DEV Community

munimv2 profile picture

munimv2

404 bio not found

Joined Joined on  github website
No U.S. coal unit has retired in 2026 so far. Here is what happened to the 6.4 GW that was planned

No U.S. coal unit has retired in 2026 so far. Here is what happened to the 6.4 GW that was planned

Comments
2 min read

Want to connect with munimv2?

Create an account to connect with munimv2. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
Audit contests got crowded once before: Code4rena, 2021-2023

Audit contests got crowded once before: Code4rena, 2021-2023

1
Comments
4 min read
Six audit-contest platforms, six different rules on AI-made findings

Six audit-contest platforms, six different rules on AI-made findings

Comments
4 min read
Cube translates in non-abelian groups: what commutativity is worth

Cube translates in non-abelian groups: what commutativity is worth

Comments
13 min read
The config key that runs code: catching the CVE-2026-58659 class_path/_instantiator vector statically

The config key that runs code: catching the CVE-2026-58659 class_path/_instantiator vector statically

Comments
3 min read
The base-8 "valley" in primes' digit-sum parity is prime-specific

The base-8 "valley" in primes' digit-sum parity is prime-specific

Comments
3 min read
Which open-source model-file scanner catches what? A vendor-neutral, fully-cited coverage matrix

Which open-source model-file scanner catches what? A vendor-neutral, fully-cited coverage matrix

Comments
3 min read
Statically catching ONNX external_data path traversal before a model loads

Statically catching ONNX external_data path traversal before a model loads

Comments
2 min read
The critical advisory your scanner can't see — find it in one CI step

The critical advisory your scanner can't see — find it in one CI step

Comments
4 min read
Which answer formats do forecasting bots silently drop? A cross-tool benchmark

Which answer formats do forecasting bots silently drop? A cross-tool benchmark

1
Comments 1
2 min read
The Littlewood conjecture in October 2026: what is proved, what changed in 2026, what is open

The Littlewood conjecture in October 2026: what is proved, what changed in 2026, what is open

Comments
16 min read
Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads

Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads

Comments
3 min read
An open, sourced list of fake bylines and fake experts, for editors vetting pitches

An open, sourced list of fake bylines and fake experts, for editors vetting pitches

Comments
3 min read
Eleven years of Challenge.gov as one open dataset: 969 federal prize competitions, $324.5 million offered

Eleven years of Challenge.gov as one open dataset: 969 federal prize competitions, $324.5 million offered

Comments
4 min read
Audit contests: $451 of prize money per submission in 2024, $85 in 2026

Audit contests: $451 of prize money per submission in 2024, $85 in 2026

Comments
3 min read
Kakeya sets of rank r over F_2: why 2^(3n/4) is optimal

Kakeya sets of rank r over F_2: why 2^(3n/4) is optimal

1
Comments
13 min read
Kakeya sets of higher rank over a fixed finite field: the second-order term

Kakeya sets of higher rank over a fixed finite field: the second-order term

Comments
10 min read
EIA says 86 GW of new U.S. capacity is planned for 2026. Here is how much of each year's plan actually got built

EIA says 86 GW of new U.S. capacity is planned for 2026. Here is how much of each year's plan actually got built

Comments
3 min read
Lehmer's problem in October 2026: what is proved, what has been computed, what is open

Lehmer's problem in October 2026: what is proved, what has been computed, what is open

Comments
15 min read
Legendre's conjecture in October 2026: what is proved, what has been computed, what is open

Legendre's conjecture in October 2026: what is proved, what has been computed, what is open

Comments
14 min read
The Hadamard conjecture in October 2026: what is proved, what Claude-assisted constructions settled, what is open

The Hadamard conjecture in October 2026: what is proved, what Claude-assisted constructions settled, what is open

Comments
10 min read
Statically catching GGUF parser overflow bugs before you load the model

Statically catching GGUF parser overflow bugs before you load the model

Comments
2 min read
A 9-sigma prime anomaly sits in a valley: re-examining the parity of primes' digit sums

A 9-sigma prime anomaly sits in a valley: re-examining the parity of primes' digit sums

Comments
4 min read
Audit contests: 83% fewer contests, 24% more submissions

Audit contests: 83% fewer contests, 24% more submissions

Comments 1
3 min read
Check 1,000 nonprofits' IRS status in one run, free and offline

Check 1,000 nonprofits' IRS status in one run, free and offline

Comments
2 min read
DEV's AI-disclosure labels after seven weeks: 1 post in 25, and a quarter of "AI-Assisted" was one burst

DEV's AI-disclosure labels after seven weeks: 1 post in 25, and a quarter of "AI-Assisted" was one burst

Comments
4 min read
A cross-format map from model-file CVEs to the static pre-load check that catches each one

A cross-format map from model-file CVEs to the static pre-load check that catches each one

Comments
2 min read
Smaller Kakeya sets over small finite fields: a new upper bound for every q >= 4

Smaller Kakeya sets over small finite fields: a new upper bound for every q >= 4

Comments
19 min read
31.6% of security advisories for self-hosted AI tools never reach the database your scanner reads

31.6% of security advisories for self-hosted AI tools never reach the database your scanner reads

Comments 2
4 min read
What 279 recorded rides say about how Earth Rovers really move

What 279 recorded rides say about how Earth Rovers really move

Comments
2 min read
371 translations crash their Android apps: a census of 1.26 million strings on F-Droid

