I’m a Software Security Engineer at Block Inc., specializing in cloud-native security pipelines and application security.
Previously at Meta and Praetorian, I focused on building secure systems and contributing to the security community through research and open-source projects.
Tags
Latest Posts
# Breaking Isolation Boundaries: VM Escapes, Container Breakouts, and Sandbox Escapes
A deep technical analysis of 2025's most dangerous attack pattern — isolation boundary escapes. From vsock VM escapes to UNIX socket sandbox bypasses, understanding how attackers break out of…
# Seccomp-BPF: Confining Linux Processes at the Syscall Boundary
A deep dive into Linux seccomp-BPF — building syscall sandboxes from raw BPF filters to production-grade policies, with practical C examples and analysis of how Chrome, Docker, and systemd use…
# eBPF for Security Monitoring: Kernel-Level Visibility Without the Overhead
A deep dive into using eBPF to build high-performance, kernel-level security monitoring tools — covering syscall tracing, network inspection, and intrusion detection with practical Python examples.