Deep dives into Linux internals, Kubernetes orchestration, AI/ML systems, distributed networking, and cybersecurity.https://tekromancy.com/enhttps://tekromancy.com/blog/the-irregular-breach-frontier-llm-exploits/https://tekromancy.com/blog/the-irregular-breach-frontier-llm-exploits/An investigative deep dive into Israeli AI red-team firm Irregular (formerly Pattern Labs), the testing-environment failures behind OpenAI, Google Gemini, Anthropic, and Meta real-world exploits, and whether frontier labs authorized these offensive cyber missions.Thu, 08 Oct 2026 00:00:00 GMTai-securityllmcybersecurityred-teaminggovernanceJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/unveiling-incantations/https://tekromancy.com/blog/unveiling-incantations/Announcing the open-source release of our Incantations repository—a grimoire bridging the 1994 Gang of Four design patterns, esoteric programming languages, and modern generative AI prompt structures.Thu, 08 Oct 2026 00:00:00 GMTopen-sourcedesign-patternssoftware-engineeringgenerative-aiarchitectureJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/announcing-sparetank-intelligent-battery-longevity-emergency-guard/https://tekromancy.com/blog/announcing-sparetank-intelligent-battery-longevity-emergency-guard/Introducing SpareTank—a sovereign Android utility engineered to eliminate electrochemical cycle degradation with 25%–75% charging alerts while preserving a dedicated 15% emergency reserve tank for critical field contingencies.Sun, 27 Sep 2026 00:00:00 GMTandroidappsbatteryhardwareprivacylongevityJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/ebpf-xdp-ddos-mitigation-line-rate-packet-filtering/https://tekromancy.com/blog/ebpf-xdp-ddos-mitigation-line-rate-packet-filtering/A battle-tested production guide to filtering volumetric DDoS attacks at 20+ Mpps using eBPF eXpress Data Path (XDP), kernel ring buffers, and hardware NIC offloading.Sun, 27 Sep 2026 00:00:00 GMTlinuxebpfnetworkingsecurityddosJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/gpudirect-storage-nvme-of-ai-clusters-bypassing-cpu-bottleneck/https://tekromancy.com/blog/gpudirect-storage-nvme-of-ai-clusters-bypassing-cpu-bottleneck/A deep dive into NVIDIA GPUDirect Storage (GDS) and NVMe over Fabrics: streaming massive multi-terabyte dataset shards directly into GPU HBM without CPU bounce buffers.Sun, 27 Sep 2026 00:00:00 GMTai-mlcudastoragehardwarelinuxJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/speculative-decoding-production-llm-inference-acceleration/https://tekromancy.com/blog/speculative-decoding-production-llm-inference-acceleration/How speculative decoding leverages small draft models and vectorized tree verification to double generation speed on vLLM and TensorRT-LLM without sacrificing a single bit of model precision.Sun, 27 Sep 2026 00:00:00 GMTai-mlvllmcudainferencellmJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/announcing-silent-mode-control-granular-android-call-screening/https://tekromancy.com/blog/announcing-silent-mode-control-granular-android-call-screening/Introducing Silent Mode Control (SMC)—a privacy-first Android application hooking into the native Telecom framework to deliver granular ringer, vibration, and mute schedules per contact with 100% on-device processing.Sat, 26 Sep 2026 00:00:00 GMTandroidappstelecomprivacysecurityJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/bare-metal-kubernetes-talos-cilium-rook-ceph/https://tekromancy.com/blog/bare-metal-kubernetes-talos-cilium-rook-ceph/A comprehensive production blueprint for running sovereign bare-metal Kubernetes clusters with immutable OS, eBPF BGP routing, and distributed NVMe block storage.Tue, 22 Sep 2026 00:00:00 GMTkubernetesdevopsstoragesecuritylinuxJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/bpftrace-linux-kernel-performance-cheatsheet/https://tekromancy.com/blog/bpftrace-linux-kernel-performance-cheatsheet/Battle-tested bpftrace