Two advisories land against google.golang.org/grpc today: an xDS RBAC HTTP filter that skips lowercasing header names before matching, which can let a DENY rule be sidestepped, and a server-side panic on xDS-routed requests that arrive without either :authority or Host headers. Anyone running gRPC with xDS in front of it will want to check versions before the weekend. Elsewhere, a writeup revisits the concurrency bug that forced Let's Encrypt to revoke three million certificates, which pairs uncomfortably well with the day's other reading on least-privilege Go code.
Two advisories land against google.golang.org/grpc today: an xDS RBAC HTTP filter that skips lowercasing header names before matching, which can let a DENY rule be sidestepped, and a server-side panic on xDS-routed requests that arrive without either :authority or Host headers. Anyone running gRPC with xDS in front of it will want to check versions before the weekend. Elsewhere, a writeup revisits the concurrency bug that forced Let's Encrypt to revoke three million certificates, which pairs uncomfortably well with the day's other reading on least-privilege Go code.
I've been using pprof for years now, and I still can't believe the terminology used all over this tool and its docs isn't just some elaborate joke. golang cum largecumvalue
So I just built a tool for my tool for myself to solve my own problem regarding sshing to remote machine. Initially I wrote it in C because I really enjoy low level development. But later I migrated t
Thanks to @coderabbitai for sponsoring my open source work. Mostly fixes this time — 16 of them — plus 2 new features, a lot more tests, and much better docs. One more thing worth celebrating: min
I've been working on a concept idea (among many other ideas) of a richer quality index of go packages. It is based on a custom linter of mine, which it turn is somewhat of a merge of several linters i
Secure Go Code using the Principle of Least Privilege
I'm just wondering. Is this project dead? Please give us a sign of life. ^^
Join Utah Go User Group @ Lehi, US on Tue Oct 6
Microsoft ditched its own language for its own compiler — here’s the performance lesson every iOS developer should steal. Continue reading on Medium »
A backend engineer’s honest take on when JVM maturity still beats Go’s simplicity and when it doesn’t. Continue reading on Medium »
Your Go service makes calls to another API. Continue reading on Medium »
Your test suite is green. goleak.VerifyTestMain is wired up. And your production goroutine count still climbs all week until someone… Continue reading on Level Up Coding »
1. Define the Scope First Continue reading on Medium »
production ready project with golang.
Why this exact Go bug made Let's Encrypt revoke 3048289 SSL certificates ✓ The 3 places this same mistake still bites: ...
The runtime behind every E2B stack: Cloud, Enterprise, and your own machine.
Claude-Session: https://claude.ai/code/session 011nYryDp6E8GNEwiEypzivS Co-authored-by: Claude Opus 5 (1M context)
In google.golang.org/grpc, the xDS RBAC HTTP filter does not lowercase header matcher names before evaluating them against incoming request metadata. When an RBAC policy defines rules (such as DENY) r
In google.golang.org/grpc, servers configured with xDS routing can panic when processing requests that lack both :authority and Host headers. The HTTP/2 transport layer accepted requests missing these
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go
Yo waddup Here's an update video that I've made for my PSX-styled 3D platformer that I've been working on in my renderer, Tetra3D. This update focuses on the UI stuff I've been working on. youtu.be/Bd
San Francisco, United States - grok is an all-in-one cloud networking platform that secures, transforms, and routes traffic to services running anywhere. Instead of cobbling together nginx, NLBs, VPNs
NYC, United States - Notion is the collaborative AI workspace where teams and agents think together. We're building one place where your knowledge, projects, meetings, and AI tools live side by side,
Agentic Operating System for e-commerce logistics. Our vision is to create the AI e-commerce employee of the future. We are forming our core team in Stockholm and are looking for exceptional engineers