Suramya's Blog : Welcome to my crazy life…

July 23, 2026

Researchers successfully create Room-Temperature Quantum Material

Filed under: Quantum Computing,Tech Related — Suramya @ 11:33 PM

Quantum Computing has tremendous potential to change the world of computing forever but there are significant challenges that need to be addressed. One of the challenges is that in order to function as a superconductor the system has to be kept between 0.01 to 0.015 Kelvin or -273.14°C. As you can imagine this is hard to do and obviously impractical for consumer / commercial devices.

We are a step closer to solving this problem as Researchers from Louisiana State University have developed a material that can demonstrate quantum weirdness at room temperature. This material is basically a thin layer of gold on a glass chip and is carved with microscopic patterns that act like artificial atoms which carry Quantum states. The crystal chip can distinguish them and move them from one point to another without requiring cryogenic cooling. Which opens the door to practical quantum technologies.

Crucial to the new material’s room-temperature operation is the way it shifts the focus from electrons and atoms to photons (particles of light). This overcomes the usual atomic-level disruption that heat brings with it. The material is what’s known as a plasmonic metacrystal: ‘Plasmonic’ because the light traveling over it makes ripples of electrons known as plasmons, and ‘metacrystal’ because it’s an artificially created crystal. The tiny slit patterns etched into the material act as artificial atoms (meta-atoms), which dictate how different photon groups pass through (the quantum behavior).

“By engineering the distribution of meta-atoms in the plasmonic metacrystal, we can systematically dictate which quantum statistics are allowed to pass through the structure,” says physicist Riley Dawkins. “So, our crystal essentially acts as a statistical filter on quantum states.” That means as light enters the chip and travels across the gold surface, it’s manipulated by the meta-atoms — and by tweaking the size, shape, and spacing of the slits, different end results can be produced at the quantum level. In practice, this means that certain quantum states of light can be transported with less disruption.

The findings have been published in Nature Journal earlier this month.

Source: Slashdot: LSU Physicists Create First Room-Temperature Quantum Material

– Suramya

February 24, 2026

You can now run an actual x86 Simulator in a Browser using CSS without any Javascript

Filed under: Tech Related — Suramya @ 3:43 PM

When I think of CSS (Cascading Style Sheets) I think of it as a way to change presentation and styling of a web page, but it looks like it is a full fledged programming language now that can run an entire x86 CPU emulator without using any Javascript.

Lyra Rebane managed this feat where you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS. A demo is available at: https://lyra.horse/x86css/. The demo doesn’t work in Firefox but works great in Chrome/Chromium based browsers.

Lyra is going to post a blog in the near future explaining how it all works and I for one am eagerly waiting for it because this is a phenomenal achievement.

How??

I plan on writing a blog post that explains how this works as well as many of the tricks used. Bookmark my blog or add it to your RSS reader.
Surely you still need a little bit of JavaScript?

Nope, this is CSS-only!

There is a script tag on this site, which is there to provide a clock to the CSS – but this is only there to make the entire thing a bit faster and more stable. The CSS also has a JS-less clock implementation, so if you disable scripts on this site, it will still run. JavaScript is not required.

My CSS clock uses an animation combined with style container queries, which means you don’t need to interact with anything for the program to run, but it also means its a bit slower and less stable as a result. A hover-based clock, such as the one in Jane Ori’s CPU Hack, is fast and stable, but requires you to hold your mouse on the screen, which some people claim does not count as turing complete for whatever reason, so I wanted this demo to be fully functional with zero user input.

Source: @rebane2001@infosec.exchange

– Suramya

February 18, 2026

Self driving cars & automated drones are vulnerable to Prompt Injection Attacks Via Road Signs

When I started working with computers way back in 1995, one of the first lessons I learnt was to keep things simple because the more complicated or more layers you have in your system the more ways there are for things to go wrong and more attack surfaces are available for a bad actor to target. This was called the KISS (Keep It Simple Stupid) principle. With the current systems adding more and more complexity it feels like people have stopped following that advice. Especially with LLM/AI getting added there is a layer of complexity that is like a black box because we can’t know enough about the model being used, such as what data was used to train it, what biases are included (knowingly or unknowingly) into the model etc.

Where cars used to be simple mechanical devices they are now instead computers on wheels that are getting more and more complicated. As per IEEE, a typical car may use 100 million lines of code and this is without AI/Self Driving systems coming into the picture.

