Technical Blog
Deep dives into systems programming, security research, and debugging war stories.
LD_PRELOAD - how Linux lets you win the symbol race (and why that is dual-use)
The dynamic linker does not care whether you are debugging memory corruption, faking time for a test suite, or hiding a directory entry. It loads shared objects in an order you can influence, resolves symbols once, and y
Slowloris - The Quiet Connection Killer. What It Is, How to Detect It, and How to Defend
Slowloris is a stealthy application-layer DoS technique that holds connections open to exhaust server resources. Learn how it works conceptually, what symptoms to monitor, and practical, safe mitigations and detection st
The missing mm_struct: How Linux leaked root file descriptors
For years, the Linux kernel harbored a subtle lifetime bug in how it handled task dumpability during process exit. It was conceptually flagged by Jann Horn in 2020, but the practical exploitability of this pattern—allowi
Snapper - Technical Overview
Snapper discovers and stores public Instagram profile snapshots and selected post metadata over time for later analysis. It:
Deep Dive into Segmentation Fault
A segmentation fault (often called _segfault_) occurs when a program attempts to access a memory address that it is not allowed to read or write. The operating system detects the invalid access and terminates the process
How yt-dlp Actually Works: A Deep Dive
What you'll learn: The complete technical breakdown of how yt-dlp downloads YouTube videos, from URL to final file.
Supercharge Your Terminal with curl + jq GitHub API Edition
Working with APIs can be messy especially when the response comes in raw JSON. But with curl and jq, you can fetch, filter, and transform API data right in your terminal. Today, we'll explore some practical GitHub API ex