process-isolation

2 articles
sort: new top best
clear filter
bug-bounty529 xss292 rce162 google143 account-takeover122 bragging-post118 facebook107 exploit105 privilege-escalation102 microsoft95 authentication-bypass94 open-source94 malware92 csrf88 cve76 stored-xss75 access-control75 ai-agents66 web-security65 reflected-xss63 phishing60 writeup57 input-validation52 sql-injection52 information-disclosure51 ssrf51 cross-site-scripting49 reverse-engineering49 smart-contract49 api-security48 defi48 apple47 tool47 privacy47 ethereum45 vulnerability-disclosure42 web-application40 ai-security39 opinion38 responsible-disclosure37 llm37 burp-suite37 browser37 web337 automation36 race-condition36 remote-code-execution35 lfi34 dos34 credential-theft34
0 2/10
Design Tip: Enforcing Constraints Leads to Simpler, More Powerful Systems
design-pattern

This article presents Emergent, an event-driven workflow engine that enforces architectural constraints by restricting components to three distinct roles (Source, Handler, Sink) with compile-time type safety, resulting in simpler, more predictable systems where configuration becomes the executable specification and lifecycle ordering is automatically derived.

system-design architecture event-driven-systems constraints rust workflow-engine type-safety process-isolation
Emergent Rust
rodriguez.today · birdculture · 2 days ago · details · hn
0 7/10
FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing
research

Comprehensive technical comparison of FreeBSD's Capsicum and Linux's seccomp-bpf sandboxing models, analyzing their opposite architectural philosophies (capability subtraction vs. syscall filtration) and demonstrating why Capsicum's structural approach is immune to bypass vulnerabilities like CVE-2022-30594 that affect filter-based systems.

sandboxing capsicum seccomp freebsd linux process-isolation capability-based-security syscall-filtering privilege-restriction ambient-authority tcpdump architectural-comparison cve-2022-30594
FreeBSD Linux Capsicum seccomp seccomp-bpf Robert Watson Jonathan Anderson Andrea Arcangeli Will Drewry CVE-2022-30594 USENIX Security tcpdump BPF PTRACE_SEIZE
vivianvoss.net · vermaden · 5 days ago · details · hn