Bomfather

Optimizing eBPF Policies for Speed and Space (Not AI Gen)

When writing our eBPF code, my brother and I wanted our policies to be extremely fast and space efficient, and we also wanted processes to inherit…

Sep 1 • Nathan Naveen

July 2026

Why is our GPU security fast?

Our GPU security is really fast, but we don’t expect you to take our word at face value, so we wrote this blog post to explain why.

Jul 10 • Neil Naveen

2

June 2026

eBPF Maps Make Life Easy

Maps are relatively simple data structures, at least when used in synchronous code.

Jun 25 • Neil Naveen

1

fs-verity survives a pulled drive. Here's why

fs-verity is a support layer built into the Linux kernel to provide integrity and authenticity protection for read-only files, and it can retrieve file…

Jun 25 • Neil Naveen

1

Protecting against eBPF rootkits

We have built our tooling with eBPF, but eBPF can also be used to build rootkits and other malicious programs…

Jun 17 • Nathan Naveen

3

1

March 2026

Sandboxing Isn’t the Solution

Sandboxing is a pain... How can we get around its issues?

Mar 24 • Nathan Naveen

2

Can we Improve on Software Supply Chain Security With IP Restriction?

What happens if we miss a vulnerability? How can we make sure it doesn't exfiltrate all of our data?

Mar 17 • Nathan Naveen

3

February 2026

How We Secure Builds With fs-verity

We used to do our builds the "normal" way, but we have learned that it wasn't enough...

Feb 16 • Nathan Naveen

2

1

Confidential Computing Adds A Crazy Amount of Overhead to GPUs

I knew that confidential computing added an overhead when running on GPUs, but I never knew it was this absurd...

Feb 4 • Nathan Naveen

2

January 2026

Dynamic Runtime Policies in eBPF Using Bitmasks

This is a cross-post of https://substack.com/home/post/p-181032541 on eBPFChirp

Jan 8 • Neil Naveen

3

1

December 2025

Tracking Shell Scripts (and Python, Perl, etc) with eBPF is Hard

Interpreted languages are painfull to monitor with eBPF, if you want any guarantees

Dec 26, 2025 • Neil Naveen

4

1

Making Pigs Fly (AKA Getting the Verifier To Approve eBPF Code)

Your eBPF code may work on your system, but the verifier won't let it work anywhere else.

Dec 10, 2025 • Neil Naveen

2

2