Writing

Notes from the workshop.

What I'm learning while building: Go, self-hosting, identity, and the quiet craft of shipping software that lasts. Take whatever helps.

Auser ABuser Breverse proxyone shared connectionbackendrejected CONNECT, bytes left behind?a reply nobody asked for lands on the wrong user
Go

Go: fifteen fixes in one release

Go shipped fifteen security fixes on 8 October: crashes, a proxy mix-up, a module checksum bypass and more. What they allow, and why every Go program needs a rebuild.

Oct 2026 · 3 min read
Root CAtrustedIntermediateissues certsYour serverpresents a chainBLOCKEDx509: no valid chains builtone authority, eight keys, one emergency release
Go

When Go stopped trusting eight CA keys

On 20 October Go blocked eight certificate-authority keys in a point release. Rebuilt programs may refuse sites that older binaries still accept. Here is what to check.

Oct 2026 · 3 min read
Go

One binary, no ceremony

Why every tool in the lab ships as a single Go binary, and what that does for your next 3 a.m. deploy.

Oct 2026 · 2 min read

Stuck on something I've written about? Tell me where it hurts.