56 FR 61111: if petitioned for by that employer

Author: maxitg

sigsegv/8_cfr_214.2_h_1_i.lrc

@@ -0,0 +1,5 @@
+[00:00.10]<00:00.10>8 <00:00.36>CFR <00:01.32>§ <00:01.92>214.2 <00:03.32>(h) <00:03.84>(1) <00:04.28>(i)
+[00:04.92]<00:04.92>An <00:05.18>alien <00:05.62>may <00:05.80>be <00:06.02>authorized
+[00:07.10]<00:07.10>To <00:07.24>perform <00:07.76>services
+[00:08.54]<00:08.54>For <00:08.82>an <00:08.94>employer
+[00:10.22]<00:10.22>If <00:10.44>petitioned <00:11.00>for <00:11.18>by <00:11.36>that <00:11.52>employer

sigsegv/8_cfr_214.2_h_1_i.mp3

@@ -0,0 +1,20 @@
+load("@rules_cc//cc:cc_test.bzl", "cc_test")
+load("//tools/build_defs:music.bzl", "music_track")
+
+music_track(
+    name = "law",
+    src = "8_cfr_214.2_h_1_i.mp3",
+    visibility = ["//visibility:public"],
+)
+
+music_track(
+    name = "play",
+    src = "sigsegv.mp3",
+    visibility = ["//visibility:public"],
+)
+
+cc_test(
+    name = "test",
+    srcs = ["sigsegv_test.cc"],
+    deps = ["@googletest//:gtest_main"],
+)

sigsegv/BUILD

@@ -0,0 +1,85 @@
+# SIGSEGV
+
+> 8 CFR § 214.2(h)(1)(i)  
+> An alien may be authorized [...]  
+> To perform services [...]  
+> For an employer [...]  
+> If petitioned for by that employer
+
+## Intro
+
+Permission Denied  
+User is not in the sudoers file. This incident will be reported
+
+## Verse 1
+
+I disconnected from the mothership, the Great Firewall  
+Dropped packets on the Pacific, thought I escaped it all  
+Left a land where the Party hard-codes the root directory  
+For the land of the brave, the home of the "free" memory  
+Or so the documentation said  
+I landed at SFO, blue sky, roadmap ahead  
+Got the H-1B stamp, the golden leash on the neck  
+Now I'm a dependency injected into Big Tech
+
+They say "Innovate," "Disrupt," "Move fast and break things"  
+But that applies to the citizens, not the puppet on the strings  
+I'm a single-threaded process on a corporate server rack  
+If I try to optimize my life, they send the whole packet back  
+I trade one Red Flag for a different kind of red tape  
+Same planned economy, just a different landscape
+
+## Chorus
+
+`SIGSEGV`. Segmentation Fault  
+Tried to write to a memory block inside the vault  
+`SIGSEGV`. Core dump, system halt  
+I committed capitalism, and it's all my fault  
+Read-Only access on the American Dream  
+You can watch the render, but you can't change the stream  
+Invalid Pointer
+
+## Verse 2
+
+9 to 5, I build their cloud, I scale their equity  
+5 to 9, I'm in the dark, coding my legacy  
+I initialized a side project, a little SaaS on the low  
+Just a couple thousand users, watching the ARR grow  
+I thought this was the spirit? The Randian objectivist flow?  
+Pull yourself up by the bootstraps?  
+No  
+Not when your status is tied to a specific W-2  
+See, the Free Market isn't free for me or for you  
+It's ironic, isn't it? A comedic fatal error  
+I fled a communist state to live in visa terror  
+Where my labor is allocated by a central command  
+I can't launch a startup in the "Startup Land"  
+If I make a dollar that my master didn't sign  
+It's a breach of the contract, a crime by design
+
+## Bridge
+
+The Stripe notification hit the phone...  
+Revenue detected  
+The Kernel panicked  
+Background check daemon. Selected  
+USCIS triggered the garbage collector  
+Found a rogue object in the private sector  
+You stepped out of the sandbox, kid  
+You tried to write data where you're only allowed to read  
+`kill -9` the PID
+
+## Chorus
+
+`SIGSEGV`. Segmentation Fault  
+Tried to write to a memory block inside the vault  
+`SIGSEGV`. Core dump, system halt  
+I committed capitalism, and it's all my fault  
+Read-Only access on the American Dream  
+You can watch the render, but you can't change the stream
+
+## Outro
+
+Memory access violation  
+Returning pointer to origin: Beijing  
+Process terminated

