Sign in

Dinko Korunic

@dkorunic.net
64 followers 104 following 98 posts

Principal Cloud Architect at HAProxy Technologies / Executive Product Manager at Crossvallia #golang #rustlang #ebpf #kubernetes #linux #perf #sysops

PostsRepliesMedia
Dinko Korunic @dkorunic.net · 4h
Spent many sleepless nights on this: astro-recommender, a static binary (Linux/macOS/Win) picking best imaging targets per night/location. Scores clouds, dew, wind, airmass, light pollution, moon, FOV. No subscriptions, no API keys.
github.com
GitHub - dkorunic/astro-recommender: What to image tonight: ranks deep sky targets and comets for your location, weather, Moon and telescope
What to image tonight: ranks deep sky targets and comets for your location, weather, Moon and telescope - dkorunic/astro-recommender
000
Reposted by Dinko Korunic
Go @golang.org · 19/08/2026
🎊 Go 1.27.0 is released! 🗒️ Release notes: go.dev/doc/go1.27 📦 Download: go.dev/dl/#go1.27.0 #golang
$ go install golang.org/dl/go1.27.0@latest
$ go1.27.0 download
Downloaded   0.0% (       0 / 68239764 bytes) ...
Downloaded  50.0% (34119882 / 68239764 bytes) ...
Downloaded 100.0% (68239764 / 68239764 bytes)
Unpacking go1.27.0.netbsd-386.tar.gz ...
Success. You may now run 'go1.27.0'
$ go1.27.0 version
go version go1.27.0 netbsd/386
28331
Reposted by Dinko Korunic
Rust Language @rust-lang.org · 20/08/2026
⚠️ A few hours ago, a malicious crate was discovered on crates.​io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted. For details and how to see if you are impacted, see: blog.rust-lang.org/2026/08/20/s...
blog.rust-lang.org
Supply chain attack on arrayref | Rust Blog
Empowering everyone to build reliable and efficient software.
119481
Dinko Korunic @dkorunic.net · 02/06/2026
betteralign v0.12.0 is out at github.com/dkorunic/...! A major upgrade for Go developers: improved robustness, faster performance, a completely rewritten & fuzz-tested AST decorator, refreshed docs, and updated benchmarks. Especially effective in large monorepos. #golang #devops
github.com
GitHub - dkorunic/betteralign: Detect and fix struct field alignment to reduce memory usage in Go programs
Detect and fix struct field alignment to reduce memory usage in Go programs - dkorunic/betteralign
010
Dinko Korunic @dkorunic.net · 22/05/2026
betteralign github.com/dkorunic/...: evolved fork of Go's fieldalignment. Preserves field comments through reordering, skips generated files, atomic writes. Months of allocation profiling baked in. Serious struct padding without wrecking your codebase. #golang #devops
010
Dinko Korunic @dkorunic.net · 18/05/2026
Spent the weekend nights reviving a 15-year-old toy project of mine: a Linux uptime spoofer. Ported it to modern kernels and refreshed the codebase along the way: github.com/dkorunic/... #linux #kernel #devops #security
github.com
GitHub - dkorunic/uptime_hack: Linux kernel uptime hack module
Linux kernel uptime hack module. Contribute to dkorunic/uptime_hack development by creating an account on GitHub.
000
Reposted by Dinko Korunic
Josh Baker @tidwall.bsky.social · 10/05/2026
After many months of planning and development, here it is. Introducing btype. B-tree based collection types for Go. It's hand-crafted to be faster than the current B-trees for Go, Rust, and C++. github.com/tidwall/btype
1131025
Dinko Korunic @dkorunic.net · 06/05/2026
Tomorrow I’ll be giving a talk at Bsides Varaždin titled "Caveats of Using eBPF in Linux". If you're interested, you can check out the slides here: dkorunic.net/pdf/Kor... Feel free to stop by, listen in, and join the discussion! #ebpf #linux #sysops #kernel
010
Dinko Korunic @dkorunic.net · 04/05/2026
Astrophotography has a quiet magic I didn’t expect. Valentina and I have been spending our nights under the stars, and this is what came out of it: ~700 frames, 20s each, capturing Bode’s Galaxy. Curious to hear what you think ✨
020
Dinko Korunic @dkorunic.net · 09/04/2026
Han Lee: The AI Great Leap Forward leehanchung.github.i... #ai #programming #devops
leehanchung.github.io
The AI Great Leap Forward
In 1958, Mao ordered every village to produce steel. The steel was useless. The crops rotted. Today's top-down AI mandates are producing the same pattern: ba...
