Sekitar 20 hasil (2.64 detik)
Komunitas infosec.pub

What are You Working on Wednesday

A bit late (sorry, been busy and distracted), but my new toy came in, and it is all pimped out. Only thing missing is a type c to USB female OTG or whatever, so I can plug in an external Wi-Fi adapter. Been writing way too many scripts in Golang and python, so been losing my sanity, but hey shit works.

Komunitas programming.dev

batman or man bat?

Yeah. Putting my old man crankiness aside, for a moment, I adore goLang. GoLang is like having a youngest grandchild. It can do whatever it wants and I’ll praise it.

Komunitas programming.dev

New language

I work in Java, Golang, Python, with Helm, CircleCI, bash scripts, Makefiles, Terraform, and Terragrunt for testing and deployment. There are other teams handling the C++ and SQL (plus whatever dark magic QA uses).

Komunitas lemm.ee

Running docker image in specific folder (again, now with run)

It works in docker compose because compose handles relative paths for the volumes, the docker CLI doesn’t. You can achieve this by doing something like docker run -v $(pwd):/data ... pwd is a command that returns the current path as an absolute path, you can just run it by itself to see this. $() syntax is to execute the inner command separately before the shell runs the rest of it. (Same as backticks, just better practice) I imagine that wouldn’t work on windows, but it would on either osx, Linux or wsl. Generally speaking, if you need the file system access and your CLI requires some setup, I’d recommend either writing it in a statically compiled language (e.g. golang, rust) or researching how to compile a python script into an executable. If you’re just mounting your script in the container - you’re better off adding it directly at build time.

Komunitas lemmy.world

Release Miniflux 2.1.3 · miniflux/v2

I used to use and love miniflux, but then they migrated to Golang and PostgreSQL, neither which are supported by my shared hosting (namecheap). I use Freshrss now.

Komunitas lemmy.zip

Mini-computers capped out too soon man. I hate miniaturization! Make computers big again!

Actually, Android doesn’t really use Dalvik anymore. They still use the bytecode format, but built a new runtime. The architecture of that runtime is detailed on the page I linked. IIRC, Dalvik didn’t cache JIT compilation results and had to redo it every time the application was run. FWIW, I’ve heard libgcc-jit doesn’t generate particularly high quality code. If the AOT compiled code was compiled with aggressive optimizations and a specific CPU in mind, of course it’ll be faster. JIT compiled code can meet or exceed native performance, but it depends on a lot of variables. As for mawk vs JAWK vs go-awk, a JIT is not going to fix bad code. If it were a true apples to apples comparison, I’d expect a difference of maybe 30-50%, not ~2 orders of magnitude. A performance gap that wide suggests fundamental differences between the different implementations, maybe bad cache locality or inefficient use of syscalls in the latter two. On top of that, you’re not really comparing the languages or runtimes so much as their regular expression engines. Java’s isn’t particularly fast, and neither is Go’s. Compare that to Javascript and Perl, both languages with heavyweight runtimes, but which perform extraordinarily well on this benchmark thanks to their heavily optimized regex engines. It looks like mawk uses its own bespoke regex engine, which is honestly quite impressive in that it performs that well. However, it only supports POSIX regular expressions, and doesn’t even implement braces, at least in the latest release listed on the site: https://github.com/ThomasDickey/mawk-20140914 (The author creates a new Github repo to mirror each release, which shows just how much they refuse to learn to use Git. That’s a respectable level of contempt right there.) Meanwhile, Java’s regex engine is a lot more complex with more features, such as lookahead/behind and backreferences, but that complexity comes at a cost. Similarly, if go-awk is using Go’s regexp package, it’s using a much more complex regex engine than is strictly necessary. And Golang admits in their own FAQ that it’s not nearly as optimized as other engines like PCRE. Thus, it’s really not an apples to apples comparison. I suspect that’s where most of the performance difference arises. Go has reference counting and heap etc, basically a ‘compiled VM’. This statement is completely wrong. Like, to a baffling degree. It kinda makes me wonder if you’re trolling. Go doesn’t use any kind of VM, and has never used reference counting for memory management as far as I can tell. It compiles directly to native machine code which is executed directly by the processor, but the binary comes with a runtime baked in. This runtime includes a tracing garbage collector and manages the execution of goroutines and related things like non-blocking sockets. Additionally, heap management is a core function of any program compiled for a modern operating system. Programs written in C and C++ use heap allocations constantly unless they’re specifically written to avoid them. And depending on what you’re doing and what you need, a C or C++ program could end up with a more heavyweight collective of runtime dependencies than the JVM itself. At the end of the day, trying to write the fastest code possible isn’t usually the most productive approach. When you have a job to do, you’re going to welcome any tool that makes that job easier.

