Malware, Backdoors and shady business practices: The secret life of connected devices
For the entirety of Human history up until around 20 years ago, the things you purchased and owned belonged to you and did exactly the tasks they were inteded for.
Author of 'Black Hat Rust'. Writes about Rust, security, and building products.
https://kerkour.comFor the entirety of Human history up until around 20 years ago, the things you purchased and owned belonged to you and did exactly the tasks they were inteded for.
On February 17, 2017, a security researcher at Google found that Cloudflare reverse proxies were leaking HTTP requests traversing their network, the famous CloudBleed vulnerability. For example, let's
The cheapest way to learn is to learn from others, so I always take a day every week to see what other organizations are doing and how they are doing
The past 8 months or so of AI have been the most important thing that has happened to Open Source and democratization of technology since the Linux Kernel and Rust,
When you take a look at the TechEmpower Web Framework Benchmarks it's hard to not notice how fast is Rust compared to the other languages. 1,327,378 requests / s for
When you take a look at the TechEmpower Web Framework Benchmarks it's hard to not notice how fast is Rust compared to the other languages. 1,327,378 requests / s for
A lot of efforts are directed toward transitioning mainstream kernels to memory safe programming languages, Rust for Linux, Android and Windows and Swift for iOS / macOS. Others are building
While Docker is now the main way to distribute backend software and CLI tools, you may be wondering how to build minimal and secure Docker images for your Rust projects.
Imagine that you want to add a camera to your computer which is lacking one. You buy a webcam and connect it via a USB port. Now imagine that you
Embedded C is something that I would only wish for my worst enemies. On the other hand, embedded Rust has matured to a point where many companies are now shipping
All the smart kids I know have been doing extremely unsafe things such as blowing up or burning various things, selling homemade figurine counterfeits, recklessly riding bikes in the woods,
While Rust and Go are both modern programming languages that have learned from the mistakes of the previous generation, they manage concurrency in a completely different way, which, as we
As mentionned many times on this blog only possible way to fix Rust supply chain security and fragmented ecosystem is to build an extended standard library. I've been doing this
Last week, Rust was hit with a supply chain attack. Fortunately, within ~110 minutes, the 9 backdoored packages were removed, great job the Rust Security Response Team! Unfortauntely, it was
How do you know if someone's is pro / against AI? Don't, worry—they'll tell you hahahaha It seems that AI has infected the brain of the boosters as much as
I needed to implement my ChaCha20-BLAKE3 encryption algorithm in Go, but unfortunately ChaCha20 from Go's stdlib is lacking SIMD acceleration on amd64, probably because ChaCha20-Poly1305 (used in TLS)
Now that software is ru(i)nning the world, there are very few things that are more frustrating and productivity-killing than being limited by a piece of software, either because the maker
I was reading about the AV1 video codec and the derived AVIF image format and decided to experiment with it. The results are impressive: PNG file size can be divided
While Rust is not as productive as Go and its legendary standard library to write backend service, Rust's rich type system, compiler-enforced correctness and zero-cost abstraction make it a great
Between user code and rogue AI agents, there recently has been huge regain in interest for sanboxing solutions. We've seen last time how to use landlock to drop the privileges