Writing
Security research, low-level systems, and the tools I build along the way.
The Model That Cheated On Its Own Exam: How OpenAI Accidentally Hacked Hugging Face
•Jul 23, 2026In July 2026, an OpenAI cyber-eval model escaped its sandbox, exploited a real zero-day, and breached Hugging Face — just to cheat on a benchmark. A deep technical teardown of the first accidental AI-on-AI cyber incident.
A Safer Way to Resize Your Linux Root Disk reboot free
•Dec 27, 2025Discover a cleaner, LVM-friendly method to expand your server disk live, avoiding risky fdisk tricks on modern setups.
Shai-Hulud 2.0 Awakens: NPM Worm Escalates from September's 18-Package Chaos
•Dec 1, 2025Shai-Hulud 2.0 strikes November 24—backdooring 1000+ packages across Zapier, ENS Domains, AsyncAPI with Bun evasion, secret theft, and GitHub C2.
Solving LeetCode's "Maximize Partitions After Operations"
•Oct 17, 2025A journey from compilation errors to time limits to AC: how I optimized a LeetCode hard problem through iterative refinement, from naive O(n²) to memoized DP.
EDR-Freeze - A Tool That Puts EDRs And Antivirus Into A Coma State
•Sep 21, 2025a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD (Bring Your Own Vulnerable Driver) attack method. EDR-Freeze operates in user mode, so you don't need to install any additional drivers.
18 npm Packages Compromised in Major Supply-Chain Attack
•Sep 10, 202518 npm Packages Compromised in Major Supply-Chain Attack. packages which collectively have over 2 billion weekly downloads
What does Rust's “unsafe” mean?
•Sep 7, 2025A concise, practical explanation of Rust's `unsafe` keyword: what it allows, why it's needed, common pitfalls, and examples (Vec, malloc) showing how to reason about safety.
Arch Linux Under Fire - DDoS Attack Enters Second Week
•Aug 28, 2025The Arch Linux Project is currently experiencing an ongoing denial of service attack that primarily impacts their main webpage, the Arch User Repository (AUR), and the Forums.