012
Dinko Korunic @dkorunic.net · 06/04/2026
A close colleague just launched a great new product: secure DB access with rmBug 🔐 Identity-based access, no shared credentials, and full audit logs—so you always know who did what 🚀 rmbug.com #rmbug #sysops #devops
rmbug.com
rmBug — Know exactly who's in your databases
Identity-based database access for engineers, AI agents, and automation. SSO authentication, time-limited access, and a complete audit trail. Every connection has a name on it.
010
Dinko Korunic @dkorunic.net · 23/03/2026
Senko @senkorasic has got some clever tricks for AI-driven mutation testing definitely worth trying! 🔍🤖 blog.senko.net/impro... #programming #ai #claude #devops
blog.senko.net
Improving AI-generated tests using mutation testing — Senko Rašić
So, I vibe-coded me a simple web app the other day (Pingu, a web monitoring and alerting tool for internal use). To increase the chances...
010
Dinko Korunic @dkorunic.net · 23/03/2026
Diving Into Coverage-Guided Fuzzing from Pierre Zemb pierrezemb.fr/posts/... #programming #devops #fuzzing
pierrezemb.fr
Diving Into Coverage-Guided Fuzzing
How a 600-line Rust fuzzer discovers a 3-byte crash sequence in 9,000 iterations instead of 16 million
000
Dinko Korunic @dkorunic.net · 21/03/2026
I’ve updated my iSMC tool github.com/dkorunic/...: It now supports decoding and displaying temperature, fan, battery, power, voltage, and current data on M5 hardware - and should work well with older hardware too. #macos #cli #sysops #monitoring
github.com
GitHub - dkorunic/iSMC: Apple SMC CLI tool that can decode and display temperature, fans, battery, power, voltage and current information
Apple SMC CLI tool that can decode and display temperature, fans, battery, power, voltage and current information - dkorunic/iSMC
000
Dinko Korunic @dkorunic.net · 20/03/2026
A tale about fixing eBPF spinlock issues in the Linux kernel rovarma.com/articles... #ebpf #kernel #devops #programming
rovarma.com
A tale about fixing eBPF spinlock issues in the Linux kernel | Ritesh Oedayrajsingh Varma
A system freeze led us deep into Linux spinlock internals, where we helped find not one but three bugs in the kernel's resilient locking code used by eBPF.
001
Dinko Korunic @dkorunic.net · 13/03/2026
In my spare time I’ve been improving the eBPF code in github.com/dkorunic/... . What helped most was a colleague running ancient Linux kernels - it pushed me to go the extra mile working around CO:RE limitations and filling gaps in my own knowledge.
github.com
GitHub - dkorunic/pktstat-bpf: TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool
TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool - dkorunic/pktstat-bpf
000
Reposted by Dinko Korunic
Go @golang.org · 06/03/2026
🎉 Go 1.26.1 and 1.25.8 are released! 🔏 Security: Includes security fixes for the standard library (CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142). 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26.1 #golang
$ go install golang.org/dl/go1.26.1@latest
$ go1.26.1 download
Downloaded   0.0% (       0 / 64661384 bytes) ...
Downloaded  50.0% (32330692 / 64661384 bytes) ...
Downloaded 100.0% (64661384 / 64661384 bytes)
Unpacking go1.26.1.linux-riscv64.tar.gz ...
Success. You may now run 'go1.26.1'
$ go1.26.1 version
go version go1.26.1 linux/riscv64
14913
Dinko Korunic @dkorunic.net · 06/03/2026
From AI bot to a supply chain attack: snyk.io/blog/cline-s... #security #ai #sysops
snyk.io
How “Clinejection” Turned an AI Bot into a Supply Chain Attack | Snyk
A prompt injection in a GitHub issue title gave attackers code execution inside Cline's CI/CD pipeline, leading to cache poisoning, stolen npm credentials, and an unauthorized package publish affecting the popular AI coding tool's 5 million users. Here's the full technical breakdown and what developers should do now.
000
Dinko Korunic @dkorunic.net · 04/03/2026
Synology Linux kernel fork syscall conflicts causing Golang binary crashes: github.com/golang/go... #golang #linux #kernel #sysops
github.com
runtime: regression Linux synology fork's of linux causes syscall conflict on older kernel versions · Issue #77930 · golang/go · GitHub
@calmh report: We seem to be seeing the same crash on armv7 -- or should I file this separately? syncthing/syncthing#10587 The return code is slightly different: $ syncthing --version futexwakeup addr=0x4458b24 returned -22 16:54:03 [49/...