We now have AI systems running on Cars that use models to drive cars, decide when to stop and what rules to follow. To explore the risk, researchers at the University of California, Santa Cruz, and Johns Hopkins tested the AI systems and the large vision language models (LVLMs) underpinning them and found that they would reliably follow instructions if displayed on signs held up in their camera’s view. This research adds to the growing list of evidence that AI decision-making can easily be tampered with, which is a major concern because a lot of decisions are slowly being outsourced to these “AI” systems some of which can have serious consequences.

The researchers have published their findings in a paper where they introduce CHAI (Command Hijacking against embodied AI), a physical environment indirect prompt injection attack that exploits the multimodal language interpretation abilities of AI models.

Abstract: Embodied Artificial Intelligence (AI) promises to handle edge cases in robotic vehicle systems where data is scarce by using common-sense reasoning grounded in perception and action to generalize beyond training distributions and adapt to novel real-world situations. These capabilities, however, also create new security risks. In this paper, we introduce CHAI (Command Hijacking against embodied AI), a new class of prompt-based attacks that exploit the multimodal language interpretation abilities of Large Visual-Language Models (LVLMs). CHAI embeds deceptive natural language instructions, such as misleading signs, in visual input, systematically searches the token space, builds a dictionary of prompts, and guides an attacker model to generate Visual Attack Prompts. We evaluate CHAI on four LVLM agents; drone emergency landing, autonomous driving, and aerial object tracking, and on a real robotic vehicle. Our experiments show that CHAI consistently outperforms state-of-the-art attacks. By exploiting the semantic and multimodal reasoning strengths of next-generation embodied AI systems, CHAI underscores the urgent need for defenses that extend beyond traditional adversarial robustness.

Potential consequences include self-driving cars proceeding through crosswalks without regard to humans crossing it, taking passengers to a different destination (potentially allowing bad actors to kidnap people), getting the car into an accident by forcing it to ignore traffic rules/oncoming traffic.

Source: schneier.com: Prompt Injection Via Road Signs

– Suramya

February 13, 2026

New Playable class added to Diablo II 25 years after last update

Filed under: My Thoughts,Tech Related — Suramya @ 1:26 AM

Diablo II is one of my all time favorite games and I have been playing it on and off since it first released back in 2000. The game had five character classes when it first launched and two more classes were added in the expansion Diablo II: Lord of Destruction released a year later.

Now 25 years later Diablo II a new playable class called ‘Warlock’ is coming to Diablo II as part of the ‘Reign of the Warlock‘ expansion. In addition to the new character class the update also has new quests, Terror Zones etc.

Fresh from the gates of the Burning Hells, the Reign of the Warlock is upon us! This major update brings the Warlock, the first new playable class to Diablo II in 25 years. The Warlock is a mysterious, dark scholar who’s spent years studying their taboo craft in the shadows, but no longer. Wield their awesome power to bind demons and wreak havoc upon your foes.

Reign of the Warlock brings fresh new Terror Zones, fearsome Colossal Ancients to conquer, alongside player requested quality-of-life changes, and more. Use this powerful new class to carve through the demon hordes, using your dark arts to dominate your foes.

It shows how popular the game is when the studio releases an update with new content to a 26 year old game.

Source: @arstechnica@mastodon.social

February 4, 2026

Is it worth Contributing to Open Source with AI Scrapers using your work for training materials

Filed under: Artificial Intelligence,My Thoughts,Tech Related — Tags: , , — Suramya @ 10:38 PM

I have quite a lot of work with Open Source Software (OSS) over the years which has resulted in two job offers and multiple opportunities to speak about OSS in various forums. I have even published some of my own work on my site as well. Nowadays with ‘AI’ scrapers hammering code repositories for content that is used to train their code generators in violation of the code licenses a lot of people have been pretty upset about it with multiple lawsuits being filed and unfortunately some of the developers have gotten tired enough that they have stopped publishing their code under OSS licenses.

The community is obviously divided about this as shown by the following post on Mastodon:

Screenshot of Mastodon post. Full text under the image in blockquote
Simon Willison on porting OSS code

@yoasif 🔗 https://mastodon.social/users/yoasif/statuses/115895264796629089

Simon Willison on porting OSS code:

> I think that if “they might train on my code” is enough to drive you away from open source, your open source values are distinct enough from mine that I’m not ready to invest significantly in keeping you. I’ll put that effort into welcoming the newcomers instead.

https://simonwillison.net/2026/Jan/11/answers/

This feels very much like colonialism; take over all the code, drive the original developers away, and give the colonizers the code as a welcome present.

