For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | conslit's commentsregister

cybergo is a security-focused fork of the Go toolchain. In a very simple phrasing, cybergo is a copy of the Go compiler that finds bugs.


Is the plan to contribute them back to Go?

How is a one person fork of Go in any way going to ever be more secure than the original which is developed by many people? Why should I trust your changes? Is this actually an adversarial project that will hide and rug pull down the road?


1. "Is the plan to contribute them back to Go?" - No. They won't accept the up-streams. See https://github.com/golang/go/issues/30613

2. "How is a one person fork of Go in any way going to ever be more secure than the original which is developed by many people? " - Read the README.

3. "Why should I trust your changes?" - You don't have to. The same reasons you don't have to trust the Github project you're cloning.

4. "Is this actually an adversarial project that will hide and rug pull down the road?" - Read the code.

Sarcasm aside, the objective is "helping to find bugs in Go codebases via built-in security implementations". That's mainly used for fuzzing and testing. Don't deploy you compiled binary on production with that compiler.


If the Go team will not accept your changes, I would trust their judgement over yours 100%


Finding integer overflows with the Go compiler at fuzz time is now possible.


Every mountain, building and tree shadow in the world simulated for any date and time.


Full description in that blog article: https://security-explorations.com/esim-security.html


AutoEq is a tool for automatically equalizing headphones.

-- https://github.com/jaakkopasanen/AutoEq


AIChat is an all-in-one LLM CLI tool featuring Shell Assistant, CMD & REPL Mode, RAG, AI Tools & Agents, and More.


SQLite's temp file prefix was originally "sqlite_" until McAfee's antivirus started creating temp files in Windows' `c:/temp` folder, frustrating users who then tracked down and called SQLite developers to complain. In response, the prefix was changed to "etilqs_" (SQLite reversed).


Here is the fix in action - multiple people look into the “etilqs” files, but without automatically starting from sqlite:

- https://superuser.com/questions/373683/what-is-the-purpose-o...

- https://old.reddit.com/r/techsupport/comments/8yv2tn/what_ar...

- https://community.wd.com/t/etilqs-files-in-temp-folder-consu...


To be fair, to non-technical users I assume both “sqlite” and “etilqs” would look suspicious :)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You