000
Reposted by Dinko Korunic
NSF–DOE Rubin Observatory @rubinobservatory.org · 25/02/2026
The largest spot-the-difference effort EVER has begun!🚨 On the night of Feb 24, NSF–DOE Rubin Observatory officially released its first ~800,000 public alerts of detected changes in the night sky!🔍 A new era of discovery is here✨ 🔭🧪☄️ 🔗: rubinobservatory.org/news/first-a...
Illustrated graphic with the boot-shaped Rubin Observatory atop its site on Cerro Pachón beneath a sparkling night sky and the glowing band of the Milky Way stretching from lower left to upper right. Sprinkled throughout are many "Data alert!" popups, labeled with icons that represent supernovae, asteroids, hungry black holes, and more.A 3-by-4 grid of grayscale astronomical images zoomed in on single objects. From left to right, the columns are labeled Template, New image, and difference. From top to bottom, the rows are labeled supernova, variable star, active galactic nucleus, and solar system object.
418870
Dinko Korunic @dkorunic.net · 27/02/2026
Semantic Firewall: Next-Gen Code Integrity & Malware Detection for Go github.com/BlackVect... #golang #security #sysops #secops
github.com
GitHub - BlackVectorOps/semantic_firewall: Generate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single Assignment (SSA) analysis and Scalar Evolution.
Generate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single Assignment (SSA) analysis and Scalar Evolution. - BlackVectorOps/semantic_firewall
010
Dinko Korunic @dkorunic.net · 16/02/2026
MinIO Is Dead, Long Live MinIO blog.vonng.com/en/db... github.com/pgsty/minio #opensource #sysops #minio
blog.vonng.com
MinIO Is Dead, Long Live MinIO
MinIO’s repo is officially archived and abandoned. And how AI Agents helped bring MinIO back from the dead.
010
Dinko Korunic @dkorunic.net · 29/01/2026
The State of OpenSSL for pyca/cryptography cryptography.io/en/l... #python #ssl #security #sysops
000
Dinko Korunic @dkorunic.net · 28/01/2026
Trip down the memory lane: building a Quake PC from 1997: fabiensanglard.net/q... #gaming #pc #quake
000
Reposted by Dinko Korunic
Rust Language @rust-lang.org · 22/01/2026
Rust 1.93.0 has been released! 🌈 🦀✨ This release includes a new musl version for the *-linux-musl targets, adds support for #​[cfg] inside asm!(), and adds [T]::as_array, VecDeque::{pop_front_if, pop_back_if}, Vec/String::into_raw_parts, fmt::form_fn, and more! ✨ blog.rust-lang.org/2026/01/22/R...
blog.rust-lang.org
Announcing Rust 1.93.0 | Rust Blog
Empowering everyone to build reliable and efficient software.
215232
Dinko Korunic @dkorunic.net · 26/01/2026
BREAKMEIFYOUCAN! Exploiting Keyspace Reduction and Relay Attacks in 3DES and AES-protected NFC Technologies / paper: eprint.iacr.org/2026... / repo: github.com/zc-public...
000
Reposted by Dinko Korunic
Go @golang.org · 15/01/2026
🎉 Go 1.26 Release Candidate 2 is released! 🔐 Security: Includes security fixes for archive/zip, net/http, crypto/tls, cmd/go. 🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26rc2 #golang
0498
Dinko Korunic @dkorunic.net · 13/01/2026
SAINTCON 2025 - Neiko (Specters) Rivera - Grand Theft API www.youtube.com/watc... #security #sysops
youtube.com
SAINTCON 2025 - Neiko (Specters) Rivera - Grand Theft API
Grand Theft API A car hacking talk where I (specters) purchased a car that had really $h1t security and over the course of 3 years began looking into the nexus between API endpoints and all automotive platforms. which eventually led to this article! https://www.wired.com/story/kia-web-vulnerability
000
Dinko Korunic @dkorunic.net · 07/01/2026
I’ve been using Syncthing for 3-way sync between my laptop, desktop, and storage for years, but syncing after a few months of divergence can take hours. Switched back to Resilio Sync—same sync finished in 5 minutes. #resiliosync #sysops
010
Dinko Korunic @dkorunic.net · 29/12/2025
GPG massacre w/ multiple serious vulnerabilities, some in wontfix status: gpg.fail #gpg #secops #security #sysops
000
Dinko Korunic @dkorunic.net · 29/12/2025
I have also considered Zig a number of times (ie. for findlargedir and minifind which I've written in Rust) and gave up. Zig language and compiler are really great, but what bothers me the most is the lack of a rich ecosystem with building blocks I could use to avoid reinventing the wheel.