Basically, some people are asking Code Generators to stop scanning their code into their system otherwise they will stop contributing to OSS and on the other side we have people like Simon who think that this is a bad reason to stop contributing code to OSS. I am not going to talk about the quality of code that that code generators create and why it is a bad idea to use these generators because I have talked about that in multiple other posts.

Looking at just the question of “Is it worth Contributing to Open Source with AI Scrapers using your work for training materials”, I think the answer is yes (for me at least) and everyone has the right to answer this in their own way.

For me Open Source is about learning how things work and solving specific problems that I want to fix, now this can be in existing software already published as OSS or new code that I write and then share publicly. I am sharing it so that people don’t have to reinvent the wheel and can build on top of existing solutions (which is what OSS is all about). Is it fair/right that companies are training their LLM’s on my code and then extrapolating/building on it without credit? Of-course not. I think that it is fair that I (or any developer) gets credit for the work they put in building something.

However, I learnt quite a lot looking at code that others had shared for free as OSS and I want to keep that culture alive and give that same option to new comers that I had. We are going to need a lot of coders in the near future to fix problems that were created by ‘vibe coders’ and LLM’s and the best way to create that experience is to have them look at existing code so that they can learn from it. Both the good parts and in certain cases learn what not to do 😉 .

So in summary I would have to say that yes it is worth it. Feel free to comment and share your thoughts on this.

– Suramya

February 2, 2026

Programming: Unclear on the concept of code reviews

Filed under: My Thoughts,Tech Related — Suramya @ 1:42 PM

There is an interesting disconnect in people about software engineering. They are unable to grasp that the industry/team exists to solve business problems, not to release changes as fast as possible (I mean we do want to release fast but not at the expense of solving actual problems) or to try out the latest in technology. This is why I have seen techies in companies get upset that they can’t upgrade the entire setup to use the latest and greatest (as of now) framework they just heard about. Business doesn’t care about any of that, they want the software to work reliably, have the features they want and be stable. If you have ever had to pitch a infra upgrade, addressing technical debt or system uplift (without new features) to senior management you know what I am talking about.

A good SLDC (Software Development Life Cycle) setup ensures that there is a solid code review process setup before a change is deployed into production. This allows a person (or persons) other than the developer to review the code and highlight any issues found. It also serves as a way to train junior programmers about best practices and more efficient ways to do things. I have come back from code reviews with pages of questions and better approaches to solving the problem I was addressing. Even now all my code still goes through code review. If a company doesn’t have a good code-review workflow then I would be very scared to use any products developed by them. In Git this review is initiated by creating a PR (Pull Request), once the changes are approved they are merged into the next release branch.

Programming is more than just writing code and pushing it to production. As I said earlier the goal is to solve business problems efficiently and without bugs. So when I see statements like in the screenshot below I get very scared because it shows just how unprepared/unknowledgeable some of the folks who are ‘vibe-coding’ or AI coding changes that are being pushed to production are.

software development in 2026 is going to require some to loosen up a little. code doesn't have to be as perfectly crafted the way we did it pre-ai. call it slop if you want, but if you're still demanding perfection on every pr while your competitors are shipping 'slop' that works...you're fighting from a disadvantaged position. shipping velocity matters more than perfection
software development in 2026 is going to require some to loosen up a little. code doesn’t have to be as perfectly crafted the way we did it pre-ai.

rye
@rywalker

software development in 2026 is going to require some to loosen up a little

code doesn’t have to be as perfectly crafted the way we did it pre-ai

call it slop if you want, but if you’re still demanding perfection on every pr while your competitors are shipping “slop” that works…
you’re fighting from a disadvantaged position

shipping velocity matters more than perfection

Even ‘Pre-AI’ no one has perfectly crafted code, which is why we have technical debt and temporary fixes that last years if not decades. That said, the main goal of the Code Review is to ensure that you are

a) Doing what you want to do correctly
b) You didn’t break any existing functionality
c) Didn’t introduce any new bugs
d) Are coding efficiently/following best practices.

Out of the four listed above A to C are critical. Most of the review process usually focuses on these three with the last one being given focus as and when time permits. There are times when you encounter ‘The Coding Evangelist’ (See: Types of Software Developers for explanation) who will make you miserable trying to perfect the code but that is usually a rare occurrence (at least in my experience over the past 27 years of coding).

But if you are optimizing for speed of production instead of legibility and maintainability that is a way to incur tech debt at scale. Which is a big problem for systems in production. People often fail to take into consideration the cost of “Keeping the Lights on”.

Sometimes people do argue in reviews about stupid stuff, one funny instance I remember is from a previous company where these two senior developers had an ongoing argument about how to format the code. Each one hated the other person’s preferred formatting and they had both actually created Macros in Emacs to change the formatting to their preferred style every time they edited the file. We could figure out who the last person to work on the file was by looking at the formatting.

