BREAKING
Sylvain Kerkour - Professional Troublemaker Author of Black Hat Rust - 4,300+ GitHub Stars Rust Supply Chain Security Watchdog "Async Rust: The New Billion-Dollar Mistake?" - Hacker News Front Page ChaCha20-BLAKE3 AEAD Cipher - Open Source Cryptography (Ab)using technology for fun and profit since day one Bloom - Open Technologies for a De-Googled Life Newsletter: kerkour.com - Programming, Hacking, Entrepreneurship GitHub: @skerkour - Twitter: @z0mbie42 Sylvain Kerkour - Professional Troublemaker Author of Black Hat Rust - 4,300+ GitHub Stars Rust Supply Chain Security Watchdog "Async Rust: The New Billion-Dollar Mistake?" - Hacker News Front Page ChaCha20-BLAKE3 AEAD Cipher - Open Source Cryptography (Ab)using technology for fun and profit since day one Bloom - Open Technologies for a De-Googled Life Newsletter: kerkour.com - Programming, Hacking, Entrepreneurship GitHub: @skerkour - Twitter: @z0mbie42
Sylvain Kerkour - Professional Troublemaker, Rust Security Engineer
Profile // Engineer & Author

SylvainKerkour

"(Ab)using technology for fun & profit"

French software engineer, security researcher, and author who builds offensive-security tools in Rust, ships open-source cryptography, and then writes about all of it without pulling punches.

Rust Engineer Security Researcher Author Open Source
4.3K
GitHub Stars (Black Hat Rust)
430
Forks on BHR Repo
1.5K
Bloom Stars
3
Core Languages (Rust, Go, TS)
4.3K
Stars on Black Hat Rust

The companion code repository for his offensive security Rust book - one of the most starred niche security books on GitHub.

3
Topics He Covers

Programming. Hacking. Entrepreneurship. Three fields, one newsletter, zero filler.

42
In His Handle

The answer to life, the universe, and everything. The z0mbie part is on you to figure out.

Things Worth Knowing

01

He runs his own Mastodon/ActivityPub instance at social.kerkour.com - not just advocating for decentralization but actually hosting it on his own infrastructure. That is the difference between believing something and doing something.

02

Built Bloom - an end-to-end encrypted Notes, Files, Calendar, and Contacts alternative to Google - before the "de-Google your life" movement became a consumer trend. He saw it coming and built the tool before the demand existed.

03

The kerkour.com website source code is public on GitHub at 483 stars. The site itself has more stars than most developers' entire GitHub output. He open-sourced the thing that makes the other things possible.

04

He has written about backdooring Rust crates in enough detail that you would want him writing your threat models and not writing code for your competitors. That level of published adversarial knowledge is both rare and deliberate.

Open Tech, Real Security, No Gatekeeping

Kerkour's stated aspiration is to empower developers and organizations with open, privacy-respecting technologies while raising the bar for secure software development - with the Rust ecosystem as the current proving ground.

The through-line across Bloom, Black Hat Rust, the supply chain research, and the newsletter is consistent: he wants software to be more honest about what it does, more resistant to the attacks that are actually coming, and more accessible to developers who want to build things that last.

That is not a product pitch. It is a worldview. The troublemaker label is the packaging; this is the content.

  • "Async Rust: The new billion-dollar mistake?"
  • "Rust has a HUGE supply chain security problem"
  • "Backdooring Rust crates for fun and profit"
  • "Supply chain nightmare: How Rust will be attacked"
  • ChaCha20-BLAKE3 AEAD cipher implementation
  • Jul 2024 - Supply chain security piece goes viral in Rust community
  • Jul 2024 - Async Rust article hits Hacker News front page, hundreds of comments
  • 2024 - Active newsletter publishing at kerkour.com