120
Dinko Korunic @dkorunic.net · 29/12/2025
Demystifying Fuzzer Behaviour by Addison: media.ccc.de/v/39c3-... #fuzzing #devops #security
media.ccc.de
Demystifying Fuzzer Behaviour
Despite how it's often portrayed in blogs, scientific articles, or corporate test planning, fuzz testing isn't a magic bug printer; just ...
010
Dinko Korunic @dkorunic.net · 22/12/2025
Building blobd: single-machine object store with sub-millisecond reads and 15 GB/s uploads blog.wilsonl.in/blobd/ #rust #programming #devops
blog.wilsonl.in
Building blobd: single-machine object store with sub-millisecond reads and 15 GB/s uploads
Deep dive into blobd, an object store designed for constant low latency reads using async Rust, io_uring and atomic writes
000
Reposted by Dinko Korunic
HAProxy Technologies @haproxy.bsky.social · 17/12/2025
HAProxy Community Performance Packages, compiled with AWS-LC, are officially available! These official, pre-compiled packages eliminate TLS bottlenecks, delivering linear scalability and simplified installation for the open-source community. Read the full PR: finance.yahoo.com/news/haproxy...
finance.yahoo.com
HAProxy Technologies Announces Availability of HAProxy Community Performance Packages Compiled with AWS-LC
New official pre-compiled HAProxy packages eliminate TLS bottlenecks, delivering linear scalability and simplified installation for the open source communityNEWTON, Mass., Dec. 17, 2025 (GLOBE NEWSWIR...
011
Reposted by Dinko Korunic
Go @golang.org · 16/12/2025
🎊 Go 1.26 Release Candidate 1 is released! 🏃‍♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 🗣 Announcement: groups.google.com/g/golang-announce… ⬇️ Download: go.dev/dl/#go1.26rc1 #golang
$ go install golang.org/dl/go1.26rc1@latest
$ go1.26rc1 download
Downloaded   0.0% (       0 / 66081079 bytes) ...
Downloaded  50.0% (33040539 / 66081079 bytes) ...
Downloaded 100.0% (66081079 / 66081079 bytes)
Unpacking go1.26rc1.linux-s390x.tar.gz ...
Success. You may now run 'go1.26rc1'
$ go1.26rc1 version
go version go1.26rc1 linux/s390x
08216
Dinko Korunic @dkorunic.net · 11/12/2025
Fuzzing Golang binaries with Rust and libAFL: srlabs.de/blog/golib... github.com/srlabs/go... #golang #rust #fuzzing #devops #security
srlabs.de
Fuzzing Made Easy Part #3: GoLibAFL — Fuzzing Go binaries using LibAFL - SRLabs Research
We developed GoLibAFL, a new fuzzer for Go code built on top of LibAFL.
000
Dinko Korunic @dkorunic.net · 05/12/2025
Reverse engineering Bluetooth on Amazon Kindle eReaders sighery.com/posts/re... #kindle #devops #hacking
sighery.com
Reverse engineering Bluetooth on Amazon Kindle eReaders
A journey of learning C and reverse engineering to be more efficiently lazy
000
Dinko Korunic @dkorunic.net · 04/12/2025
And another rather popular OpenSource project bites the dust -- this time it is Minio github.com/minio/min... #sysops #minio
github.com
Maintenance Mode · Issue #21714 · minio/minio
So the open source / community version is no more. 27742d4 Any official statement from the minio maintainers about this move?
000
Reposted by Dinko Korunic
Go @golang.org · 02/12/2025
🥳 Go 1.25.5 and 1.24.11 are released! 🔐 Security: Includes security fixes for crypto/x509 (CVE-2025-61729, CVE-2025-61727). 🗣 Announcement: groups.google.com/g/golang-announce… 📦 Download: go.dev/dl/#go1.25.5 #golang
$ go install golang.org/dl/go1.25.5@latest
$ go1.25.5 download
Downloaded   0.0% (       0 / 57815527 bytes) ...
Downloaded  50.0% (28907763 / 57815527 bytes) ...
Downloaded 100.0% (57815527 / 57815527 bytes)
Unpacking go1.25.5.openbsd-riscv64.tar.gz ...
