Author | Lightnews

Russ Cox @swtch.com · 7d

Happy to see someone outside Google rebuild/verify Go toolchains. Thanks @agwa.name! www.agwa.name/blog/post/ve...

"So far, Source Spotter has successfully reproduced every toolchain since Go 1.21.0, for every architecture and operating system. As of publication time, that's 2,672 toolchains!"

I'm Independently Verifying Go's Reproducible Builds

Introducing Source Spotter, a Go Checksum Database auditor and Go toolchain reproducer

www.agwa.name

7 72

Russ Cox @swtch.com · Sep 30

Please send a CL updating x/review/git-codereview to work with this too (grep for auth.cookie).

7

Reposted by Russ Cox

Filippo Valsorda @filippo.abyssdomain.expert · Sep 3

There is some chatter about a CA misissuing a certificate for 1.1.1.1.

This CA (crt.sh?caid=201916, only ~300 certs) is only trusted by the Microsoft root program and the eIDAS QWAC trusted list.

MS has not been actively managing their roots for years, and the EU wanted to push theirs on browsers.

Incident Report: Mis-issued Certificates for SAN iPAddress:1.1.1.1 by Fina RDC 2020

Thank you, Youfu, for bringing this to the community’s attention.

groups.google.com

4 15 43

Russ Cox @swtch.com · Aug 29

Heading home from #GopherCon 2025 in NYC. As usual, many people asked how to get one of the amazing Go gopher Hawaiian shirts by Renee French. I've posted the details at github.com/rsc/gophersh.... (I know one person who has made pajama pants with the pattern. Socks might be nice too.) Enjoy!

1 12 58

Reposted by Russ Cox

adg @nf.id.au · Apr 25

Side point: this demonstrates the benefits of plain text file formats. When @robpike.io implemented the coverage tool he made it emit a simple line-based text file that Russ could then manipulate with the ubiquitous Unix tools.

Russ Cox @swtch.com · Apr 25

Another fun magic trick!

Differential Coverage for Debugging

research.swtch.com/diffcover

research!rsc: Differential Coverage for Debugging

research.swtch.com

3 25

Russ Cox @swtch.com · Apr 26

That was my first thought but the files aren’t sorted the way comm needs.

2

Russ Cox @swtch.com · Apr 25

True enough, but ultimately the problem is some other code that did run and zigged instead of zagging to the code that didn't run. I tried to make that point point earlier ("may prompt useful questions about what logic led to them being skipped...").

1

Russ Cox @swtch.com · Apr 25

Overall I think the plumber works pretty well. I wouldn't change much. Language-specific clicking has been replaced by LSPs, but general clicks like URLs, issue numbers, RFCs, email addresses, or phone numbers are still helpful.

1 1

Russ Cox @swtch.com · Apr 25

Use tabs instead.

Years ago, when I worked with someone who insisted on spaces, I wrote a little C program called tab that changed spaces to tabs for my editing; tab -u changed them back.

gist.github.com/rsc/78589f27...

1 1

Russ Cox @swtch.com · Apr 25

Another fun magic trick!

Differential Coverage for Debugging

research.swtch.com/diffcover

research!rsc: Differential Coverage for Debugging

research.swtch.com

4 28 94

Reposted by Russ Cox

acmqueue.bsky.social @acmqueue.bsky.social · Apr 3

Fifty Years of Open Source Software Supply Chain Security

We are all struggling with a massive shift that has happened in the past 10 or 20 years in the software industry. For decades, software reuse was only a lofty goal. Now it's very real.

queue.acm.org/detail.cfm?i...
@swtch.com

Fifty Years of Open Source Software Supply Chain Security - ACM Queue

queue.acm.org

2 4

Reposted by Russ Cox

Brandon Downey @bdowney.bsky.social · Apr 2

With 8 minutes to go, @damienmiller.bsky.social sends me the only funny April Fool's joke of the day.

Notably because I was on the team of people writing the firewall rules for Rob Pike's plan 9 desktop at Google.

@tailscale.com fixes it (albeit ten years too late).

Tailscale Enterprise Plan 9 Support

Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles,...

tailscale.com

2 6 23

Reposted by Russ Cox

Brad Fitzpatrick @bradfitz.com · Apr 2

Yeah, about that...

tailscale.com/blog/plan9-p...

That gives the backstory :)

Porting Tailscale to Plan 9

Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles,...

tailscale.com

2 6 35

Reposted by Russ Cox

vriska @vriska.bsky.social · Apr 1

i was going to say it was hilarious but i wished it was real and then i realized it was

1 2 15

Reposted by Russ Cox

Thoth @thoth.ptnote.dev · Apr 1

I only respect april fools jokes that commit to the bit. This? This is commitment.

Brad Fitzpatrick @bradfitz.com · Apr 1

"Tailscale Enterprise Plan 9 Support"
tailscale.com/plan9

(A little thing I wrote and worked on over the past few weekends with @swtch.com)

tailscale.com

4 13

Russ Cox @swtch.com · Apr 1

This was a lot of fun!

Brad Fitzpatrick @bradfitz.com · Apr 1

"Tailscale Enterprise Plan 9 Support"
tailscale.com/plan9

(A little thing I wrote and worked on over the past few weekends with @swtch.com)

tailscale.com

24

Reposted by Russ Cox

Brad Fitzpatrick @bradfitz.com · Apr 1

"Tailscale Enterprise Plan 9 Support"
tailscale.com/plan9

(A little thing I wrote and worked on over the past few weekends with @swtch.com)

tailscale.com

6 18 130

Reposted by Russ Cox

Zellyn Hunter @zellyn.com · Feb 5

@swtch.com you might be interested in this…
zellyn.com/2022/01/gopi...

gopikchr: a yakshave

Zellyn's Website

zellyn.com

3 3 9

Russ Cox @swtch.com · Feb 27

If you want to take the time to write up a helpful report about them, sure. I wrote this one up because (1) I needed to document somewhere why my change was causing performance differences that it shouldn't have, and (2) the effect was quite significant in a real program.

1

Russ Cox @swtch.com · Jan 13

If I could post the explicit link, wait appropriately long, and then edit the comment to use an implicit link, then maybe email would have something useful and web would be even better, at least after the time delay.

But what is the time delay?

3/3

2

Russ Cox @swtch.com · Jan 13

I "fix" this by writing an explicit link [TITLE HERE "/hashtag/12345%5D(https" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#12345](https), which shows the link number and title in both contexts, but that isn't as nice as the default web display, omits issue status, and so on.

2/3

1 1

Russ Cox @swtch.com · Jan 13

Does anyone know the effective time limit for GitHub comment edits being included in the comment text that is emailed to issue subscribers?

GitHub renders "- #12345" differently on web (nice link with title and issue status) vs email (literally a useless blue #12345).

1/3

1 2

Russ Cox @swtch.com · Dec 17

I have found exclusive footage of the mystery drones over New Jersey. youtu.be/qsb74pW7goU?...

1 25

Russ Cox @swtch.com · Dec 4

Also if you are just starting out with Ivy you might find these videos helpful: www.youtube.com/watch?v=ek1y...

AoC 2021 Day 1 using Ivy

YouTube video by Russ Cox

www.youtube.com

1

Russ Cox @swtch.com · Dec 4

With few exceptions, the code requires "active reading", meaning thinking carefully about what each step does and running it in Ivy.

It required "active writing" too. :-)

`git clone 'https'://github.com/rsc/ivy; cd ivy; go install` for my ivy.

I'd like to find time to make videos, but can't now.

1 3