New "anatomy of a bug" write-up: why CFXMLParser crashes on a 7-byte input? seriot.ch/security/cfx...
Nicolas Seriot
@nst021.bsky.social
Unintended computations. Sideways thinking. Rigorous craft.
New short write-up! For years, four Mach calls could reboot macOS and iOS devices because two lines in XNU were in the wrong order. seriot.ch/security/ipc...
What if Jira, Unicode, basic text utilities or even a printer can compute far beyond their intended role? At hack_lu 2026, I'll present UNINTENDED COMPUTATIONS: from unexpected computers to a security methodology for finding hidden execution surfaces. 2026.hack.lu/agenda/
Paged Out! #9 features two or my articles: 🧩 Computiles: 10 tiles, designed with my son Émilien, that enforce binary arithmetic through geometry. 💻 An Unexpected Computer: universal computation from echo, ed, test and exec. Free PDF: pagedout.institute @pagedout.bsky.social
I built Cartopolis. Today's Switzerland rendered as 1999-style GIFs. seriot.ch/cartopolis/ No filters. Client-side rasterization from vector packs. Fully static architecture. seriot.ch/drawing/cart... Bake your own region using github.com/nst/Cartopolis @openstreetmap.bsky.social
"Finis tes pesticides sinon la FNSEA sera très en colère !"
I've been wondering for a while if anything in Unicode could accidentally compute. I've just shown that @unicode.org UTS#35 transliteration rules are universal, computing Collatz with just 3 rewrite rules running on stock ICU, shipped with every major OS. seriot.ch/computation/...
@atlassian.bsky.social Jira is actually Turing-complete, after all. I've built the proof the folklore was missing. seriot.ch/computation/...
RFC Esolang is a new programming language, in which the specification document IS the source code. esolangs.org/wiki/RFCEsol... Requirement levels like MUST, SHOULD, and MAY act as control flow. Executing RFC 9379 outputs the powers of two. Pre-existing RFCs form the standard library.
I’ve updated ScreenTime: seriot.ch/screentime/ It’s a tiny macOS utility that creates a movie from automated screenshots. Let me know whether it works for you.
Paged Out! #8 is out! pagedout.institute @pagedout.bsky.social In "An AWKward Modem" (p. 28), I show how to write a tiny modem in 5 lines of AWK and shift it into the near-ultrasonic range. 🔊
Thank you for nominating my Print to Play article :) I also completely agree with you about the LNK talk at Black Alps.
@cryptax.bsky.social · 10mo agoBest talks, papers, CTF challenges, tools I encountered in the second half of 2025: cryptax.github.io/nomination-2... Congratulations to those who are listed, and kudos to others :) cc: @trufae.bsky.social @uybhys.bsky.social @nst021.bsky.social @synacktiv.com
My colleague Marc-Olivier Fleury wrote an article about how we are guiding the transition of Swissquote's software architecture to Self-Contained Systems using Fitness Functions at scale: medium.com/swissquote-e...
Supporting the transition to Self-Contained Systems using Architecture Fitness Functions at Scale
Hello, my name is Marc-Olivier Fleury, I am a Principal Software Engineer at Swissquote. My team helps our engineering teams build software…
medium.com
Acompanhe já a live, rolando palestra do @mauricioszabo.bsky.social agora e teremos ainda muito mais depois! www.youtube.com/watch?v=bO4B...
GambiConf 2025
YouTube video by GambiConf
youtube.com
PostScript Brainfuck interpreter down from 6 lines to 5 :-) github.com/nst/bfps Did I mention how much I love PostScript?
Paged Out!, a free mag of one-page reads on programming and hacking, has just release its #7 issue. Learn how to install a Tic-Tac-Toe game on your printer by copy-pasting a few lines of PostScript from my “Print to Play” article (page 38). #hacking #printers #programming #postscript
Paged Out!@pagedout.bsky.social · 12mo agopagedout.institute ← we've just released Paged Out! zine Issue #7 pagedout.institute/download/Pag... ← direct link lulu.com/search?page=... ← prints for zine collectors pagedout.institute/download/Pag... ← issue wallpaper Enjoy! Please please please share to spread the news - thank you!
I turned a dusty family puzzle into code. A 🧩 generator, solver and visualizer. Small, documented, and fun to hack. Give it a ⭐ github.com/nst/EdgeMatc... #Puzzles #Python #Algorithms
Good news about the cutting-edge AI tools from the $3-trillion-dollar company.
Curious about passkeys? I created a quick PoC with Claude seriot.ch/pk/pk.php Then I sniffed the network with Charles and documented the protocol informally seriot.ch/pk/202508_pa... I also identified a few security smells.
Swissquote has launched official support for GrapheneOS for their main app instead of it only being available for Yuh: play.google.com/store/apps/d... > What’s new > - We now officially support GrapheneOS! > - Bug fixes and minor improvements They're verifying GrapheneOS via hardware attestation.
Swissquote - Apps on Google Play
Trade, invest and bank! Your all-in-one banking solution for smarter finances.
play.google.com
Releasing a curated list of my finest mountain hikes and races, with GPX files available for each route. seriot.ch/mountains/to... More to come, feedbacks are welcome!
Convert several JPG files into one PDF file with magick *.jpg x.pdf I wish I had known that earlier! quickies.seriot.ch?id=631
Mon talk à @lu.voxxeddays.com sur la programmation en langage PostScript est disponible sur YouTube en français www.youtube.com/watch?v=2ree... Au menu: - histoire, principes et environnement - jeux sur imprimante et dans GhostScript - code golfing, sécurité Merci à @zepag.fr et toute l'équipe!
Can't wait to present in Brazil 🇧🇷 and meet crazy, like-minded artists, developers and hackers 😃
Mambi@gambiconf.dev · last yr.Talk "Games in PostScript – Play Chess Against Your Printer" by @nst021.bsky.social (in 🇺🇸) Write games in PostScript, the '80s printer language. Sokoban & Tetris running on desktop, Tic-Tac-Toe & Chess on printer, printer vs human.
