Tag
A developer shares what they learned building their own container runtime, explaining that containers are just restricted Linux processes built on namespaces, cgroups, and networking, that images are just folders used with chroot/pivot_root, and why Go's threading and lack of fork make runc's design awkward.
A deep-dive technical article explaining how the Windows kernel I/O Manager initializes read I/O requests, from resolving the target file object via NtReadFile to choosing the request path and dispatching to drivers.
The article presents Einstein, an application-agnostic pipeline that automates the generation of data-only attacks by targeting syscalls, demonstrating that such exploits are easier to execute than commonly assumed.
cpu.land is a visual explainer that clarifies how CPUs work, multitasking, syscalls, and Linux program loading, aimed at filling knowledge gaps for self-taught programmers.
sp.h is a 15,000-line single-header C99 standard library that bypasses libc to provide portable, explicit, and heap-free primitives. It aims to replace the traditional libc with a modern, syscall-level abstraction.