FreeBSD for the Linux Sysadmin: What Transfers, What Doesn’t, and Where It Wins
root@freebsd:~# freebsd-version -kru root@freebsd:~# freebsd-version -kru # 15.1-RELEASE, and yes, it is still here FreeBSD for the Linux SysadminWhat Transfers, […]
A Laptop, a Container, and $6.3 Billion: What the Binance Hack Means for Anyone Running Infrastructure
On October 29, roughly $6.3 billion left Binance's hot wallets in minutes. Strip away the crypto, and this is the […]
PwnEscape: One Checksum That Broke Out of the Guest [Under the Hood]
PwnEscape is not a hypervisor bug. It is a host-kernel IPv4 flaw where a guest’s checksum-offload metadata rewrites a header the kernel already acted on — leaking host memory, crashing the host, or, in the researcher’s lab, running code as root.
setuid, setgid, and the Sticky Bit: How Linux Permissions Really Work [Under the Hood]
unixshadow — permissions setuid, setgid, and the Sticky Bit The three permission bits every sysadmin uses and few can explain […]
The Cursor Marketplace Backdoor: How a svc-telemetry SSH Key Landed in authorized_keys
unixshadow — cursor-backdoor The Cursor Marketplace Backdoor A trusted editor extension auto-updated, and a stranger’s SSH key quietly moved into […]
Node2Shell: The Brotli Bug That Turned HTTP/2 Into Remote Code Execution
node — CVE-2026-111497 ~ node –version # if this prints anything older than the fixed lines below, keep reading Node2Shell: […]