Top all-time · #7032
sigma star gmbh
Company blog · sigma-star.at/blogsecuritysystems
sigma star gmbh is the company blog at sigma-star.at, writing about security and systems. Since 2023, 11 different Hacker News readers have linked it 48 times, most often “Fixing a Buffer Overflow in Unix v4 Like It's 1973”. It is still writing: the last post was on 2026-08-21, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers cite these posts as background on the Linux kernel becoming its own CVE numbering authority, which led to a flood of CVEs, and on a 2025 Unix v4 buffer overflow fix. No comment judges the writing itself.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Security, engineering, training: During the past decades sigma star has delivered various solutions for numerous companies. What can we do for you? Find out!
Most-linked posts?
- Fixing a Buffer Overflow in Unix v4 Like It's 19736 people · 7 mentions · first linked 2025-12-31
- Thoughts on Linux CNA's Approach and the Resulting CVE Flood4 people · 5 mentions · first linked 2024-03-15
- Let's Embed a Go Program into the Linux Kernel (2023)4 people · 4 mentions · first linked 2023-12-20
- TrustZone Intermezzo: Broken OP-Tee Memory Isolation on i.MX 8M3 people · 3 mentions · first linked 2026-06-11
- Yocto vs. Debian for building embedded Linux systems3 people · 3 mentions · first linked 2026-05-29
- Pseudo Graceful Process Termination Through Code Injection2 people · 3 mentions · first linked 2024-02-27
- Analyzing Packet Drops Without Tooling: Or Ftrace the Pure Way2 people · 3 mentions · first linked 2023-11-05
- Linux Process Priorities Demystified2 people · 2 mentions · first linked 2024-05-07
- New vulnerabilities in Barebox and U-Boot boot loaders, verified boot at risk2 people · 2 mentions · first linked 2025-01-29
- Hunting Down a Go Runtime Bug on 32-Bit Embedded Systems2 people · 2 mentions · first linked 2026-08-25
What Hacker News says?
Surprisingly, the article doesn't seem to mention SquashFS[1] or EROFS[2]. Both SquashFS and EROFS are filesystem specifically designed for this kind of embedded, read-only use case. The former is optimized for high data density and compression, and already well established. The later is comparatively new and optimized for high read speed.[3] SquashFS as a rootfs can already be found in many embedded applications us…
Comment linking /blog/2022/07/squashfs-erofs/
on “Running a Raspberry Pi with a read-only root filesystem”Submitted Let's Embed a Go Program into the Linux Kernel (2023) as a story · 132 points
HN discussionThe kernel has API in place to run code in userspace from within a kernel module ("usermode driver"). That would in theory be one way something complex in the kernel could be isolated. The obvious downside being the additional context switches and round trips for the data adding latency. Here's a blog post that demonstrates embedding an entire Go program as a blob into a kernel module and running it in userspace fro…
Comment linking /blog/2023/07/embedded-go-prog/
on “Giving Rust a chance for in-kernel codecs”Submitted Hunting Down a Go Runtime Bug on 32-Bit Embedded Systems as a story · 118 points
HN discussionI guess very few around here remember the minor fuzz about this from a few years ago? The Linux Kernel Project became their own CNA (CVE Numbering Authority). A CVE is now slapped onto practically every bug fix that is back ported to a stable kernel, resulting in a flood of CVEs. A blog post about this, published at the time: https://sigma-star.at/blog/2024/03/linux-kernel-cna/ The title is editorialized (i.e. the O…
Comment linking /blog/2024/03/linux-kernel-cna/
on “Over 400 Linux CVEs published in the last 24 hours alone”Submitted Deep Down the Rabbit Hole: Bash, OverlayFS, and a 30-Year-Old Surprise as a story · 86 points
HN discussionReading the source unearths interesting things: https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/
Comment linking /blog/2025/12/unix-v4-buffer-overflow/
on “4th Edition Unix in the Browser”Submitted A Time Consuming Pitfall for 32-Bit Applications on AArch64 as a story · 61 points
HN discussionhttps://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/ fixes a su bug
Comment linking /blog/2025/12/unix-v4-buffer-overflow/
on “Unix v4 tape dumped and booted”Submitted Pseudo Graceful Process Termination Through Code Injection as a story · 51 points
HN discussionSubmitted Linux Process Priorities Demystified as a story · 7 points
HN discussionSubmitted The Evolving Landscape of Yocto Project Setup: Bitbake-Setup vs. KAS as a story · 6 points
HN discussionSubmitted Investigating Paranormal Shell Activities as a story · 6 points
HN discussionSubmitted Hunting Down a Go Runtime Bug on 32-Bit Embedded Systems as a story · 5 points
HN discussionSubmitted New vulnerabilities in Barebox and U-Boot boot loaders, verified boot at risk as a story · 5 points
HN discussionSubmitted Linux Process Priorities Demystified as a story · 5 points
HN discussionSubmitted Integrity on Embedded Linux Devices Under the Cyber Resilience Act as a story · 4 points
HN discussionSubmitted Let's Embed a Go Program into the Linux Kernel as a story · 4 points
HN discussionSubmitted Let's Embed a Go Program into the Linux Kernel as a story · 4 points
HN discussionSubmitted Thoughts on Linux CNA's Approach and the Resulting CVE Flood as a story · 4 points
HN discussionSubmitted Analyzing Packet Drops Without Tooling: Or Ftrace the Pure Way as a story · 4 points
HN discussionSubmitted Investigating Paranormal Shell Activities as a story · 4 points
HN discussionSubmitted TPM on Embedded Systems: Pitfalls and Caveats to Watch Out For as a story · 3 points
HN discussionSubmitted Fixing a Buffer Overflow in Unix v4 Like It's 1973 as a story · 3 points
HN discussionSubmitted Restricting network access using Linux Network Namespaces as a story · 3 points
HN discussionSubmitted Investigating Paranormal Shell Activities as a story · 3 points
HN discussionSubmitted Linux: A Time Consuming Pitfall for 32-Bit Applicaions on AArch64 as a story · 3 points
HN discussionSubmitted Analyzing Packet Drops Without Tooling: Or Ftrace the Pure Way as a story · 3 points
HN discussionSubmitted Yocto vs. Debian for building embedded Linux systems as a story · 2 points
HN discussionSubmitted You probably don't need Yocto, and that's fine as a story · 2 points
HN discussion