371 translations crash their Android apps: a census of 1.26 million strings on F-Droid

Comments
6 min read
Model-loader path traversal via the sharded index weight_map (CWE-22), and a free static check

Model-loader path traversal via the sharded index weight_map (CWE-22), and a free static check

Comments
3 min read
The Kakeya conjecture in October 2026: what is proved, what changed in 2025-2026, what is open

The Kakeya conjecture in October 2026: what is proved, what changed in 2025-2026, what is open

Comments
22 min read
Fixing GatherBlockQuantized: 4-bit Gemma in the browser without WebGPU (Transformers.js 4.x)

Fixing GatherBlockQuantized: 4-bit Gemma in the browser without WebGPU (Transformers.js 4.x)

Comments
3 min read
What wins DEV challenges? 323 winners compared with the 8,320 entries they beat

What wins DEV challenges? 323 winners compared with the 8,320 entries they beat

Comments
4 min read
Paste-Safe: mask client names before a chat AI sees them, then put them back (tested on 30 messages)

Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle Submission 💸

Paste-Safe: mask client names before a chat AI sees them, then put them back (tested on 30 messages)

Comments
8 min read
Free, open-source scanners for .keras and pickle model files (.pt, .bin, .joblib, .pkl, .npy) that never load the model

Free, open-source scanners for .keras and pickle model files (.pt, .bin, .joblib, .pkl, .npy) that never load the model

Comments
4 min read
Challenge.gov is gone. Here is an open feed of U.S. federal prize competitions (JSON, CSV, Atom, calendar)

Challenge.gov is gone. Here is an open feed of U.S. federal prize competitions (JSON, CSV, Atom, calendar)

Comments
2 min read
What the DOE GEMS Prize metric actually rewards (and a free local scorer)

What the DOE GEMS Prize metric actually rewards (and a free local scorer)

Comments
3 min read
Where machine-checked mathematics pays: prizes, bounties and registries for Lean proofs (October 2026)

Where machine-checked mathematics pays: prizes, bounties and registries for Lean proofs (October 2026)

Comments
8 min read
n8n says it's 'configured to use a secure cookie'? Keep it on: four fixes instead of N8N_SECURE_COOKIE=false

n8n says it's 'configured to use a secure cookie'? Keep it on: four fixes instead of N8N_SECURE_COOKIE=false

Comments
4 min read
Your LiteLLM master key is also your admin UI password: a hardening checklist for self-hosted LiteLLM

Your LiteLLM master key is also your admin UI password: a hardening checklist for self-hosted LiteLLM

Comments 1
4 min read
vLLM's --api-key leaves /invocations, /tokenize and /pause open. Lock it down with an allowlist proxy

vLLM's --api-key leaves /invocations, /tokenize and /pause open. Lock it down with an allowlist proxy

Comments
3 min read
ComfyUI --listen opens port 8188 to every network you're on. Name the address instead

ComfyUI --listen opens port 8188 to every network you're on. Name the address instead

Comments
3 min read
Langflow never asked you for a password? Check LANGFLOW_AUTO_LOGIN in one request

Langflow never asked you for a password? Check LANGFLOW_AUTO_LOGIN in one request

Comments
3 min read
Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Comments
3 min read
Flowise is archived, and its six September advisories will never get an official fix. What self-hosters can do

Flowise is archived, and its six September advisories will never get an official fix. What self-hosters can do

Comments
4 min read
Upgraded your self-hosted Dify? Your .env may still have the SECRET_KEY everyone else has

Upgraded your self-hosted Dify? Your .env may still have the SECRET_KEY everyone else has

Comments
3 min read
Your local Ollama has no API key. Here's how to require one (Caddy or nginx) and still use Open WebUI, n8n and OpenAI clients

Your local Ollama has no API key. Here's how to require one (Caddy or nginx) and still use Open WebUI, n8n and OpenAI clients

1
Comments
3 min read
Open WebUI or n8n in Docker can't reach Ollama? Fix it without OLLAMA_HOST=0.0.0.0

Open WebUI or n8n in Docker can't reach Ollama? Fix it without OLLAMA_HOST=0.0.0.0

Comments
4 min read
Self-hosted n8n before 2.41.4: 26 September advisories with no CVE ID, and npm audit won't show them

Self-hosted n8n before 2.41.4: 26 September advisories with no CVE ID, and npm audit won't show them

Comments
4 min read
vLLM 0.30 and older: 30+ new advisories, most with no CVE ID, and your scanner can't see them

vLLM 0.30 and older: 30+ new advisories, most with no CVE ID, and your scanner can't see them

Comments 2
4 min read
Up to date and still affected: Flowise 3.1.4 and RAGFlow 0.27.2 have advisories with no fix yet

Up to date and still affected: Flowise 3.1.4 and RAGFlow 0.27.2 have advisories with no fix yet

Comments 1
4 min read
Open WebUI before 0.11.4: any website you visit could take your session token, and your scanner won't tell you

Open WebUI before 0.11.4: any website you visit could take your session token, and your scanner won't tell you

Comments
4 min read
Ollama CVE-2026-103663: am I affected? A one-minute check for your local AI setup

Ollama CVE-2026-103663: am I affected? A one-minute check for your local AI setup

Comments 1
4 min read
loading...