security

Timothy Roscoe (ETH Zurich, co-lead of the Barrelfish multikernel and the Enzian research computer) gave the joint OSDI/ATC keynote in 2021 and announced up front that he’d chosen the “keynote as therapy” format. What he unloads is a simple argument that keeps getting more true: the machine Linux thinks it runs on doesn’t exist, the thing actually managing a modern computer was never designed by anyone, and the systems research community has mostly stopped looking....

A year ago Greg Kroah-Hartman told a security conference the Linux kernel was issuing 50 CVEs a week and everyone thought that was insane. The kernel is now issuing 33 a day. His Kernel Recipes 2026 talk is aimed at kernel developers and maintainers, not the general public, and its refrain is “do not panic.” What makes it worth an hour is that he backs the refrain with raw data: he got the full report behind this year’s most publicised AI bug hunt and went through it line by line....

arXiv: 2607.15267 · PDF: 2607.15267.pdf Authors: Victoria Graf, Hannaneh Hajishirzi, et al. TL;DR Prior work on pretraining-data poisoning has mostly targeted curated sources like Wikipedia — a poor stand-in for the scale and heterogeneity of real pretraining corpora. This paper demonstrates that public discussion interfaces on the open web (comment sections, forums, Q&A pages) are a viable at-scale injection vector, and introduces HalfLife, an analysis technique for estimating whether adversarial content actually survives web-crawl-based data curation pipelines and lands in the training set....

I have more questions than time to answer them. My backlog is full of things I genuinely want to explore: “Is a Crossplane Composition plus function-sequencer really equivalent to a hand-written Kubebuilder controller?”, “Can Temporal reliably drive a Deep-Agent loop?” and, more recently, “Can TigerData run on CNPG without a custom operator?” In theory, these just need a focused weekend. In reality, between work and chasing after my kids in the playground, my window for “sitting at a desk to explore” is maybe two evenings a week....

Cloud Computing Cloud computing is a model for enabling rapid provisioning of resources from a pool of resources. There are three cloud service models: Software as a Service (SAAS), Platform as a Service (PAAS), and Infrastructure as a Service (IAAS). SAAS allows users to use the provider’s application, while PAAS allows users to use the provider’s platform to build applications. IAAS allows users to use the provider’s fundamental computing building blocks like compute, storage, and networking....

Botnet Detection: Understanding the Need, Techniques, and Challenges Botnets are a coordinated group of malware instances that are controlled via command and control (C&C). They can perform multiple kinds of activities, making them difficult to detect using traditional security measures. In this article, we’ll explore the need for botnet detection, techniques used for botnet detection in enterprise networks and on the internet, and the challenges associated with botnet detection. The Need for Botnet Detection The goal of network monitoring is to detect and prevent attack traffic....