Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

blog.filippo.io

Filippo.io

Get the latest updates from Filippo.io directly as they happen.

Follow now 205 followers

Latest posts

Last updated 26 days ago

go.sum Is Not a Lockfile

26 days ago

I need everyone to stop looking at go.sum, especially to analyze dependency...

Building a Transparent Keyserver

about 1 month ago

Today, we are going to build a keyserver to lookup age public...

The 2025 Go Cryptography State of the Union

2 months ago

Last August, I delivered my traditional Go Cryptography State of the Union...

Claude Code Can Debug Low-level Cryptography

3 months ago

Over the past few days I wrote a new Go implementation of...

The Geomys Standard of Care

3 months ago

One of the most impactful effects of professionalizing open source maintenance is...

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

4 months ago

Lack of memory safety is such a predominant cause of security issues...

Maintainers of Last Resort

6 months ago

Geomys is an organization of professional open source maintainers, focused on a...

Cross-Site Request Forgery

6 months ago

Cross-Site Request Forgery (CSRF) is a confused deputy attack where the attacker...

Go Assembly Mutation Testing

6 months ago

While maintaining and developing the Go cryptography standard library, we often spend...

Encrypting Files with Passkeys and age

7 months ago

Typage (age-encryption on npm) is a TypeScript1 implementation of the age file...

You Should Run a Certificate Transparency Log

7 months ago

Hear me out. If you are an organization with some spare storage...

Benchmarking RSA Key Generation

about 1 year ago

RSA key generation is both conceptually simple, and one of the worst...