Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

blog.filippo.io

Filippo.io

Get the latest updates from Filippo.io directly as they happen.

Follow now 205 followers

Latest posts

Last updated 12 days ago

Turn Dependabot Off

12 days ago

Dependabot is a noise machine. It makes you feel like you’re doing...

Inspecting the Source of Go Modules

21 days ago

Go has indisputably the best package integrity story of any programming language...

go.sum Is Not a Lockfile

about 2 months ago

I need everyone to stop looking at go.sum, especially to analyze dependency...

Building a Transparent Keyserver

3 months ago

Today, we are going to build a keyserver to lookup age public...

The 2025 Go Cryptography State of the Union

3 months ago

Last August, I delivered my traditional Go Cryptography State of the Union...

Claude Code Can Debug Low-level Cryptography

4 months ago

Over the past few days I wrote a new Go implementation of...

The Geomys Standard of Care

4 months ago

One of the most impactful effects of professionalizing open source maintenance is...

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

5 months ago

Lack of memory safety is such a predominant cause of security issues...

Maintainers of Last Resort

7 months ago

Geomys is an organization of professional open source maintainers, focused on a...

Cross-Site Request Forgery

7 months ago

Cross-Site Request Forgery (CSRF) is a confused deputy attack where the attacker...

Go Assembly Mutation Testing

7 months ago

While maintaining and developing the Go cryptography standard library, we often spend...

Encrypting Files with Passkeys and age

8 months ago

Typage (age-encryption on npm) is a TypeScript1 implementation of the age file...