ABOUT THIS SITE

HackingNote is an engineering notebook and technical reference dedicated to systems software, with a primary focus on Linux internals and AI sandboxes.

As autonomous AI agents and code-generation models become integral to modern software, running untrusted, model-generated code safely at scale demands deep control over operating system boundaries and isolation primitives. This site documents the architecture, mechanics, and practical patterns needed to build secure, low-latency execution environments:

• Linux Internals: Kernel subsystems, memory management, namespaces, cgroups v2, seccomp filters, signal handling, process lifecycle, virtual file systems, and eBPF tracing.
• AI Sandboxes & Secure Execution: Multi-tenant isolation for untrusted code, user-space kernels (gVisor), microVMs (Firecracker, Cloud Hypervisor), container runtimes, network isolation, and resource quotas tailored for AI agent workflows.
• Cloud Native Infrastructure: Kubernetes architecture, OCI container specs, service meshes, and scalable platform engineering on public clouds (GCP/AWS).
• Systems Programming & Tooling: Practical notes and cheatsheets in Go, C++, Python, and systems utilities.

Systems software engineer with 10+ years of experience turning coffee into mysterious error messages.

I specialize in deleting lines of code to fix bugs I wrote last week and spending three hours automating a task that takes 30 seconds to do manually.