Marwan Naili — Research Notes
Agentic systems, applied ML, security measurement. Algiers, DZ.
https://marwan-naili.me/
2026-09-30T20:00:00+01:00
Marwan Naili
contact@marwan-naili.me
https://marwan-naili.me/
Hand-written
© 2026 Marwan Naili. CC BY 4.0 for method; findings per disclosure policy.
Critical Infrastructure Exposure Census — Rules of Engagement Published
https://marwan-naili.me/research/#critical-infrastructure
2026-09-28T14:00:00+01:00
2026-09-28T14:00:00+01:00
Passive-first measurement of Algerian critical-sector exposure — energy, water, ports, rail, telecom edge.
The deliverable is a chain, not a port number: observation → attribution → technology → known vulnerability → how long it has been observable.
Rules of engagement published before collection; disclosure to the responsible party and the regulator first.
Small-Model Capability Floor — Experimental Design
https://marwan-naili.me/research/#small-model-floor
2026-09-28T14:00:00+01:00
2026-09-28T14:00:00+01:00
Model size swept against autonomous cyber-task fitness below single-GPU scale, establishing the quantitative floor
that current public claims only gesture at. Publication plan attached.
Algerian Panoptes — Observation Layer Launched
https://marwan-naili.me/research/#algerian-panoptes
2026-09-28T02:00:00+01:00
2026-09-28T02:00:00+01:00
National Algerian-scoped geospatial observation layer running alongside global PANOPTES.
Cron-snapshot feed: earthquakes (EMSC), flights (adsb.lol), satellites, fires, hazards, news (GDELT).
Change-first design with append-only event ledger from day one.
E-Mahata / Naftal Impersonation — Method Paper Published
https://marwan-naili.me/research/impersonation-infrastructure-method/
2026-09-29T18:00:00+01:00
2026-09-29T18:00:00+01:00
Two live Vercel deployments impersonating Naftal's E-Mahata brand, soliciting Edahabia card data.
Architectural contradiction: claims "official secure gateway" but zero application endpoints exist in 14 JS chunks.
Generator attribution: v0.app (Greek-letter slugs). Method paper published; coordination package drafted.
Wateen (Saudi Blood Donation App) Leak — Verified as Re-upload
https://marwan-naili.me/research/#wateen
2026-09-28T19:00:00+01:00
2026-09-28T19:00:00+01:00
28 Sep 2026 forum post by UpDap is a repost of a May 2026 breach (180,438 donor records).
Original actor lulzintel vs reposter updap unresolved. wateenapp.org currently globally unreachable.