Long-form notes from inside the kernel.
Long-form notes from inside the kernel.
EEVDF is not just a better CFS
Why the Linux scheduler's move from CFS to EEVDF changes how you should think about latency-nice workloads — and what the man pages won't tell you.
The eBPF verifier, bounded loops, and you
A practical guide to getting your BPF programs past the verifier without lying to it — bounded loops, scalar ranges, and the cost of provability.
Ownership is a type system, not a discipline
Borrow errors stop feeling like fights the day you stop thinking about ownership as rules to memorize and start reading it as types.
A mental model for zero-knowledge attestation
zk-SNARKs stop feeling like magic when you separate the three things they actually do: commit, prove, verify.
Reading a syscall, end to end
Trace a single openat() from glibc to the VFS and back. A guided tour of how the kernel actually receives your request.
Capability tokens, not roles
Why modeling authorization as data — macaroons with caveats — beats role tables at the scale where roles stop making sense.