{ "version": "https://jsonfeed.org/version/1.1", "title": "zyekh.com \u2014 Technical Articles & Security Insights", "home_page_url": "https://zyekh.com/blog/", "feed_url": "https://zyekh.com/feed.json", "description": "Technical articles, Linux kernel news, system hardening guides, and cybersecurity research by Zyekh Abdul Qadir Jailani.", "icon": "https://zyekh.com/assets/icons/apple-icon-180x180.png", "favicon": "https://zyekh.com/assets/icons/favicon-32x32.png", "authors": [ { "name": "Zyekh Abdul Qadir Jailani", "url": "https://zyekh.com/", "avatar": "https://zyekh.com/assets/img/profile.jpg" } ], "items": [ { "id": "https://zyekh.com/blog/account-abstraction-erc-4337-and-paymasters-architecture.html", "url": "https://zyekh.com/blog/account-abstraction-erc-4337-and-paymasters-architecture.html", "title": "Account Abstraction (ERC-4337): Smart Accounts, Bundlers & Paymaster Engineering", "summary": "Deep dive into UserOperation mempools, Alt-Mempool consensus, gas sponsorship via Paymasters, and WebAuthn/passkey hardware signing for smart wallets.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Web3 Architecture", "EVM Engineering" ], "image": "https://zyekh.com/assets/img/social-cards/account-abstraction-erc-4337-and-paymasters-architecture-dark-landscape.png" }, { "id": "https://zyekh.com/blog/auditd-kernel-event-monitoring-and-dfir-logging.html", "url": "https://zyekh.com/blog/auditd-kernel-event-monitoring-and-dfir-logging.html", "title": "Linux Auditd Blueprint: Real-Time Kernel Event Tracking & Security Auditing", "summary": "Security guide for configuring Linux Audit Framework (auditd) to log execve system calls, file integrity changes, and privilege escalation events.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "Cyber Security", "Auditd DFIR" ], "image": "https://zyekh.com/assets/img/social-cards/auditd-kernel-event-monitoring-and-dfir-logging-dark-landscape.png" }, { "id": "https://zyekh.com/blog/chroot-jail-and-unprivileged-namespaces-isolation.html", "url": "https://zyekh.com/blog/chroot-jail-and-unprivileged-namespaces-isolation.html", "title": "Process Isolation on Linux: Unprivileged User Namespaces & Chroot Jails", "summary": "Technical blueprint for configuring unprivileged user namespaces and chroot jails to sandbox untrusted services without full container runtimes.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "System Hardening", "Process Isolation" ], "image": "https://zyekh.com/assets/img/social-cards/chroot-jail-and-unprivileged-namespaces-isolation-dark-landscape.png" }, { "id": "https://zyekh.com/blog/cilium-ebpf-cloud-native-network-security-and-cilium-tetragon.html", "url": "https://zyekh.com/blog/cilium-ebpf-cloud-native-network-security-and-cilium-tetragon.html", "title": "Cilium eBPF & Tetragon: Cloud-Native Runtime Security & Network Enforcement", "summary": "Deep-dive guide on deploying Cilium eBPF for zero-trust network policy enforcement and Tetragon for real-time kernel event monitoring in Kubernetes.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Cloud Security", "Kubernetes & eBPF" ], "image": "https://zyekh.com/assets/img/social-cards/cilium-ebpf-cloud-native-network-security-and-cilium-tetragon-dark-landscape.png" }, { "id": "https://zyekh.com/blog/colbert-late-interaction-advanced-rag.html", "url": "https://zyekh.com/blog/colbert-late-interaction-advanced-rag.html", "title": "ColBERT Late Interaction: Advancing RAG Beyond Dense Embeddings", "summary": "How late interaction retrieval models solve the lost-in-the-middle problem and dramatically improve Retrieval-Augmented Generation precision over standard single-vector embeddings.