Long story short, (good) Code reviews are absolutely required and essential for an organization to ensure that the code in production is as stable and bug free as possible. It doesn’t matter how quickly you are pushing code if the code doesn’t work the way it is supposed to or/and has bugs in it.

– Suramya

January 30, 2026

Wasted some more time thanks to Windows 10 auto upgrading to Windows 11 and disabling local accounts

Filed under: My Life,My Thoughts,Tech Related — Suramya @ 5:02 AM

A friend of mine asked me if I had a spare laptop that they could borrow for a few days. Since I had a spare one that is used for my experiments I told them yes. To ensure that everything was working before I handed it over to them I booted up the laptop. The system started up and installed a bunch of updates before even it give me the login prompt. I let it update and then once all the updates were applied I ended up on the Login page which is where this whole painful odyssey started.

The laptop was originally used by one of the Employees in Jani’s company that was retired because they needed a faster computer. It had multiple accounts created on it, one for the user and one administrator account for me (which was a local account). The login page was only showing me the option to login as the employee using their Microsoft account. Usually there is an option to select alternate accounts from a list (or enter them manually) but in this case that wasn’t the case. Even though I had local logins enabled on the laptop I was not getting any option to select other users.

I then spent a whole lot of time trying to enable local user on the system by booting into recovery mode and manually adding the users. All the steps I tried were for Windows 10 because that is what was installed on the laptop but after a while of trying I noticed that the recovery screen mentioned something about recovering/resetting the Windows 11 system on the laptop. That is when I realized that the stupid thing had upgraded to Windows 11 and since Windows 11 makes it difficult to have local accounts it had removed the option of selecting the alternate accounts.

The only option I had to login was to request a login code sent to the employee’s email account and use that to log in. But by this time I was considering doing a full reinstall since even after logging in I would have to re-configure the system for my use and and if I was doing that I might as well do a full format and reinstall the OS.

Finally I ended up reinstalling windows 10 on the machine and surprise surprise everything was working the way to supposed to work. Thankfully I didn’t have any data on the machine that I didn’t that I minded use losing so it was easy to reset and reinstall. Now I just need to make sure the stupid thing doesn’t upgraded in again but since this time my account is a primary account on the machine I’ll still be able to login even if the system upgrades to windows 11.

I really dislike working with Windows and everytime I have to I end up wasting tons of time solving stupid issues I don’t see on Linux.

– Suramya

January 9, 2026

Conscience of a Hacker aka The Hacker Manifesto turns 40

Filed under: My Thoughts,Tech Related — Tags: , — Suramya @ 10:42 PM

The Conscience of a Hacker, also known as The Hacker Manifesto, turned 40 yesterday. If there was a document that shaped entire generations of Hackers, the Hacker Manifesto would be this document. The manifesto was first published in Phrack Volume One, Issue 7, Phile 3 of 10. The full text of the post is below:

\/\The Conscience of a Hacker/\/

by

+++The Mentor+++

Written on January 8, 1986
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Another one got caught today, it’s all over the papers. “Teenager
Arrested in Computer Crime Scandal”, “Hacker Arrested after Bank Tampering”…
Damn kids. They’re all alike.

But did you, in your three-piece psychology and 1950’s technobrain,
ever take a look behind the eyes of the hacker? Did you ever wonder what
made him tick, what forces shaped him, what may have molded him?
I am a hacker, enter my world…
Mine is a world that begins with school… I’m smarter than most of
the other kids, this crap they teach us bores me…
Damn underachiever. They’re all alike.

I’m in junior high or high school. I’ve listened to teachers explain
for the fifteenth time how to reduce a fraction. I understand it. “No, Ms.
Smith, I didn’t show my work. I did it in my head…”
Damn kid. Probably copied it. They’re all alike.

I made a discovery today. I found a computer. Wait a second, this is
cool. It does what I want it to. If it makes a mistake, it’s because I
screwed it up. Not because it doesn’t like me…
Or feels threatened by me…
Or thinks I’m a smart ass…
Or doesn’t like teaching and shouldn’t be here…
Damn kid. All he does is play games. They’re all alike.

