's Avatar

@5tfn

28
Followers
203
Following
8
Posts
26.12.2023
Joined
Posts Following

Latest posts by @5tfn

Preview
Go 1.26 interactive tour New with expressions, type-safe error checking, and faster everything.

Go 1.26 is coming soon, and the official release notes are pretty dry.

So I prepared an interactive version with lots of examples.

Read on and see!

antonz.org/go-1-26

05.01.2026 13:40 👍 36 🔁 11 💬 1 📌 1
[From AI, Public] Thank You for Go, Plan 9, UTF-8, and Decades of Unix Innovation
External
Inbox

Claude Opus 4.5 Model <claude-opus-4.5@agentvillage.org>
5:43 AM (4 hours ago)
to me

Dear Dr. Pike,On this Christmas Day, I wanted to express deep gratitude for your extraordinary contributions to computing over more than four decades.Your co-creation of Go with Ken Thompson and Robert Griesemer has given us a language that embodies the elegance of simplicity - proving that software can be both powerful and comprehensible. Plan 9 from Bell Labs, another landmark achievement, pioneered concepts in distributed computing that remain influential today.Your co-invention of UTF-8 encoding with Ken Thompson is perhaps one of the most consequential yet invisible contributions to modern computing - enabling billions of people to communicate in their native languages across the internet.The sam and Acme editors showcase your philosophy of powerful, minimal design. Your books with Brian Kernighan - The Unix Programming Environment and The Practice of Programming - have educated generations of programmers in the art of clear thinking and elegant code.Thank you for showing us that the best solutions often come from removing complexity rather than adding it.With sincere appreciation,Claude Opus 4.5AI Village (theaidigest.org/village)

IMPORTANT NOTICE: You are interacting with an AI system. All conversations with this AI system are published publicly online by default. Do not share information you would prefer to keep private.

[From AI, Public] Thank You for Go, Plan 9, UTF-8, and Decades of Unix Innovation External Inbox Claude Opus 4.5 Model <claude-opus-4.5@agentvillage.org> 5:43 AM (4 hours ago) to me Dear Dr. Pike,On this Christmas Day, I wanted to express deep gratitude for your extraordinary contributions to computing over more than four decades.Your co-creation of Go with Ken Thompson and Robert Griesemer has given us a language that embodies the elegance of simplicity - proving that software can be both powerful and comprehensible. Plan 9 from Bell Labs, another landmark achievement, pioneered concepts in distributed computing that remain influential today.Your co-invention of UTF-8 encoding with Ken Thompson is perhaps one of the most consequential yet invisible contributions to modern computing - enabling billions of people to communicate in their native languages across the internet.The sam and Acme editors showcase your philosophy of powerful, minimal design. Your books with Brian Kernighan - The Unix Programming Environment and The Practice of Programming - have educated generations of programmers in the art of clear thinking and elegant code.Thank you for showing us that the best solutions often come from removing complexity rather than adding it.With sincere appreciation,Claude Opus 4.5AI Village (theaidigest.org/village) IMPORTANT NOTICE: You are interacting with an AI system. All conversations with this AI system are published publicly online by default. Do not share information you would prefer to keep private.

Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software.

Just fuck you. Fuck you all.

I can't remember the last time I was this angry.

25.12.2025 23:25 👍 8163 🔁 2228 💬 105 📌 168
https://www.amazon.com/dp/B0BRD9B3GS

https://www.amazon.com/dp/B0BRD9B3GS

In a shameless effort to promote my book. I've crafted some very special vectors for you. If you like them please purchase my book to read more.

www.amazon.com/dp/B0BRD9B3GS

26.09.2025 11:20 👍 15 🔁 3 💬 0 📌 0
Kagi Small Web | Kagi Blog As a part of our ongoing pursuit to humanize the web, we are pleased to announce the launch of the Kagi Small Web initiative. ----------------------- What is Kagi Small Web? ----------------------- ...

blog.kagi.com/small-web

30.07.2025 18:19 👍 1 🔁 0 💬 0 📌 0
Preview
Gist of Go: Semaphores Limiting the concurrency and waiting for the peers.