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "RAG" ], "image": "https://zyekh.com/assets/img/social-cards/colbert-late-interaction-advanced-rag-dark-landscape.png" }, { "id": "https://zyekh.com/blog/container-image-signing-and-slsa-provenance-with-cosign.html", "url": "https://zyekh.com/blog/container-image-signing-and-slsa-provenance-with-cosign.html", "title": "Container Image Signing & SLSA Provenance Verification with Sigstore Cosign", "summary": "Supply chain security guide on signing OCI container images keylessly and verifying SLSA build provenance using Sigstore Cosign and Rekor.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Supply Chain Security", "DevOps" ], "image": "https://zyekh.com/assets/img/social-cards/container-image-signing-and-slsa-provenance-with-cosign-dark-landscape.png" }, { "id": "https://zyekh.com/blog/cross-chain-bridges-and-light-client-cryptographic-verification.html", "url": "https://zyekh.com/blog/cross-chain-bridges-and-light-client-cryptographic-verification.html", "title": "Cross-Chain Bridges & Light Client Verification: Cryptographic State Proofs", "summary": "Technical architecture of trustless cross-chain interoperability, Merkle Mountain Ranges (MMR), Tendermint/IBC light clients, and validity proof relays.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Web3 Infrastructure", "Distributed Systems" ], "image": "https://zyekh.com/assets/img/social-cards/cross-chain-bridges-and-light-client-cryptographic-verification-dark-landscape.png" }, { "id": "https://zyekh.com/blog/database-internals-lsm-trees-vs-b-trees-storage-engines.html", "url": "https://zyekh.com/blog/database-internals-lsm-trees-vs-b-trees-storage-engines.html", "title": "Database Storage Engine Internals: LSM-Trees vs B+ Trees Read/Write Amplification", "summary": "Comparative analysis of RocksDB, Pebble, and PostgreSQL storage architectures: MemTables, Write-Ahead Logs (WAL), SSTables, Compaction algorithms, and I/O bottlenecks.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Database Internals", "Storage Engineering" ], "image": "https://zyekh.com/assets/img/social-cards/database-internals-lsm-trees-vs-b-trees-storage-engines-dark-landscape.png" }, { "id": "https://zyekh.com/blog/defi-amm-mathematics-and-concentrated-liquidity-mechanics.html", "url": "https://zyekh.com/blog/defi-amm-mathematics-and-concentrated-liquidity-mechanics.html", "title": "DeFi AMM Mathematics & Concentrated Liquidity: Invariant Curves & Tick Spacing", "summary": "Mathematical derivation of Constant Product (x * y = k), concentrated liquidity virtual reserves, tick math, and dynamic swap fee routing in Uniswap v3/v4.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "DeFi Engineering", "Quantitative Finance" ], "image": "https://zyekh.com/assets/img/social-cards/defi-amm-mathematics-and-concentrated-liquidity-mechanics-dark-landscape.png" }, { "id": "https://zyekh.com/blog/distributed-consensus-raft-vs-paxos-and-leaderless-quorums.html", "url": "https://zyekh.com/blog/distributed-consensus-raft-vs-paxos-and-leaderless-quorums.html", "title": "Distributed Consensus Deep-Dive: Raft, Multi-Paxos & Leaderless Quorum Systems", "summary": "Formal breakdown of leader election, log replication, split-brain mitigation, quorum intersections (R + W > N), and Byzantine Fault Tolerance in distributed databases.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Distributed Systems", "Consensus Protocols" ], "image": "https://zyekh.com/assets/img/social-cards/distributed-consensus-raft-vs-paxos-and-leaderless-quorums-dark-landscape.png" }, { "id": "https://zyekh.com/blog/dspy-declarative-prompting-optimization.html", "url": "https://zyekh.com/blog/dspy-declarative-prompting-optimization.html", "title": "DSPy: Replacing Prompt Engineering with Declarative Optimization Compilers", "summary": "Why manual prompt tweaking is obsolete. Learn how to compile and optimize LM pipelines using DSPy declarative modules and metric-driven teleprompter algorithms.