The previous article in this series described the general mechanisms that th [...]
Your executable is a SQLite database
I have been probably obsessed with two things in the last few years: Nix as a tool to explore innovative ideas that require the capability to rebuild the world and replacing ELF with SQLite as an executable format. You might have noticed that these two ideas are well suited to each other.
ELF64 hello world | tuket
I like to understand how things work under the hood. Assembly programming is very close to the metal but, even then, the assembler hides some complexity to make our lives easier. Also the linker does lots of work I don’t completely understand.
elf32-hello-world/README.md at master · DenizBasgoren/elf32-hello-world
Let's write hello world in machine code! Contribute to DenizBasgoren/elf32-hello-world development by creating an account on GitHub.
Genode - Genode Operating System Framework
We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.
Cross-Platform File System Operations Based on libuv
A cross-platform interface to file system operations, built on top of the libuv C library.
Compiling Models to Megakernels
Fine-grained synchronization, deep pipelines, and zero kernel launch overheads, automatically.
ELFA: Encrypted Local-First Architecture
The European Commission is funding the ELFA consortium to build a local-first, end-to-end encrypted workspace suite. Core tools include documents, spreadsheets, email, calendar, chat, and video calls.
libkrun/libkrun
A dynamic library providing Virtualization-based process isolation capabilities
OpenFang — The Agent Operating System
Open-source Agent OS built in Rust. 7 autonomous Hands. 16 security layers. 40 channels. 27 providers. Single binary. Battle-tested.
The Linux kernel is just a program
Most books and courses introduce Linux through shell commands, leaving the kernel as a mysterious black box doing magic behind the scenes. In this post, we will run some experiments to demystify it: the Linux kernel is just a binary that you can build and run.
Kernel Probes (Kprobes) — The Linux Kernel documentation
Kprobes enables you to dynamically break into any kernel routine and collect debugging and performance information non-disruptively. You can trap at almost any kernel code address [1], specifying a handler routine to be invoked when the breakpoint is hit.
Moving beyond fork() + exec()
Since the earliest days of Unix, two of the core process-oriented system calls have been fork() [...]
Tock OS A Rust Based Open Platform for Transparent and Secure Root of Trust Devices
What I Found Interesting in Claude Code's Source
A breakdown of the most interesting engineering patterns in Claude Code's leaked source code: composable system prompts, runtime instruction injection, context compression, forking, prompt caching architecture, and more.
GopherCon 2017: A Go Programmer's Guide to Syscalls - Liz Rice
Sprites - Stateful sandboxes
Persistent, hardware-isolated execution environments for arbitrary code. Run AI agents, untrusted code, and more in secure sandbox environments with checkpoint & restore.