Sign in

Jakub Jarosz 🚢

@qba73.bsky.social
56 followers 95 following 20 posts

I write about Go, Security & Automation | jarosz.dev

PostsRepliesMedia
Jakub Jarosz 🚢 @qba73.bsky.social · 11/11/2025
You don’t need to be a domain expert to make meaningful contributions to OSS projects. If you have a basic understanding of Go and enjoy reading code and writing tests, you can enhance the quality of projects and increase confidence in the testing process. #Go jarosz.dev/code/stop-fi...
jarosz.dev
Stop Fighting Your Go Tests: Simplify and Clarify
This time, we’re rolling up our sleeves to simplify the test setup, pick Go types that actually make sense, and stop confusing readers with constantly changing names.
010
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 04/11/2025
🎙️go podcast() 66 is live, this week I talk with Jon Barber about extreme programing concepts, CI, CD, pairing, how software engineer teams can improve their processes and Go is helping a lot making this enjoyable. gopodcast.dev/episodes/066...
gopodcast.dev
go podcast() | 066: Xp, CI, CD with Jon Barber
Jon helped a lot of teams improve their software engineer processes. We talk about the importance of testing, having sane Ci and CD pipeline, pairing and a lot of other extreme programing concepts....
021
Jakub Jarosz 🚢 @qba73.bsky.social · 01/11/2025
The art of polluting and obfuscating #Go tests and what to do about it. jarosz.dev/code/how-to-...
jarosz.dev
How to Remove Pollution From Go Tests
Why do we clutter our code? Are our standard tools sufficient? If so, we can move on to what truly matters—designing tests that accurately verify the desired behaviour.
000
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 20/10/2025
I'm going to talk about podman tomorrow in go podcast(), I'd love to get some audio clips of real-world experience, do you like it, or not, are you using it instead of Docker, etc. You can send me text or audio clip in #gopodcast in the Go slack community, I think it would bring dynamism to the pod
121
Jakub Jarosz 🚢 @qba73.bsky.social · 14/10/2025
How does the Rule of Clarity from The Art of UNIX Programming by Eric S. Raymond, apply to Go, particularly in the context of writing tests? I have included numerous examples in the book I just launched. #Go #Golang #Testing #SoftwareDesign store.jarosz.dev
store.jarosz.dev
Security, System & Electrical Automation | Jakub Jarosz
Hi, I'm Jakub Jarosz. I've been building networks, automation systems and writing software for over 25 years. I've built industrial and IT automations for Coca-Cola, Kawiks, Kotlin, XSIL, T-Mobile, AT...
021
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 14/10/2025
🎙️go podcast() 63 is live. I talk with @qba73.bsky.social about common mistakes Gophers are doing when it comes to testing. Jakub is writing a book "50 Go Testing Mistakes" which is early access atm. Please reach out if you or someone you know want to be a guest. gopodcast.dev/episodes/063...
gopodcast.dev
go podcast() | 063: Common mistakes when testing with Jakub Jarosz
Jakub is returning to the show, he's about to launch a book called
041
Reposted by Jakub Jarosz 🚢
John Arundel @bitfieldconsulting.bsky.social · 09/10/2025
cargo-testdox 0.4.0 is released! Turn your Rust tests into documentation... it's a simple, but powerful idea. crates.io/crates/cargo...
cargo-testdox logo: Ferris writing your docs for you!
021
Reposted by Jakub Jarosz 🚢
John Arundel @bitfieldconsulting.bsky.social · 18/09/2025
To all my former bosses and team leads, an apology: I sucked as an employee (you probably noticed). Sorry about that. I was actually okay at the work. I just didn't like being managed. It wasn't you, it was me. Now, at last, I have a diagnosis. bitfieldconsulting.com/posts/self-d...
bitfieldconsulting.com
Self-driving people — Bitfield Consulting
Your car may be self-driving (up to a point), but are you? Independent-minded people sooner or later reach a point where they can’t rise higher without becoming the boss. Should you go it alone and st...