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Prompting" ], "image": "https://zyekh.com/assets/img/social-cards/dspy-declarative-prompting-optimization-dark-landscape.png" }, { "id": "https://zyekh.com/blog/ebpf-xdp-packet-filtering-and-ddos-mitigation.html", "url": "https://zyekh.com/blog/ebpf-xdp-packet-filtering-and-ddos-mitigation.html", "title": "High-Speed eBPF/XDP Packet Filtering for Linux Server DDoS Mitigation", "summary": "Technical guide for writing eBPF eXpress Data Path (XDP) kernel programs to drop malicious DDoS traffic at the network driver level.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "Linux Kernel", "XDP DDoS Defense" ], "image": "https://zyekh.com/assets/img/social-cards/ebpf-xdp-packet-filtering-and-ddos-mitigation-dark-landscape.png" }, { "id": "https://zyekh.com/blog/fail2ban-intrusion-prevention-and-ssh-abuse-mitigation.html", "url": "https://zyekh.com/blog/fail2ban-intrusion-prevention-and-ssh-abuse-mitigation.html", "title": "Automated Intrusion Prevention: Fail2ban Configuration for SSH & Nginx Protection", "summary": "Comprehensive blueprint for deploying Fail2ban to detect brute-force attacks, automate IP bans via iptables/nftables, and configure recidive long-term bans.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "Cyber Security", "Fail2ban Defense" ], "image": "https://zyekh.com/assets/img/social-cards/fail2ban-intrusion-prevention-and-ssh-abuse-mitigation-dark-landscape.png" }, { "id": "https://zyekh.com/blog/http3-quic-security-hardening-and-0rtt-mitigation-blueprint.html", "url": "https://zyekh.com/blog/http3-quic-security-hardening-and-0rtt-mitigation-blueprint.html", "title": "HTTP/3 & QUIC Protocol Security Hardening: Mitigating 0-RTT Replay Attacks", "summary": "Production blueprint for hardening HTTP/3 and QUIC transport protocols, mitigating 0-RTT replay vectors, and configuring UDP rate limiting.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Web Security", "Network Protocols" ], "image": "https://zyekh.com/assets/img/social-cards/http3-quic-security-hardening-and-0rtt-mitigation-blueprint-dark-landscape.png" }, { "id": "https://zyekh.com/blog/kubernetes-pod-security-standards-pss-and-admission-control.html", "url": "https://zyekh.com/blog/kubernetes-pod-security-standards-pss-and-admission-control.html", "title": "Kubernetes Pod Security Standards (PSS) & Native Admission Control", "summary": "Production guide on enforcing Privileged, Baseline, and Restricted Pod Security Standards (PSS) using native Kubernetes admission controllers.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Cloud Security", "Kubernetes" ], "image": "https://zyekh.com/assets/img/social-cards/kubernetes-pod-security-standards-pss-and-admission-control-dark-landscape.png" }, { "id": "https://zyekh.com/blog/kv-cache-int4-quantization-long-context.html", "url": "https://zyekh.com/blog/kv-cache-int4-quantization-long-context.html", "title": "KV Cache INT4 Quantization for 1M+ Token Context Windows", "summary": "Squeezing massive context windows into consumer GPUs by quantizing the Key-Value cache down to 4-bit precision without losing retrieval accuracy.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Quantization" ], "image": "https://zyekh.com/assets/img/social-cards/kv-cache-int4-quantization-long-context-dark-landscape.png" }, { "id": "https://zyekh.com/blog/linux-audit-logging-with-vector-and-clickhouse-dfir.html", "url": "https://zyekh.com/blog/linux-audit-logging-with-vector-and-clickhouse-dfir.html", "title": "High-Throughput Linux Audit Logging with Vector & ClickHouse DFIR Pipeline", "summary": "Architecture guide on building a high-throughput Linux kernel audit logging pipeline using Vector log forwarder and ClickHouse for real-time DFIR forensics.