Tornyol Develops 40-Gram Autonomous Drones That Hunt Mosquitoes Mid-Air Using Doppler Ultrasound and Sound Detection
American startup Tornyol, supported by the Y Combinator accelerator, has unveiled a miniature autonomous drone designed to hunt mosquitoes in mid-air without the use of chemicals. The 40-gram aircraft is intended to locate targets by the sound of their wingbeats, calculate an interception trajectory, and physically collide with the insect. During the first successful test conducted on 14 July inside a closed facility, the prototype autonomously pursued and struck a flying moth, marking what founder Alex Toussaint called the company’s first “aerial defeat of a target.”
The demonstration still relied on external infrastructure: a motion-capture system tracked infrared markers on the drone while a table-tennis ball served as a proxy for the insect’s position. A ground computer processed the sensor data and issued flight commands. Within the next several weeks, Tornyol plans to migrate all processing to the drone’s onboard electronics. The final design will incorporate ultrasonic transducers similar to automotive parking sensors and smartphone-style microphone arrays.
Once airborne, the drone will emit ultrasonic pulses and analyze returning echoes. The characteristic frequency shift caused by rapidly beating mosquito wings—the Doppler effect—will allow onboard algorithms to detect, classify, and even determine the species and sex of the target. After identification, the aircraft will plot an obstacle-avoiding route and deliver a precise physical strike. The company ultimately envisions coordinated swarms of dozens of such drones patrolling entire urban districts.
Founders Alex Toussaint and Clovis Piedallu claim the technology could cut the cost of mosquito control by a factor of 100 compared with existing methods. According to their estimates, a formation of only ten drones would be sufficient to clear mosquitoes from one square kilometer. Although these performance figures have not yet been validated in real-world city environments, the startup continues to refine both the sensing suite and the autonomous navigation stack.
Despite the promising indoor result, significant engineering challenges remain. Engineers must still prove that the tiny platforms can reliably differentiate mosquitoes from other insects, operate safely near humans, and maintain effectiveness when flying outdoors amid wind, obstacles, and variable lighting. Tornyol’s work therefore represents an early but concrete step toward chemical-free, drone-based vector control.
Related articles
Hashcat Password Cracking: Why Complex Passwords Like Summer2026! Often Fail First
Password cracking tools such as hashcat and John the Ripper exploit predictable human patterns when generating candidates, allowing structured passwords to be recovered faster than truly random strings. The process relies on comparing computed hashes against stored values without needing to reverse the one-way function. Modern password storage uses salted, computationally expensive algorithms including bcrypt, Argon2id, sha512crypt and yescrypt to increase the cost of each guess. Different formats require specific hashcat modes, and parameters such as cost factors or memory settings directly affect cracking speed. WordPress 6.8 introduced bcrypt with SHA-384 preprocessing while older phpass records remain supported. Audits must preserve full hash records, verify modes on test data, and combine dictionaries, rules, masks and statistical models to measure real risk. After testing, organizations should migrate to properly tuned Argon2id and enforce long unique passphrases managed by password managers.
Why HTTP to HTTPS Redirects Fall Short: Risks of Exposed Requests and the Role of HSTS Preload
A simple HTTP to HTTPS redirect satisfies basic audit requirements but leaves the initial request fully exposed in plaintext. The request carries the full path, query parameters, and cookies lacking the Secure flag, allowing observers on open Wi-Fi or compromised routers to read or tamper with traffic before TLS begins. Modern browsers such as Chrome since version 90 attempt HTTPS first, yet legacy clients, explicit http:// links in emails, scripts, and failed HTTPS fallbacks continue to send unprotected requests. HSTS instructs browsers to use HTTPS after the first successful visit, yet the header itself travels over HTTPS and cannot protect the very first connection from a new device or cleared cache. Preloading embeds the rule directly in the browser, eliminating the initial plaintext request entirely, but demands includeSubDomains and a one-year max-age, making the change effectively irreversible for months. The article recommends verifying Secure flags on all cookies, ensuring single-step redirects to the same host, and testing HSTS incrementally before considering preload.
OSINT for the Lazy Part 18: Extracting Value from Wayback Machine Archives for Bug Bounty and Security Research
The article explores passive reconnaissance techniques using web archive tools to uncover forgotten endpoints, configuration files, and sensitive parameters without directly interacting with target systems. It highlights three command-line utilities—waybackurls, gau, and waymore—that query public archives such as Wayback Machine, Common Crawl, AlienVault OTX, and URLScan to retrieve historical URLs. These tools help bug bounty hunters and penetration testers discover old API endpoints, admin panels, backup files, and JavaScript with hardcoded secrets that may still be exploitable. Installation instructions, usage examples, and filtering options are provided for each tool to maximize efficiency and reduce noise in results. The piece emphasizes that all methods remain fully passive, minimizing detection risk while requiring proper authorization before any active testing. Advanced users are advised to combine the tools for broader coverage and deeper analysis of archived responses.
OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production
An in-depth OSINT probe into a Russian agricultural investment project promising 50-70% annual returns from garlic farming has revealed a likely import arbitrage operation sourcing produce from China and Uzbekistan. The project claimed ownership of over 300 hectares of fields, a proprietary seed fund, and guaranteed sales to major retailers including Magnit, Perekrestok, Pyaterochka, and Svetofor, yet public records show minimal profitability and heavy debt. Financial statements from linked cooperatives indicated just 2.2% net margin alongside loans exceeding annual revenue fourfold, pointing to reliance on continuous new investor capital. Registry checks confirmed no financial licenses, no seed-breeding status, and actual cultivated land far below advertised figures. Import declarations and equipment registrations further indicated the operation functions as a repackaging hub for foreign garlic sold under private labels. The parent group has been placed on the Bank of Russia blacklist, with related sites blocked by Roskomnadzor while Telegram channels continue aggressive marketing.