Golang Security @GolangSecurity

News about #golang Security and Fuzzing. Not affiliated with @golang team. academy.fuzzinglabs.com/go-security-au… Joined June 2020

Tweets

343
Followers

4K
Following

4K
Likes

606

Jaana Dogan ヤナドガン @rakyll

12 months ago

Several years ago, I wrote an article on #golang package design and styling which became quite popular. NotebookLM generated a podcast for it and it's ridiculous: - They have nice analogies. - They developed new ideas like keeping types closer help debugging. - They know how Go…

7 21 216 28K 174

Download Video

FuzzingLabs @FuzzingLabs

a year ago

📡 [Monthly Fuzzing] June 2024 Here is the latest fuzzing news released last month! 📺 Videos/Podcasts FuzzyAI: Attacking LLMs With Coverage-Guided Fuzzing - youtu.be/hBPiiaUiOH8?si… Your NVMe Had Been Syz'ed - youtu.be/Jc25CM1Ppgo?si… Linux Fuzzing Tutorial with AFL Fuzzer -…

0 31 56 7K 32

Download Image

Go @golang

2 years ago

✨ Check out the second blog post in our series on Supply chain security for Go, by @JQiu25 and @roger2hk. Learn how Go helps you ensure reproducible builds and download trustworthy dependencies 👇 goo.gle/3NSoWsr

0 23 106 23K 19

Go @golang

2 years ago

🎉 Go 1.20.6 and 1.19.11 are released! 🔐 Security: Includes security fixes for CVE-2023-29406 and Go issue go.dev/issue/60374 📢 Announcement: groups.google.com/g/golang-annou… 📦 Download: go.dev/dl/#go1.20.6 #golang

2 128 406 56K 13

Download Image

FuzzingLabs @FuzzingLabs

2 years ago

🔴 New video about #GPT4 for cyber-security usage and in particular bug bounty, audit, and pentesting. youtu.be/oz_GLVbJllI In this video, I gave some snippets of code to #ChatGPT and I ask him to find vulnerabilities for me. It's mind-blowing, it even found some 0 days 🔥💸

0 23 57 6K 11

Go @golang

2 years ago

🤯 Fun fact: you can now build coverage-instrumented programs using “go build -cover”, then feed these instrumented binaries into an integration test to extend the scope of coverage testing.

2 27 148 27K 16

Ardan Labs @ardanlabs

3 years ago

Juggling with software development?🤹‍♂️ This week Damian Gryski (@dgryski), a Principal Software Developer at Fastly, takes us through his journey. 🤓Being advanced in high school 🤹Interest in juggling 👨‍💻Getting into Golang 🎙️Watch here: youtu.be/47fXlIpi1FY

1 2 22 10K 2

Download Image

Go @golang

3 years ago

🎊 Go 1.20 Release Candidate 3 is released! 🏃‍♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 🗣 Announcement: groups.google.com/g/golang-annou… 🚚 Download: go.dev/dl/#go1.20rc3 #golang

5 79 368 57K 3

Download Image

Go @golang

3 years ago

📣 VS Code Go v0.37.0 is released! 🎉 ✨This includes new analysis features that report known vulnerabilities in your dependencies.🕵️ ✏️ Release Note: github.com/golang/vscode-… 🙏Feedback on vulncheck: go.dev/s/vsc-vulnchec… ☝️File bugs: go.dev/s/vscode-issue… #VSCodeGo

2 103 575 98K 18

Download Video

Go @golang

3 years ago

😎 Fuzz testing made easy. Check out this code demo from @katie_hockman of a bug being found, fixed, and tested in real time using fuzzing ➡ goo.gle/3ELVEr6

0 47 241 0 49

Download Image

Go @golang

3 years ago

📦 The Go team is looking to add a new package to the standard library for structured logging. Jonathan Amsterdam covered what this means at Go Day 2022. Tune in 👉 goo.gle/3GF6kZU

10 100 523 0 41

Download Image

Go @golang

3 years ago

🥳 Go 1.19.4 and 1.18.9 are released! 🔏 Security: Includes security fixes for net/http (CVE-2022-41717, CVE-2022-41720) and os (CVE-2022-41720). 📢 Announcement: groups.google.com/g/golang-annou… 📦 Download: go.dev/dl/#go1.19.4 #golang

6 107 399 0 8

Download Image

FuzzingLabs @FuzzingLabs

3 years ago

It's just mind-blowing! 🤯 it's so impressive that #ChatGPT is able to answer such complex subjects as exploitation, reversing, decompilation, fuzzing, etc. youtu.be/mh7wzbWAHFE I made a video about some mind-blowing examples/usages for security research and engineers.

2 38 146 0 46

Go @golang

3 years ago

⚡🔐 Write applications faster and more securely with Go! @OSSCody discussed some of the new and upcoming security features in Go at Go Day 2022. Watch to learn about the new govulncheck command, and how to write fuzz tests → goo.gle/3ueRrpv

1 31 144 0 18

Download Image

Go @golang

3 years ago

🎉 24 hours until Go Day 2022 on #GoogleOSLive! Join us November 3rd to learn about: 💻 Structured Logging for Go 📝 Writing your Applications Faster and More Securely with Go ...and more! Register 👉 goo.gle/GoDay_22

3 56 220 0 14

Download Image

Damian Gryski @dgryski

3 years ago

"Gobra is an automated, modular verifier for Go programs, based on the Viper verification infrastructure. Go is targeted at high performance applications running in potentially distributed settings and on multicore machines." pm.inf.ethz.ch/research/gobra…

0 1 10 0 1

FuzzingLabs @FuzzingLabs

3 years ago

That's exactly why we are using usually using differential fuzzing to find this kind of logic bugs. It could have been catch easily if they got at least two implementation of IAVL.

Larry Engineer 🍡 @larry0x

3 years ago

That's exactly why we are using usually using differential fuzzing to find this kind of logic bugs. It could have been catch easily if they got at least two implementation of IAVL.

38 59 445 0 70

0 9 20 0 0

inanc @inancgumus

3 years ago

To become a better Gopher, you should study the source code of the packages you use. Not only will you better understand how they work, but you'll also learn what patterns they use in practice. #golang

0 28 135 0 16

Damian Gryski @dgryski

3 years ago

Finally got around to finishing my @semgrep rule to rewrite old-style go-fuzz tests to new native-fuzzing ones: github.com/dgryski/semgre… #golang

1 10 26 0 3

Google Open Source @GoogleOSS

3 years ago

🥳 We're honored to be a sponsor at this year’s #GopherCon We can’t wait to be reunited with our fellow Gophers on Oct 6th-8th at the Marriott Marquis in Chicago! Register for your spot today → goo.gle/3LZjBx7