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Security Monitoring", "DFIR" ], "image": "https://zyekh.com/assets/img/social-cards/linux-audit-logging-with-vector-and-clickhouse-dfir-dark-landscape.png" }, { "id": "https://zyekh.com/blog/linux-kernel-sysctl-hardening-network-stack-security.html", "url": "https://zyekh.com/blog/linux-kernel-sysctl-hardening-network-stack-security.html", "title": "Linux Kernel Sysctl Hardening: Securing TCP/IP Network Stack against SYN Floods", "summary": "Hardening guide for tuning Linux kernel sysctl parameters to defend against TCP SYN floods, IP spoofing, packet redirects, and memory exhaustion.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "Linux Kernel", "Sysctl Hardening" ], "image": "https://zyekh.com/assets/img/social-cards/linux-kernel-sysctl-hardening-network-stack-security-dark-landscape.png" }, { "id": "https://zyekh.com/blog/linux-landlock-lsm-unprivileged-sandboxing-blueprint.html", "url": "https://zyekh.com/blog/linux-landlock-lsm-unprivileged-sandboxing-blueprint.html", "title": "Linux Landlock LSM: Unprivileged Application Sandboxing & Access Control", "summary": "Engineering guide on using the Landlock Linux Security Module to enforce unprivileged file system and network access control restrictions.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Linux Security", "Access Control" ], "image": "https://zyekh.com/assets/img/social-cards/linux-landlock-lsm-unprivileged-sandboxing-blueprint-dark-landscape.png" }, { "id": "https://zyekh.com/blog/linux-seccomp-bpf-syscall-filtering-hardening-guide.html", "url": "https://zyekh.com/blog/linux-seccomp-bpf-syscall-filtering-hardening-guide.html", "title": "Linux Seccomp-BPF Syscall Filtering: Restricting Process Attack Surfaces", "summary": "Step-by-step engineering blueprint for implementing Seccomp-BPF syscall filters to restrict Linux process capabilities and block zero-day kernel exploits.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Linux Security", "Process Isolation" ], "image": "https://zyekh.com/assets/img/social-cards/linux-seccomp-bpf-syscall-filtering-hardening-guide-dark-landscape.png" }, { "id": "https://zyekh.com/blog/linux-vps-hardening-guide-2026.html", "url": "https://zyekh.com/blog/linux-vps-hardening-guide-2026.html", "title": "Comprehensive Linux VPS Hardening Blueprint for 2026", "summary": "Production-grade security blueprint for Debian and Ubuntu Linux servers. Includes SSH key enforcement, kernel sysctl parameters, UFW rate-limiting, Fail2Ban auditing, and automated updates.", "date_published": "2026-07-26T00:00:00Z", "date_modified": "2026-07-26T00:00:00Z", "tags": [ "System Hardening", "Linux VPS" ], "image": "https://zyekh.com/assets/img/social-cards/linux-vps-hardening-guide-2026-dark-landscape.png" }, { "id": "https://zyekh.com/blog/mev-and-private-mempool-architecture-in-ethereum.html", "url": "https://zyekh.com/blog/mev-and-private-mempool-architecture-in-ethereum.html", "title": "MEV & Private Mempool Architecture: Flashbots, Searchers & Order Flow Defense", "summary": "Technical analysis of Maximal Extractable Value (MEV), block builder auctions, sandwich attack mitigation, and MEV-Boost private RPC relay pipelines.