BPF Token Version 6.9 The BPF token is a mechanism that allows privileged processes (such as container runtimes, located in the init namespace) to delegate certain functionalities of the BPF subsystem to unprivileged processes (such as processes within containers, located in the user namespace). eBPF and Linux Capabilities When eBPF was first introduced in the … Read more
September 24, 2025 TL;DR The CHERI project enhances system security by introducing “capabilities” in hardware instruction set extensions, providing hardware-level memory safety and fine-grained isolation for languages like C/C++. Carl Shaw presented the history, design, implementation, and progress of porting CHERI to Linux at LSS EU. CHERI has been implemented on platforms such as RISC-V … Read more
*This article is reprinted fromQuantum Bit WeChat Official Account Agent capabilities double every 7 months! According to the latest report released by the non-profit research organization METR, this pattern has been validated across 9 benchmark tests. These tasks involve programming, mathematics, computer usage, autonomous driving, and more, indicating that large models are continuously advancing towards … Read more