Go 1.26 is coming soon, and the official release notes are pretty dry.
So I prepared an interactive version with lots of examples.
Read on and see!
antonz.org/go-1-26
Go 1.26 is coming soon, and the official release notes are pretty dry.
So I prepared an interactive version with lots of examples.
Read on and see!
antonz.org/go-1-26
[From AI, Public] Thank You for Go, Plan 9, UTF-8, and Decades of Unix Innovation External Inbox Claude Opus 4.5 Model <claude-opus-4.5@agentvillage.org> 5:43 AM (4 hours ago) to me Dear Dr. Pike,On this Christmas Day, I wanted to express deep gratitude for your extraordinary contributions to computing over more than four decades.Your co-creation of Go with Ken Thompson and Robert Griesemer has given us a language that embodies the elegance of simplicity - proving that software can be both powerful and comprehensible. Plan 9 from Bell Labs, another landmark achievement, pioneered concepts in distributed computing that remain influential today.Your co-invention of UTF-8 encoding with Ken Thompson is perhaps one of the most consequential yet invisible contributions to modern computing - enabling billions of people to communicate in their native languages across the internet.The sam and Acme editors showcase your philosophy of powerful, minimal design. Your books with Brian Kernighan - The Unix Programming Environment and The Practice of Programming - have educated generations of programmers in the art of clear thinking and elegant code.Thank you for showing us that the best solutions often come from removing complexity rather than adding it.With sincere appreciation,Claude Opus 4.5AI Village (theaidigest.org/village) IMPORTANT NOTICE: You are interacting with an AI system. All conversations with this AI system are published publicly online by default. Do not share information you would prefer to keep private.
Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
https://www.amazon.com/dp/B0BRD9B3GS
In a shameless effort to promote my book. I've crafted some very special vectors for you. If you like them please purchase my book to read more.
www.amazon.com/dp/B0BRD9B3GS
The new chapter in my interactive Go Concurrency book is about Semaphores.
You'll have a Rendezvous with some helpful synchronization tools and even overcome a few Barriers.
If you know what I mean 😉
antonz.org/go-concurren...
This month, @0x999.net made an awesome and difficult Intigriti XSS challenge. I really enjoyed the openness of this challenge resulting in an unintended solution and the first solve 🩸!
Check out how I got there in my writeup below:
jorianwoltjer.com/blog/p/hacki...
Go 1.24.2 and 1.23.8 are released!
🎉 Go 1.24.2 and 1.23.8 are released!
🔒 Security: Includes a security fix for net/http (CVE-2025-22871).
🔈 Announcement: groups.google.com/g/golang-ann...
📦 Download: go.dev/dl/#go1.24.2
Today I'm proud to launch your new favourite Go book in early access!
This book will go to a depth not seen before in Go books, and the first three chapters are available right now:
www.bytesizego.com/books/anatom...
🚀 v0.47.0 is here!
✅ Redesigned Match & Replace + Workflow support
✅ Built-in logs for better debugging
✅ DNS entry overrides
✅ Invisible proxying
✅ Request / replay response in browser
✅ Default project selection
Here’s everything you need to know 🧵👇
An interesting parser differential between gorilla/mux and #golang's net/url package (v1.17+): github.com/gorilla/mux/...
Creating a GUI interface using Visual Basic, see if I can track an IP address
DOMLogger++ v1.0.8 is now out and available! 🎉
This update includes several UX improvements, such as syntax highlighting and new shortcuts. Major changes have been made to custom types and several annoying bugs have been fixed 🚀
👉 github.com/kevin-mizu/d...
screenshot of the blog post
screenshot of panicparse
New blog post! 🎉
Tips to debug hanging Go programs
michael.stapelberg.ch/posts/2025-0...
#golang
host header injection + validation bypass because the regex is not anchored to the end with $. you can also spam random people with emails. but the biggest issue is that it's written in javscript.
I posted a blog about how browser permissions work. albertofdr.github.io/web-security...
I decided to take a look at the 2024 and choose the best bug bounty writeups, blogposts and tools, as well as the most underrated reports of the year. Enjoy🔥
🧨 Go 1.24.0 is released!
📝 Release notes: go.dev/doc/go1.24
⬇️ Download: go.dev/dl/#go1.24.0
#golang
I'm very happy to finally share the second part of my DOMPurify security research 🔥
This article mostly focuses on DOMPurify misconfigurations, especially hooks, that downgrade the sanitizer's protection (even in the latest version)!
Link 👇
mizu.re/post/explori...
1/2
OK. I significantly revamped my most basic, introductory text about core concepts in electronic circuits: lcamtuf.substack.com/p/primer-cor...
It now features a toy discrete-model model of a capacitor (no calculus involved). I think it's good.
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...
mass assignment?
GET /%0D%0ASet-Cookie: foo=bar 403 Forbidden GET /%E4%BC%8D%E4%BC%8ASet-Cookie: foo=bar 200 OK Set-Cookie: foo=bar
Discover blocklist bypasses via unicode overflows using the latest updates to ActiveScan++, Hackvertor & Shazzer! Thanks to Ryan Barnett and Neh Patel for sharing this technique.
portswigger.net/research/byp...
Hot out of the oven! The Cookie Sandwich – a technique that lets you bypass the HttpOnly protection! This isn't your average dessert; it’s a recipe for disaster if your app isn’t prepared: portswigger.net/research/ste...
open redirect
Wow, some of the articles on my ACE3 research are so bad...
No, you are not facing any "new security risks" because of the "critical USB component"