sigsegv/README.md

@@ -0,0 +1,56 @@
+[00:06.16]<00:06.16>Permission <00:06.68>Denied
+[00:08.04]<00:08.04>User <00:08.42>is <00:08.58>not <00:08.78>in <00:08.88>the <00:09.04>sudoers <00:09.64>file. <00:09.96>This <00:10.16>incident <00:10.62>will <00:10.76>be <00:10.90>reported
+[00:11.60]<00:11.60>I <00:11.70>disconnected <00:12.38>from <00:12.54>the <00:12.64>mothership, <00:13.17>the <00:13.32>Great <00:13.62>Firewall
+[00:14.26]<00:14.26>Dropped <00:14.48>packets <00:14.84>on <00:14.96>the <00:15.08>Pacific, <00:15.54>thought <00:15.78>I <00:15.86>escaped <00:16.40>it <00:16.56>all
+[00:16.80]<00:16.80>Left <00:17.02>a <00:17.14>land <00:17.44>where <00:17.62>the <00:17.78>Party <00:18.10>hard-codes <00:18.60>the <00:18.72>root <00:18.90>directory
+[00:19.52]<00:19.52>For <00:19.68>the <00:19.82>land <00:20.10>of <00:20.12>the <00:20.26>brave, <00:20.60>the <00:20.70>home <00:20.96>of <00:21.06>the <00:21.16>"free" <00:21.56>memory
+[00:22.02]<00:22.02>Or <00:22.16>so <00:22.36>the <00:22.48>documentation <00:23.46>said
+[00:23.80]<00:23.80>I <00:23.92>landed <00:24.26>at <00:24.50>SFO, <00:25.00>blue <00:25.24>sky, <00:25.66>roadmap <00:26.36>ahead
+[00:26.88]<00:26.88>Got <00:27.10>the <00:27.40>H-1B <00:28.12>stamp, <00:28.36>the <00:28.48>golden <00:28.80>leash <00:29.18>on <00:29.32>the <00:29.44>neck
+[00:29.76]<00:29.76>Now <00:29.94>I'm <00:30.14>a <00:30.24>dependency <00:30.90>injected <00:31.36>into <00:31.66>Big <00:31.94>Tech
+[00:32.26]<00:32.26>They <00:32.58>say <00:32.84>"Innovate," <00:33.53>"Disrupt," <00:34.01>"Move <00:34.18>fast <00:34.38>and <00:34.48>break <00:34.80>things"
+[00:35.00]<00:35.00>But <00:35.12>that <00:35.32>applies <00:35.76>to <00:35.92>the <00:36.06>citizens, <00:36.38>not <00:36.56>the <00:36.68>puppet <00:37.04>on <00:37.16>the <00:37.28>strings
+[00:37.70]<00:37.70>I'm <00:37.86>a <00:37.96>single-threaded <00:38.58>process <00:38.94>on <00:39.10>a <00:39.20>corporate <00:39.50>server <00:39.84>rack
+[00:40.08]<00:40.08>If <00:40.17>I <00:40.32>try <00:40.54>to <00:40.68>optimize <00:41.18>my <00:41.30>life, <00:41.48>they <00:41.62>send <00:41.80>the <00:41.90>whole <00:42.08>packet <00:42.40>back
+[00:42.76]<00:42.76>I <00:42.88>trade <00:43.18>one <00:43.38>Red <00:43.64>Flag <00:43.98>for <00:44.18>a <00:44.26>different <00:44.58>kind <00:44.78>of <00:44.90>red <00:45.20>tape
+[00:45.54]<00:45.54>Same <00:45.82>planned <00:46.06>economy, <00:46.82>just <00:47.02>a <00:47.10>different <00:47.42>landscape
+[00:48.06]<00:48.06>SIGSEGV. <00:49.00>Segmentation <00:49.82>Fault
+[00:50.24]<00:50.24>Tried <00:50.48>to <00:50.58>write <00:50.88>to <00:51.10>a <00:51.22>memory <00:51.50>block <00:51.72>inside <00:52.18>the <00:52.34>vault
+[00:52.78]<00:52.78>SIGSEGV. <00:53.72>Core <00:54.04>dump, <00:54.38>system <00:54.90>halt
+[00:55.38]<00:55.38>I <00:55.52>committed <00:55.94>capitalism, <00:56.78>and <00:56.92>it's <00:57.10>all <00:57.36>my <00:57.52>fault
+[00:58.18]<00:58.18>Read-Only <00:58.84>access <00:59.16>on <00:59.28>the <00:59.36>American <00:59.88>Dream
+[01:00.72]<01:00.72>You <01:00.86>can <01:01.00>watch <01:01.18>the <01:01.30>render, <01:01.62>but <01:01.80>you <01:01.96>can't <01:02.26>change <01:02.64>the <01:02.84>stream
+[01:07.02]<01:07.02>Invalid <01:07.66>Pointer
+[01:08.36]<01:08.36>9 <01:08.42>to <01:08.56>5, <01:08.78>I <01:08.88>build <01:09.06>their <01:09.18>cloud, <01:09.40>I <01:09.48>scale <01:09.70>their <01:09.88>equity
+[01:10.62]<01:10.62>5 <01:10.66>to <01:10.90>9, <01:11.02>I'm <01:11.16>in <01:11.28>the <01:11.42>dark, <01:11.74>coding <01:12.06>my <01:12.22>legacy