071
Jakub Jarosz 🚢 @qba73.bsky.social · 16/09/2025
jarosz.dev/code/handlin... #Go #Golang #Testing
jarosz.dev
Handling Go Errors In Tests
Errors in Go are like the STOP sign. They send a strong signal to avoid disasters. Just like the Go error yelling don’t trust returned value, don’t use it.
000
Reposted by Jakub Jarosz 🚢
Golang Articles, News, Packages @golangch.bsky.social · 15/05/2025
A high-performance JSON library for Go, focused on speed and reduced memory usage. It's a drop-in replacement for encoding/json and doesn't have dependencies #golang github.com/avpetkun/je...
021
Jakub Jarosz 🚢 @qba73.bsky.social · 06/05/2025
jarosz.dev/code/simple-...
jarosz.dev
Simple Trick To Speed Up Your Go Tests
We focus on fundamental parts of the `cmp` package: checking equality and calculating diffs. With a small change, you increase test efficiency more than 7x. Yes, over 700% faster. Why work harder, not...
000
Reposted by Jakub Jarosz 🚢
EuroRust @eurorust.eu · 16/04/2025
One month left to submit your talk! 🦀 The Call for Proposals for #EuroRust25 is closing soon! Don’t miss your chance to take the stage and share your story with the Rust community. 📅 Deadline: May 15
111
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 01/04/2025
🎙️go podcast ep. 56 is live. I talk with Ivan Fetch about being blind in tech. I've received a lot of questions and interests from previous guests when saying I was using a screen reader. A two part episode. The day-to-day challenges etc. Ivan is an SRE. gopodcast.dev/episodes/056...
gopodcast.dev
go podcast() | 056: I unite with another technical professional, and we talk about being blind in tech
This week I'm joined by Ivan Fetch. We talk about challenges and day-to-day life as tech professionals being blind, using a screen reader. This is the part one as we've a lot to cover. Since I star...
011
Reposted by Jakub Jarosz 🚢
Allen Holub @allenholub.bsky.social · 20/03/2025
I keep getting asked about elaborate software tools that support software architecture. I use Miro (or a physical whiteboard and stickies). That's pretty much it. On the nice to have, there's Simon Brown's C4 model (both the notation and visualization tools like structurizr.com/). 1/2
structurizr.com
Structurizr
Visualise, document and explore your software architecture with Structurizr
3162
Reposted by Jakub Jarosz 🚢
Golang Articles, News, Packages @golangch.bsky.social · 21/03/2025
A Go-based Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server to resolve production issues faster. #golang #Devops github.com/subtrace/su...
091
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 18/03/2025
🎙️go podcast() ep. 55 is out. I talk with Tristan Mayo, the creator of Zog, a Go validation library that helps with parsing data and transforming say HTTP POST data into struct. #golang gopodcast.dev/episodes/055...
gopodcast.dev
go podcast() | 055: Zog, a Go validation pkg with Tristan Mayo
This week I'm joined by Tristan Mayo, the creator of Zog, a Go library that helps with validation when receiving data from an HTTP POST or parsing data. Links:Zog on GitHub
031
Reposted by Jakub Jarosz 🚢
Golang Articles, News, Packages @golangch.bsky.social · 26/02/2025
A lovely Go Podcast from @dominicstpierre #golang gopodcast.dev/
031
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 26/02/2025
Currently looking to fill guests spot for the following weeks. For all my Gophers friends, if you want to jump into an episode, just contact me dominicstpierre at gmail. #golang
023
Reposted by Jakub Jarosz 🚢
Golang Articles, News, Packages @golangch.bsky.social · 12/02/2025
Chatbot with Natural Language Processing in Go. Part 1 — Introduction and Project Setup #golang medium.com/@alsgladkik...
