m00dy.sh
A working notebook for security, hardware labs, model systems, and the useful threads I do not want to lose.
Latest notes
field note 2026-07-29 · ML security · fuzzing · series
Structure-Aware Fuzzing for ML Model Parsers
Loading a model from a hub means running a binary parser on a file a stranger gave you. This is the map for Crucible: what the attack surface is, why a format-aware fuzzer beats a dumb one on it, and how a seed file becomes a filed advisory.
field note 2026-06-13 · ML security · fuzzing · disclosure
Found by AI, Fixed by AI
A structure-aware fuzzer found a small ONNX memory-safety bug, GitHub Copilot helped patch it upstream, and the public issue-to-merge loop closed the same afternoon.
field note 2026-05-15 · ML security · fuzzing · formats
The Format That Got It Right
SafeTensors did not survive fuzzing by luck. It survived because the format puts validation before allocation, keeps code out of the file, and treats model loading as an input-parsing problem.
field note 2026-05-11 · ML security · disclosure
Signing Is Not Sealing
Post-quantum signatures are entering supply-chain infrastructure. Any ML artifact signing profile that adopts ML-DSA should get one deployment detail right before it ships: randomized mode opens a 256-bit hidden command channel that no deployed verifier can inspect.
all notes