kerkour.com
On February 17, 2017, a security researcher at Google found that Cloudflare reverse proxies were leaking HTTP requests traversing their network, the famous CloudBleed vulnerability. For example, let's say that you were visiting hosted on Cl...
Observations/Thoughts
2026-10-21
~7 min read
kerkour.com
The cheapest way to learn is to learn from others, so I always take a day every week to see what other organizations are doing and how they are doing it. As Rust is slowly but surely replacing C / C++ for embedded development, operating sys...
Observations/Thoughts
2026-10-14
~8 min read
kerkour.com
When you take a look at the TechEmpower Web Framework Benchmarks it's hard to not notice how fast is Rust compared to the other languages. 1,327,378 requests / s for may-minihttp, 1,114,265 requests / s for axum [postgresql]! It's tempting...
Observations/Thoughts
2026-10-07
~6 min read
kerkour.com
A lot of efforts are directed toward transitioning the kernels of mainstream Operating Systems to memory-safe programming languages, Rust for Linux, Android and Windows and Swift for iOS / macOS. Others are building new kernels from scratch...
Observations/Thoughts
2026-09-30
~3 min read
kerkour.com
While Docker is now the main way to distribute backend software and CLI tools, you may be wondering how to build minimal and secure Docker images for your Rust projects. Building minimal docker images is not only good for security (reduced...
Rust Walkthroughs
2026-09-23
~6 min read
kerkour.com
Imagine that you want to add a camera to your computer which is lacking one. You buy a webcam and connect it via a USB port. Now imagine that you want to add storage to the same computer. You buy an external hard drive and also connect it v...
Rust Walkthroughs
2026-09-16
~11 min read
kerkour.com
Embedded C is something that I would only wish for my worst enemies. On the other hand, embedded Rust has matured to a point where many companies are now shipping it to production. Whether you are a professional for whom time to market, sec...
Observations/Thoughts
2026-09-09
~3 min read
kerkour.com
While Rust and Go are both modern programming languages that have learned from the mistakes of the previous generation, they manage concurrency in a completely different way, which, as we will see, has a huge impact on performance and devel...
Observations/Thoughts
2026-09-02
~5 min read
kerkour.com
Last week, Rust was hit by a supply chain attack that reached packages that are downloaded more than 1,000,000 times per day. Fortunately, within ~110 minutes, the 9 backdoored packages were removed, great job the Rust Security Response Tea...
Observations/Thoughts
2026-08-26
~13 min read
kerkour.com
While Rust is not as productive as Go and its legendary standard library to write backend services, Rust's rich type system, compiler-enforced correctness and zero-cost abstraction make it a great choice nonetheless, especially for medium-s...
Observations/Thoughts
2026-08-12
~9 min read
kerkour.com
Between user code and rogue AI agents, there recently has been huge regain in interest for sanboxing solutions. We've seen last time how to use landlock to drop the privileges of your own programs, today we are going to see how sanboxing un...
Observations/Thoughts
2026-08-05
~6 min read
kerkour.com
kerkour.com Topics: Rust security, supply chain, cryptography Why RustGrep includes it: Black Hat Rust. Security-focused Rust content. Categories: educator, security, crypto
Blog
2026-07-27
~1 min read
kerkour.com
There aren't many resources about how to actually deliver Rust projects to your users: workflows, security hardening and artifacts management, so here is the checklist I use to release backend services and CLI binaries Makefile I use a Make...
Observations/Thoughts
2026-07-22
~7 min read
kerkour.com
With the recent Bun rewrite from Zig to Rust, I thought that it was the perfect time to pour gas on the fire and explain why you need to stop everything and rewrite all your code in Rust. Just kidding, I'm not here to start any programming...
Observations/Thoughts
2026-07-15
~8 min read
kerkour.com
Now that I have your attention, let's be clear, RustCrypto packages are not "slow", they are probably "fast enough" for your use case. Yet, I couldn't unsee how faster aws-lc-rs is, so here are the results of my investigation. I was doing s...
Observations/Thoughts
2026-07-08
~12 min read
kerkour.com
I'm currently working on a TLS (Transport Layer Security) implementation for stdx (Rust's extended standard library, https://github.com/rust-stdx/stdx ), and one of the main requirements is to be able to use the library on no_std embedded p...
Observations/Thoughts
2026-07-01
~6 min read
kerkour.com
Just last week, the iroh project announced the release of its v1.0. What is iroh? Well, I'm glad you're asking because it's a very interesting project that I'm following for some time now for the technical wizardery they are doing with QUIC...
Observations/Thoughts
2026-06-24
~9 min read
kerkour.com
First, a big thank you to everyone who took the time to read the announcement post and star the stdx repo on GitHub, or even better, purchased one of my books to support my Open Source work. Launching a project is always hard and it's highl...
Observations/Thoughts
2026-06-17
~6 min read
kerkour.com
From embedded firmware (where it's badly needed) to big servers passing by cross-platform applications used by billions of people, the foundations of the entire computing stack are being rewritten in Rust. Unfortunately, most of it is done...
Project/Tooling Updates
2026-06-10
~6 min read
kerkour.com
Threads were designed to parallelize compute-intensive tasks. However, these days, a lot of applications (such as a network scanner) are I/O (Input / Output) intensive. Thus, threads have two significant problems: They use a lot of memory (...
Observations/Thoughts
2026-06-03
~8 min read