Recent content on prizrak.me blog
Build a crappy ring-0 toy antivirus in eBPF with the IMA LSM 
 In significant boredom, I wandered into the eBPF documentation and stumbled across
this sick function: 
 long bpf_ima_file_hash ( struct file * file, void * dst, u32 size)
 Searching for references in github code search returns only a few results,
besides the man pages and the gazillion forks of…
Hardware-Backed Auth with PAM + TPM2 
 You might be interested in this post if you are curious about Linux authentication, don’t know what a TPM actually does, or
are interested in the security / UX of Linux desktops. 
 Or if you wanna use a TPM2-backed PIN to unlock your desktop for some reason. 
 I’ll talk about PAM generally, explain my motivation for making new PAM…
Landlock: What Is It? 
 Landlock is a Linux API that lets applications explicitly declare which resources they are allowed to access. Its philosophy is similar to OpenBSD’s unveil() and (less so) pledge() : programs can make a contract with the kernel stating, “I only need these files or resources — deny me everything else if I’m compromised.” 
 It provides a simple, developer-friendly way…
I’m kind of a mad scientist, obsessed with building useful and unique programs. I enjoy the satisfaction of seeing my monsters come to life. I jump around frantically between domains/projects, learning as I go. 
 Some of my interests include: 
 
 Low-level systems programming 
 Security research 
 Distributed systems 
 Kernel development 
 Devops 
…
Hugo on Kubernetes 
 I wanted to make a self-hosted blog so I could post projects and write about stuff I find interesting. After some research I decided to use Hugo which seemed to check all the boxes for what I wanted: 
 
 Static html generation 
 Usuable with custom CSS frameworks (TailwindCSS in my case) 
 Works well with git-based workflows 
 
 Because I already…