toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

380
active users

#go

5 posts4 participants0 posts today

Sigh. We are, as a security community, making good progress on some old as well as some new topics. #Rust, #Go, and other memory safe systems languages are going well and having a real impact in reducing memory safety issues - which has been the most important security bug class for decades, and we are finally improving! Compartmentalization and isolation of processes and services have now become common knowledge and the minimum bar for new designs. Security and privacy by design are being honored in many new projects, and not just as lip service, but because the involved developers deeply believe in these principles nowadays. #E2EE is finally available to most end-users, both for messaging and backups.

And again and again, we are forced into having discussions (theregister.com/2025/04/03/eu_) about breaking all the progress.

Let me be clear for Nth time:
* We *cannot* build encryption systems that can only be broken by the "good guys". If they are not completely secure, foreign enemy states, organized crime, and intimate partners will break and abuse them as well. There is no halfway in this technology. Either it is secure or it isn't - for and against everybody.
* We *cannot* build safe, government-controlled censorship filters into our global messaging apps that are not totally broken under the assumption of (current or future) bad government policies and/or insider attacks at the technology providers (mayrhofer.eu.org/talk/insider-). Either one-to-one communication remains secure and private, or it doesn't (ins.jku.at/chatcontrol/).
* We *cannot* allow exploitation of open security vulnerabilities in smartphones or other devices for law enforcement. If they are not closed, they are exploitable by everybody. "Nobody but us" is an illusion, and makes everybody less secure.

My latest recorded public talk on the topic was mayrhofer.eu.org/talk/secure-m, and nothing factual has changed since then. Policymakers keep asking for a different technological reality than the one we live in, and that sort of thing doesn't tend to produce good, sustainable outcomes.

(Edited to only fix a typo. No content changes.)

CC @epicenter_works @edri @suka_hiroaki @heisec @matthew_d_green @ilumium

The Register · EU: These are scary times – let's backdoor encryption!By Iain Thomson

I took some time to collect my thoughts on the age-old argument: what explains the aversion to assertion-based testing frameworks in Go?

matttproud.com/blog/posts/test

In particular:

1. Where did the tension come from?
2. How could it have arisen?
3. What is the philosophical basis for it
4. What are the implications of using one of these frameworks?
5. How does the assertion framework question fit in the overall psychological preference space of software developers?

matttproud.com (blog) · Testing Frameworks and Mini-Languages
More from mtp
#Go#Golang#SWE
Replied in thread

@icecolbeveridge Compare the technique of "tewari", from the game of Go, which asks, "Would these moves have been effective if played in a different order?"

(This makes more sense for Go, a game of placement, than for Chess, a game of movement.)

senseis.xmp.net/?Tewari

senseis.xmp.netTewari at Sensei's LibrarySensei's Library, page: Tewari, keywords: Theory. SL is a large WikiWikiWeb about the game of Go (Baduk, Weiqi). It's a collaboration and community site. Everyone can add comments or edit pages.
#go#igo#baduk

I’m a wordy bastard. I really struggle with 500 characters. I’d struggle with 500 words sometimes. It's been hard to find a flow here (despite Mona's fantastic thread generator.)

I’m creating a #blog to house longer writings and share thoughts here without requiring anyone to visit platforms so many gathered here to avoid.

I'm using #Hugo instead of my usual #WordPress and dipping my toes into #Go and #TailwindCSS. I've only created the local structures, but so far, I dig it! It's #FOSS too!

When I first learned #GoLang #Go I remember not being happy about the lack of exceptions and always checking the error returns. I never got over it. I’m not a Go user and don’t really know it currently. But now I am a #RustLang #Rust user and learner. Rust works in a very similar way. Yes, I was skeptical at first (and said so here) but now I’m okay with it. Options and Results make sense.

Maybe I just didn’t give Go a fair shake?

Not using a programming language in any capacity, but being proficient in another, allows for quickly grasping any other code - that is, if it's not too esoteric.

In that case: I can't #Python, but I can trace a rabbit hole:
github.com/jmcollin78/versatil

Also: I can't #GoLang #Go, but apply rules visible in the same source tree allows for deducting how a programming language works: github.com/coredns/alternate/p
#CoreDNS, can you merge the PR please?

GitHubClimate Entity doesn't update Real Temperature when Turned Off · jmcollin78 versatile_thermostat · Discussion #953I've decided to stop all thermostats, due to a furnace failure, as there's no reason to keep them opened at all, but this results in this great image: Red is the real room temperature sensor, blue ...