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "DeFi Infrastructure", "Cryptoeconomics" ], "image": "https://zyekh.com/assets/img/social-cards/mev-and-private-mempool-architecture-in-ethereum-dark-landscape.png" }, { "id": "https://zyekh.com/blog/minimalist-server-architecture-pure-css-and-static-hosting.html", "url": "https://zyekh.com/blog/minimalist-server-architecture-pure-css-and-static-hosting.html", "title": "Why Minimalist Static Hosting Outperforms Monolithic Frameworks for Security", "summary": "Architectural analysis comparing static edge hosting to monolithic server frameworks. Examines attack surface reduction, TTFB performance benchmarks, zero server maintenance, and pure CSS design systems.", "date_published": "2026-07-10T00:00:00Z", "date_modified": "2026-07-10T00:00:00Z", "tags": [ "Web Performance", "Static Architecture" ], "image": "https://zyekh.com/assets/img/social-cards/minimalist-server-architecture-pure-css-and-static-hosting-dark-landscape.png" }, { "id": "https://zyekh.com/blog/moe-serving-mixture-of-experts-routing.html", "url": "https://zyekh.com/blog/moe-serving-mixture-of-experts-routing.html", "title": "Serving Mixture of Experts (MoE): Memory-Efficient Inference Routing", "summary": "Deep dive into the gating router mechanisms of Mixtral 8x7B and DeepSeek-V2, expert parallelism strategies, and VRAM memory offloading patterns across multi-GPU setups.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Architecture" ], "image": "https://zyekh.com/assets/img/social-cards/moe-serving-mixture-of-experts-routing-dark-landscape.png" }, { "id": "https://zyekh.com/blog/multi-agent-swarm-orchestration-patterns.html", "url": "https://zyekh.com/blog/multi-agent-swarm-orchestration-patterns.html", "title": "Multi-Agent Swarm Orchestration: Hierarchical Agentic Workflows", "summary": "Designing recursive agent loops, tool-calling pipelines, state graph transitions, and autonomous swarm routing for complex software engineering automation.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Agents" ], "image": "https://zyekh.com/assets/img/social-cards/multi-agent-swarm-orchestration-patterns-dark-landscape.png" }, { "id": "https://zyekh.com/blog/nginx-reverse-proxy-security-hardening-blueprint-2026.html", "url": "https://zyekh.com/blog/nginx-reverse-proxy-security-hardening-blueprint-2026.html", "title": "Nginx Reverse Proxy Security Hardening Blueprint for 2026", "summary": "Production guide for hardening Nginx reverse proxies with TLS 1.3, rate limiting, buffer overflow defense, and security headers.", "date_published": "2026-08-03T00:00:00Z", "date_modified": "2026-08-03T00:00:00Z", "tags": [ "Web Security", "Nginx Hardening" ], "image": "https://zyekh.com/assets/img/social-cards/nginx-reverse-proxy-security-hardening-blueprint-2026-dark-landscape.png" }, { "id": "https://zyekh.com/blog/omnirouter-llm-gateway-routing-fallback-patterns.html", "url": "https://zyekh.com/blog/omnirouter-llm-gateway-routing-fallback-patterns.html", "title": "OmniRouter Architecture: Resilient LLM Gateway Routing & Fallback Pipelines", "summary": "Advanced API routing techniques for multi-LLM architectures, mitigating rate limits, and ensuring speculative decoding fallbacks across OpenAI, Anthropic, and open-source nodes.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Architecture" ], "image": "https://zyekh.com/assets/img/social-cards/omnirouter-llm-gateway-routing-fallback-patterns-dark-landscape.png" }, { "id": "https://zyekh.com/blog/pam-tally2-faillock-account-lockout-policy-guide.html", "url": "https://zyekh.com/blog/pam-tally2-faillock-account-lockout-policy-guide.html", "title": "Enforcing Linux Account Lockout Policies with PAM Faillock against Brute Force", "summary": "Enforcing Linux Account Lockout Policies with PAM Faillock against Brute Force", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "System Hardening", "PAM Security" ], "image": "https://zyekh.com/assets/img/social-cards/pam-tally2-faillock-account-lockout-policy-guide-dark-landscape.png" }, { "id": "https://zyekh.com/blog/post-quantum-cryptography-mldsa-and-mlkem-migration.html", "url": "https://zyekh.com/blog/post-quantum-cryptography-mldsa-and-mlkem-migration.html", "title": "Post-Quantum Cryptography: ML-KEM & ML-DSA Migration for TLS and Infrastructure", "summary": "Practical engineering guide for deploying NIST-standardized lattice-based algorithms (FIPS 203/204), hybrid TLS handshakes, and quantum-resistant key exchange.