusting third-party vendors with no audits.
We’re pushing AI detection models built on training sets scraped without consent.
And now, we’re saving the planet… by feeding lentils to Labradors.

When the system rots from the inside, security isn't about code - it's about courage.

So here’s a question for my fellow cybersecurity professionals:

🔐 Are you here to secure endpoints?
🧠 Or are you ready to question the endgame?

Because if we don’t challenge the frameworks behind the madness - surveillance capitalism, digital colonialism, corporate theater masked as ESG - we’re not protecting users. We’re just optimizing exploitation.

Meanwhile, the machine gets leaner. Smarter. Hungrier.

And yes, even the dogs are going vegan.