You can't have intelligence and safety in the same sentence
All the smart kids I know have been doing extremely unsafe things such as blowing up or burning various things, selling homemade figurine counterfeits, recklessly riding bikes in the woods,
Author of 'Black Hat Rust'. Writes about Rust, security, and building products.
https://kerkour.comAll the smart kids I know have been doing extremely unsafe things such as blowing up or burning various things, selling homemade figurine counterfeits, recklessly riding bikes in the woods,
While Rust and Go are both modern programming languages that have learned from the mistakes of the previous generation, they manage concurrency in a completely different way, which, as we
As mentionned many times on this blog only possible way to fix Rust supply chain security and fragmented ecosystem is to build an extended standard library. I've been doing this
Last week, Rust was hit with a supply chain attack. Fortunately, within ~110 minutes, the 9 backdoored packages were removed, great job the Rust Security Response Team! Unfortauntely, it was
How do you know if someone's is pro / against AI? Don't, worry—they'll tell you hahahaha It seems that AI has infected the brain of the boosters as much as
I needed to implement my ChaCha20-BLAKE3 encryption algorithm in Go, but unfortunately ChaCha20 from Go's stdlib is lacking SIMD acceleration on amd64, probably because ChaCha20-Poly1305 (used in TLS)
Now that software is ru(i)nning the world, there are very few things that are more frustrating and productivity-killing than being limited by a piece of software, either because the maker
I was reading about the AV1 video codec and the derived AVIF image format and decided to experiment with it. The results are impressive: PNG file size can be divided
While Rust is not as productive as Go and its legendary standard library to write backend service, Rust's rich type system, compiler-enforced correctness and zero-cost abstraction make it a great
Between user code and rogue AI agents, there recently has been huge regain in interest for sanboxing solutions. We've seen last time how to use landlock to drop the privileges
In the same way that correct software architecture can bring many benefits in terms of costs and performance, a good architecture for infrastructure can significantly improve the reliability and reduc
AI. The risks are real. (just kidding, this article is 100% human produced) How? I have a huge backlog of ideas to write about. The most important part is to
There isn't a lot of resources about how to actually deliver Rust projects to your users: workflows, security hardening and artifacts management, so here is the checklist I use to
I have nothing to say to the analysis presented in the article, but I think the conclusion is wrong, here is why. 128-bit vs 256-bit symmetric keys AES-128-GCM AES-256-GCM x86_64
One thing I've learned working on https://github.com/rust-stdx/stdx (Rust's extended standard library), is that libraries often have common cases that are worth optimizing for.
Go 1.27rc2 was released 10 days ago and Go 1.27 is due for August. Let's be honest, this release is freaking awesome! Generic methods? Yeah! UUID in the standard library?
You were going to pack your bag and go back home when your manager stops you and tell you about this new feature. To surf the meme wave, you will
First, let's be clear, this post is not intended to fuel any programming language holy war. I wrote this post because I've sometime been late to understand the benefits of
I've always considered myself a software craftsman. I love clean APIs, efficient code and great user experience. If our entire world is about to be rewritten in Rust governed by
Developers working on popular projets are inundated with hallucinated vulnerability reports, leading people to downplay the risks associated with AI-assisted vulnerability hunting. But hear me out: it