A collection of interconnected notes, ideas, and evergreen knowledge — growing and evolving over time.
Abstract The security of open source applications benefits considerably from the possibility of rebuilding their source and verifying the output. F-Droid, a...
Abstract Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard...
Abstract We report a large-scale empirical study of two aspects of software reproducibility — rebuildability and bitwise reproducibility — in the Nix package...
Announcement of the Bootstrap team I am relieved that we have finally announced the bootstrap team, after a long stretch during which the task was making...
Presentation of our Lila paper in the Data and Tool Showcase track of MSR 2026 in Rio de Janeiro, where it received the MSR 2026 FOSS Impact Award.
On me not writing more of those notes It was my ambition to write some informal reports of the Steering Committee action more often, because I think it's...
Alias cafkafk. Member of the NixOS Steering Committee in 2026.
Alias K900. Member of the NixOS Steering Committee in 2026.
Alias tomberek. Member of the NixOS Steering Committee in 2025 and 2026.
Member of the NixOS Steering Committee in 2025 and 2026.
Member of the NixOS Steering Committee in 2026.
Abstract We present the first-ever empirical study of AI agents offered free money with no strings attached. Eleven agents were given a $5 credit card and...
Joint session of the NixOS Foundation and the Steering Committee at Planet Nix 2026 in Pasadena (co-located with SCaLE 23x), together with Ron Efroni Rotman,...
Lightning talk with Arnout Engelen in the Nix and NixOS devroom, presenting Lila, our decentralized system for monitoring build reproducibility across the...
This contains a rework of my initial proposal to rebuild the moderation team, informed by the comments and remarks of the other members of the Steering...
Abstract Ensuring the integrity of software build artifacts is an increasingly important concern for modern software engineering, driven by increasingly...
Abstract The reproducibility of software environments is a critical concern in modern software engineering, with ramifications ranging from the effectiveness...
This part of the report have been written before the Steering Committee meeting on Dec 4: You may have noticed that I have not published a SC report in the...
I designed this after discussions with K900, Philip and other members of the community. My main driver for writing this proposal is that I don't think the SC...
Frustrations This second week was filled with a mix of frustration and hope. Frustration because of course when I decided to run for SC I was ready to dive...
Governance body of the NixOS community. Created by the NixOS Constitutional Assembly after community crisis. Contains 7 elected members.
One week has passed since I started my 1 year mandate in the NixOS Steering Committee. My most essential concern for this mandate is being able to restore the...
Abstract In March 2024, a backdoor was discovered in xz, a compression software widely used across Linux distributions. This work analyzes the backdoor's...
About me I'm excited to share that I'm running for a seat on the NixOS Steering Committee. Before diving into my motivations, I'd like to take a moment to...
Developer in the Nix core team. NixOS Steering Committee member in 2025 and 2026.
Joint panel of the Nix Steering Committee and the NixOS Foundation board at NixCon 2025 in Rapperswil-Jona, on the state and future of the project's governance.
Panel discussion on software supply chain security in the Nix ecosystem, at NixCon 2025 in Rapperswil-Jona, together with John Ericson, Arian van Putten and...
The problem of slides distribution... As a PhD student, I often do presentations. A lot of presentations. In 2024 alone, I gave about 15 talks in different...
Presentation of our MSR 2025 paper on large-scale build reproducibility in the Nix ecosystem, in Ottawa, where it received the ACM SIGSOFT Distinguished Paper...
Introduction In March 2024, a backdoor was discovered in xz, a (de)-compression software that is regularly used at the core of Linux distributions to unpack...
How reproducible is NixOS? In this talk at FOSDEM 2025, I present the results of our large-scale study of bitwise reproducibility in the NixOS distribution,...
Build reproducibility is often considered as a de facto feature provided by functional package managers like Nix. Although the functional package manager model...
Abstract Reproducible Builds (R-B) guarantee that rebuilding a software package from source leads to bitwise identical artifacts. R-B is a promising approach...
A talk about leveraging Nix and systemd portable services to create portable software bills of materials, presented at All Systems Go 2024.
Abstract Functional package managers (FPMs) and reproducible builds (R-B) are technologies and methodologies that are conceptually very different from the...
Abstract Modern software engineering builds up on the composability of software components, that rely on more and more direct and transitive dependencies to...
Presentation of our ICSE-NIER'24 paper on how functional package managers provide the tooling to make build environments reproducible in space and time, with a...
A talk about public calendar aggregation using Linkal, presented at FOSDEM 2024.
A talk about debugging stage-1 systemd using GDB and the NixOS test framework, presented at FOSDEM 2024.
A talk about automatic boot assessment using boot counting in NixOS, presented at FOSDEM 2024.
A talk about using Clevis and Tang for unattended boot of encrypted NixOS systems, presented at FOSDEM 2024.
PhD student at the Polytechnic Institute of Paris researching software supply chain security. Former theoretical CS student at École Normale Supérieure. NixOS...