Writing
Notes from the workshop.
What I'm learning while building: Go, self-hosting, identity, and the quiet craft of shipping software that lasts. Take whatever helps.
Go
Go: fifteen fixes in one release
Go shipped fifteen security fixes on 8 October: crashes, a proxy mix-up, a module checksum bypass and more. What they allow, and why every Go program needs a rebuild.
Go
When Go stopped trusting eight CA keys
On 20 October Go blocked eight certificate-authority keys in a point release. Rebuilt programs may refuse sites that older binaries still accept. Here is what to check.
Go
One binary, no ceremony
Why every tool in the lab ships as a single Go binary, and what that does for your next 3 a.m. deploy.
Stuck on something I've written about? Tell me where it hurts.