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Applied Cryptography", "Quantum Security" ], "image": "https://zyekh.com/assets/img/social-cards/post-quantum-cryptography-mldsa-and-mlkem-migration-dark-landscape.png" }, { "id": "https://zyekh.com/blog/rust-in-linux-kernel-security-and-memory-safety-blueprint-2026.html", "url": "https://zyekh.com/blog/rust-in-linux-kernel-security-and-memory-safety-blueprint-2026.html", "title": "Rust in the Linux Kernel: Securing Core Subsystems & Memory Safety", "summary": "Comprehensive engineering guide on how Rust eliminates spatial and temporal memory vulnerabilities in modern Linux kernel drivers and network modules.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Linux Security", "Kernel Architecture" ], "image": "https://zyekh.com/assets/img/social-cards/rust-in-linux-kernel-security-and-memory-safety-blueprint-2026-dark-landscape.png" }, { "id": "https://zyekh.com/blog/securing-web-applications-with-strict-content-security-policy.html", "url": "https://zyekh.com/blog/securing-web-applications-with-strict-content-security-policy.html", "title": "Implementing Strict Content Security Policy (CSP) & Security Headers", "summary": "Comprehensive technical guide for configuring strict Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Content-Type-Options, and Nginx security headers.", "date_published": "2026-07-15T00:00:00Z", "date_modified": "2026-07-15T00:00:00Z", "tags": [ "Web Security", "CSP Hardening" ], "image": "https://zyekh.com/assets/img/social-cards/securing-web-applications-with-strict-content-security-policy-dark-landscape.png" }, { "id": "https://zyekh.com/blog/slora-adapter-multiplexing-single-gpu.html", "url": "https://zyekh.com/blog/slora-adapter-multiplexing-single-gpu.html", "title": "S-LoRA: Multiplexing Thousands of Fine-Tuned Adapters on a Single GPU", "summary": "How Unified Paging and scalable LoRA adapter serving allows cloud platforms to host 10,000+ custom fine-tuned models concurrently on a single GPU without OOM errors.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Performance" ], "image": "https://zyekh.com/assets/img/social-cards/slora-adapter-multiplexing-single-gpu-dark-landscape.png" }, { "id": "https://zyekh.com/blog/smart-contract-security-and-evm-bytecode-hardening.html", "url": "https://zyekh.com/blog/smart-contract-security-and-evm-bytecode-hardening.html", "title": "Smart Contract Security & EVM Bytecode Hardening: Formal Verification & Exploit Defense", "summary": "Comprehensive vulnerability mitigation blueprint covering Read-Only Reentrancy, Storage Slot Collision, and Halmos/Slither formal verification in Solidity.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Web3 Security", "EVM Architecture" ], "image": "https://zyekh.com/assets/img/social-cards/smart-contract-security-and-evm-bytecode-hardening-dark-landscape.png" }, { "id": "https://zyekh.com/blog/speculative-decoding-and-medusa-multi-token-llm-serving.html", "url": "https://zyekh.com/blog/speculative-decoding-and-medusa-multi-token-llm-serving.html", "title": "Speculative Decoding & Medusa Architecture: Multi-Token Parallel LLM Acceleration", "summary": "Speeding up autoregressive LLM inference by 2-3x using draft verification trees, parallel speculative heads, and tree-attention masking kernels.