#Linux kernel security
226 related articles
·4 min
Legal Risks of Unfilled Copyright Notices in Open Source Licenses and a Compliance Guide
Copyright notices in many open source LICENSE files are never filled in—how big is the legal risk? A deep dive into the validity of blank copyright lines in Apache-2.0 and other licenses, why compliance tools stay silent, and practical advice.
Read more →
·6 min
Home Self-Hosting Server Setup Guide: Building a Private Cloud Ecosystem from Scratch
One 32GB server, 8 hours to build a complete home self-hosting ecosystem. This article details the selection logic behind core services like Jellyfin, Forgejo, Immich, and Ollama, plus infrastructure setup essentials for Nginx Proxy Manager and Podman Compose.
Read more →
·2 min
GhostLock: A Deep Dive into the 15-Year-Old Linux Stack UAF Vulnerability
GhostLock is a stack use-after-free (stack-UAF) vulnerability affecting all major Linux distributions, lurking for 15 years. A deep dive into its mechanics, severity, scope, and practical mitigation.
Read more →
·6 min
AI Agent Development in Go: A Hands-On Guide to ByteDance's Eino Framework and Its Seven Core Capabilities
Build production-grade AI Agents with a pure Go stack using ByteDance's Eino framework. A deep dive into seven core capabilities: multi-Agent orchestration, long-task execution, command approval, RAG, MCP, Skills, and database reporting.
Read more →
·5 min
Prismata Analysis: How to Defend Web Agents Against Cross-Site Prompt Injection Attacks
Cross-site prompt injection is becoming the trickiest security threat for Web agents. This article analyzes the Prismata project's 'confining defense' approach—controlling injection's blast radius via context isolation, permission boundaries, and trust grading.
Read more →
·5 min
The Complete OpenCode Tutorial: Installation, Commands, and Advanced Practice
Systematically learn the OpenCode AI programming tool: covering both desktop and WSL installation, core commands, model and rule configuration, MCP integration, and Agent Skills.
Read more →
·2 min
Tailscale: Build a Secure Private Network Effortlessly with WireGuard
Tailscale is a modern networking tool built on WireGuard that automates key exchange, node discovery, and routing. Supports SSO and 2FA. Perfect for remote work, self-hosting, and multi-cloud setups.
Read more →
·3 min
The Software Compounding Effect: The Real Deciding Factor in AI Infrastructure Competition
Beyond the GPU arms race, software is becoming AI infrastructure's true compounding engine. A deep dive into optimization stacking, the CUDA ecosystem moat, and how open source scales individual breakthroughs into community wealth.
Read more →
·5 min
Ollama Raises $65M Series B: 85% of Fortune 500 Have Already Deployed Local LLMs
Local LLM tool Ollama closes a $65M Series B, bringing total funding to $88M. With 9M developers and 85% of Fortune 500 having deployed internally, this deep dive explores why enterprises embrace local LLMs: compliance, Agent cost savings, and open-source ecosystem.
Read more →
·7 min
Google's $250K Bounty: Linux VM Escape Vulnerability Sets a Historic Record
Google paid a security researcher $250K for a Linux kernel VM escape vulnerability, setting a VRP record. An in-depth analysis of VM escape principles, kCTF incentives, and cloud security impact.
Read more →
·5 min
A Deep Dive into Cloud Coding Agents: How Users in China Can Choose Wisely
What exactly is the Cloud Coding Agent Silicon Valley is hyping? This article breaks down the core concept across three axes—where it runs, who watches, where tasks start—and gives users in China practical advice on local alternatives.
Read more →
·4 min
AI Coding Tool Security Governance: How Policy Enforcement Guardrails Ensure Enterprise Compliance
As Claude Code, Cursor, and Codex enter enterprises at scale, policy enforcement guardrails are becoming critical. A deep dive into AI coding tool security governance, cross-platform compliance, and enforcement mechanisms.
Read more →
·4 min
Claude Code Getting Started Guide: Complete Installation and Configuration Walkthrough
A step-by-step guide to installing and configuring Claude Code from scratch: Node.js setup, Git Bash, npm install, proxy configuration, and API Key authorization.
Read more →
·2 min
Deep Dive: How a Local User Can Escalate to Root via an OpenBSD Kernel UAF Vulnerability
A kernel-level Use-After-Free vulnerability in OpenBSD allows local attackers to escalate privileges to root via dangling pointers. Learn how UAF works, its impact, and mitigation steps.
Read more →
·3 min
Files over Tools: Rethinking AI Agent Architecture with a Virtual Filesystem
Why give AI Agents a virtual filesystem and bash instead of more tools? A deep dive into the "Files over Tools" design philosophy, tool bloat, Unix principles, security sandboxing, and hybrid architectures.
Read more →
·2 min
Critical Security Flaw in Linux 6.9: LUKS Suspend No Longer Clears Encryption Keys
Since Linux kernel 6.9, LUKS suspend no longer clears disk encryption keys from memory, leaving cold boot attack protections silently broken. Here's what you need to know.
Read more →
·6 min
Omnigent Open-Sourced: A Meta-Harness for AI Coding Agents Built by Databricks
Databricks open-sources Omnigent, a Meta-Harness for orchestrating Claude Code, Codex, and more AI coding assistants together—with built-in guardrails, cross-model workflows, and real-time collaboration. Get started in 10 minutes.
Read more →
·6 min
Rereading The Mythical Man-Month in the AI Era: Can the Strongest Copper Bullet Break Brooks's Law?
Does The Mythical Man-Month still hold 50 years on? A deep analysis of Brooks's Law, the second-system effect, and conceptual integrity in the AI coding era.
Read more →
·6 min
Dify Local Deployment in Practice: A Complete Guide to Building an AI Application Platform with Docker
A complete guide to Dify local deployment: from Docker environment setup, source code pulling, and container startup to first access. Build a private AI app development platform across Linux, Windows, and Mac for fast enterprise AI deployment.
Read more →
·2 min
Unsloth v0.1.462-beta: Keyboard Navigation and Accessibility Improvements for Model Picker
Unsloth v0.1.462-beta adds full keyboard navigation to the Studio Model Picker, fixes Tab focus order, and improves accessibility for LLM fine-tuning workflows.
Read more →