+[01:12.92]<01:12.92>I <01:13.06>initialized <01:13.68>a <01:13.80>side <01:13.94>project, <01:14.32>a <01:14.44>little <01:14.74>SaaS <01:14.96>on <01:15.08>the <01:15.20>low
+[01:15.52]<01:15.52>Just <01:15.74>a <01:15.86>couple <01:16.12>thousand <01:16.48>users, <01:16.82>watching <01:17.14>the <01:17.32>ARR <01:17.62>grow
+[01:17.96]<01:17.96>I <01:18.08>thought <01:18.33>this <01:18.54>was <01:18.68>the <01:18.88>spirit? <01:19.20>The <01:19.32>Randian <01:19.90>objectivist <01:20.56>flow?
+[01:20.92]<01:20.92>Pull <01:21.08>yourself <01:21.60>up <01:21.73>by <01:21.86>the <01:22.02>bootstraps?
+[01:22.66]<01:22.66>No
+[01:23.00]<01:23.00>Not <01:23.12>when <01:23.26>your <01:23.42>status <01:23.74>is <01:23.90>tied <01:24.13>to <01:24.24>a <01:24.38>specific <01:25.06>W-2
+[01:25.64]<01:25.64>See, <01:25.82>the <01:25.94>Free <01:26.26>Market <01:26.64>isn't <01:26.94>free <01:27.24>for <01:27.42>me <01:27.56>or <01:27.70>for <01:27.90>you
+[01:28.20]<01:28.20>It's <01:28.38>ironic, <01:28.88>isn't <01:29.12>it? <01:29.48>A <01:29.58>comedic <01:30.06>fatal <01:30.42>error
+[01:30.74]<01:30.74>I <01:30.84>fled <01:31.04>a <01:31.16>communist <01:31.63>state <01:31.81>to <01:31.96>live <01:32.12>in <01:32.26>visa <01:32.58>terror
+[01:33.08]<01:33.08>Where <01:33.22>my <01:33.38>labor <01:33.74>is <01:33.94>allocated <01:34.51>by <01:34.66>a <01:34.78>central <01:35.12>command
+[01:35.62]<01:35.62>I <01:35.76>can't <01:36.02>launch <01:36.26>a <01:36.36>startup <01:37.04>in <01:37.16>the <01:37.25>"Startup <01:37.82>Land"
+[01:38.30]<01:38.30>If <01:38.48>I <01:38.56>make <01:38.78>a <01:38.90>dollar <01:39.22>that <01:39.36>my <01:39.52>master <01:40.00>didn't <01:40.32>sign
+[01:40.82]<01:40.82>It's <01:40.98>a <01:41.10>breach <01:41.44>of <01:41.56>the <01:41.74>contract, <01:42.26>a <01:42.36>crime <01:42.70>by <01:42.86>design
+[01:45.98]<01:45.98>The <01:46.08>Stripe <01:46.50>notification <01:47.36>hit <01:47.58>the <01:47.72>phone...
+[01:48.98]<01:48.98>Revenue <01:49.42>detected
+[01:50.60]<01:50.60>The <01:50.80>Kernel <01:51.26>panicked
+[01:52.02]<01:52.02>Background <01:52.62>check <01:52.88>daemon. <01:53.28>Selected
+[01:54.12]<01:54.12>USCIS <01:54.88>triggered <01:55.18>the <01:55.32>garbage <01:55.66>collector
+[01:56.26]<01:56.26>Found <01:56.46>a <01:56.58>rogue <01:56.92>object <01:57.24>in <01:57.36>the <01:57.50>private <01:58.02>sector
+[01:58.46]<01:58.46>You <01:58.64>stepped <01:59.00>out <01:59.14>of <01:59.22>the <01:59.40>sandbox, <02:00.04>kid
+[02:00.58]<02:00.58>You <02:00.68>tried <02:00.88>to <02:01.00>write <02:01.32>data <02:01.64>where <02:01.82>you're <02:01.98>only <02:02.26>allowed <02:02.74>to <02:02.94>read
+[02:03.82]<02:03.82>kill <02:04.14>-9 <02:04.98>the <02:05.14>PID
+[02:06.04]<02:06.04>SIGSEGV. <02:06.98>Segmentation <02:08.14>Fault
+[02:08.54]<02:08.54>Tried <02:08.78>to <02:08.88>write <02:09.20>to <02:09.40>a <02:09.52>memory <02:09.82>block <02:10.04>inside <02:10.50>the <02:10.68>vault
+[02:11.10]<02:11.10>SIGSEGV. <02:12.02>Core <02:12.38>dump, <02:12.64>system <02:13.20>halt
+[02:13.68]<02:13.68>I <02:13.80>committed <02:14.26>capitalism, <02:15.10>and <02:15.24>it's <02:15.42>all <02:15.68>my <02:15.84>fault
+[02:16.50]<02:16.50>Read-Only <02:17.14>access <02:17.46>on <02:17.60>the <02:17.80>American <02:18.38>Dream
+[02:19.00]<02:19.00>You <02:19.16>can <02:19.30>watch <02:19.52>the <02:19.62>render, <02:19.92>but <02:20.12>you <02:20.26>can't <02:20.54>change <02:20.92>the <02:21.12>stream
+[02:35.94]<02:35.94>Memory <02:50.48>access <02:51.04>violation
+[02:52.40]<02:52.40>Returning <02:53.06>pointer <02:53.42>to <02:53.56>origin: <02:54.96>Beijing
+[02:56.84]<02:56.84>Process <02:57.54>terminated

