Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution
A research write-up proposing Dual-Sided Andon: out-of-band, kernel-boundary preemption and containment for runaway AI agents, arguing application-level kill switches are insufficient.
21 min · 4,848 words
CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
SAFA’s second part turns Avast’s CVE-2025-13032 double-fetch into a local privilege escalation to SYSTEM on Windows 11 via paged pool overflow and RegBuffers corruption for arbitrary kernel R/W.
13 min · 3,096 words
One CPU Atomic Instruction, One Packaging Infinite Loop: The Story of the Lost Update on LA664
Jie Ge documents a Loongson LA664 erratum where an atomic instruction can lose updates, how it surfaced as an infinite packaging loop, the root cause analysis, and what it means for correctness on that CPU.
14 min · 3,163 words
Bartosz Fenski’s continuous benchmark suite for multi-device CoW filesystems (btrfs, ZFS, bcachefs) measures snapshot aging, compression, rebuild, ENOSPC, and other workloads classic single-disk fio tests miss.
14 min · 3,195 words
Keva: Running Coding Agents On-Device on Unrooted Android
Simon Lin's technical paper on Keva—an on-device Android AI coding agent running Claude Code/Codex-style loops—covering architecture, failure modes, and systems lessons without rooting the phone.
33 min · 7,580 words