Building reproducibly is important for remote attestation but hard if artifacts contain signatures. I wrote about how we use ECDSA public key recovery to create secure, reproducible signatures, without anyone knowing a private key. katexochen.aro.bz/posts/reprod... #ReproducibleBuilds #Cryptography

> [TEEs] and in general hardware attestation are just f***d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it words.filippo.io/crqc-timeline/ #ConfidentialComputing #pqc

Recordings of OC3 2026 (Open Confidential Computing Conference) are now available: www.youtube.com/playlist?lis... #ConfidentialComputing #Cloud #CloudSecurity #AI

BadAML exploits host-supplied ACPI tables to get arbitrary code execution inside confidential VMs. We reproduced the attack end-to-end against our stack and built an AML sandbox to stop it. katexochen.aro.bz/posts/badaml/ #ConfidentialComputing #Security #Linux

Call for Participation: Nix and NixOS devroom @ FOSDEM 2026 The devroom provides a welcoming space for the Nix community and its extended projects, to give time and space for both technical and non-technical talks about Nix/NixOS. discourse.nixos.org/t/call-for-p... #Nix #NixOS #FOSDEM #fosdem2026

Announcing: Transylvania Sprint - One Week of Nix/OS Hacking Date: October 6-11, 2025 Location: Recenter House, Adrianu Mare, Romania Registration is open! More details at: transylvaniasprint.org #nixos #nix #OpenSource #Hackathon #Romania #Events #Sprint #Transylvania

Let's take a look at the #NixOS 25.05 release notes. 👀 Starting on the NixOS side of things: nixos-rebuild-ng, a full rewrite of nixos-rebuild in Python, is available for testing. You can enable it by setting 'system.rebuild.enableNg' in your configuration (to replace the old nixos-rebuild), [1/x]

NixOS 25.05 "Warbler" is now released! 🎉 nixos.org/blog/announc... #NixOS #nixpkgs #nix #distro #openSource #linux

SaltSprint, a new NixOS hackathon in Halle (Saale), Germany, announced! From June 30 – July 4, 2025, a week of intense Nix hacking, collaboration, and knowledge sharing in central Germany. saltsprint.org The sprint is hosted by flyingcircus.io. #Nix #NixOS #OpenSource #Hackathon

Nice, screen sharing with chromium + pipewire fixed again on NixOS. https://github.com/NixOS/nixpkgs/pull/398963 Commit is already included in all unstable channels. #NixOS #nixpkgs

"You don't have to chase the commercial endeavor, but it may come [...] to you. [...] If you want there to be peace in the project, give people extension points where necessary, so that everything doesn't have to flow into core in order to feel like it's a first class citizen."[email protected]