512 bytes at a time: reconstructing IBM i save-file checksums

Silent Signal reverse-engineers the per-record and global checksums in IBM i save files (SAVFs), reimplements both in Python, finds the constants in IBM Licensed Internal Code media, and shows a structurally edited SAVF can be repaired so IBM i accepts and restores it.

Research · Security · Systems Programming · Research

Bez: Generating a browser engine from specs and testsA generated web rendering engine verified against Chromium, Firefox, and WebKit

Bez generates Rust web-engine code from specifications, admitting candidates only when three shipping browsers agree on geometry—aiming for complete or content-scoped engines that update by regeneration.

Research · Open Source · Web Development · Research · Programming

Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution

A research write-up proposing Dual-Sided Andon: out-of-band, kernel-boundary preemption and containment for runaway AI agents, arguing application-level kill switches are insufficient.

Research · AI · Security · AI Agents · Research

CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

SAFA’s second part turns Avast’s CVE-2025-13032 double-fetch into a local privilege escalation to SYSTEM on Windows 11 via paged pool overflow and RegBuffers corruption for arbitrary kernel R/W.

Research · Security · Research · Systems Programming

One CPU Atomic Instruction, One Packaging Infinite Loop: The Story of the Lost Update on LA664

Jie Ge documents a Loongson LA664 erratum where an atomic instruction can lose updates, how it surfaced as an infinite packaging loop, the root cause analysis, and what it means for correctness on that CPU.

Research · Hardware · Systems Programming · Debugging · Engineering

modern-fs-benchmark

Bartosz Fenski’s continuous benchmark suite for multi-device CoW filesystems (btrfs, ZFS, bcachefs) measures snapshot aging, compression, rebuild, ENOSPC, and other workloads classic single-disk fio tests miss.

Research · Systems Programming · Benchmarks · Open Source · Infrastructure

Keva: Running Coding Agents On-Device on Unrooted Android

Simon Lin's technical paper on Keva—an on-device Android AI coding agent running Claude Code/Codex-style loops—covering architecture, failure modes, and systems lessons without rooting the phone.

Research · AI Agents · Mobile · Systems Programming · LLMs