Cybersecurity
Explorations in vulnerability research, zero-trust infrastructure, cryptographic primitives, and enterprise threat intelligence.
How Page Fault Handling Wins userfaultfd Race Conditions
Learn how userfaultfd race conditions stall Linux kernel threads during copy_from_user, turning microsecond windows into reliable use-after-free exploits.
How Flush+Reload Attacks Exploit Shared CPU Cache Lines
Flush+Reload attacks measure L3 cache hit latencies with clflush and rdtscp. Learn how shared memory pages and timing thresholds expose cryptographic keys.
How Linux Dirty Cred Exploits Bypass Kernel Mitigations
Learn how Dirty Cred exploits swap file credentials in the Linux SLUB allocator to escalate privileges, bypass KASLR, and defeat modern kernel mitigations.
How Linux eBPF Rootkits Evade Detection in Production
Learn how Linux eBPF rootkits use bpf_probe_write_user, modify syscall buffers, hook tracepoints, and bypass runtime security agents like Falco and Tetragon.
How ARM64 Pointer Authentication Bypasses Actually Work
Analyze how ARM64 Pointer Authentication bypasses work, detailing gadget signing oracles, PACMAN speculative timing leaks, and context swaps.
Hardware-Enforced Confidential Computing: Deep Microarchitectural Attestation, Memory Encryption Engines, and Enclave Security Pipelines
Learn how Hardware-Enforced Confidential Computing enforces isolation via inline memory encryption engines, reverse map tables, and remote attestation.
Architecting Zero-Trust Hardware Attestation and Cryptographic Isolation for Confidential Accelerators
Learn to isolate confidential accelerators using hardware attestation, inline AES-XTS-256 memory encryption, and Reverse Map Table validation.
Hardware-Rooted Remote Attestation in Confidential AI Pipelines: Cryptographic Verification and Microarchitectural Isolation
Learn how hardware-rooted remote attestation secures confidential AI using AMD SEV-SNP, Intel TDX, AES-XTS encryption, and launch measurements.
Engineering Post-Quantum WireGuard: Architectural Integration of Hybrid ML-KEM within Kernel-Space Datapaths
Learn how to implement Post-Quantum WireGuard using hybrid ML-KEM-768, handle MTU fragmentation and packet reassembly, and optimize kernel SIMD datapaths.