technical articles & systems deep-dives
A forensic deep dive into the June 2026 compromise of the Arch User Repository, the Miasma eBPF rootkit, and why open-source trust models will never be the same.
Why a systems engineer spent the last few months building diffusion models from scratch — and what transferred, what didn't, and what's next.
A deep technical dive into building Carv, a programming language that compiles to C for ARM Cortex-M. Lexer internals, Pratt parsing, type inference, ownership tracking, C codegen, state-machine async/await, and the 11 bugs I haven't fixed yet.
A deep technical breakdown of the Langflow unauthenticated RCE — how exec() with zero sandboxing allowed attackers to compromise AI pipelines within 20 hours of disclosure.
A developer-focused breakdown of how Cross-Site Scripting manifests in SPAs using TanStack Query, with a confirmed CVE walkthrough and layered remediation.
Rust's strictness is by design. But being a C replacement isn't about syntax — it's about trust, tooling, and domains where C never had a real competitor anyway.
Zero is a systems language designed for AI agents. Structured JSON diagnostics, capability-based I/O, sub-10KB binaries. The idea sounds compelling until you look at how agents actually work with compilers today.
Confusion, rewrites, bugs at 2am, and failed ROMs — building a Game Boy emulator from scratch taught me that systems programming is mostly staring at wrong assumptions. Here's what the code actually looks like.
A developer-focused breakdown of a complete attack chain, with concrete fixes at each stage.
A tactical guide for developers without formal experience: open source contributions, SaaS clones, freelance platforms, and building 'fake but real' projects that actually get you hired.
Karion-OS started in C. Then a heap allocator bug I couldn't find pushed me to port the whole thing to Rust. Here's what actually happened.
Looking beyond framework-first thinking to find real performance.
Designing systems without external dependencies.