Making malware
https://github.com/MrTuxx/OffensiveGolang Here’s a collection you can check out. I recommend Ben Kurtz’s Defcon talk he links to as well.
https://github.com/MrTuxx/OffensiveGolang Here’s a collection you can check out. I recommend Ben Kurtz’s Defcon talk he links to as well.
I had some free time this weekend and I’ve spent some of it trying to learn Go since mlmym seems to be unmaintained and I’d like to try to fix some issues in it. I ran into a stumbling block that took a while to solve and which I had trouble finding relevant search results for. I’ve got it solved now, but felt like writing this up in case it helps anyone else out. When running most go commands I tried (e.g. go mod init example/hello or go run hello.go or even something as seemingly innocuous as go doc cmd/compile when a go.mod file exists) the command would hang for a rather long time. In most cases, that was about 20~30 seconds, but in one case – trying to get it to output the docs about the compile tool – it took 1 minute and 15 seconds! This was on a relatively fresh Linux Mint install on old, but fairly decent hardware using golang-1.23 (installed from apt). After the long wait, it would print out go: RLock go.mod: no locks available – and might or might not do anything else depending on the command. (I did get documentation out after the 1min+ wait, for example.) Now, there’s no good reason I could think of why printing out some documentation or running Hello World should take that long, so I tried looking at what was going on with strace --relative-timestamps go run hello.go > trace.txt 2>&1 and found this in the output file: 0.000045 flock(3, LOCK_SH) = -1 ENOLCK (No locks available) 25.059805 clock_gettime(CLOCK_MONOTONIC, {tv_sec=3691, tv_nsec=443533733}) = 0 It was hanging on flock for 25 seconds (before calling clock_gettime). The directory I was running in was from an NFS mount which was using NFSv3 unintentionally. File locking does not work on NFSv3 out of the box. In my case, changing the configuration to allow it to use NFSv4 was the fix I needed. After making the change a clean Hello World build takes ~5 seconds – and a fraction of a second with cache. After solving it, I’ve found out that there are some issues related to this open already (with a different error message – cmd/go: "RLock …: Function not implemented") and a reply on an old StackOverflow about a similiar issue from one of the developers encouraging people to file a new issue if they can’t find a workaround (like I did). For future reference, those links are: https://github.com/golang/go/issues/37461 https://github.com/golang/go/issues/48572 https://stackoverflow.com/questions/68725100/rlock-storage-8d8b-150e-github-com-my-username-app-go-mod-function-not-impleme/68728663#68728663
Started sending job applications. It’s kind of hard to figure out what I’m good at, especially since it’s almost impossible to find local golang programming jobs, and the tech job market is kinda weird right now. And then theres the whole “being visibly trans at a new workplace”-set of worries! Would also be nice if they could reply to my applications.
Has anyone found an effective way to pair-up and “learn” the syntax faster/better compared to not using AI? I’ve written a lot of code in the past, but recently started doing more with golang… and have been using AI for an assist, but at the end of the day (and enough reiterations) - it creates readable and maintainable code. But (unfortunately), I don’t think I could rewrite it. I was contemplating seeing how I could change my workflow, so I’d write the code, but AI would offer fast guidance.
I think, and this is by no means intended to be disrespectful, golang attracts a lot of programmers that do not want to learn a lot of things. They just want to write something down and it be fast, they don’t mind edgecases, security bugs, performance bottlenecks and all that stuff. A JS dev that was called “scriptkiddie” some years ago might now be a go developer. And there’s nothing wrong with that, IMO… What bugs me all the time though is that they claim that golang is the superior language and should be used for allthethings^tm. It should definitively not. On the other hand, I don’t claim that Rust should be used for all the things (I sometimes claim for the memes, to be honest, but that’s not too serious). It definitively has a learning curve and sometimes writing down your 50 LOC of Ruby/Python/Bash might be a better choice. But (as the tagline once was), Rust is good when it matters. And it matters often (IMO).
