Tag archive
Hardening guide for tuning Linux kernel sysctl parameters to defend against TCP SYN floods, IP spoofing, packet redirects, and memory exhaustion.
Technical deep-dive on Extended Berkeley Packet Filter (eBPF) tracing, kprobes, tracepoints, bpftrace, and zero-overhead kernel runtime security monitoring.
Technical guide for writing eBPF eXpress Data Path (XDP) kernel programs to drop malicious DDoS traffic at the network driver level.
Recently, I got interested in custom Linux image creation and wanted to look into a few popular build...
In the first post of this series, I covered the general picture: a mode switch happens whenever the...
If you've ever researched low-latency systems, you've seen the same checklist everywhere: reduce...
Erfahren Sie, wie Sie mit Landlock LSM Linux‑Applikationen ohne Root isolieren. Praktische Beispiele, Befehle und Tipps für sichere Sandboxes im Produktionsbetrieb.
Originally published at norvik.tech Introduction Explore the implications of...
CVE-2026-43284 and CVE-2026-43500 chain two kernel page-cache flaws for deterministic root escalation. Public PoC available. Here's what to patch.
This week's tooling landscape is quieter on the AI-native side but dense with infrastructure moves...
The Linux kernel log entry for version 2.6.30 is often treated as a changelog, but it represents a...
Originally published at norvik.tech Introduction Deep dive into effective debugging...