Rust has the Rust book which gives you a great overview of all of Rust. Brown University recently made it interactive and it's quite fun to go through that. But Go doesn't have anything like that. I g
The full firehose, with digest picks marked.
Everything our pipeline collected. Use the section tabs and filters to narrow — look for the In digest badge to see which stories actually made it into the newsletter.
Escape analysis is how Go's compiler decides where your variables live — Stack or Heap. Variables that stay local = Stack (fast, ...
Proposal Details By default, a container/hash.Map ( 69559) behaves like the built-in maps during iteration, yielding its items in a random order. Some
v1.26 basically continues a pattern we've been seeing: most of the work is going into the runtime, toolchain, scheduler, garbage collector, and standard lib rather than new features. Do we prefer that
Researchers found hijacked npm packages and 16 Go packages using fake font files and VS Code tasks to deploy a Python infostealer.
This is the weekly thread for Small Projects. The point of this thread is to have looser posting standards than the main board. As such, projects are pretty much only removed from here by the mods for
Welcome! Here we do all things programming. Mostly in Golang, but sometimes in other languages. My main objective is to write ...
Model router for agentic systems. Routes every prompt to the right model in <50ms. Cut costs 40-70% with just an endpoint change.
LinkedIn: https://www.linkedin.com/in/jeffersonmarchetti/ 🎙️ Novo na transmissão ou querendo melhorar? Confira o StreamYard ...
Why I Am Writing This: A PHP Developer Crossing Into Go I am a PHP developer. I have...
I just released https:// github.com/gokrazy/rsync in version v0.3.4, which contains a couple of bug fixes 🥳 In case you’re unfamiliar: this library (and program) implements rsync client and serve

Let’s talk about nil pointer checks in Go. You want to prevent panics in production, but that doesn’t start with a deferred recover. It starts with defensive programming. Check your inputs, check
Hey guys, I'm writing a Redis server clone in Go for learning. The real redis is famously single-threaded and uses an event loop, but my current implementation just spins up a new goroutine for every
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
A Go interview is rarely about syntax alone. Yes, you should know how slices work, how goroutines...
Request coalescing is a pretty neat technique in distsys where you gate a cache with a singleflight. It prevents cache stampedes where multiple concurrent requests for the same key miss the cache and
Agentic orchestrator for parallel coding agents — plans tasks, spawns agents, and autonomously handles CI fixes, merge conflicts, and code reviews.
Last post I was debating concurrency models, ended up going with owner goroutine based on the advice I got. Benchmarked it against mutex and yeah the reads are way slower: |Benchmark|Owner Goroutine|R

A system-level language with Go syntax and a familiar standard library.
🌩「自选优选 IP」测试 Cloudflare CDN 延迟和速度,获取最快 IP !当然也支持其他 CDN / 多个解析 IP 的网站
Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions
Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster in go.temporal.io/server
Free5GC AMF is vulnerable to DoS through its HandleRegistrationComplete function in github.com/free5gc/amf
ZITADEL: Missing client id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation) in github.com/zitadel/zitadel
Mattermost doesn't validate the X-Requested-With header on the burn-on-read reveal endpoint in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional ve
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost in github.com/modelcontextprotocol/go-sdk
Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon
Gogs has an Open Redirect via redirect to in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
