0xkato

I recorded the requests Codex generated for a 16-character prompt, then measured what changed as it loaded instructions, exposed tools, read files, ran commands, received images, and compacted its history.

I used AI throughout the process of learning how LLMs work.

This post is a walkthrough of how LLMs work.

My approach to security has always been the same: understand something deeply so you can do the best work on it.

CVE-2026-1678 / GHSA-536f-h63g-hj42 is a critical out-of-bounds write in Zephyr’s DNS name parser, dns_unpack_name(), affecting versions <= 4.3 with a 9.4 CVSS score.

This post is a tour of how CPU caches actually work, using a simple real‑world picture: a busy office with desks, cabinets, and a big archive room.

This is a friendly case study, not a callout.

A practical tour from write() to recv() You run curl http://example.com and now you have some HTML in your terminal but what actually happened?

You run a program.

Part 1 — From power button to the kernel’s first breath You press the power button.