با برنامه Player FM !
پادکست هایی که ارزش شنیدن دارند
حمایت شده
Security for Gophers
Manage episode 326454924 series 3341962
Mat, Filippo, Johan, and Roberto discuss security in Go. Does Go make it easy to secure your code? What common mistakes are Gophers making? What is fuzzing? How can attackers abuse your code if you use the default http mux?
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- KubeCon + CloudNativeCon – The Cloud Native Computing Foundation’s flagship Kubernetes community conference which gathers adopters and technologists from leading open source and cloud native communities. Learn more and register — get 10% off with the code
KCNACHANGELOG19
Feel free to use the Convince Your Boss letter in part or in full so you can your team can attend. - TeamCity by JetBrains – Build and release your software faster with TeamCity — a self-hosted continuous integration and delivery server developed by JetBrains. TeamCity is super-smart at running incremental builds, reusing artifacts, and building only what needs to be built, which can save over 30% of the daily build time. Learn more at teamcity.com/gotime.
- Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code
changelog2019
. Start your server - head to linode.com/changelog. - Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com.
Featuring:
- Filippo Valsorda – Website, GitHub, Mastodon, X
- Johan Brandhorst – Website, GitHub, X
- Roberto Clapis – GitHub, X
- Mat Ryer – Website, GitHub, LinkedIn, X
Show Notes:
- Go Playground example #1 - this demonstrates the sql safety pattern that Roberto mentions in the episode.
- Go Playground example #2 - this demonstrates the stringer pattern mentioned by Roberto to avoid printing passwords out in logs.
- go-fuzz package - a package for generating random inputs for your code.
- So you want to expose Go on the Internet - although this needs updating, it was written by Filippo to help others tackle the challenge of securely exposing Go services to the internet.
Something missing or broken? PRs welcome!
347 قسمت
Manage episode 326454924 series 3341962
Mat, Filippo, Johan, and Roberto discuss security in Go. Does Go make it easy to secure your code? What common mistakes are Gophers making? What is fuzzing? How can attackers abuse your code if you use the default http mux?
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- KubeCon + CloudNativeCon – The Cloud Native Computing Foundation’s flagship Kubernetes community conference which gathers adopters and technologists from leading open source and cloud native communities. Learn more and register — get 10% off with the code
KCNACHANGELOG19
Feel free to use the Convince Your Boss letter in part or in full so you can your team can attend. - TeamCity by JetBrains – Build and release your software faster with TeamCity — a self-hosted continuous integration and delivery server developed by JetBrains. TeamCity is super-smart at running incremental builds, reusing artifacts, and building only what needs to be built, which can save over 30% of the daily build time. Learn more at teamcity.com/gotime.
- Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code
changelog2019
. Start your server - head to linode.com/changelog. - Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com.
Featuring:
- Filippo Valsorda – Website, GitHub, Mastodon, X
- Johan Brandhorst – Website, GitHub, X
- Roberto Clapis – GitHub, X
- Mat Ryer – Website, GitHub, LinkedIn, X
Show Notes:
- Go Playground example #1 - this demonstrates the sql safety pattern that Roberto mentions in the episode.
- Go Playground example #2 - this demonstrates the stringer pattern mentioned by Roberto to avoid printing passwords out in logs.
- go-fuzz package - a package for generating random inputs for your code.
- So you want to expose Go on the Internet - although this needs updating, it was written by Filippo to help others tackle the challenge of securely exposing Go services to the internet.
Something missing or broken? PRs welcome!
347 قسمت
همه قسمت ها
×
1 Writing a shell in Go 1:05:22

1 AI for Observability 1:09:22

1 Russ Cox on passing the torch 1:09:27

1 How I lost my (old) job to AI 1:18:24

1 The community of gophers 1:09:39

1 ⚡ Lightning Talk life ⚡ 1:12:23

1 OpenAPI & API design 1:14:12

1 What's new in Go 1.23 1:06:55

1 How Mat writes HTTP services in Go 1:11:07

1 Dependencies are dangerous 1:03:37

1 Is Go evolving in the wrong direction? 1:13:49

1 How things get done on the Go Team 1:03:12

1 Your ultimate guide to mastering Go 1:02:53


1 What if Google lays off the Go team? 1:12:46

1 Go workshops that work 1:26:26

1 What's new in Go's cryptography libraries: Part 3 1:07:59




1 Questions from a new Go developer 1:09:45

1 Jumping into an existing codebase 1:27:19

1 How long until I lose my job to AI? 1:16:18

1 Foundations of Go performance 1:00:06

1 What's new in Go 1.22 1:03:56


1 300 multiple choices 1:51:19


1 What's new in Go's cryptography libraries: Part 2 1:11:38

1 Event-driven systems & architecture 1:05:24

1 Principles of simplicity 1:27:44

1 The se7en deadly sins of Go 1:15:20

1 Experiences from GopherCon 2023 1:16:34


1 Go templating using Templ 1:05:37


1 What's new in Go 1.21 1:04:54

1 A deep dive into Go's stack 1:12:51

1 Building world-class developer experiences 1:20:20

1 So do we like Generics or not? 1:28:21



1 Neurodiverse gophers 1:13:53
به Player FM خوش آمدید!
Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.