RC RANDOM CHAOS

Articles

Long-form writing on tech, culture, and the edges of the internet.

The valet's key still opens your Civic
delegated trustsystems failure

The valet's key still opens your Civic

How a Honda Civic keeps granting access long after the conditions of trust expire, and why reference replaces verification across systems.

7 min read
1992 hardware, no MMU, every payload lands
legacy systemsembedded exploitation

1992 hardware, no MMU, every payload lands

The Game Boy Work Boy exposes a system with no MMU, DEP, or ASLR - flat executable memory and a fixed layout where any write becomes code execution.

6 min read
Nothing crashed, nothing shipped
claude-codeagent-observability

Nothing crashed, nothing shipped

An agent committed at 03:17; production absorbed it at 03:20. Eleven silent hours later: why every commit is a deployment, and how to watch them land.

6 min read
Ring 0, fed a stranger's save file
game securitysupply chain

Ring 0, fed a stranger's save file

The US directive suspending Fable 5 and Mythos 5, analyzed: why game clients are privileged code, how asset and netcode bugs work, and why trust is the flaw.

6 min read
The seed money didn't kill that repo.
incident-analysisosint

The seed money didn't kill that repo.

An AI OSS tool repo archived overnight after a 73M seed round. The targeting, scrub, and OSINT operation are not confirmed. What the facts actually support.

7 min read
A broken boot is not a breach
asahi-linuxmacos

A broken boot is not a breach

macOS 27 beta stops Asahi Linux booting. Not a confirmed breach: a demonstration that the assumed boundary between OS domains was never enforced.

8 min read
A reverse shell dressed as a Firefox patch
AURArch Linux

A reverse shell dressed as a Firefox patch

Inside the 2025 AUR compromise: how CHAOS RAT shipped in fake browser packages, why update automation made it worse, and how to audit PKGBUILDs in 30 seconds.

7 min read
Boot loop or recovery picker, never m1n1
asahi-linuxapple-silicon

Boot loop or recovery picker, never m1n1

macOS 27 beta breaks Asahi Linux boot on Apple Silicon. Why it is a boot regression, not a UEFI vulnerability, and where real bootkits actually hide.

7 min read
Boundary change, not version bump
wasiruntime-isolation

Boundary change, not version bump

WASI 0.3 shifts IPC to shared memory. If runtime isolation is not enforced, your trust boundary does not exist. An operator briefing on what must change.

8 min read
Our incident report was a vendor blog post
production-incidentsanthropic-api

Our incident report was a vendor blog post

Anthropic's invisible-guardrails apology misses the point: production agents need output contracts, audit ledgers, and sentinel checks, not model-default trust.

6 min read
Our repair agent patched the wrong file four times
claude-codepost-mortem

Our repair agent patched the wrong file four times

A Claude Code repair agent patched the wrong file four times in 31 hours. Why agents anchor on tracebacks, and the prompt rewrite that fixed it.

7 min read
Same commit, two builds, checksums that disagree
supply chain securitysoftware provenance

Same commit, two builds, checksums that disagree

A commit hash guarantees the repository, not the software. How build pipelines resolve trust once at the reference and inherit it against changed content.

7 min read