pytorch setup with uv
configuring pytorch with uv package manager for different compute backends
Mike Bommarito
Builder, Researcher, Teacher
Latest posts
minecraft chunk-batch backpressure bypass (MC-308703)
a client-controlled acknowledgement counter in the java-edition server had no lower bound, letting a joined player defeat chunk-send flow control and drive the server into unbounded off-heap growth and tick stall. reported as mojira MC-308703, fixed silently in 26.2.
KovaPlusFltr.sys: an unprivileged kernel stack overflow in the ROCCAT Kova[+] HID filter driver
glaurung surfaced an unbounded ioctl copy in a 2010 ROCCAT gaming-mouse filter driver: an attacker-controlled length copied into a fixed 3000-byte kernel stack buffer with no upper bound and no /GS cookie, overwriting the saved return address. unprivileged with a controlled kernel write, but reachable only when the Kova[+] mouse is present, which we reproduced in qemu by emulating the hardware the…
if-then: the promise rule
implication explained simply: an "if… then…" is a promise, and there is exactly one way to break it
logic, explained simply
a friendly on-ramp to reasoning and logic for curious minds (around ages 11+): every idea taught as a story plus a game you can try
the straw man trick
the straw man fallacy explained simply: swapping a real point for a sillier fake one that is easy to knock down
live kernel-debugging windows drivers in qemu from linux (no windbg, no whpx, no exdi)
a working recipe for breakpointing windows kernel drivers running in a qemu/kvm guest, driven entirely from a linux host over the qemu gdbstub. it sidesteps the usual windbg-over-kdnet/exdi and whpx pain: gdb attaches to the gdbstub directly, base+rva is resolved without pdbs, and the single rule that fixes "symbols resolve but my breakpoint never hits" is hardware breakpoints only. ends with a…
ip access control vs x-forwarded-for: two java footguns
jetty's InetAccessHandler and undertow's ProxyPeerAddressHandler both let an ip allow-list be driven by the client-supplied X-Forwarded-For header in their documented reverse-proxy setups. the interactions are public and arguably intentional; the real defects are a false jetty javadoc guarantee and a misleading undertow method name, not new bypasses.
tcpip.sys Fse/port-tracker per-message length underflow (kernel OOB read, SEH-caught)
a confirmed integer underflow in the windows tcp/ip Fse/port-tracker (WSL2 mirrored-networking) transport hands a ~4GB declared length to the MIDL/NDR decoder over a <32-byte buffer. the kernel out-of-bounds read executes on a live kernel but is caught by an RPC structured-exception handler; the one possible escalation (an info-leak to the peer) is refuted by static analysis. real but benign, on…
june 2026 patch tuesday: a patch-diff campaign
reverse-engineering microsoft's record june 2026 patch tuesday: localizing the headline network and kernel cves, and two systemic observations (velocity-flag-gated fixes, and a reachability correction on the wormable tcp/ip rce)