Top all-time · #24768
chompie at the bits
Personal blog · chompie.ripsecuritysystems
chompie at the bits is a personal blog at chompie.rip about security and systems. Since 2023, 3 different Hacker News readers have linked it 4 times, most often “Put an io_uring on it – Exploiting the Linux Kernel”. It has a working feed you can follow.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link chompie.rip for exploit write-ups on Firecracker, io_uring and eBPF, mirrored here after the company that originally hosted them shut down. One commenter recommends the io_uring post.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
chomp.png Welcome! This is the new home for my blogposts. My past blog posts have been reposted here as well. About Me I'm chompie - a hacker and a security researcher. I focus on low-level vulnerab…
Most-linked posts?
- Put an io_uring on it – Exploiting the Linux Kernel2 people · 2 mentions · first linked 2023-06-16
What Hacker News says?
https://web.archive.org/web/20221130205026/graplsecurity.com... The company no longer exists so you can find at least some of them mirrored here: https://chompie.rip/Blog+Posts/ The Firecracker, io_uring, and ebpf exploitation posts. Chompie was my employee and was the one who did the exploitation, though I'd like to think I was at least a helpful rubber duck, and I did also decide on which kernel features we would…
Comment linking /Blog+Posts/
on “Maestro: A Linux-compatible kernel in Rust”Submitted Put an io_uring on it – Exploiting the Linux Kernel as a story · 4 points
HN discussionPractically speaking, even with `unsafe` the exploitability of rust programs is extremely difficult. With modern mitigation techniques it is required that you be able to chain multiple vulnerabilities and primitives together in order to actually reliably exploit software. Bug density from `unsafe` is so low in Rust programs that it's just radically more difficult. My company (not me, Chompie did the work, all credit…
Comment linking /Blog+Posts/Attacking+Firecracker+-+AWS'+microVM+Monitor+Written+in+Rust
on “Maestro: A Linux-compatible kernel in Rust”For anyone who wants an easily digestible read on io_uring exploits I love my former colleague's post: https://chompie.rip/Blog+Posts/Put+an+io_uring+on+it+-+Explo...
Comment linking /Blog+Posts/Put+an+io_uring+on+it+-+Exploiting+the+Linux+Kernel
on “io_uring disabled across Google platforms”