Sébastien Bardin retweeted
Hey folks,
Brace yourself as tickets for GreHack 2026 will be available This tuesday, Sep 29 at 10 a.m. UTC+2!
You can buy your tickets for the conference and CTF and reserve your workshop 🎟️
Workshops will be announced this weekend.
See you tuesday for the ticket sale!
Sébastien Bardin retweeted
News at 12: if you spend a few hundred billion on emulating human language and inner monologue, you get a system that closely mimics human language and inner monologue.
Sébastien Bardin retweeted
🔎 Can CI stop a backdoor before it lands?
💡 Our #ASE26 paper introduces Lily! It uses fuzzing to detect backdoor injections across commits/releases and pinpoint suspect code.
Preprint + artifact now available ↓
📄 binsec.github.io/assets/publ…
🧪 zenodo.org/records/21390730
Sébastien Bardin retweeted
🚨 Postdoc opening (24 months) in software security & fuzzing!
Join our @BinsecTool team @CEA_List to work on smarter fuzzing for supply‑chain security
📍 Paris‑Saclay 🇫🇷
🔗 Apply: binsec.github.io/jobs/open/2…
#Postdoc #Cybersecurity #Fuzzing #BinaryAnalysis
Want to join ACSAC 2026 and present your last results and work in progress? The deadline for posters and wip is in three days (Sept. 19, AOE) @ACSAC_Conf
acsac.org/2026/submissions/p…
Sébastien Bardin retweeted
Congratulations to my coauthors Travis Hance, Laila Elbeheiry, and Yusuke Matsushita for receiving the Distinguished Paper and Artifact Awards at PLDI'26 for their great work on VerusBelt!
dl.acm.org/doi/10.1145/38083…
OCaml powered!
Jane Street showed the code that's made them billions, written in a language from 1996 that almost everyone else has abandoned.
Ron Minsky:
"type systems turn out to be a really good tool for catching a surprising number of mistakes"
the whole bet is on the type system. the compiler catches errors before the code even runs.
the Option type forces you to handle the case where a value is missing. a skipped null check that crashes Python in prod simply won't compile in OCaml.
"the compiler essentially forces you to do case analysis"
in trading a single bug costs millions, so the priority is reliability, not speed of development.
33 minutes, and you'll see the code that holds up the billions of one of the most secretive funds on Wall Street.
bookmark it. this is worth more than any $500 vibe-coding course. ↓
Sébastien Bardin retweeted
I admire Fabrice Bellard. He is almost certainly a better overall programmer than I am.
A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name.
He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping.
His name is Fabrice Bellard.
Here is the story, because almost nobody outside the systems programming world knows what one man has built.
Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code.
In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years.
Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it.
He was not done.
In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth.
He kept going.
In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real.
In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark.
Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory.
Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org
He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links.
A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet.
He is still shipping.
Sébastien Bardin retweeted
No contest? No problem: all these security firms are hiring:
- @asymmetric_re : asymmetric.re/careers?ashby_…
- @Certora : careers.certora.com/jobs/724…
- @chain_security : chainsecurity.com/jobs/block…
- @OpenZeppelin : openzeppelin.com/careers/ope…
- @trailofbits : apply.workable.com/trailofbi…
- @zellic_io : zellic-inc.notion.site/Secur…
I know firsthand that all of them have great people who will help you grow as a security researcher
Sébastien Bardin retweeted
The software that has been written so far is a tiny fraction of all software that will ever be written (likewise for hardware design), one of Adam Chlipala's many insightful observations. This caution against over-indexing on legacy code gives me hope that the power and potential of formal methods can be applied at scale to the development of new correct by construction software and hardware systems.
Sébastien Bardin retweeted
i love how people are saying "if we write a sufficiently detailed specification, the agent can write all our code"
do you know what writing a sufficiently detailed specification that deterministically maps to what a computer's actions is? it's coding
Looking for submitting your latest research at SAS 2026? Good news, submission deadline is extended to May 7, yet you still need paper registration by May 1 AoE (still some time left)
The Static Analysis Symposium (SAS) is taking place as a part of SPLASH/ISSTA this year! Consider submitting a paper, deadline *May 1st*, with special topics including Static Analysis and AI, and Static Analysis and Education:
conf.researchr.org/home/spla…
A special workshop celebrating Thomas Ball's 60th birthday and extraordinary impact in PL, SE, and formal methods will be held on June 16th at PLDI'26!
There is a great line up of speakers who will reflect on his work and lasting influence. Don't miss it! pldi26.sigplan.org/home/tb-6…
Sébastien Bardin retweeted
The Static Analysis Symposium (SAS) is taking place as a part of SPLASH/ISSTA this year! Consider submitting a paper, deadline *May 1st*, with special topics including Static Analysis and AI, and Static Analysis and Education:
conf.researchr.org/home/spla…
Sébastien Bardin retweeted
Replying to @Blackhoodie_RE
@Blackhoodie_RE will be at #BSidesLuxembourg, on May 6th with a training on Linux memory forensics 😍 Thank you to BSides Luxembourg and the Luxembourg House of Cyber for hosting us! Registration is now open blackhoodie.re/BSidesLuxembo…
Sébastien Bardin retweeted
Finding backdoors in software is like hunting for a needle that’s actively trying to hide. 🪡🕵️
Check out our @fosdem talk with @plumtrie on using fuzzing to automate the search!
📺 Watch: mirrors.dotsrc.org/fosdem/20…
📜 ICSE Paper: binsec.github.io/assets/publ…
Sébastien Bardin retweeted
Terence Tao: Formal Verification Breaks the Trust Barrier in Mathematics
Formal verification is transforming mathematical collaborations — enabling anonymous contributions, machine-checked proofs, and radically more precise scientific discussion.
Sébastien Bardin retweeted
RIP Tony Hoare. 😢
I only met him a couple times many years ago at MSR and was not accomplished enough at the time to have much useful to say, but he sure cast a long shadow over the field...
Sébastien Bardin retweeted
In case you're interested in AI for Math and don't already recognize Leonardo de Moura's name below.... he invented Lean at MSR a decade ago.
Give him a follow.
AI is writing a growing share of the world's software. No one is formally verifying any of it.
New essay: "When AI Writes the World's Software, Who Verifies It?"
leodemoura.github.io/blog/20…
Sébastien Bardin retweeted
Last week, we wrapped up the #NDSSSymposium2026. While we’re sad it’s over, we couldn’t be happier with how it went. This year we had:
🌏 600+ attendees representing 30+ countries
🧑🏫 10 amazing workshops
📝 190+ papers presented
We can’t wait to see you again next year!






