medium.com
Chatbot with Natural Language Processing in Go. Part 1 — Introduction and Project Setup
Introduction
021
Reposted by Jakub Jarosz 🚢
Dominic St-Pierre @dominicstpierre.com · 11/02/2025
🎙️go podcast() ep. 50 is out. I'm joined by @qba73.bsky.socia and we talk about security, devops, testing and a lot of fun stuff to do in Go. I'm always looking for guest for the pod if you want to jump in or know someone please reach out. gopodcast.dev/episodes/050...
gopodcast.dev
go podcast() | 050: Security, devops, testing in Go with Jakub Jarosz
This week I'm joined by Jakub Jarosz and we talk about security, devops, testing a lot of topics that are fun and comfortable doing in Go.Links:Jakub on BlueskyJakub's websiteAs always I'd apprecia...
142
Reposted by Jakub Jarosz 🚢
nixCraft @cyberciti.biz · 25/01/2025
Awesome Unix book collection for you. Do you remember reading any of these books?
4120912
Reposted by Jakub Jarosz 🚢
Matt Boyle @mattboyle.bsky.social · 25/01/2025
Today it's the new Go Tool Directive! Huge QoL improvement: www.bytesizego.com/blog/go-124-tool…
1113
Reposted by Jakub Jarosz 🚢
Mainmatter @mainmatter.com · 13/01/2025
New on our Youtube channel 🦀 @marcoow.bsky.social presents Gerust, a generator for Rust backend projects at our Rust Hack and Learn meetup in Hamburg. Learn how Gerust (gerust.rs) simplifies Rust backend projects! 🎥 youtu.be/5GM_ZubHyIk #rustlang #webdevelopment #backend
youtu.be
A blueprint for Rust/Axum apps - Rust Hack & Learn - November 2024
YouTube video by Mainmatter
062
Jakub Jarosz 🚢 @qba73.bsky.social · 10/01/2025
The Best Way To Get Started Learning About Test-First Program Design
010
Jakub Jarosz 🚢 @qba73.bsky.social · 10/01/2025
www.silicondojo.com/challenge-pa...
silicondojo.com
Python Introduction - Self Paced Class (2025) | Silicon Dojo
This series teaches you the basics of being able to write programs in Python.
000
Reposted by Jakub Jarosz 🚢
Lucas Homer @lucashomer.com · 07/01/2025
Last year this pod leapfrogged all other tech pods as my favorite listen. Great interviews of course, but more than anything they’re funny and always keep it 💯. Thanks for continuing it @justingarrison.com @withenoughcoffee.com 🙏🙏 open.spotify.com/episode/7wBc...
open.spotify.com
Remaining Authentic in Retirement with Kelsey Hightower
Fork Around And Find Out · Episode
1214
Reposted by Jakub Jarosz 🚢
Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 07/01/2025
🦹‍♂️ Join our Discord community if you're passionate about reverse engineering & malware analysis! Connect with experts, engage in discussions, & access unique resources 👇 buff.ly/4a8HjmE Whether you're a beginner or experienced, our welcoming environment helps you advance your skills!
thecyberyeti.com
Home | The Cyber Yeti (TCY) - Grow Your Career
They Cyber Yeti produces engaging cyber security content to help you grow your career!
031
Reposted by Jakub Jarosz 🚢
Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 03/01/2025
🚀 Join me for the first live stream of 2025! Gerald Auger, creator of Simply Cyber, will be joining the stream to discuss building a career in cyber - a great way to start the year!
buff.ly
Building Your Cyber Career with Gerald Auger
Learn how to start and build a career in cyber with Dr Gerald Auger, creator and founder of Simply Cyber. We'll discuss resources, different paths, and effec...
