Post

@sockpuppet.org

This is really good, and in particular, I would never use Go's encoding/xml for anything security-sensitive. blog.trailofbits.com/2025/06/17/u...

blog.trailofbits.comUnexpected security footguns in Go's parsersFile parsers in Go contain unexpected behaviors that can lead to serious security vulnerabilities. This post examines how JSON, XML, and YAML parsers in Go handle edge cases in ways that have repeated...

@sockpuppet.org

Trail's motto comes dangerously close to "The truest repairman will repair man" though.

21/6/25, 6:01 pm0 reposts5 likes

@peregrine.bsky.social

One of the great story arcs