10 papers
Rust Coreutils: Rebuilding Unix Foundations in a Modern Language
Sylvestre Ledru, Samuel Tardieu, Stefano Zacchiroli
GNU core utilities (coreutils) is a crucial package in modern UNIX systems. It comprises around 100 fundamental commands---like ls, cp, and cat---which run every day on millions of…
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation
Julien Malka, Aman Sharma, Martin Monperrus +2
Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regar…
Understanding Build Reproducibility in the F-Droid Ecosystem
Denise Nanni, Julien Malka, Stefano Zacchiroli +2
The security of open source applications benefits considerably from the possibility of rebuilding their source and verifying the output. F-Droid, a prominent distribution for open…
Mutating the "Immutable": A Large-Scale Study of Git Tag Alterations
Solal Rapaport, Laurent Pautet, Samuel Tardieu +2
Git tags are commonly viewed as immutable references in software development, marking releases and specific repository states that underpin build reproducibility and software suppl…
Agentic Very Much! Adoption of Coding Agent in New GitHub Projects
Romain Robbes, Théo Matricon, Thomas Degueule +2
In previous work, we investigated the adoption of coding agents in GitHub projects, finding that it was very significant. This study follows this line of work, but analyses new pro…
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Minh-Luân Nguyen, Olivier Levillain, Julien Malka +2
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even w…