Blog
Notes on what I'm learning and researching - systems programming, computer science, and philosophy. Subscribe via RSS.
2026
A macOS backdoor that reads its C2 off the blockchain
Someone sent me a terminal command disguised as an installer. This walks through taking it apart one layer at a time, down to a final stage that reads its command-and-control address off the Polygon blockchain instead of hardcoding it.
Why this blog exists
I'm starting a public notebook to document what I'm learning and researching - from systems programming and computer science to philosophy. Here's what to expect.