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "AI Systems", "High-Throughput Inference" ], "image": "https://zyekh.com/assets/img/social-cards/speculative-decoding-and-medusa-multi-token-llm-serving-dark-landscape.png" }, { "id": "https://zyekh.com/blog/ssh-certificates-vault-ca-short-lived-authentication.html", "url": "https://zyekh.com/blog/ssh-certificates-vault-ca-short-lived-authentication.html", "title": "Short-Lived SSH Certificate Authentication with HashiCorp Vault CA", "summary": "Zero-trust SSH architecture blueprint for eliminating static SSH public keys using HashiCorp Vault Certificate Authority and short-lived certificates.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Infrastructure Security", "SSH" ], "image": "https://zyekh.com/assets/img/social-cards/ssh-certificates-vault-ca-short-lived-authentication-dark-landscape.png" }, { "id": "https://zyekh.com/blog/structured-output-generation-logits-constraints.html", "url": "https://zyekh.com/blog/structured-output-generation-logits-constraints.html", "title": "Structured Output Generation: Enforcing JSON & Regex at the Logits Level", "summary": "Bypassing brittle prompt engineering by directly manipulating LLM token logits to mathematically guarantee valid JSON schema outputs without retry loops.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Logits" ], "image": "https://zyekh.com/assets/img/social-cards/structured-output-generation-logits-constraints-dark-landscape.png" }, { "id": "https://zyekh.com/blog/systemd-service-sandboxing-and-security-hardening.html", "url": "https://zyekh.com/blog/systemd-service-sandboxing-and-security-hardening.html", "title": "Systemd Service Sandboxing: Restricting Process Capability & System Calls", "summary": "Production guide for sandboxing Linux daemons using systemd security directives like ProtectSystem, SystemCallFilter, and CapabilityBoundingSet.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "System Hardening", "Systemd Security" ], "image": "https://zyekh.com/assets/img/social-cards/systemd-service-sandboxing-and-security-hardening-dark-landscape.png" }, { "id": "https://zyekh.com/blog/ufw-firewall-hardening-and-rate-limiting-blueprint-2026.html", "url": "https://zyekh.com/blog/ufw-firewall-hardening-and-rate-limiting-blueprint-2026.html", "title": "UFW Firewall Hardening: Advanced Rate Limiting & Default-Deny Security Blueprint", "summary": "Production guide for securing Linux servers using UFW with default-deny policies, custom application profiles, rate limiting, and interface isolation.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "System Hardening", "UFW Firewall" ], "image": "https://zyekh.com/assets/img/social-cards/ufw-firewall-hardening-and-rate-limiting-blueprint-2026-dark-landscape.png" }, { "id": "https://zyekh.com/blog/understanding-linux-ebpf-security-monitoring.html", "url": "https://zyekh.com/blog/understanding-linux-ebpf-security-monitoring.html", "title": "Understanding eBPF for Real-Time Linux Security Monitoring", "summary": "Technical deep-dive on Extended Berkeley Packet Filter (eBPF) tracing, kprobes, tracepoints, bpftrace, and zero-overhead kernel runtime security monitoring.", "date_published": "2026-07-20T00:00:00Z", "date_modified": "2026-07-20T00:00:00Z", "tags": [ "Linux Kernel", "eBPF Monitoring" ], "image": "https://zyekh.com/assets/img/social-cards/understanding-linux-ebpf-security-monitoring-dark-landscape.png" }, { "id": "https://zyekh.com/blog/vllm-pagedattention-high-throughput-inference-tuning.html", "url": "https://zyekh.com/blog/vllm-pagedattention-high-throughput-inference-tuning.html", "title": "vLLM PagedAttention: Memory Optimization & High-Throughput LLM Inference Tuning", "summary": "Deep dive into OS-inspired virtual memory management for LLM KV caches, maximizing GPU utilization, and achieving 20x throughput scaling for production inference.