How I built a Graph Neural Network recommendation engine from raw tensors and sparse matrices — and the systems/ML insights learned from LightGCN and 9 advanced optimizations.
/ BLOG
technical articles & systems deep-dives
A deep dive into Track, a new systems programming language designed for real-time systems, alongside Ignite's migration to hardware-isolated microVMs.
JSON-RPC 2.0 over multiplexed TCP streams. No Protobuf. No codegen. No dependencies. Just C, OpenSSL, and a dumb amount of free time on a Sunday.
A forensic deep dive into the June 2026 compromise of the Arch User Repository, the Miasma eBPF rootkit, and why open-source trust models will never be the same.
im pivoting to ai and ml
14 minWhy a systems engineer spent the last few months building diffusion models from scratch — and what transferred, what didn't, and what's next.
A deep technical dive into building Carv, a programming language that compiles to C for ARM Cortex-M. Lexer internals, Pratt parsing, type inference, ownership tracking, C codegen, state-machine async/await, and the 11 bugs I haven't fixed yet.
A deep technical breakdown of the Langflow unauthenticated RCE — how exec() with zero sandboxing allowed attackers to compromise AI pipelines within 20 hours of disclosure.
A developer-focused breakdown of how Cross-Site Scripting manifests in SPAs using TanStack Query, with a confirmed CVE walkthrough and layered remediation.
Rust's strictness is by design. But being a C replacement isn't about syntax — it's about trust, tooling, and domains where C never had a real competitor anyway.
Zero is a systems language designed for AI agents. Structured JSON diagnostics, capability-based I/O, sub-10KB binaries. The idea sounds compelling until you look at how agents actually work with compilers today.
I Thought Building a Game Boy Emulator Would Teach Me Zig. It Mostly Taught Me How Little I Knew
17 minConfusion, rewrites, bugs at 2am, and failed ROMs — building a Game Boy emulator from scratch taught me that systems programming is mostly staring at wrong assumptions. Here's what the code actually looks like.
How Attackers Chain Command Injection, Race Conditions, and Blind RCE — And How You Stop Every Step
12 minA developer-focused breakdown of a complete attack chain, with concrete fixes at each stage.
A tactical guide for developers without formal experience: open source contributions, SaaS clones, freelance platforms, and building 'fake but real' projects that actually get you hired.
Karion-OS started in C. Then a heap allocator bug I couldn't find pushed me to port the whole thing to Rust. Here's what actually happened.
Looking beyond framework-first thinking to find real performance.
Designing systems without external dependencies.