A technical walkthrough of the base GNU/Linux security primitives - login and authentication, POSIX file permissions, ACLs, extended attributes, and capabilities - with their adversary models and trade-offs.
2026, Jun 29 — 13 minute read
Testing GNU/Linux security by bypassing its primitives - stack buffer overflows and their mitigations, the boot chain under a physical adversary, and a remote attack from web exploit to root.
2026, Jun 29 — 10 minute read
How SECCOMP filters system calls and how Linux Security Modules (SELinux, AppArmor, and others) add mandatory access control on top of the base UNIX permission model.
2026, Jun 29 — 13 minute read
How the Chinese Remainder Theorem works, why it defines a ring isomorphism, and how it accelerates RSA signatures and explains square roots modulo a composite.
2026, Jun 28 — 9 minute read
A technical classification of zero-knowledge proof vulnerabilities covering trusted setup failures, Fiat-Shamir binding errors, under-constrained witnesses, verification bypasses, field arithmetic wraparound and protocol boundary gaps.
2026, Jun 19 — 34 minute read
A simple guide to the main ways zero-knowledge proof systems have been broken, explained with everyday analogies about magic locks, bakers, and inspectors.
2026, Jun 19 — 14 minute read
A chronological record of confirmed hacks, disclosed vulnerabilities, and bug bounties in zero-knowledge proof protocols from 2023 to 2026, with technical root cause analysis for each incident.
2026, Jun 19 — 17 minute read
