hed0rah hed0rah

ripwire

A zero-dependency C++ binary that parses a repository into a call graph and ranks symbols by Personalized PageRank, so a coding agent gets a map before it reads anything. It never calls a model, needs no API key, no embeddings, no index server and no daemon -- the "intelligence" is entirely BM25 lexical matching to pick anchor symbols plus a graph walk outward from them.

Apache 2.0, github.com/redhat-et/ripwire.

GCC / Linux Security Flags Reference (2026)

My old fossilized reference can still be found at https://gist.github.com/hed0rah/f5c976fdc602688a0fd40288fde6d886

Modern GCC hardening reference for production builds and security testing.

Production hardening (GCC 14+)

Git Log Exploration Cheatsheet

Ultimate All-in-One (Graph, Full Message/MR Description, and Code Diff)

git log --graph --patch --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)<%an>%Creset%n%n%w(80,2,2)%B%n'

Search Commit Messages for Specific Keywords

git log --grep="search term"

Find Commits that Added or Removed Specific Code Strings

git log -S"code_snippet"

x8r

A native CLI + shared library that answers two questions fast: "how many tokens is this file?" and "where do I cut it at ≤N tokens without slicing a function in half?"

What it is

single-purpose token-aware chunker for LLM agent tools
drop-in replacement for calling tiktoken in a subprocess loop
emits byte offsets [start, end) + token counts + boundary kind

	=============================================================================
	MS-DOS VGA VIDEO HARDWARE & DIRECT MEMORY MANIPULATION
	=============================================================================

	[1] BIOS INTERFACE FONT MISMATCHES (INT 10h)
	--------------------------------------------------------------------------------
	Forces the VGA BIOS to map non-native physical ROM font heights into the active
	16-pixel high text grid. Forcing mismatched metrics causes row duplication,
	truncation, and structural distortions.

	/* font here - https://github.com/ahatem/IoskeleyMono */

	:root {
	--ug-accent: #e8602b; /* CS-100 amber-orange. FLX vermilion = #e5421f */
	--ug-ink: #0d0d0e; /* near-black ground */
	--ug-line: rgba(255,255,255,0.08);
	}

	/* ---- tab bar: flat document header, hairline base ---- */
	app-root > .content .tab-bar,

	#!/usr/bin/env bash
	#
	# hovercraft.sh - Build an ultra-stripped BusyBox from scratch,
	# populate a minimal rootfs, and pivot into an isolated namespace.
	#
	set -euo pipefail

	ROOT="${1:-/tmp/handroll-rootfs}"
	HOSTNAME_IN="earth"
	CR=$'\r'

	#!/usr/bin/env bash
	set -euo pipefail

	CR=$'\r'

	openssl s_client -connect busybox.net:443 -quiet 2>/dev/null <<EOF \| sed '1,/^\r$/d' > busybox-1.38.0.tar.bz2
	GET /downloads/busybox-1.38.0.tar.bz2 HTTP/1.1${CR}
	Host: busybox.net${CR}
	Connection: close${CR}
	${CR}

	# Public Bash helper pack: fzf/bat previews, git pickers, process picker,
	# numeric conversions, bitwise helpers, and CIDR scratchpad.
	#
	# Install:
	# cp .bashrc_share ~/.bashrc_share
	# printf '\n[ -f "$HOME/.bashrc_share" ] && . "$HOME/.bashrc_share"\n' >> ~/.bashrc
	#
	# Requires Bash 3.2+.
	# Optional tools:
	# fzf, bat or batcat, rg, fd, git, pbcopy/wl-copy/xclip/xsel

	tar \
	--exclude='.git' \
	--exclude='node_modules' \
	--exclude='__pycache__' \
	--exclude='.venv' \
	--exclude='venv' \
	--exclude='.next' \
	--exclude='dist' \
	--exclude='build' \
	--exclude='target' \