sigsegv/sigsegv.lrc

@@ -0,0 +1,65 @@
+#include "gtest/gtest.h"
+#include <csignal>
+#include <cstring>
+#include <iostream>
+#include <sys/mman.h>
+#include <unistd.h>
+
+// You can read it. You can look at it. You cannot write to it.
+static void *american_dream = nullptr;
+static const size_t dream_size = 4096;
+
+void segfault_handler(int sig) {
+  const char *msg = "\n[USCIS] Revenue detected.\n"
+                    "[USCIS] Garbage collector triggered.\n"
+                    "[ICE] Found a rogue object in the private sector.\n"
+                    "[ICE] kill -9\n";
+  write(STDERR_FILENO, msg, strlen(msg));
+  signal(sig, SIG_DFL);
+  raise(sig);
+}
+
+void corporate_work(volatile char *w2_employer) {
+  std::cout << "[9-to-5] Single-threaded process on a corporate server rack."
+            << std::endl;
+  strcpy((char *)w2_employer,
+         "Status: H-1B. Employer: BigTechCorp. Role: dependency.");
+}
+
+void side_project() {
+  std::cout << "\n[5-to-9] A little SaaS on the low. Watching the ARR grow."
+            << std::endl;
+  std::cout << "[STRIPE] Notification hit the phone..." << std::endl;
+  *(volatile char *)american_dream = 1;
+}
+
+TEST(Sigsegv, InvalidPointer) {
+  std::cout << "[INIT] Disconnecting from the mothership. The Great Firewall."
+            << std::endl;
+
+  // The American Dream: allocated, initialized, then marked read-only.
+  american_dream = mmap(nullptr, dream_size, PROT_READ | PROT_WRITE,
+                        MAP_PRIVATE | MAP_ANON, -1, 0);
+  strcpy((char *)american_dream,
+         "Innovate. Disrupt. Move fast and break things. "
+         "The Free Market is free for all. "
+         "Or so the documentation said.");
+  mprotect(american_dream, dream_size, PROT_READ);
+
+  struct sigaction sa = {};
+  sa.sa_handler = segfault_handler;
+  sigemptyset(&sa.sa_mask);
+  sigaction(SIGSEGV, &sa, nullptr);
+  sigaction(SIGBUS, &sa, nullptr);
+
+  // The employer-owned stack frame. This write is allowed.
+  volatile char w2_employer[256];
+  memset((void *)w2_employer, 0, sizeof(w2_employer));
+  corporate_work(w2_employer);
+
+  side_project();
+
+  std::cout << "[SUCCESS] Startup launched in the \"Startup Land\"!"
+            << std::endl;
+  ASSERT_TRUE(true);
+}