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "Performance" ], "image": "https://zyekh.com/assets/img/social-cards/vllm-pagedattention-high-throughput-inference-tuning-dark-landscape.png" }, { "id": "https://zyekh.com/blog/webgpu-llm-inference-browser-sandbox.html", "url": "https://zyekh.com/blog/webgpu-llm-inference-browser-sandbox.html", "title": "WebGPU LLM Inference: Running 7B Models Natively in the Browser", "summary": "Leveraging WebGPU compute shaders, TVM WebAssembly, and WGSL pipelines to run private local LLMs entirely within client-side browser sandboxes without server infrastructure.", "date_published": "2026-08-09T00:00:00Z", "date_modified": "2026-08-09T00:00:00Z", "tags": [ "AI Engineering", "WebGPU" ], "image": "https://zyekh.com/assets/img/social-cards/webgpu-llm-inference-browser-sandbox-dark-landscape.png" }, { "id": "https://zyekh.com/blog/wireguard-vpn-tunneling-for-secure-vps-mesh-networks.html", "url": "https://zyekh.com/blog/wireguard-vpn-tunneling-for-secure-vps-mesh-networks.html", "title": "Securing VPS Infrastructure with WireGuard Mesh VPN Tunnels & Strict Firewall Rules", "summary": "Step-by-step technical blueprint for creating encrypted private mesh networks between multi-cloud VPS nodes using WireGuard and UDP noise protocols.", "date_published": "2026-08-04T00:00:00Z", "date_modified": "2026-08-04T00:00:00Z", "tags": [ "Web Security", "WireGuard Mesh" ], "image": "https://zyekh.com/assets/img/social-cards/wireguard-vpn-tunneling-for-secure-vps-mesh-networks-dark-landscape.png" }, { "id": "https://zyekh.com/blog/zero-knowledge-proofs-snarks-vs-starks-in-l2-rollups.html", "url": "https://zyekh.com/blog/zero-knowledge-proofs-snarks-vs-starks-in-l2-rollups.html", "title": "Zero-Knowledge Proofs in L2 Rollups: zk-SNARKs vs zk-STARKs Mathematical Architecture", "summary": "In-depth comparative analysis of algebraic polynomial commitments, prover compute overhead, recursive circuits, and on-chain verification gas limits in zkEVMs.", "date_published": "2026-08-18T00:00:00Z", "date_modified": "2026-08-18T00:00:00Z", "tags": [ "Cryptography", "Zero-Knowledge" ], "image": "https://zyekh.com/assets/img/social-cards/zero-knowledge-proofs-snarks-vs-starks-in-l2-rollups-dark-landscape.png" }, { "id": "https://zyekh.com/blog/zero-trust-microservices-with-wasm-runtime-sandboxing.html", "url": "https://zyekh.com/blog/zero-trust-microservices-with-wasm-runtime-sandboxing.html", "title": "Zero-Trust Microservices with WebAssembly (Wasm) Runtime Sandboxing", "summary": "Architecture blueprint for running untrusted microservice code inside WebAssembly sandboxes with nanosecond startup times and linear memory bounds.", "date_published": "2026-08-05T00:00:00Z", "date_modified": "2026-08-05T00:00:00Z", "tags": [ "Cloud Security", "WebAssembly" ], "image": "https://zyekh.com/assets/img/social-cards/zero-trust-microservices-with-wasm-runtime-sandboxing-dark-landscape.png" }, { "id": "https://zyekh.com/blog/zero-trust-ssh-access-with-fido2-and-ssh-ca.html", "url": "https://zyekh.com/blog/zero-trust-ssh-access-with-fido2-and-ssh-ca.html", "title": "Zero-Trust SSH Access Blueprint: FIDO2 Hardware Keys & SSH Certificate Authority", "summary": "Comprehensive technical blueprint for securing Linux SSH infrastructure using FIDO2/YubiKey hardware tokens, SSH Certificate Authority (SSH CA), and short-lived certificates.", "date_published": "2026-08-03T00:00:00Z", "date_modified": "2026-08-03T00:00:00Z", "tags": [ "Cyber Security", "Zero Trust SSH" ], "image": "https://zyekh.com/assets/img/social-cards/zero-trust-ssh-access-with-fido2-and-ssh-ca-dark-landscape.png" } ] }