Hi there 👋

I am a programmer/security researcher who is mainly interested in Linux.

The most of my active projects are now on

Stats and Trophies

Projects

My own projects

• advent-of-code – Advent of Code
• crabjail – Linux sandboxing tool
• crablock – Yet another Linux sandboxing tool.
• crabsecco – crabjail seccomp compiler
• ddiceware – diceware passphrase generator.
• fedora-extras – Additional package for Fedora, missing in the offical repositories and RPMFusion.
• firefox-config – My config for a hardened, secure, privacy friendly firefox.
• flatpak-device-mounter – Workaround for flatpaks limited device permissions.
• getenvtrace – Simple LD_PRELOAD library to trace calls to getenv(3).
• guides –
• kyst – Keep Your Sandbox Tight! – Actually just a collection of my own tight sandbox configurations.
• smem – Show top 10 memory consuming processes.
• SCEE-custom-overlays – A collection of custom overlays for SCEE
• tricks – Collection of useful commands and configs.
• zufall – Zufall, a tool to help on decisions.

ARCHIVED

• GDriveDL – Google Drive Download Python Script with zenity GUI
• NewsBear – Ein Skript, das tagesschau.de auf Eilmeldungen überwacht und den Benutzer mittels nativer Benachrichtigungen benachrichtigt, wenn es eine neu Eilmeldung gibt.
• Rust Cookbook – My rust cookbook, a list of good, useful crates (with thoughts and comments) + boilerplate snippets.
• Secure Linux Workstation – References to harden a Linux Workstation.
• detect-kpxc-browser – Detect KPXC-Browser PoC
• fdns4users – Allow unprivileged users to start fdns.
• ffx – Install all firefox release channels and use firejail to sandbox them.
• firecfg.py – An improved firecfg written in python.
• firejail-profile-builder –
• firejailed-tor-browser – HOWTO: Firejailed Tor Browser
• fireurl – Fixing the firejail URL open issue.
• fjp – A handy command line program to work fast and straightforward with firejail profiles.
• fstracer – A filesystem-tracer.
• hexbot – My solution for: https://noopschallenge.com/challenges/hexbot
• language-race – Comparison of the speed of different programming languages.
• manual-for-esoteric-it-security – Manual for esoteric it security
• ns-utils – Simple Linux namespaces debugging util
• raudit – A configurable audit program for firejail-sandboxes with metrics.
• uhb2dnsmasq – Download the Ultimative.Hosts.Blacklist and convert it into a dnsmasq configuration.

Projects I frequently contribute to

• Flatseal – Manage Flatpak permissions
• arkenfox user.js – Firefox privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening
• bubblejail – Bubblewrap based sandboxing for desktop applications
• firejail – Linux namespaces and seccomp-bpf sandbox
• libseccomp-rs – Native Rust crate for libseccomp library

Notable gists

• seccomp-bpf based MDWE bypass – Bypass seccomp-bpf based memory-deny-write-execute with READ_IMPLIES_EXEC.
• cu2ub.py – ClearURLs to µBlock origin converter
• maintenance-status.md – Proposal to easily show the maintenance status of a project.
• seccomp_init_btree.rs – LD_PRELOAD library to change the default optimization level of libseccomp to build btree optimized filters.
• seccomp_load_debug.rs – LD_PRELOAD library to export the seccomp-bpf filter when it is loaded.
• xdg-open.c – A xdg-open drop-in wrapper to make xdg-open work nicely with firejail.