032
Reposted by Jakub Jarosz 🚢
Fork Around and Find Out @fafo.fm · 03/01/2025
We're excited to bring you the FIRST-EVER episode of the Fork Around and Find Out Podcast. Joining us is the incredible Kelsey Hightower! He opens up about his 25-year career, Kubernetes, remaining authentic in tech, and why he quit Twitter cold turkey. buff.ly/40jhzAD
67020
Reposted by Jakub Jarosz 🚢
Filippo Valsorda @filippo.abyssdomain.expert · 04/01/2025
Another example of the externalized cost of fixed release Linux distributions: Debian Bullseye (oldstable, LTS until August 2026) ships a root store that's years out of date. Besides being a security issue, it slows down the entire TLS ecosystem.
github.com
crypto/x509: potentially anomalous path building results · Issue #65085 · golang/go
Go version go1.21.5 linux/amd64 Output of go env in your module/workspace: GO111MODULE='' GOARCH='amd64' GOBIN='' GOCACHE='/home/runner/.cache/go-build' GOENV='/home/runner/.config/go/env' GOEXE=''...
59815
Reposted by Jakub Jarosz 🚢
Matt Boyle @mattboyle.bsky.social · 03/01/2025
If one of your new year resolutions is to get a new Go job, I just updated the list of companies hiring (and whether they hire remotely or not). It's completely free. You can grab it here: www.bytesizego.com/golang-jobs
bytesizego.com
golang-jobs
60 companies who use Golang in production, vetted for you and available for free.
0166
Jakub Jarosz 🚢 @qba73.bsky.social · 03/01/2025
Interested in testing, benchmarking, and learning to write clean and secure Go for your automation projects? Over the next 30 days, I'll be writing 30 Atomic Essays.  Follow my Social Blog on @typeshare_co: typeshare.co/qba73
typeshare.co
Jakub Jarosz | Typeshare
Software Security Engineer | Minimalist | Helping engineers adopt Go for network and security automation
000
Reposted by Jakub Jarosz 🚢
nixCraft @cyberciti.biz · 28/12/2024
Naming things is hard 😂 also check: Top 15 XKCD comics for Linux and Unix fans www.cyberciti.biz/humour/top-x... #unix #linux
1020130
Jakub Jarosz 🚢 @qba73.bsky.social · 30/12/2024
Get to the point, especially in async conversations. #nohello nohello.net/en/
nohello.net
no hello
please don't say just hello in chat
001
Jakub Jarosz 🚢 @qba73.bsky.social · 29/12/2024
Go Ireland Meetup is back! Come and join us in February 2025. www.meetup.com/goireland/ev...
meetup.com
Go Ireland Feb 2025 Meetup, Thu, Feb 6, 2025, 6:30 PM | Meetup
We're back! This is our re-launch event for 2025 and beyond happening at **tcube Dublin** on **Feb 6th at 6:30pm**. We'll have two speakers presenting for us on the night
000
Reposted by Jakub Jarosz 🚢
nixCraft @cyberciti.biz · 28/12/2024
The company's HR department serves the company's interests. Their primary focus is on actions that benefit the company.
61238
Reposted by Jakub Jarosz 🚢
Julian "Jaz" Rignall @jazrignall.bsky.social · 06/12/2024
If you got a computer for Xmas 40 years ago, this is what it cost your parents in today's money: C64: £636 C16: £445 Plus/4: £955 SX64: £2,546 BBC: £1,273 Electron: £636 QL: £1,273 Spectrum: £413 Atari 800XL: £538 Man, some of these were a monumental waste of cash!
269023
Jakub Jarosz 🚢 @qba73.bsky.social · 25/12/2024
Handle #Golang security alerts jarosz.dev/code/how-to-...
jarosz.dev
How to Handle Go Security Alerts
In this article, we clarify the Golang security patching cycle. You'll learn how to identify vulnerabilities in your Go code and Go binaries and gain the insight needed to assess if these issues impac...
020
Jakub Jarosz 🚢 @qba73.bsky.social · 21/12/2024
blog.theembeddedrustacean.com/embedded-rus... #Rust
blog.theembeddedrustacean.com
Embedded Rust Education: 2024 Reflections & 2025 Visions
Introduction Another year comes to an end, as such, this is an opportunity to reflect on the achievements of 2024 and look forward to 2025. It's been over 2.5 years since I embarked on my embedded Rust journey, and it remains as exciting as ever. If ...