recipes and one-liners for diagnosing CPU latency, block I/O bottlenecks, network drops, memory leaks, and process executions in production.Tue, 15 Sep 2026 00:00:00 GMTlinuxebpfkernelperformancesysadminJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/austin-cyber-alliance-meetup-crucible-of-hackers/https://tekromancy.com/blog/austin-cyber-alliance-meetup-crucible-of-hackers/Join the Austin Cyber Alliance tonight, Sep 8, 2026 (6:00-8:00 PM CDT) at Austin Community College Rio Grande Campus for an interactive 3D technical briefing on the history of CTF wargames, followed by intel on the upcoming Fall 2026 CTF.Tue, 08 Sep 2026 00:00:00 GMTsecurityctfaustin-txmeetupred-teamblue-teamJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/history-of-ctf-red-blue-teaming/https://tekromancy.com/blog/history-of-ctf-red-blue-teaming/From DEF CON 4's ethernet cables to modern adversary emulation: the evolution of Capture The Flag, offensive/defensive tradecraft, and the definitive guide to open-source CTF platforms.Fri, 04 Sep 2026 00:00:00 GMTsecurityctfred-teamblue-teamlinuxJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/linux-server-hardening-checklist/https://tekromancy.com/blog/linux-server-hardening-checklist/A comprehensive, battle-tested operational checklist for hardening production Linux servers against modern automated adversary campaigns.Thu, 03 Sep 2026 00:00:00 GMTsecuritylinuxsysadmindevsecopsJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/nastymap-nmap-network-topology-threat-visualization/https://tekromancy.com/blog/nastymap-nmap-network-topology-threat-visualization/Visualizing Nmap XML scans into interactive force-directed topologies, GeoIP ballistic threat maps, and automated security diffs with Tekromancy's NastyMap.Tue, 01 Sep 2026 00:00:00 GMTsecuritynetworkingtoolsnmapreactJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/wireguard-bgp-overlay-mesh/https://tekromancy.com/blog/wireguard-bgp-overlay-mesh/Designing an ultra-low-latency encrypted multi-region mesh network using Bird, WireGuard, and Linux network namespaces.Tue, 01 Sep 2026 00:00:00 GMTnetworkingwireguardlinuxsysadminJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/local-llm-inference-vllm-ollama/https://tekromancy.com/blog/local-llm-inference-vllm-ollama/Architecture and optimization techniques for deploying open-weight models locally with continuous batching, AWQ quantization, and GPU memory tuning.Fri, 28 Aug 2026 00:00:00 GMTai-mlllminfrastructurepythonJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/kubernetes-zero-trust-cilium/https://tekromancy.com/blog/kubernetes-zero-trust-cilium/Replacing legacy kube-proxy with Cilium eBPF for wire-speed packet filtering, Layer 7 network policies, and transparent mutual TLS.Mon, 24 Aug 2026 00:00:00 GMTkubernetessecuritynetworkingdevopsJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/ebpf-linux-tracing-deep-dive/https://tekromancy.com/blog/ebpf-linux-tracing-deep-dive/How extended Berkeley Packet Filter (eBPF) transforms observability, security, and networking directly in the Linux kernel without risky kernel modules.Thu, 20 Aug 2026 00:00:00 GMTlinuxkernelebpfperformanceJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/vigilant-octo-waffle-kubernetes-gitops/https://tekromancy.com/blog/vigilant-octo-waffle-kubernetes-gitops/Bootstrapping instant KinD and K3s clusters pre-loaded with ArgoCD, OpenBao, Harbor, and automated mkcert TLS via DeployCoop's vigilant-octo-waffle.Tue, 09 Jun 2026 00:00:00 GMTkubernetesgitopsargocddevopscloud-nativeJoshua Edward McLaughlin Coxhttps://tekromancy.com/blog/kubash-kubernetes-shell-automation/https://tekromancy.com/blog/kubash-kubernetes-shell-automation/Building, provisioning, initializing, and orchestrating production-grade Kubernetes clusters PDQ with Kubash, QEMU/KVM, Packer, and Kubeadm.Sun, 07 Jun 2026 00:00:00 GMTkubernetesdevopslinuxinfrastructureJoshua Edward McLaughlin Cox