Blog

One day I found Apple has its own container implementation, which is an open source project called apple/container.

Part1: Docker Internal (1) Part2: Docker Internal (2) Part3: Docker Internal (3) Part4: Docker Internal (4) In the final post, we’ll cover how vendors like NVIDIA or AMD integrate their code into the Docker system, including hardcoding in the moby code and

Part1: Docker Internal (1) Part2: Docker Internal (2) Part3: Docker Internal (3) Part4: Docker Internal (4) In the third post, we’ll discuss how the container is loaded.

Part1: Docker Internal (1) Part2: Docker Internal (2) Part3: Docker Internal (3) Part4: Docker Internal (4) In the last post, we introduced the relationship between the components in the Docker system, and in this post, we’ll discuss the attack surfaces.…

Part1: Docker Internal (1) Part2: Docker Internal (2) Part3: Docker Internal (3) Part4: Docker Internal (4) For this year’s (2026) Pwn2Own Berlin, I tried to find vulnerabilities in Docker but came up with nothing.

This week I played diceCTF 2026 with team fewer and spent 12 hours solving a Linux kernel challenge, cornelslop.

In Filesystem 101, we covered the structural relationships of the Linux filesystem from a process perspective.

Recently I explored the filesystem design of Linux and found it is little more complicated than I expected, so I decided to write a post organizing it.

0.

One day, @farazsth98 asked me if I had analyzed the latest 1-day kernelCTF slot.