Skip to content
View paulneja's full-sized avatar
:shipit:
Focusing
:shipit:
Focusing
24 followers · 15 following

Achievements

Achievement: Pull Sharkx2Achievement: Starstruckx2Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: Starstruckx2Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Quickdraw

Highlights

Block or report paulneja

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
paulneja/README.md
paulneja - low-level systems, security and full-stack development

Email  ·  Repositories  ·  Technical notes

Most of my public work is around Linux: kernel changes, boot chains and software for small machines. I also build full-stack applications and run DevPocket.

Selected work

Linux 7.2.4 on ESP32-S3: 16 MB flash, 8 MB PSRAM, Wi-Fi, SSH, Bash and MicroPython. Worst switch between three busy Bash processes: 29.3 ms copying vs. 5.2-5.6 ms with cache-MMU remapping on the same 0.9 image. 36/36 board tests, 10/10 extra checks, 20/20 clean cold boots.

Flash it  ·  Measurements  ·  Kernel source
Cache-MMU remapping speeds up bank switching. Still no per-process protection or copy-on-write.

Recording from the real board: Linux boots, followed by login, uname, free, a Bash fork, MicroPython and ping.
From the board's serial console. Long pauses shortened to 1.6 seconds.

Zevory Linux: Limine to Linux to ZevInit, a Rust PID 1. Shell lifecycle, orphan reaping and shutdown. The bootstrap has run on hardware; ZevInit has only been tested in QEMU. SysCage: ELF and Windows PE analysis using Bash, namespaces, a temporary rootfs, strace and Wine. Collects traces, traffic and dropped files. Shared-kernel isolation, not a VM; use disposable analysis environments.

Notes from the projects

Inside the S3 port  ·  Release verification  ·  Inside ZevInit

Contribution snake animation

Pinned Loading

  1. Linux-on-esp32-S3 Linux-on-esp32-S3 Public

    Real Linux 7.2.4 running natively on the ESP32-S3's Xtensa cores (not emulated), with working WiFi and the chip's hardware RSA accelerator exposed to the Linux Crypto API and fork(). One flashable …

    C 209 29

  2. Syscage Syscage Public

    A lightweight, pure-bash bare-metal sandbox for safe execution and behavioral analysis of untrusted Linux binaries using namespaces, Cgroups v2, and Xephyr

    Shell 2