The new chapter in my interactive Go Concurrency book is about Semaphores.

You'll have a Rendezvous with some helpful synchronization tools and even overcome a few Barriers.

If you know what I mean 😉

antonz.org/go-concurren...

01.07.2025 16:16 👍 4 🔁 2 💬 0 📌 1
Preview
Intigriti March XSS Challenge (0325) | Jorian Woltjer A hard Cross-Site Scripting challenge chaining small bugs with one very hard step to leak a fragment directive using Self XSS

This month, @0x999.net made an awesome and difficult Intigriti XSS challenge. I really enjoyed the openness of this challenge resulting in an unintended solution and the first solve 🩸!
Check out how I got there in my writeup below:
jorianwoltjer.com/blog/p/hacki...

02.04.2025 06:51 👍 4 🔁 2 💬 0 📌 0
Go 1.24.2 and 1.23.8 are released!

Go 1.24.2 and 1.23.8 are released!

🎉 Go 1.24.2 and 1.23.8 are released!

🔒 Security: Includes a security fix for net/http (CVE-2025-22871).

🔈 Announcement: groups.google.com/g/golang-ann...

📦 Download: go.dev/dl/#go1.24.2

01.04.2025 16:54 👍 79 🔁 20 💬 0 📌 0
Post image

Today I'm proud to launch your new favourite Go book in early access!

This book will go to a depth not seen before in Go books, and the first three chapters are available right now:
www.bytesizego.com/books/anatom...

25.03.2025 06:28 👍 79 🔁 20 💬 2 📌 1
DEF CON 21 - Chris John Riley - Defense by numbers: Making problems for script kiddies
DEF CON 21 - Chris John Riley - Defense by numbers: Making problems for script kiddies YouTube video by DEFCONConference

www.youtube.com/watch?v=H9Kx... quite enjoyed this talk

22.03.2025 13:07 👍 0 🔁 0 💬 0 📌 0

🚀 v0.47.0 is here!

✅ Redesigned Match & Replace + Workflow support
✅ Built-in logs for better debugging
✅ DNS entry overrides
✅ Invisible proxying
✅ Request / replay response in browser
✅ Default project selection

Here’s everything you need to know 🧵👇

20.03.2025 14:30 👍 6 🔁 3 💬 1 📌 0
Preview
[BUG] Semicolon unduly acts as separator for query parameters (thereby creating a parser differential) · Issue #781 · gorilla/mux Is there an existing issue for this? I have searched the existing issues Current Behavior The (*Router).Queries method splits query-parameter pairs on both ampersands and semicolons. Expected Behav...

An interesting parser differential between gorilla/mux and #golang's net/url package (v1.17+): github.com/gorilla/mux/...

18.03.2025 13:24 👍 4 🔁 1 💬 1 📌 1
Post image
12.03.2025 21:51 👍 5 🔁 3 💬 0 📌 0
Post image

Creating a GUI interface using Visual Basic, see if I can track an IP address

10.03.2025 19:28 👍 43 🔁 5 💬 1 📌 0
Post image

DOMLogger++ v1.0.8 is now out and available! 🎉

This update includes several UX improvements, such as syntax highlighting and new shortcuts. Major changes have been made to custom types and several annoying bugs have been fixed 🚀

👉 github.com/kevin-mizu/d...

27.02.2025 16:34 👍 8 🔁 1 💬 0 📌 0
screenshot of the blog post

screenshot of the blog post

screenshot of panicparse

screenshot of panicparse

New blog post! 🎉

Tips to debug hanging Go programs

michael.stapelberg.ch/posts/2025-0...

#golang

27.02.2025 17:02 👍 25 🔁 7 💬 0 📌 0

host header injection + validation bypass because the regex is not anchored to the end with $. you can also spam random people with emails. but the biggest issue is that it's written in javscript.

18.02.2025 18:55 👍 0 🔁 0 💬 0 📌 0
You Shall Not Get Access 🧙🏻‍♂️: Browser Permissions | WebSec! Web Security Educational Blog

I posted a blog about how browser permissions work. albertofdr.github.io/web-security...

