Dinko Korunic

$ go install golang.org/dl/go1.26.1@latest $ go1.26.1 download Downloaded 0.0% ( 0 / 64661384 bytes) ... Downloaded 50.0% (32330692 / 64661384 bytes) ... Downloaded 100.0% (64661384 / 64661384 bytes) Unpacking go1.26.1.linux-riscv64.tar.gz ... Success. You may now run 'go1.26.1' $ go1.26.1 version go version go1.26.1 linux/riscv64

🎉 Go 1.26.1 and 1.25.8 are released!

🔏 Security: Includes security fixes for the standard library (CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142).

📢 Announcement: groups.google.com/g/golang-ann...

📦 Download: go.dev/dl/#go1.26.1

#golang

How “Clinejection” Turned an AI Bot into a Supply Chain Attack | Snyk A prompt injection in a GitHub issue title gave attackers code execution inside Cline's CI/CD pipeline, leading to cache poisoning, stolen npm credentials, and an unauthorized package publish affecting the popular AI coding tool's 5 million users. Here's the full technical breakdown and what developers should do now.

From AI bot to a supply chain attack: snyk.io/blog/cline-s... #security #ai #sysops

Synology Linux kernel fork syscall conflicts causing Golang binary crashes: github.com/golang/go... #golang #linux #kernel #sysops

Illustrated graphic with the boot-shaped Rubin Observatory atop its site on Cerro Pachón beneath a sparkling night sky and the glowing band of the Milky Way stretching from lower left to upper right. Sprinkled throughout are many "Data alert!" popups, labeled with icons that represent supernovae, asteroids, hungry black holes, and more.

A 3-by-4 grid of grayscale astronomical images zoomed in on single objects. From left to right, the columns are labeled Template, New image, and difference. From top to bottom, the rows are labeled supernova, variable star, active galactic nucleus, and solar system object.

The largest spot-the-difference effort EVER has begun!🚨

On the night of Feb 24, NSF–DOE Rubin Observatory officially released its first ~800,000 public alerts of detected changes in the night sky!🔍

A new era of discovery is here✨ 🔭🧪☄️

🔗: rubinobservatory.org/news/first-a...

Semantic Firewall: Next-Gen Code Integrity & Malware Detection for Go github.com/BlackVect... #golang #security #sysops #secops

MinIO Is Dead, Long Live MinIO MinIO’s repo is officially archived and abandoned. And how AI Agents helped bring MinIO back from the dead.

MinIO Is Dead, Long Live MinIO blog.vonng.com/en/db... github.com/pgsty/minio #opensource #sysops #minio

The State of OpenSSL for pyca/cryptography cryptography.io/en/l... #python #ssl #security #sysops

Trip down the memory lane: building a Quake PC from 1997: fabiensanglard.net/q... #gaming #pc #quake

Announcing Rust 1.93.0 | Rust Blog Empowering everyone to build reliable and efficient software.

Rust 1.93.0 has been released! 🌈 🦀✨

This release includes a new musl version for the *-linux-musl targets, adds support for #​[cfg] inside asm!(), and adds [T]::as_array, VecDeque::{pop_front_if, pop_back_if}, Vec/String::into_raw_parts, fmt::form_fn, and more! ✨

blog.rust-lang.org/2026/01/22/R...

BREAKMEIFYOUCAN! Exploiting Keyspace Reduction and Relay Attacks in 3DES and AES-protected NFC Technologies / paper: eprint.iacr.org/2026... / repo: github.com/zc-public...

🎉 Go 1.26 Release Candidate 2 is released!

🔐 Security: Includes security fixes for archive/zip, net/http, crypto/tls, cmd/go.

🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new

📢 Announcement: groups.google.com/g/golang-ann...

📦 Download: go.dev/dl/#go1.26rc2

#golang

SAINTCON 2025 - Neiko (Specters) Rivera - Grand Theft API Grand Theft API A car hacking talk where I (specters) purchased a car that had really $h1t security and over the course of 3 years began looking into the nexus between API endpoints and all automotive platforms. which eventually led to this article! https://www.wired.com/story/kia-web-vulnerability

SAINTCON 2025 - Neiko (Specters) Rivera - Grand Theft API www.youtube.com/watc... #security #sysops

I’ve been using Syncthing for 3-way sync between my laptop, desktop, and storage for years, but syncing after a few months of divergence can take hours. Switched back to Resilio Sync—same sync finished in 5 minutes. #resiliosync #sysops

GPG massacre w/ multiple serious vulnerabilities, some in wontfix status: https://gpg.fail/ #gpg #secops #security #sysops

I have also considered Zig a number of times (ie. for findlargedir and minifind which I've written in Rust) and gave up. Zig language and compiler are really great, but what bothers me the most is the lack of a rich ecosystem with building blocks I could use to avoid reinventing the wheel.

Demystifying Fuzzer Behaviour Despite how it's often portrayed in blogs, scientific articles, or corporate test planning, fuzz testing isn't a magic bug printer; just ...

Demystifying Fuzzer Behaviour by Addison: media.ccc.de/v/39c3-... #fuzzing #devops #security

Building blobd: single-machine object store with sub-millisecond reads and 15 GB/s uploads blog.wilsonl.in/blobd/ #rust #programming #devops

HAProxy Technologies Announces Availability of HAProxy Community Performance Packages Compiled with AWS-LC New official pre-compiled HAProxy packages eliminate TLS bottlenecks, delivering linear scalability and simplified installation for the open source communityNEWTON, Mass., Dec. 17, 2025 (GLOBE NEWSWIR...

