We're excited to share that Firefox now uses zlib-rs for gzip (de)compression. This has both performance and safety advantages, but it took a while to get zlib-rs into production. Read why in Folkert's blog: https://trifectatech.org/blog/zlib-rs-in-firefox/
Thanks to @glandium, @gabrielesvelto, Bobby Holley, @nlnet, @sovtechfund, Chainguard, Astral / @charliermarsh, @mozilla, @ProssimoISRG
I'm a huge fan of (and a small contributor to) Quint, so it makes me happy to see that it helped hardening Turso and also uncovered dozens of bugs in SQLite.
https://turso.tech/blog/how-we-used-quint-to-find-over-10-bugs-in-sqlite
CVE-2026-0073 is a funny remote authentication bypass in Android ADB service.
It shows once again that complex cryptographic barriers, like the mTLS layer for ADB-over-TCP, are easier to bypass via logic/language issues rather than to directly crack.
C libraries in particular, with their ad-hoc error-handling conventions and implicit integer/boolean logic mixups, make it way to easy to fall into such traps.
The full writeup is an interesting read:
https://barghest.asia/blog/cve-2026-0073-adb-tls-auth-bypass/
Package Manager CWEs - Recurring weakness classes in package managers
In case you where wondering what most bit-flips look like this was sent by a colleague some time ago.
10 years of #rustlang at #FOSDEM — and what a journey! 🦀
From a small discussion space to a packed 500+ seat devroom, the community keeps growing. Read this guest recap from organizers Ewan Higgs & @lucab on our blog where they reflect on a decade of Rust at FOSDEM — and what’s changed along the way.
https://rustfoundation.org/media/guest-blog-fosdem-2026-rust-devroom-in-review/
Here is my latest article on the world of databases: https://www.cs.cmu.edu/~pavlo/blog/2026/01/2025-databases-retrospective.html
All the hot topics from the last year:
• More Postgres action!
• MCP for everyone!
• MongoDB gets litigious with FerretDB!
• File formats!
• Market movements!
• The richest person in the world!
I'm giving a talk in the Rust devroom at FOSDEM this year! I'll be talking in-depth about how Roto interfaces with Rust. Expect lots of unsafe code, almost-segfaults and a deep dive into type representations.
Here's the link to the talk information: https://fosdem.org/2026/schedule/event/rust-roto-calling-jit-compiled-scripts/
Accepted developer rooms https://fosdem.org/2026/news/2025-10-31-devrooms-announced/
The write-up of my new graph layout algorithm for SpiderMonkey is finally live.
We built a custom layout algorithm for JS and WASM that follows the structure of the source code. No more spaghetti nightmares from Graphviz, and thousands of times faster.
Another interesting example of modern computer assistance in mathematics, again involving the https://www.erdosproblems.com/ site: Problem #707 (https://www.erdosproblems.com/707), previously marked as "open", is now "disproved" - with the disproof formalized in Lean : https://borisalexeev.com/papers/erdos707.html . But the path towards that disproof was quite unusual, not fitting neatly into any of the standard narratives about AI in mathematics:
* The authors' initial proof used some numerical computer experiments, but did not get much help from LLMs initially, with even the code generated by hand.
* The authors then found a disproof by conventional human arguments (and also obtained some stronger results of a similar nature), and did not turn up any prior solution to this problem in their literature searches. Even the modern AI deep research tools did not locate any hits.
* Nevertheless, as part of the process of writing the paper, they found a solution to the problem (slightly different from theirs) had been obtained by Hall, thirty years before Erdos even posed the problem!
* Perturbed by this, the authors then decided to formalize both their result and Hall's result in Lean. (1/3)
A really nice article about profiling CUDA kernels via eBPF and USDT probes, from which I just learned that the profiling interface (CUPTI) supports injecting custom instrumentation libraries:
https://www.polarsignals.com/blog/posts/2025/10/22/gpu-profiling
We replaced @mozilla Firefox’s QUIC UDP I/O stack with a modern memory-safe implementation using quinn-udp. Instead of limited and dated system calls like sendto and recvfrom, Firefox now uses modern OS specific system calls across all major platforms, resulting in HTTP/3 QUIC throughput improvements when CPU bound, and enabling QUIC ECN support across all major platforms.
🎉 Happy to see that the new Rust evaluator/backend for Quint just landed in the latest 0.24.0 release!
All the details about this new simulator are in the initial plan announcement at https://informal.systems/blog/quint-deserves-rust
New release of zlib-rs!
We are now (to our knowledge) the fastest zlib implementation, beating C implementations like zlib-ng.
What is zlib? zlib likely (de)compressed the page you're reading right now!
https://trifectatech.org/blog/zlib-rs-is-faster-than-c/
With thanks to @folkertdev @bjorn3 @josh @awakecoding and many others!
My FOSDEM talk has been published! 🎉
🦀 Bringing Terminal Aesthetics to the Web With Rust (and Vice Versa)
▶️ Watch here: https://www.youtube.com/watch?v=iepbyYrF_YQ
I announced my latest project "**Ratzilla**" at FOSDEM yesterday! 🥳
➡️ Demo: https://orhun.dev/ratzilla/demo/
🦀 Build terminal-themed web applications with Rust and WebAssembly
👨🍳 Powered by @ratatui_rs
⭐ GitHub: https://github.com/orhun/ratzilla
#rustlang #ratatui #terminal #opensource #webassembly #terminal #FOSDEM #fosdem2025
