TPM PCRs are scarce, so systemd allocates PCR-like registers in the TPM's NV memory. The way these NvPCRs are securely anchored was reworked in v262. I wrote up how the new design works by rebuilding an NvPCR from scratch against a software TPM: katexochen.aro.bz/posts/system...

Building reproducibly is important for remote attestation but hard if artifacts contain signatures. I wrote about how we use ECDSA public key recovery to create secure, reproducible signatures, without anyone knowing a private key. katexochen.aro.bz/posts/reprod... #ReproducibleBuilds #Cryptography

> [TEEs] and in general hardware attestation are just f***d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it words.filippo.io/crqc-timeline/ #ConfidentialComputing #pqc

A Cryptography Engineer’s Perspective on Quantum Computing Timelines

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

words.filippo.io

Recordings of OC3 2026 (Open Confidential Computing Conference) are now available: www.youtube.com/playlist?lis... #ConfidentialComputing #Cloud #CloudSecurity #AI

OC3 2026 - YouTube

OC3 is the conference that brings together the confidential computing community. The event is hosted and organized by Edgeless Systems.

youtube.com

BadAML exploits host-supplied ACPI tables to get arbitrary code execution inside confidential VMs. We reproduced the attack end-to-end against our stack and built an AML sandbox to stop it. katexochen.aro.bz/posts/badaml/ #ConfidentialComputing #Security #Linux

Call for Participation: Nix and NixOS devroom @ FOSDEM 2026 The devroom provides a welcoming space for the Nix community and its extended projects, to give time and space for both technical and non-technical talks about Nix/NixOS. discourse.nixos.org/t/call-for-p... #Nix #NixOS #FOSDEM #fosdem2026

Call for Participation: Nix and NixOS devroom @ FOSDEM 2026

We are pleased to announce the Nix and NixOS devroom will return for another year at FOSDEM 2026, and with that comes the Call for Participation! The Nix and NixOS devroom aims to provide a welcoming...

discourse.nixos.org

Announcing: Transylvania Sprint - One Week of Nix/OS Hacking Date: October 6-11, 2025 Location: Recenter House, Adrianu Mare, Romania Registration is open! More details at: transylvaniasprint.org #nixos #nix #OpenSource #Hackathon #Romania #Events #Sprint #Transylvania

Let's take a look at the #NixOS 25.05 release notes. 👀 Starting on the NixOS side of things: nixos-rebuild-ng, a full rewrite of nixos-rebuild in Python, is available for testing. You can enable it by setting 'system.rebuild.enableNg' in your configuration (to replace the old nixos-rebuild), [1/x]

NixOS 25.05 "Warbler" is now released! 🎉 nixos.org/blog/announc... #NixOS #nixpkgs #nix #distro #openSource #linux

SaltSprint, a new NixOS hackathon in Halle (Saale), Germany, announced! From June 30 – July 4, 2025, a week of intense Nix hacking, collaboration, and knowledge sharing in central Germany. saltsprint.org The sprint is hosted by flyingcircus.io. #Nix #NixOS #OpenSource #Hackathon

Nice, screen sharing with chromium + pipewire fixed again on NixOS. https://github.com/NixOS/nixpkgs/pull/398963 Commit is already included in all unstable channels. #NixOS #nixpkgs

chromium: fix SIGKILL when trying to screenshare with PipeWire 1.4 by emilylange · Pull Request #398963 · NixOS/nixpkgs

Fixes #390975. See https://chromium-review.googlesource.com/c/chromium/src/+/6421030. Electron is not affected by this because it is built with use_cfi=false. Things done Built on platform(s) x8...

github.com

"You don't have to chase the commercial endeavor, but it may come [...] to you. [...] If you want there to be peace in the project, give people extension points where necessary, so that everything doesn't have to flow into core in order to feel like it's a first class citizen."-@kelseyhightower.com