yuzhes

# Systems

• WASM vs seccomp: Benchmarking Sandbox Startup for a Code Grader

  2026-03-09

• Shimmy WASM: When the Security Model Has No Syscalls

  2026-03-09

• Building a Userspace Sandbox for Student Code: 3 Hours of Red-Teaming

  2026-03-09

• Sandlock: A Rootless Linux Sandbox in 705 Lines of C

  2026-03-09

• Sandlock v1.4: From Single File to Full-Stack Sandbox

  2026-03-09

• Sandboxing Student Code in Serverless: A Threat Model

  2026-03-07