Posts

• April 22, 2026·2 min · #ebpf #linux #observability

  Tracing syscalls with eBPF without losing your mind

  A walkthrough of attaching kprobes to syscall entry/exit, dealing with the verifier when you really do need that map, and shipping the data out via ring buffers.

• March 8, 2026·2 min · #security #ci #sbom

  Supply-chain checks that actually catch things

  SBOMs alone are wallpaper. Here's the small set of checks I run on every build that have actually flagged real problems in the last year.

• February 14, 2026·1 min · #sysadmin #self-hosting

  On running my own mail in 2026

  Yes, it still works. No, you should probably not do it. Here's the setup I have run for eleven years, and what I would change if I were starting today.

• January 3, 2026·2 min · #tools #shell

  Small tools I keep rewriting

  Every few years I rewrite the same four utilities. Each rewrite is shorter than the last. Here they are.

• November 30, 2025·2 min · #tls #networking #fingerprinting

  What your TLS handshake gives away

  A short tour of JA3, JA4, and why the order of your cipher suites is more identifying than you'd like.

• August 15, 2025·2 min · #conference #security

  Notes from DEF CON 33

  Three talks worth your time, two villages worth visiting, and one thing I think the community is getting wrong.