Pulse of Truth

1534 readers

30 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 2 years ago

MODERATORS

krogoth

Poisoned Go programming language package lay undetected for 3 years (go.theregister.com)

submitted 6 months ago by lemmydev2 to c/pulse_of_truth

1 comments fedilink hide all child comments

Researcher says ecosystem's auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.…

top 1 comments

sorted by: hot top controversial new old

[–] Arghblarg@lemmy.ca 3 points 6 months ago

TLDR: repo github.com/boltdb/bolt is legit, don't use any similarly-named copies, supposedly.