Thierry Laurion
Propriétaire at Insurgo, Open Technologies/Technologies Libres
Sainte-Adèle, Quebec, Canada
Summary
🤩
Rockstar🎓
Top SchoolThierry Laurion is an open-source security engineer and entrepreneur with two decades of experience spanning network security, IDS tuning, firmware integrity, and trusted computing. As owner of Insurgo / Technologies Libres and long-time maintainer of the linuxboot/heads project, he shipped the PrivacyBeast X230—one of the first tamper-evident, QubesOS-certified laptops—and built reproducible build pipelines and user-owned key workflows that foreground user sovereignty. His work extends measured boot into Secure/Verified Boot realms, designing rollback-resilient update paths and remote attestation tooling for auditable firmware. A pragmatic hardware hacker and community leader, he has ported coreboot+Heads to uncommon platforms like the Talos‑2 and led NLnet-funded efforts (Accessible Security, Authenticated Heads, Flashkeeper). He blends deep hands-on firmware and DevOps contributions with public speaking and training to democratize trustworthy, transparent boot firmware.
10 years of coding experience
5 years of employment as a software developer
Computer Science, Computer Science at Collège Lionel-GroulxPsychology, Psychology at UQAM | Université du Québec à Montréal
Github Skills (15)
firmware10
flash10
sh10
script10
shell10
perl10
scripting10
suricata10
boot10
security10
makefile9
tpm8
devops8
database-management7
iptables6
Programming languages (23)
Github contributions (5)
linuxboot/heads
Mar 2018 - Jan 2023
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
Role in this project:
Embedded Systems Engineer
Embedded Systems EngineerContributions:671 reviews, 442 commits, 1005 PRs in 4 years 11 months
Contributions summary:Thierry's commits primarily focus on modifying and adding scripts for flashing firmware to specific hardware configurations within the `heads` repository. They have developed scripts for flashing ROMs related to the kgpe-d16 and x230 boards, including setting configurations and handling potential errors. The contributions include adding support for new hardware, modifying boot environments, and integrating flashing scripts, indicating expertise in firmware modification and hardware support.
romlaptopsfirecrackerintegrityluks
inverse-inc/packetfence
Jun 2016 - May 2017
PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:137 commits, 47 PRs, 150 pushes in 11 months
Contributions summary:Thierry primarily focused on enhancing the security and functionality of the PacketFence network access control solution. Their contributions included implementing a new syslog parser for Suricata (suricata_md5), which involved modifying Perl code and unit tests. They also made changes to the administration guide and improved the build and deployment processes through modifications to shell scripts and configuration files. The user also worked on integrating best practices related to database backups and security headers.
heterogeneous-networkslayer-2captivecentralizedsecure
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.