Golang News

A look at the cryptography in restic

Thu, 31 Aug 2017 09:20:00 +0000

by Filippo Valsorda @FiloSottile on twitter

I had a quick look at the AES256-Poly1305-AES encryption scheme and code of "restic" before using it for my backups.

8 points posted by kenny

A dedicated Chrome captive browser in Go #net

Sat, 23 Sep 2017 08:26:00 +0000

To scratch this itch I decided to make my own captive portal browser based on Chrome, such that it can be secure and configured as I please.

The main challenge is reaching the DHCP-provided captive portal DNS resolver without changing system settings. Chrome lacks the ability to configure DNS upstreams, but supports SOCKS5 which proxies name resolution.

6 points posted by kenny

Reproducing Go binaries byte-by-byte

Mon, 24 Apr 2017 07:31:00 +0000

6 points posted by kenny

Building python modules with Go

Fri, 10 Feb 2017 10:11:00 +0000

tl;dr: with Go 1.5 you can build .so objects and import them as Python modules, running Go code (instead of C) directly from Python. Here's the code. 5 points posted by lolly

A literate go implementation of poly1305

Wed, 03 Apr 2019 07:04:00 +0000

4 points posted by lolly

Playing with kernel TLS in linux 4.13 and go

Wed, 06 Sep 2017 20:19:00 +0000

4 points posted by lolly

Finding ticket bleed 🎟 #security #tls

Fri, 10 Feb 2017 16:36:00 +0000

Ticketbleed (CVE-2016-9244) is a software vulnerability in the TLS stack of certain F5 products that allows a remote attacker to extract up to 31 bytes of uninitialized memory at a time, which can contain any kind of random sensitive information, as in Heartbleed. If you suspect you might be affected by this vulnerability, you can find details and mitigation instructions at https://ticketbleed.com (including an online test) or in the F5 K05121675 article. 4 points posted by kenny