NNathanael FETUE·3h agoPairing a RoCE request with its ACK, and why the queue-pair number is not enoughAn RC packet carries only its destination QP, so a write and its ACK name different QPs. The key that pairs them in XDP, and the ACKs not to trust.4 min read·pegasus-nathanael-tech.hashnode.dev1
Bbian Chloe·18h agoBeyond the Firecracker Escape: Why BoxLite’s Network Architecture MattersA VM’s security boundary includes its network path. BoxLite’s default user-space networking makes a consequential difference.4 min read·blog.boxlite.ai
EEmir Mrkaljevic·16h agoBefore you reverse engineer a USB device, check if someone already didI built usb-rea to take a USB capture of a vendor app, infer the protocol, and write a pyusb driver. The earlier posts in this series are about that second half: the overall pipeline, handshakes, name8 min read·emirmrkaljevic.hashnode.dev
DDaanial Farrukh·20h agoImmutable Backups Ransomware Cannot Touch — What a Hardened Repository Really RequiresAn immutability tick box is not ransomware protection. What a hardened Linux repository and a locked dedupe appliance need, and how to prove it.12 min read·quabin.hashnode.dev
CChristopher Smith·21h agoA Stop Job Is Running at Linux Shutdown and How to Find the UnitThis post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux. "A stop job is running for" is a status line systemd prints on the console during s4 min read·etducky.hashnode.dev1
KKarmaBox·22h ago*sshole Went From Patch to Exploitation in Four Days: An Incident ReviewTimeline, root cause, blast radius, the read-only checks to run now, and the patch routine we would put on a calendar.17 min read·karmabox.hashnode.dev
DDarajat Mohammed·1d agoCracking OverTheWire Bandit (Levels 16–21): Scanning Ports, Borrowing Power and Reading Scheduled JobsA chronological log documenting Linux command line mastery, file permissions and system security fundamentals.16 min read·darajat.hashnode.dev
Cc-wind·1d agoShipping One Rust Codebase to Windows, macOS and Linux: Universal Binaries, Vendored OpenSSL, musl and a Gated Signing StepReleasing a cross-platform Rust app: macOS universal binaries with lipo, vendored OpenSSL, measuring glibc requirements, a static musl CLI, and a gated minisign signing job.10 min read·mistlab.hashnode.dev
KKausar Raza·1d agoVentoy Not Booting Windows 11? Fix Security Violation, Secure Boot and Driver ErrorsVentoy is the easiest way to carry Windows 11, a couple of Linux ISOs and a rescue disk on one USB stick: you install it once, then just copy ISO files onto the drive. When it works, it is brilliant.13 min read·knowledgemarkg.hashnode.dev
Cc-wind·1d agoAn Auto-Updater That Doesn't Trust Its Download Server: minisign, Verify-Before-Parse and Rollback ProtectionSecure auto-update design: minisign Ed25519 signatures and trusted comments, verify before parsing, rollback protection, safe extraction and per-platform install with rollback.10 min read·mistlab.hashnode.dev12MA
