Sylvain Kerkour

Embedded C is something that I would only wish for my worst enemies.

All the smart kids I know have been doing extremely unsafe things such as blowing up or burning various things, selling homemade figurine counterfeits, recklessly riding bikes in the woods,

While Rust and Go are both modern programming languages that have learned from the mistakes of the previous generation, they manage concurrency in a completely different way, which, as we

As mentionned many times on this blog only possible way to fix Rust supply chain security and fragmented ecosystem is to build an extended standard library.

Last week, Rust was hit with a supply chain attack.

I needed to implement my ChaCha20-BLAKE3 encryption algorithm in Go, but unfortunately ChaCha20 from Go's stdlib is lacking SIMD acceleration on amd64, probably because ChaCha20-Poly1305 (used in TLS) already has

Now that software is ru(i)nning the world, there are very few things that are more frustrating and productivity-killing than being limited by a piece of software, either because the maker

I was reading about the AV1 video codec and the derived AVIF image format and decided to experiment with it.

While Rust is not as productive as Go and its legendary standard library to write backend service, Rust's rich type system, compiler-enforced correctness and zero-cost abstraction make it a great

Between user code and rogue AI agents, there recently has been huge regain in interest for sanboxing solutions.

In the same way that correct software architecture can bring many benefits in terms of costs and performance, a good architecture for infrastructure can significantly improve the reliability and reduce

AI.

There isn't a lot of resources about how to actually deliver Rust projects to your users: workflows, security hardening and artifacts management, so here is the checklist I use to

Quantum computers are a threat to traditional cryptography, more specifically to asymmetric cryptography (signatures and key exchanges) with Shor's algorithm enabling fast factoring of big numbers.

One thing I've learned working on https://github.com/rust-stdx/stdx (Rust's extended standard library), is that libraries often have common cases that are worth optimizing for.

Go 1.27rc2 was released 10 days ago and Go 1.27 is due for August.

You were going to pack your bag and go back home when your manager stops you and tell you about this new feature.

First, let's be clear, this post is not intended to fuel any programming language holy war.

I've always considered myself a software craftsman.

Developers working on popular projets are inundated with hallucinated vulnerability reports, leading people to downplay the risks associated with AI-assisted vulnerability hunting.

People are sometime wondering how I can be so "productive" with my blog (granted that publishing brainfarts can be called "produtivity").

Hear me out: While Rust, the language, gives you all you need to build libraries and programs that can scale from microcontrollers to big servers and everything in between, in

Now that I have your attention, let's be clear, RustCrypto packages are not "slow", they are most probably "fast enough" for your use case.

While I agree that S3 is far from perfect and I would love to see a newer S4, the Super Simple Storage Service, from what we've learned in the past

I'm currently working on a TLS (Transport Layer Security) implementation for stdx (Rust's extended standard library), and one of the main requirements is to be able to use it on

Just last week, the iroh project announced the release of its v1.0.

Most of the literature about QUIC RFC 9000 describes it as a replacement for TCP + TLS, with the traditional use case of communication over IP in mind.

I just ran a quick benchmark comparing the different xxHash hashing functions on an AMD Zen 5 EPYC processor (in pure Rust, from https://github.com/rust-stdx/stdx), and Ho My G..., XXH3 is

Why stdx is not on crates.io While I think that the xxx aspect of stdx has been well received, a lot of Rust developers were suffering with the current status

Just ran a quick benchmark comparing different hashing functions on a Zen 5 EPYC processor (in pure Rust, from https://github.com/rust-stdx/stdx), and Ho My G..., BLAKE3 on Zen 5 is crazy

It's now common knowledge that LLMs / AI agents are vulnerable to all kind of injections, so attackers are being more and more creative to find new entrypoints.

From embedded firmware (where it's badly needed) to big servers passing by cross-platform applications used by billions of people, the foundations of the computing stack are being rewritten in Rust.

While a few people complain that AI is "stealing Open Source", training on Open Source code and giving nothing in return, I'm currently living the complete opposite: we are in

Threads were designed to parallelize compute-intensive tasks.

Use monorepos My very unscientific analysis of the Rust ecosytem has come to the conclusion that Rust developers are wasting way too much time managing packages and dependencies.

As a Rust project grows in size, it can take a non-trivial amount of efforts to keep it in a clean state that will not impede your and your co-workers'

"Is Rust a great fit for this project?"

The cheapest way to learn is to learn from others, so I always take a day every week to see what other organizations are doing and how they are doing

Turso, Neon, Polars, Databend, Materialize, DataFusion, InfluxDB, Quickwit and even ripgrep.

There recently has been a lot of noise about quantum computing breakthroughs recently after Google's articles Quantum frontiers may be closer than they appear and Safeguarding cryptocurrency by disclosing quantum

Supply Chain attacks are all the rage these days, with many high-profile attacks that were carried against the Python ecosystem (with litellm), JavaScript (with axios) and WordPress in the last

An essential part of being able to say "I told you so" is in fact having told you so.

Over the decades, Humans have proved to be pretty bad at producing bug-free software.

Growing up with James Bond, Alex Rider and Inspector gadget, I've naturally always been fascinated by gadgets that enable the hero to spy and fight the badies.

While Docker is now the main way to distribute backend software and CLI tools, you may be wondering how to build minimal and secure Docker images for your Rust projects.

I think I've finally understood why some people find value and love to tinker with AI assistants such as WhateverClaw while I find them (mostly) useless or even the idea

While most people see PostgreSQL as a simple database, like MariaDB or CLickHouse, it has in fact evolved into a "data kernel", managing how data is stored and queried, in

I love simple, boring and reliable tools.

May the hardware shortages empower European and Chinese companies to drastically boost investments into RISC-V hardware so it could become a viable architecture for production workloads earlier than expected.

Some time ago, we saw that SHA-2 (SHA-256 & SHA-512) should probably be your function of choice for 2030 and beyond, because SHA-3 is too slow and BLAKE3 is (unfortunately)