Success. You may now run 'go1.25.5'
$ go1.25.5 version
go version go1.25.5 openbsd/riscv64
03613
Dinko Korunic @dkorunic.net · 22/11/2025
GopherCon 2025 - Advancing Go Garbage Collection with Green Tea - Michael Knyszek www.youtube.com/watc... #gophercon #golang #devops #programming #gc
youtube.com
GopherCon 2025 - Advancing Go Garbage Collection with Green Tea - Michael Knyszek
Memory latency and bandwidth are becoming increasingly constrained, and these trends are at odds with most of today's garbage collection algorithms, including Go's. In this talk, Michael will dive deep into Green Tea, a new parallel mark algorithm to accelerate Go's garbage collector through improve
010
Dinko Korunic @dkorunic.net · 21/11/2025
Pure-Go race detector github.com/kolkov/ra... #golang #devops #programming
github.com
GitHub - kolkov/racedetector: Pure-Go race detector - No CGO required! Detect data races in Go programs running on AWS Lambda, Docker (FROM scratch), Alpine Linux. FastTrack algorithm, 85.7% coverage, production-ready
Pure-Go race detector - No CGO required! Detect data races in Go programs running on AWS Lambda, Docker (FROM scratch), Alpine Linux. FastTrack algorithm, 85.7% coverage, production-ready - kolkov/...
000
Reposted by Dinko Korunic
Filippo Valsorda @filippo.abyssdomain.expert · 20/11/2025
In August I delivered my traditional Go Cryptography State of the Union talk at @gophercon.com in New York. It goes into everything at the intersection of Go and cryptography from the last year. (Also, bragging t-shirts!) Watch the video or read the transcript of my performance review!
words.filippo.io
The 2025 Go Cryptography State of the Union
I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York. It goes into everything that happened at the intersection of Go and cryptography over the last…
14210
Dinko Korunic @dkorunic.net · 21/11/2025
moss: a Rust Linux-compatible aarch64 kernel in ~26,000 lines of code github.com/hexagonal... #rust #sysops
github.com
GitHub - hexagonal-sun/moss: Rust Linux-compatible kernel
Rust Linux-compatible kernel. Contribute to hexagonal-sun/moss development by creating an account on GitHub.
000
Dinko Korunic @dkorunic.net · 21/11/2025
LinkPro: eBPF rootkit analysis www.synacktiv.com/en... #secops #ebpf #security #sysops
synacktiv.com
LinkPro: eBPF rootkit analysis
LinkPro: eBPF rootkit analysis
000
Reposted by Dinko Korunic
Go @golang.org · 05/11/2025
🎊 Go 1.25.4 and 1.24.10 are released! 📡 Announcement: groups.google.com/g/golang-announce… 🗃 Download: go.dev/dl/#go1.25.4 #golang
$ go install golang.org/dl/go1.25.4@latest
$ go1.25.4 download
Downloaded   0.0% (       0 / 60491166 bytes) ...
Downloaded  50.0% (30245583 / 60491166 bytes) ...
Downloaded 100.0% (60491166 / 60491166 bytes)
Unpacking go1.25.4.darwin-amd64.tar.gz ...
Success. You may now run 'go1.25.4'
$ go1.25.4 version
go version go1.25.4 darwin/amd64
04614
Dinko Korunic @dkorunic.net · 11/11/2025
How TARmageddon Compromises Rust Security: A Developer’s Guide thenewstack.io/how-t... github.com/edera-dev... #rust #security #programming #devops
thenewstack.io
How TARmageddon Compromises Rust Security: A Developer's Guide
Yes, Rust is inherently safer than C or most other languages, but that doesn't mean it's perfectly safe. Nothing is.
010
Dinko Korunic @dkorunic.net · 11/11/2025
Forwarding packets at scale - Building a Cloud Data Plane using eBPF/XDP app.media.ccc.de/v/d... #networking #ebpf #xdp #linux #denog
app.media.ccc.de
Forwarding packets at scale - Building a Cloud Data Plane using eBPF/XDP
At Hetzner we’ve historically used an Open vSwitch based data plane for connecting hundred thousands of cloud servers to the network. Thi...
010
Dinko Korunic @dkorunic.net · 29/10/2025
How I Almost Got Hacked By A 'Job Interview' blog.daviddodda.com/... #security #interview #devops
blog.daviddodda.com
How I Almost Got Hacked By A 'Job Interview'
I was 30 seconds away from running malware, Here's how a sophisticated scam operation almost got me, and why every developer needs to read this.
000
Dinko Korunic @dkorunic.net · 27/10/2025
Headphone Jacking / Airoha 0day: troopers.de/download... insinuator.net/2025/... #security #airoha
000