Geoffroy Couprie

@geal
1,006 Followers
182 Following
150 Posts
messing with Rust and crypto at Proton, ex Apollo GraphQL
Making and breaking networking tools in Rust
Works on nom, biscuit, sōzu, lapin - he/him
wwwhttp://geoffroycouprie.com/
bloghttps://unhandledexpression.com/
githubhttps://github.com/Geal
twitterhttps://twitter.com/gcouprie
The Mythical Man Moth: essays on cryptid engineering.

🎓💪CS Prof Lance Fortnow showing how to fight back

"Don't preemptively change your policies and your values. Too many universities are abandoning DEI, changing their curriculum, freezing hiring of faculty and students, in anticipation of challenges to come. […] participate in Stand Up for Science, reach out to our representatives at the national & state level, and just be part of the resistance. We can't let bullies dictate our future, we must control it for ourselves. ”

https://blog.computationalcomplexity.org/2025/03/taking-stand.html

Taking a Stand

On February 20th we got the news from the National Science Foundation Algorithms Foundations Team that long-time NSF program director Tracy ...

Biscuit is joining the eclipse foundation

https://www.biscuitsec.org/blog/joining-eclipse/

Joining the Eclipse Foundation | Biscuit

Good news everyone! After a lot of work and a new version of the specification, we have released new beta versions of biscuit-rust, biscuit-cli and biscuit-web-components.

- [biscuit v3.3](https://www.biscuitsec.org/blog/biscuit-3-3/)
- [biscuit-auth v6.0.0-beta.1](https://crates.io/crates/biscuit-auth/6.0.0-beta.1)
- [biscuit-cli v0.6.0-beta.1](https://crates.io/crates/biscuit-cli/0.6.0-beta.1)
- [biscuit-auth/web-components 0.7.0-beta.1](https://www.npmjs.com/package/@biscuit-auth/web-components/v/0.7.0-beta.1)

The website has been updated, so all the new features are available in the online tooling section

Biscuit 3.3 | Biscuit

Version 3.3.0 of the biscuit specification has been released

Early feedback showed that the upgrade from 7.x to 8.0.0 is mostly painless: It moves from the function based parsers to trait based, so instead of combinator(arg)(input), you would write combinator(arg).parse(input)
This is also the release where I introduce nom-language, a crate focused on language parsers
https://crates.io/crates/nom-language
This one will be able to evolve a bit faster than nom, and include a lot of specific tools, like the new precedence parsing combinator
crates.io: Rust Package Registry

this release is a fundamental rewrite of nom, to integrate GATs into its Parser trait, to ensure we don't generate code we will never use, like errors that will be discarded immediately, resulting in interesting speedups
It is time! After 2 years, a new major release of nom, the rust parser combinators library!
It comes with a lot of interesting points check it out
https://unhandledexpression.com/nom-8/
With profound sadness, I share that we've lost our good friend and colleague Brendan McAdams (@rit ). A brilliant programmer and cherished member of our community, Brendan was a core contributor to Perl and someone who stood firmly by his principles throughout his career. Please boost so others may know his name and legacy. (1/8)

Hi everyone. Today we have issued a security advisory on the biscuit spec, and released security updates for all the libraries maintained by the core team.
This fixes a vulnerability related to 3rd-party blocks.

tl;dr: this affects third-party blocks containing `trusting pk` annotations, only when they're generated through an untrusted block request.

More details in the following blog post https://www.biscuitsec.org/blog/public-key-confusion/

Security advisory: public key confusion in third-party blocks | Biscuit

A potential security issue has been detected and addressed