And then it happened… a door opened to a world… rushing through
the phone line like heroin through an addict’s veins, an electronic pulse is
sent out, a refuge from the day-to-day incompetencies is sought… a board is
found.
“This is it… this is where I belong…”
I know everyone here… even if I’ve never met them, never talked to
them, may never hear from them again… I know you all…
Damn kid. Tying up the phone line again. They’re all alike…

You bet your ass we’re all alike… we’ve been spoon-fed baby food at
school when we hungered for steak… the bits of meat that you did let slip
through were pre-chewed and tasteless. We’ve been dominated by sadists, or
ignored by the apathetic. The few that had something to teach found us will-
ing pupils, but those few are like drops of water in the desert.

This is our world now… the world of the electron and the switch, the
beauty of the baud. We make use of a service already existing without paying
for what could be dirt-cheap if it wasn’t run by profiteering gluttons, and
you call us criminals. We explore… and you call us criminals. We seek
after knowledge… and you call us criminals. We exist without skin color,
without nationality, without religious bias… and you call us criminals.
You build atomic bombs, you wage wars, you murder, cheat, and lie to us
and try to make us believe it’s for our own good, yet we’re the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is
that of judging people by what they say and think, not what they look like.
My crime is that of outsmarting you, something that you will never forgive me
for.

I am a hacker, and this is my manifesto. You may stop this individual,
but you can’t stop us all… after all, we’re all alike.

+++The Mentor+++

It was a significant force in shaping how I thought about computers and why I went into Computer Security. I first read the manifesto in late 1997 after I got my first computer and became active on the Internet and various BBS forums. Sadly I don’t remember the exact site where I found it but I can tell you it had a profound impact on me. I have always been a person who wanted to know how things work and why things were a particular way. In fact my parents actually went out and bought a series of books called “Tell me Why?” to answer my questions.

Then I found this post that put into words things I was just starting to work out and put them in plain and simple terms. To proudly say that wanting knowledge is not a bad thing, neither is wanting to know how things work and why they are done in a particular way. I still follow the same basic agenda/rule in all my work and it has helped me immensely.

Source: @phrack@haunted.computer

– Suramya

January 6, 2026

KDE’s Full form: Kool Desktop Environment

Filed under: Computer Software,Linux/Unix Related,My Thoughts,Tech Related — Suramya @ 5:12 PM

One of the cool things about Linux that also confuses a lot of people who are used to Windows is that it allows you to use different Desktop environments based on your choice. So if you like a minimalist setup or are on an old system with limited resources you can use something like IceWM or Fluxbox. Others like GNOME which is more like a Mac interface, I personally prefer KDE which is similar in layout to Windows and has a lot of good widgets and inbuilt functionality I like.

I have been using KDE since I first started using Linux back in early 2000 but till today didn’t really think about what the acronym stood. While surfing the web I found the full form and found it funny. KDE Officially stands for: Kool Desktop Environment. It was first announced on a Linux Mailing list way back on 14th Oct 1996: New Project: Kool Desktop Environment. Programmers wanted!

From that small beginning KDE is now one of the most popular Desktop Environments out there and is constantly being updated.

Thought I should share so that others also know…

– Suramya

January 5, 2026

Wasted hours of my life due to Copilot and AI on Win 11 laptop

Over the weekend Jani asked me to take a look at her laptop because it was heating up quite a bit and the CPU fan was almost constantly running on high speed. So I took the laptop ran a bunch of virus scans and malware removal tools on it. Disabled a some programs that didn’t need to be running all the time (Adobe was a big one) but still the issue wasn’t solved.

After wasting about 3 hours of my life on this I remembered that she is using Windows 11 and that Copilot is enabled by default on all Win11 systems. So I went and disabled Copilot and almost immediately the CPU utilization dropped and the system stopped heating up so much. Then I disabled Copilot in all the Office tools (Word/Excel etc) and Notepad. I mean why on earth does Notepad need Copilot/AI? It is a plain text note taking software… it shouldn’t have any AI in it.

The amount of energy that is being wasted by ‘AI’ not just in data-centers but on laptops/desktops computers/phones etc is mind boggling. If it worked well it would still make some sense but it doesn’t. In fact it is almost comically bad to the point of being dangerous.

I used to update all the software on my systems almost on auto earlier but now have to look at each upgrade to see what is being added to the software. This is so I can avoid the AI crap that is getting added to all software. For example, Calibre which is one of the best software for organizing/converting e-books recently added an AI Chatbot to “Allow asking AI questions about any book in your calibre library.” This was almost universally condemned and the project forked to remove the AI related nonsense. Similarly other software have added AI to their setup without warning and it is exhausting to have to vet every single upgrade before pushing it out.

I am happy that I run Linux so I don’t have to deal with the nonsense that MS and other big companies have been pushing out in the name of AI.

– Suramya

Older Posts »

Powered by WordPress