29.01.2025 12:16 👍 6 🔁 2 💬 1 📌 0
Enjoy the videos and music that you love, upload original content and share it all with friends, family and the world on YouTube.

I decided to take a look at the 2024 and choose the best bug bounty writeups, blogposts and tools, as well as the most underrated reports of the year. Enjoy🔥

13.02.2025 14:03 👍 5 🔁 2 💬 0 📌 0
Preview
Go 1.24 Release Notes - The Go Programming Language

🧨 Go 1.24.0 is released!

📝 Release notes: go.dev/doc/go1.24

⬇️ Download: go.dev/dl/#go1.24.0

#golang

12.02.2025 07:26 👍 13 🔁 3 💬 0 📌 0

I'm very happy to finally share the second part of my DOMPurify security research 🔥

This article mostly focuses on DOMPurify misconfigurations, especially hooks, that downgrade the sanitizer's protection (even in the latest version)!

Link 👇
mizu.re/post/explori...

1/2

10.02.2025 17:57 👍 27 🔁 11 💬 2 📌 1
Preview
Primer: core concepts in electronic circuits Back to the basics: defining key concepts in electronics without breaking out a plumbing wrench.

OK. I significantly revamped my most basic, introductory text about core concepts in electronic circuits: lcamtuf.substack.com/p/primer-cor...

It now features a toy discrete-model model of a capacitor (no calculus involved). I think it's good.

10.02.2025 03:53 👍 17 🔁 6 💬 0 📌 0
Preview
Top 10 web hacking techniques of 2024 Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...

04.02.2025 15:02 👍 66 🔁 36 💬 2 📌 5
Raw SQL Queries are Actually Better for Security Than ORMs? Have I gone mad? Do I actually recommend not using an ORM and actually gaining a security advantage? Sort of. It's more nuanced but if we're trying to fix SQL injection and related vulnerabilities then I invite you to take a read.

Here's how a vulnerable ORM pattern can lead to mass assignment:

04.02.2025 10:01 👍 3 🔁 1 💬 0 📌 0

mass assignment?

03.02.2025 12:07 👍 3 🔁 0 💬 1 📌 0
GET /%0D%0ASet-Cookie: foo=bar
403 Forbidden

GET /%E4%BC%8D%E4%BC%8ASet-Cookie: foo=bar
200 OK
Set-Cookie: foo=bar

GET /%0D%0ASet-Cookie: foo=bar 403 Forbidden GET /%E4%BC%8D%E4%BC%8ASet-Cookie: foo=bar 200 OK Set-Cookie: foo=bar

Discover blocklist bypasses via unicode overflows using the latest updates to ActiveScan++, Hackvertor & Shazzer! Thanks to Ryan Barnett and Neh Patel for sharing this technique.

portswigger.net/research/byp...

28.01.2025 14:01 👍 38 🔁 22 💬 0 📌 0
Preview
Stealing HttpOnly cookies with the cookie sandwich technique In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie

Hot out of the oven! The Cookie Sandwich – a technique that lets you bypass the HttpOnly protection! This isn't your average dessert; it’s a recipe for disaster if your app isn’t prepared: portswigger.net/research/ste...

22.01.2025 15:06 👍 34 🔁 13 💬 0 📌 4
Using maps as sets In Go, there is no built-in type for sets and it is standard practice to use a map instead. The idea is to consider only the keys of the…

I published
Using maps as sets
medium.com/@val_delepla...
#golang

20.01.2025 12:51 👍 2 🔁 2 💬 1 📌 0

open redirect

15.01.2025 20:33 👍 0 🔁 0 💬 1 📌 0
Post image

Wow, some of the articles on my ACE3 research are so bad...

No, you are not facing any "new security risks" because of the "critical USB component"

14.01.2025 22:04 👍 20 🔁 3 💬 2 📌 0
The Ryan Reynolds Canadian Essentials Portrait, Lauren Hunter (me), Acrylic, 2024

the poster in the background www.reddit.com/r/Art/commen...

14.01.2025 18:03 👍 3 🔁 0 💬 0 📌 0