Putz travei nos estudos de @golang simplesmente não está funcionando, mas tb não dá erro ahahah responde qq endpoint da minha API com o mesmo, mesmo que seja um endpoint que não existe ele retorna sempre o mesmo valor, no qual deveria, já que não existe, ser um 404. Não sei o que estou fazendo de errado, mas tá foda hahahah Quebrando a cabeça aqui.
go (sometimes called golang)
System: Linux Mint 22.1 Xfce, with the following golang files installed. ::: spoiler Screenshot ::: I’d like to install meme https://www.linuxlinks.com/linux-candy-meme-fun-tool-create-memes/ https://github.com/nomad-software/meme But when I try the installation instruction from the GitHub page, I get $ go get -u -v github.com/nomad-software/meme go: go.mod file not found in current directory or any parent directory. 'go get' is no longer supported outside a module. To build and install a command, use 'go install' with a version, like 'go install example.com/cmd@latest' For more information, see https://golang.org/doc/go-get-install-deprecation or run 'go help get' or 'go help install'. When I replace get with install, I get: $ go install -u -v github.com/nomad-software/meme flag provided but not defined: -u usage: go install [build flags] [packages] Run 'go help install' for details. go help install returns an overwhelming amount of info I don’t understand. There is no package in the repo, and no .deb or .appimage on the GitHub Releases page. (I don’t do Flatpaks on this machine.) Any tips on how I can get this program to install? Thanks EDIT I’ve got a little further now. $ go install github.com/nomad-software/meme@latest go: downloading github.com/nomad-software/meme v1.0.2 go: downloading github.com/fatih/color v1.15.0 go: downloading github.com/mitchellh/go-homedir v1.1.0 go: downloading github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646 go: downloading github.com/mattn/go-colorable v0.1.13 go: downloading github.com/mattn/go-isatty v0.0.19 go: downloading github.com/fogleman/gg v1.3.0 go: downloading golang.org/x/sys v0.12.0 go: downloading github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 go: downloading golang.org/x/image v0.12.0 But: $ meme -h Command 'meme' not found, did you mean: command 'mme' from deb plc-utils-extra (0.0.6+git20230504.1ba7d5a0-1) command 'mame' from deb mame (0.261+dfsg.1-1) command 'memo' from deb memo (1.7.1-5) Try: sudo apt install
Golang is almost never the best choice
https://www.linkedin.com/posts/anmol-agarwal-674a21166_language-activity-7319042198430195712-vVJy
URL: https://www.linkedin.com/posts/absami_golang-nodejs-devhumor-activity-7316531911126933505-kH
Comments
Lista: | Nome | Autor | Instalações | |-----------------------------------------|--------------------|------------| | Prettier — Code for VSCode | by prettier | 955K | | Discord Rich Presence for VS Code | by Mark H | 189K | | Rojo — Roblox Studio Sync | by evaera | 117K | | Solidity Compiler | by VSCode Developer| 1.3K | | Claude AI | by Mark H | - | | Golang Compiler | by Mark H | - | | ChatGPT Agent for VSCode | by Mark H | - | | HTML Obfuscator | by Mark H | - | | Python Obfuscator for VSCode | by Mark H | - | | Rust Compiler for VSCode | by Mark H | - |
TLDR Create an email mapped to your webhook, the webhook will be called when an email will be received. It reacts instantly to emails. Check out the 1min demo in odysee https://odysee.com/@jostiniane:a/gossip_dispatch:3 Long Story I tried to share this previously in Reddit & HN but got 0 attention. I was hoping I could get some feedback here. When I created this, I envisaged at least two use cases: (main one for my workplace) Plug the generated email(s) into the monitoring system to create tickets in the project management software you are using when an alert is triggered (for open source projects) Embed/Share the generated email with your users and have the email bug reports transformed into gitlab/gitea/github issues (it could serve as a starting point for an open source business automation software) This is in a very early stage, I am more than open to feature requests. I have have a bunch of improvements planned but would like to see if there’s some interest first. The project source is in gitea.v3m.net which is not public, I am open to creating a public mirror in your favorite public place (gitlab.com, github.com, …). I am also open to having the current instance serving right from your open source subdomain for those interested. registration link: https://g.v3m.net/user/register (zero tracking just plain golang + htmx)
I have a friend who does dev work and swears by Apple, but he does use Linux on the side as his main machine. Ever thought of diving into NixOS? I’ve used it for a few months and really enjoyed it once I could read and write nixlang. I don’t dev that much, but apparently it can run reproducible environments for nearly every OS and you can have multiple environments via flakes. Need one for Golang? Need one for React? It can do it. You can even access it from your mac. I don’t know much about that side of it, though, just that it can.
