Perfloop learns your system from code and telemetry, hunts a wide catalog of performance patterns, and delivers a stream of proven pull requests. Software that stays fast.

JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON ...

This article explores best practices for designing a secure JWT library, focusing on making secure implementations the default and minimizing potential vulnerabilities. Key strategies include disablin...

On April 27, 2026, a security researcher publicly disclosed that ClickUp’s client-side feature flag configuration exposed personally identifiable information. Specifically, 893 customer email addresse...

perhaps the best CORS middleware library for Go. Contribute to jub0bs/cors development by creating an account on GitHub.

The document that specifies the Go 1 compatibility promise ("go1compat" for short) lists a number of exclusions: Security. A security issue in the specification or implementation may come to light ...

On quitting, the spread of AI, and the loss of an ideal.

#​596 — April 10, 2026

The Therac-25 was a computer-controlled radiation therapy machine produced by Atomic Energy of Canada Limited (AECL) in 1982 after the Therac-6 (neptune) and Therac-20 units (the earlier units had been produced in partnership with Compagnie générale de radiologie (CGR) of France).[1]

perhaps the best CORS middleware library for Go. Contribute to jub0bs/cors development by creating an account on GitHub.

Gerrit Code Review

Gerrit Code Review

How Go 1.26's source-level inliner works, and how it can help you with self-service API migrations.

Go Programming Experience Experienced Other Languages Experience Python, Haskell, JavaScript, C Related Idea Has this idea, or one like it, been proposed before? Does this affect error handling? Is...

Proposal: Generic Methods for Go A change of view. Background For clarity, in the following we use the term concrete method (or just method when the context is clear) to describe a non-interface me...

perhaps the best CORS middleware library for Go. Contribute to jub0bs/cors development by creating an account on GitHub.

An extremely common string operation is testing if a string is blank and if so replacing it with a default value. I propose adding First(...strings) string to package strings (and probably an equiv...

YouTube video by Ryan Armstrong

perhaps the best CORS middleware library for Go. Contribute to jub0bs/cors development by creating an account on GitHub.

Proposal: Generic Methods for Go A change of view. Background For clarity, in the following we use the term concrete method (or just method when the context is clear) to describe a non-interface me...

YouTube video by Gopher Academy

errors.AsType is a modern alternative to errors.As.

A good software article you should probably read

Problem Presumably for performance, the library (v1.11.1 and some older versions) reuses some non-exported slice variables and struct field from one middleware call to the next: package-level var h...

Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.

OWASP Top 10:2025 RC1

Problem PR #56 implemented a restriction regarding the wildcard; middleware created as follows don't reflect arbitrary origins (good): cors.New(cors.Options{ AllowedOrigins: []string{"*"}, AllowCre...

YouTube video by jub0bs