HAProxy Community Performance Packages, compiled with AWS-LC, are officially available!

These official, pre-compiled packages eliminate TLS bottlenecks, delivering linear scalability and simplified installation for the open-source community.
Read the full PR: finance.yahoo.com/news/haproxy...

$ go install golang.org/dl/go1.26rc1@latest $ go1.26rc1 download Downloaded 0.0% ( 0 / 66081079 bytes) ... Downloaded 50.0% (33040539 / 66081079 bytes) ... Downloaded 100.0% (66081079 / 66081079 bytes) Unpacking go1.26rc1.linux-s390x.tar.gz ... Success. You may now run 'go1.26rc1' $ go1.26rc1 version go version go1.26rc1 linux/s390x

🎊 Go 1.26 Release Candidate 1 is released!

🏃‍♀️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new

🗣 Announcement: https://groups.google.com/g/golang-announce/c/i0ei8EKtYjc/m/h0jl7InPCwAJ

⬇️ Download: https://go.dev/dl/#go1.26rc1

#golang

Fuzzing Made Easy Part #3: GoLibAFL — Fuzzing Go binaries using LibAFL - SRLabs Research We developed GoLibAFL, a new fuzzer for Go code built on top of LibAFL.

Fuzzing Golang binaries with Rust and libAFL: srlabs.de/blog/golib... github.com/srlabs/go... #golang #rust #fuzzing #devops #security

Reverse engineering Bluetooth on Amazon Kindle eReaders A journey of learning C and reverse engineering to be more efficiently lazy

Reverse engineering Bluetooth on Amazon Kindle eReaders sighery.com/posts/re... #kindle #devops #hacking

Maintenance Mode · Issue #21714 · minio/minio So the open source / community version is no more. 27742d4 Any official statement from the minio maintainers about this move?

And another rather popular OpenSource project bites the dust -- this time it is Minio github.com/minio/min... #sysops #minio

$ go install golang.org/dl/go1.25.5@latest $ go1.25.5 download Downloaded 0.0% ( 0 / 57815527 bytes) ... Downloaded 50.0% (28907763 / 57815527 bytes) ... Downloaded 100.0% (57815527 / 57815527 bytes) Unpacking go1.25.5.openbsd-riscv64.tar.gz ... Success. You may now run 'go1.25.5' $ go1.25.5 version go version go1.25.5 openbsd/riscv64

🥳 Go 1.25.5 and 1.24.11 are released!

🔐 Security: Includes security fixes for crypto/x509 (CVE-2025-61729, CVE-2025-61727).

🗣 Announcement: https://groups.google.com/g/golang-announce/c/8FJoBkPddm4/m/kYpVlPw1CQAJ

📦 Download: https://go.dev/dl/#go1.25.5

#golang

GopherCon 2025 - Advancing Go Garbage Collection with Green Tea - Michael Knyszek Memory latency and bandwidth are becoming increasingly constrained, and these trends are at odds with most of today's garbage collection algorithms, including Go's. In this talk, Michael will dive deep into Green Tea, a new parallel mark algorithm to accelerate Go's garbage collector through improve

GopherCon 2025 - Advancing Go Garbage Collection with Green Tea - Michael Knyszek www.youtube.com/watc... #gophercon #golang #devops #programming #gc

GitHub - kolkov/racedetector: Pure-Go race detector - No CGO required! Detect data races in Go programs running on AWS Lambda, Docker (FROM scratch), Alpine Linux. FastTrack algorithm, 85.7% coverage, production-ready Pure-Go race detector - No CGO required! Detect data races in Go programs running on AWS Lambda, Docker (FROM scratch), Alpine Linux. FastTrack algorithm, 85.7% coverage, production-ready - kolkov/...

Pure-Go race detector github.com/kolkov/ra... #golang #devops #programming

The 2025 Go Cryptography State of the Union I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York. It goes into everything that happened at the intersection of Go and cryptography over the last…

In August I delivered my traditional Go Cryptography State of the Union talk at @gophercon.com in New York.

It goes into everything at the intersection of Go and cryptography from the last year. (Also, bragging t-shirts!)

Watch the video or read the transcript of my performance review!

GitHub - hexagonal-sun/moss: Rust Linux-compatible kernel Rust Linux-compatible kernel. Contribute to hexagonal-sun/moss development by creating an account on GitHub.

moss: a Rust Linux-compatible aarch64 kernel in ~26,000 lines of code github.com/hexagonal... #rust #sysops

LinkPro: eBPF rootkit analysis LinkPro: eBPF rootkit analysis

LinkPro: eBPF rootkit analysis www.synacktiv.com/en... #secops #ebpf #security #sysops

$ go install golang.org/dl/go1.25.4@latest $ go1.25.4 download Downloaded 0.0% ( 0 / 60491166 bytes) ... Downloaded 50.0% (30245583 / 60491166 bytes) ... Downloaded 100.0% (60491166 / 60491166 bytes) Unpacking go1.25.4.darwin-amd64.tar.gz ... Success. You may now run 'go1.25.4' $ go1.25.4 version go version go1.25.4 darwin/amd64

🎊 Go 1.25.4 and 1.24.10 are released!

📡 Announcement: https://groups.google.com/g/golang-announce/c/tVVHm9gnwl8/m/-oTvYIjCAQAJ

🗃 Download: https://go.dev/dl/#go1.25.4

#golang