I run two local physical servers, one production and one dev (and a third prod2 kept in case of a prod1 failure), and two remote production/backup servers all running Proxmox, and two VPSs. Most apps are dockerised inside LXC containers (on Proxmox) or just docker on Ubuntu (VPSs). Each of the three locations runs a Synology NAS in addition to the server. Backups run automatically, and I manually run apt updates on everything each weekend with a single ansible playbook. Every host runs a little golang program that exposes the memory and disk use percent as a JSON endpoint, and I use two instances of Uptime Kuma (one local, and one on fly.io) to monitor all of those with keywords. So - weekly: 10 minutes to run the update playbook, and I usually ssh into the VPS’s, have a look at the Fail2Ban stats and reboot them if needed. I also look at each of the Proxmox GUIs to check the backs have been working as expected. Monthly: stop the local prod machine and switch to the prod2 machine (from backups) for a few days. Probably 30 minutes each way, most of it waiting for backups. From time to time (if I hear of a security update), but generally every three months: Look through my container versions and see if I want to update them. They’re on docker compose so the steps are just backup the LXC, docker down, pull, up - probs 5 minutes per container. Yearly: consider if I need to do operating systems - eg to Proxmox 8, or a new Debian or Ubuntu LTS Yearly: visit the remotes and have a proper check/clean up/updates
Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code) A set of ten VSCode extensions on Microsoft’s Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero. ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft’s portal on April 4, 2025. The package names are: Prettier - Code for VSCode (by prettier) - 486K installs Discord Rich Presence for VS Code (by Mark H) - 189K installs Rojo – Roblox Studio Sync (by evaera) - 117K installs Solidity Compiler (by VSCode Developer) - 1.3K installs Claude AI (by Mark H) Golang Compiler (by Mark H) ChatGPT Agent for VSCode (by Mark H) HTML Obfuscator (by Mark H) Python Obfuscator for VSCode (by Mark H) Rust Compiler for VSCode (by Mark H)
Very good question. Thank you for asking. To sign documents, I would recommend using signify or minisign. To encrypt files, I guess one could use age If you need a cryptolibrary, I would recommend nacl or sodium. In Go, I use nacl a lot. If you need to encrypt or sign very large files, I wrote a small library based on nacl. Emails are the tricky part. It really depends on your workflow. When I was working for a gov infosec agency, we learned to never use any integrated email crypto solution. Save the blob, decrypt the blob in a secure environment. This helps significantly against leaks and against creating an oracle to the attacker’s benefit. For data containers, I would use dm-crypt and dm-verity + a signed root. But that’s just me and I would probably not recommend this to other people :) OpenPGP is rarely used in messaging protocols, but if it was I would probably advise leveraging a double ratchet library.
Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code) A set of ten VSCode extensions on Microsoft’s Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero. ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft’s portal on April 4, 2025. The package names are: Prettier - Code for VSCode (by prettier) - 486K installs Discord Rich Presence for VS Code (by Mark H) - 189K installs Rojo – Roblox Studio Sync (by evaera) - 117K installs Solidity Compiler (by VSCode Developer) - 1.3K installs Claude AI (by Mark H) Golang Compiler (by Mark H) ChatGPT Agent for VSCode (by Mark H) HTML Obfuscator (by Mark H) Python Obfuscator for VSCode (by Mark H) Rust Compiler for VSCode (by Mark H)
Same here. My company uses ruby (on rails) and golang and ruby is by far the language that gives me the most joy. One of our projects has reached a size where I really wish ruby had a built-in type system but other than that it is a really great language and by all means it is fast enough for most use cases.