securitylab_nJuly 15, 2026🇷🇺Translated from Russian

Poisson's Spot: 200-Year-Old Optical Effect That Proved Light Is a Wave Now Enables Simple Creation of Optical Skyrmions for Future Photonic Computing

Researchers have found that light can form tiny, stable structures resembling twisted hedgehog spines, known as optical skyrmions. These configurations arise not as individual particles but as organized patterns in the properties of the light field, where polarization directions, spin, and electric and magnetic vectors vary point by point to create a robust topological arrangement.

Until now, generating such patterns typically demanded costly metamaterials—artificially engineered microscopic structures that manipulate light in ways impossible for ordinary materials. Their fabrication requires extreme precision, sophisticated equipment, and meticulous calibration, restricting experiments to only a handful of specialized laboratories.

The new method eliminates the need for custom-designed surfaces. Scientists simply placed a small opaque disk in the path of a coherent laser beam. At the center of the resulting shadow, a bright spot emerged where the light's properties spontaneously organized into several topological patterns.

The Poisson Spot: A 200-Year-Old Phenomenon

This bright central spot is the famous Poisson spot, also called the Arago spot. The effect played a decisive role in early 19th-century debates over whether light travels exclusively in straight lines like particles or behaves as a wave. Wave theory predicted that a bright point would appear at the exact center of the shadow behind a round obstacle because diffracted waves bend around the edges, interfere constructively, and reinforce each other.

Observation of the Poisson spot confirmed diffraction—the ability of waves to bend around obstacles and spread after passing through narrow apertures. Two centuries later, the same principle offers a straightforward route to far more complex light structures.

Four Types of Optical Skyrmions Generated Simultaneously

The experimental setup produced up to four distinct varieties of optical skyrmions at once: spin skyrmions, Stokes skyrmions, and structures associated with the electric and magnetic fields of light. Spin describes the rotational characteristics of the light field, while Stokes parameters characterize polarization—the direction of oscillation of the light wave. Electric and magnetic vectors indicate the orientation of the respective components of the electromagnetic field at every point in space.

Computer models revealed these structures as twisted arrays of arrows, each representing the direction of a specific light property, collectively forming an ordered pattern resembling rays that gradually spiral around the center.

Advantages for Research and Future Applications

The simultaneous appearance of four skyrmion types allows direct comparison within a single light field, something previously difficult because different structures often required separate setups and conditions. This enables scientists to examine how electric, magnetic, spin, and polarization components relate to one another, even when their individual topological patterns differ in shape, size, or handedness.

Topological patterns maintain their essential properties under smooth stretching or deformation, making them attractive for information storage and transmission because data remain protected against random environmental distortions. Light offers multiple controllable parameters—intensity, phase, polarization, spin, and field orientations—that researchers can tune by adjusting laser power, disk size, and optical geometry.

While practical devices remain a future goal, the simplified approach removes major technical barriers. More laboratories can now reproduce the experiment, vary parameters, and investigate how these stable configurations emerge and interact. The work also gives the classic Poisson spot an unexpected new role: from proving the wave nature of light to serving as a tool for advancing photonics, complex materials research, and next-generation computing systems.

Related articles

HabrOther

OAuth Authorization Server Built Without Storing User Profiles

The article details the evolution of an OAuth Authorization Server that deliberately avoids storing user profiles, relying instead on external identity providers for authentication. It addresses three core constraints: hundreds of dynamically created isolated APIs, a public SPA client without a BFF, and the inability of resources to query the AS on every request. The design separates concerns so the AS handles only clients, tenants, grants, audiences, scopes, keys, sessions, and token issuance while the Main API owns profiles and roles. Tokens are managed securely inside a Service Worker using a custom FedCM grant, eliminating races across tabs and reducing XSS exposure. The approach minimizes blast radius, simplifies compliance, and keeps the AS replaceable without affecting product domain logic.

HabrOther

Why a 202-Character License Key Uses ECDSA P-256 Instead of Ed25519 or RSA

A developer building offline license verification for a .NET desktop application evaluated Ed25519, RSA, and ECDSA P-256 before selecting the last option. The decision was driven by the requirement for zero external dependencies, keys short enough for manual entry from email, and support for key rotation without breaking existing licenses. Although Ed25519 offers faster verification and a smaller public key, it is absent from System.Security.Cryptography in both .NET 8 and .NET 10, with API approval only targeted for version 11. RSA-2048 produces signatures too long for practical use, resulting in a 571-character Base32 string that users would find cumbersome. ECDSA P-256 with SHA-256 delivers a fixed 64-byte signature that becomes a manageable 202-character key when encoded in Base32, while remaining fully available in the runtime. The article also covers performance measurements, the risks of ECDSA nonce generation, and the deliberate choice of the IEEE P1363 signature format to guarantee fixed-length output.

HabrOther

Pilcrow Publishes Free Comprehensive Guide on Web Authentication

Author Pilcrow has released a detailed, ad-free handbook covering authentication and authorization practices for web applications. The resource draws on personal experience and includes practical examples in JavaScript and Go. It examines password-based methods, email verification, multi-factor authentication, passwordless flows, and passkeys while highlighting associated risks and usability trade-offs. The book also provides in-depth guidance on session management, token security, expiration policies, and email address handling as account identifiers. Recommendations emphasize choosing methods that match application security requirements and user expectations. Additional context is given on OWASP resources and community support channels.

HabrOther

redb 3.4.0 Adds Replay Checkpoints, Shared Runtime Layer and Declarative Secrets Handling for .NET Ecosystem

redb 3.4.0 delivers operational improvements for the .NET integration platform that includes typed storage over Postgres, MSSQL and SQLite, the redb.Route engine modeled after Apache Camel, the Tsak runtime with dashboard and clustering, and redb.Identity for OIDC and OAuth 2.1. The release focuses on post-deployment resilience with replay checkpoints that capture message state at named points inside routes, allowing safe re-execution of downstream steps without duplicating side effects. A shared runtime layer moves framework assemblies into a separate Libs/shared directory so that individual DLLs can be replaced without rebuilding or redeploying the entire Tsak or Identity packages. Secrets are now declared with a [Sensitive] attribute on endpoint options, ensuring URIs containing passwords or keys are sanitized before they reach logs, metrics or health checks. Additional controls include role-based access to management APIs, persistent audit trails and cryptographic signing of dynamically loaded modules. All Pro features remain free on the entire 3.x line with no licensing server required.