Komunitas feddit.it

Allarme di Satori Threat Intelligence: PROXYLIB e LumiApps trasformano i dispositivi mobili in nodi proxy

I proxy residenziali sono spesso utilizzati dagli attori delle minacce per nascondere attività dannose, tra cui le frodi pubblicitarie e l’uso di bot. L’accesso alle reti proxy residenziali viene spesso acquistato da altri attori delle minacce che le creano iscrivendo i dispositivi di utenti inconsapevoli come nodi della rete tramite malware incorporato in applicazioni mobili, CTV o desktop. Il team Satori Threat Intelligence di HUMAN ha recentemente identificato un gruppo di app VPN disponibili su Google Play Store che trasformavano il dispositivo dell’utente in un nodo proxy a sua insaputa. Abbiamo soprannominato questa operazione PROXYLIB, dal nome della libreria Golang responsabile dell’iscrizione del nodo proxy in ciascuna delle app. Nel maggio 2023, i ricercatori di una società di misurazione hanno riscontrato un comportamento dannoso in una singola applicazione VPN gratuita - Oko VPN - presente sul Play Store di Google. La ricerca ha portato alla rimozione di Oko VPN dal Play Store.

Komunitas sh.itjust.works

GhostSec Evolves With Website Compromise Tools

Cisco Talos reports a surge in malicious activities by hacking group GhostSec, including the development of GhostLocker 2.0 ransomware using Golang. Collaborating with Stormous, GhostSec conducts double extortion ransomware attacks globally, targeting sectors like technology and education. They’ve launched a RaaS program, STMX_GhostLocker, and introduced new tools for website attacks: GhostSec Deep Scan tool and GhostPresser for XSS attacks. GhostSec’s evolving tactics now feature .ghost file encryption, updated ransom notes, and enhanced C2 panel capabilities, indicating increased sophistication in compromising websites. No CVEs are mentioned.

Komunitas lemmy.ml

Golang Co-Creator Rob Pike: 'What Go Got Right and Wrong'

An excellent standard library and packaging system, first-class concurrency support and a focus on readability are among the traits that keep Golang devs happy. Though this was from some time ago, I’d like to share it here and have a light discussion. Rob did an awesome talk, and I agree with him at almost every point. I do hardly disagree with him on the gopher license attribution. I do heavily attribute gopher’s image to Renee French, but I’m not the creator, so whatever.

Komunitas lemmy.world

meme-maker: quick and simple CLI tool to generate memes

I made this as a challenge to learn golang. If you ever wanted to make memes without having to use those pesky GUI tools, there you go! The only dependency is lmageMagick and the windows version comes batteries-included.

Komunitas mastodon.social

#TT

#TT @pid_eins @diegomota @cyborgsisi @golang #TootThursday

Komunitas lemmy.kde.social

Good guy clippy

There’s also a Golang alternative that does not have 6 GiB build folders like Tauri / Tauri 2. (Tauri generates like 3 MiB binaries. It’s the build folders that are huge. Also stay ready to compile huge Rust packages!)

Komunitas honk.tedunangst.com

One Billion Rows Challenge in Golang

Sometime around the middle of January, I stumbled across One Billion Rows Challenge. I had a lot of fun working on this. I started with an execution time of > 6min and finished at about 14s. Here’s how I went about it.

Komunitas lemmy.world

Rust is Eating JavaScript

Thanks, and interesting point about Wasm if that is important. You can also compile C++ to wasm but then its C++ ;). I don’t know about Ada to Wasm. I don’t think Rust is quite mainstream yet either. My impression is that its type system has not caught up with Haskell’s except in a few areas, but of course nobody pretends Haskell is mainstream. I haven’t yet tried Idris. Golang seems to have a decent runtime model (lightweight threads, GC) though the language itself is underpowered. There is a Golang backend for Purescript that sounded interesting to me. The thing that turned me off the most about Purescript was the JS tooling. Purescript (purescript.org) is/was a Haskell-like language that transpiles to JS, intended for use in browsers, but Typescript filled this space before Purescript got much traction. That felt unfortunate to me. I don’t think HLL (high level language) has an official definition, but informally to me it has generally meant that the language is GC’d and that the native integer type is unbounded (bignum). By that standard, Rust and Ada are low level. I’ve so far thought of Rust as a modernized Ada with curly braces and more control of dynamic memory reclamation. Maybe there is more going on than that. Ada is still ahead of Rust in some ways, like generic packages, but Rust is working on that. If you have a suggestion of a no-nonsense Rust book, I’d be interested in looking at it. https://doc.rust-lang.org/book/ beat around the bush way too long before discussing the language, but I guess I should spend more time with it.