I've argued about this with friends for almost my entire life. Back then, I didn't have the foundational knowledge I have today, and I can't trace the sources of my earlier arguments. But I never accepted that I couldn't do serious work in vulnerability research just because I wasn't "born for it."

Beyond nature and nurture How mathematics changed my view on talent davidbessis.substack.com/p/beyond-nat...

Announcing Systing 1.0 josefbacik.github.io/kernel/systi...

Is it normal for an iPhone’s analytics data to be wiped out?

GDB will now have a save history command to save the command history to a file whenever you want. This is cool as I usually need to manually copy-paste commands anyway because GDB tends to crash during my debugging sessions.

EP19 The Art of Deconstructing Problems: Tools, Tactics, and the ScatterBrain Obfuscator with Nino Isakovic podcasts.apple.com/br/podcast/b... ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator cloud.google.com/blog/topics/...

How the Intel 8087 FPU Knows Which Instructions to Execute

[Clang][CodeGen] Fix __builtin_counted_by_ref for nested struct FAMs github.com/llvm/llvm-pr... Using __builtin_counted_by_ref on a struct defined within another struct crashes Clang github.com/llvm/llvm-pr...

It took me a year to win this race. This game is amazing. youtu.be/7xgODo0Qoxc

Good to be able to do an easy long run again. I ran today for 1 hour 48 minutes and listened to three full podcast episodes.

Attention is all we have A conjectural theory of cognitive inequality davidbessis.substack.com/p/attention-...

The end of a good time slab: remove struct kmem_cache_cpu git.kernel.org/pub/scm/linu... slab: remove cpu (partial) slabs usage from allocation paths git.kernel.org/pub/scm/linu...

A security researcher is like a fuzzer. When your code coverage increases, you improve.

Linux kernel is adding support for a new mechanism to validate lock usage during compile-time. It depends on a new Clang feature called Thread Safety Analysis.

Wow, code diffs in commit messages are also applied to the code being patched. Interesting and weird. On patch vs commit messages seclists.org/oss-sec/2026...

Distinct AI Models Seem To Converge On How They Encode Reality www.quantamagazine.org/distinct-ai-...

Reproducing a syzbot Bug in 5 Minutes — Now with virtme-ng! fosdem.org/2026/schedul...

[Cryptodev-linux] Page-level UAF exploitation nasm_re posted an article about exploiting a page-level UAF in the out-of-tree cryptodev-linux driver. The researcher modified struct file sprayed into a freed page to escalate privileges. nasm.re/posts/crypto...

mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge git.kernel.org/pub/scm/linu...

I don’t know if this is a dumb question, but is there any side-channel, covert-channel, or microarchitectural attack targeting the APIC? Something like an internal hint about when/whether the APIC timer will fire (or is about to fire)?

Is Particle Physics Dead, Dying, or Just Hard? www.quantamagazine.org/is-particle-...

Evolution of the x86 context switch in Linux www.maizure.org/projects/evo...

In 2024, I returned to attending security conferences after a long hiatus. I attended a local event in my city, as well as H2HC and CCC. I wrote about my experience at these events in March last year, but only in Portuguese. Today, I translated the blog post into English.

I started running seriously in 2024. I originally wrote about my progress in May 2025, but only in Portuguese. Today, I’ve translated that story into English.

Lawfare Daily: Elizabeth Tsurkov on Her Captivity in Iraq shows.acast.com/lawfare/epis...

The Hidden Bottleneck: Blocking in Async Rust Using eBPF to find blocking code in Tokio applications without instrumenting your code cong-or.xyz/blocking-asy...

ProfInfer: An eBPF-based Fine-Grained LLM Inference Profiler arxiv.org/abs/2601.20755

Cisco is using eBPF to rethink firewalls, vulnerability mitigation thenewstack.io/cisco-is-usi...

A Nobel laureate on the limits of evidence-based policy thebigquestion.libsyn.com/a-nobel-laur...

#59 Category Theory and Inclusivity - Valeria de Paiva www.typetheoryforall.com/episodes/cat...

The GNU C Library version 2.43 is now available sourceware.org/pipermail/li...

New post, on the pop quizification of knowledge: kucharski.substack.com/p/the-pop-qu...

Qualcomm has developed and released a set of crash-utility plugins to help with Linux/Android kernel and userspace analysis. The crash utility is already great, and it becomes even better with these plugins.

This is a good example of the complex world we live in. A subtle change can cause a catastrophic effect. What came first: the CNAME or the A record? blog.cloudflare.com/cname-a-reco...

Becoming a Kernel Developer (1/3): Posting Your First Patch www.linaro.org/blog/becomin...

AI is very useful for security research, as many researchers have already demonstrated. It will likely become—or perhaps already is—a tool that many researchers depend on. It has been very helpful for us as well.

Head First Reporting of Linux Kernel CVEs: Practical Use of the Kernel Fuzzer static.sched.com/hosted_files...

Tracing the ptrace blogs.oracle.com/linux/tracin...

GLIBC-SA-2026-0002: getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler (CVE-2026-0915) sourceware.org/pipermail/li...

Integer overflow in memalign leads to heap corruption sourceware.org/pipermail/li...

I noticed a vulnerability was fixed in vsftpd a few days ago (CVE-2025-14242). It’s a very interesting project, and Chris Evans' work has taught me several important lessons.

I haven’t found any bugs with AI yet, but it’s really helping me a lot. Yesterday I managed to diagnose an RCU stall involving an exploit that would have taken me weeks to understand on my own. It’s seriously impressive!

Stupid RCU Tricks: rcutorture Catches an RCU Bug paulmck.livejournal.com/37782.html Verification Challenge 2: RCU NO_HZ_FULL_SYSIDLE paulmck.livejournal.com/38016.html

Trees I: Radix trees lwn.net/Articles/175... Trees II: red-black trees lwn.net/Articles/184...

Pharmacoeconomic analysis of Zirconium Cyclosilicate for hyperkalemia in a public hospital in Salvador, Bahia rsdjournal.org/rsd/article/...

Reviving a Dell Inspiron with Faulty Soldered RAM: How Linux Kernel Parameters & AI Saved My Motherboard www.dell.com/community/en...

Live Debugging Techniques for the Linux Kernel, Part 1 of 3 blogs.oracle.com/linux/live-k... Live Debugging Techniques for the Linux Kernel, Part 2 of 3 blogs.oracle.com/linux/live-k... Live Debugging Techniques for the Linux Kernel, Part 3 of 3 blogs.oracle.com/linux/live-k...

Matrix Polynomial Attack on the Megrelishvili Key Exchange Protocol cic.iacr.org/p/2/4/16

InputPlumber: Lack of D-Bus Authorization and Input Verification allows UI Input Injection and Denial-of-Service (CVE-2025-66005, CVE-2025-14338) security.opensuse.org/2026/01/09/i...

TLP: Polkit Authentication Bypass in Profiles Daemon in Version 1.9.0 (CVE-2025-67859) security.opensuse.org/2026/01/07/t...