000
Reposted by Jakub Jarosz 🚢
Daniel Martí @mvdan.cc · 13/12/2024
It looks like the recording is live! www.youtube.com/watch?v=sqLh... As a reminder, the slides are available here: docs.google.com/presentation...
youtube.com
Go ten years ago, Go ten years from now - Daniel Martí (Closing Keynote)
YouTube video by GoLab conference
1225
Reposted by Jakub Jarosz 🚢
Filippo Valsorda @filippo.abyssdomain.expert · 12/12/2024
Right now probably thousands of engineer hours are being wasted because GitHub is reporting an x/crypto/ssh vulnerability to a myriad of projects that don't import x/crypto/ssh AT ALL. The vulndb has package and symbol information, and govulncheck is open source. It's 2024.
68210
Reposted by Jakub Jarosz 🚢
Filippo Valsorda @filippo.abyssdomain.expert · 12/12/2024
We've gotten to the point that people get angry at projects that fix potential vulnerabilities, because the security scanner they use reports it as a false positive when not even using the affected package. Yell at your vendor! Or, govulncheck is RIGHT THERE.
One comment with cropped author:

As per the discussion at #20094 - this is NOT a vulnerability in this library. It is just a poorly documented callback API that has a POTENTIAL for misuse by users who do not understand how SSH key exchange works.

Now everyone that uses x/crypto has a nice 9.1 CVE that they have to "patch", even if they're not using x/crypto/ssh, or use the callback properly.

My response:

I invite you to take the opportunity to ask your vendor scanner why they report such obvious false positives, when the public vulnerability database includes package and symbol information. govulncheck is an example of a scanner that won't repost that false positive.
613519
Reposted by Jakub Jarosz 🚢
Filippo Valsorda @filippo.abyssdomain.expert · 11/12/2024
The Go team plans to issue a security fix for the golang.org/x/crypto/ssh package in the golang.org/x/crypto module on Wednesday, December 11th. groups.google.com/g/golang-ann...
groups.google.com
[security] golang.org/x/crypto/ssh fix pre-announcement
110527
Jakub Jarosz 🚢 @qba73.bsky.social · 08/12/2024
The end of the year is a good time to reflect on how secure code we write. There is no better way to start than reading and analysing CWE's Top 25 most dangerous weaknesses observed in 2024. #go #golang #quality #security #softwaredesign cwe.mitre.org/top25/
cwe.mitre.org
CWE - CWE Top 25 Most Dangerous Software Weaknesses
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
000
Jakub Jarosz 🚢 @qba73.bsky.social · 07/12/2024
Worrying about how secure your code is? Here is an example of how input validation mistakes CWE (cwe.mitre.org/data/definit...) (OWASP Top 25 CWE) affect availability, the third pillar of the CIA triad (Confidentiality, Integrity, and Availability). jarosz.dev/article/how-... #Go #K8s #Security
cwe.mitre.org
CWE - CWE-20: Improper Input Validation (4.16)
Common Weakness Enumeration (CWE) is a list of software weaknesses.
010
Jakub Jarosz 🚢 @qba73.bsky.social · 05/12/2024
Preventing panics in Go? Focus on one question: How this function / method could break. Write a test, write code. Repeat. #golang #tdd #go jarosz.dev/article/how-...
jarosz.dev
How to prevent panics in Go
You pushed a small change to the Kubernetes cluster. It broke the production environment. You became famous in your company, but you quickly fixed the issue. Now it's time to analyse the root cause! W...
031
Jakub Jarosz 🚢 @qba73.bsky.social · 26/11/2024
No, you don't have performance issues if you: - did not write a single test and see it fail - did not put in place functionality to make the test pass Make it work, make it robust, make it fast. In that order. #golang #simplicity #performance #benchmarking #go jarosz.dev/article/perf...
Book cover. Performance Tuning and Benchmarking in Go. Getting Started.
140