Filippo Valsorda @filippo.abyssdomain.expert

Cryptogopher / Go crypto maintainer / @kateconger-knower / RC F'13, F2'17 / #BlackLivesMatter / he+him

/ /

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Bluesky registrations are now open!

I have been posting primarily there for months now. It has an early Twitter vibe, a hacking friendly protocol, and cool custom feed algorithms.

Join me there! → @/filippo.abyssdomain.expert 🦋
https://t.co/7uMe03oEgz

https://t.co/kPqq7t74k8

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@davidjustodavid @tef_ebooks Yeah, large companies by and large can't sign up a vendor without an agreement through a Microsoft-operated platform that only takes credit cards and sends no invoices.

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@tef_ebooks Are you sure corporations don't want to pay for support?

My experience is that they are desperate to find a professional counterpart that will sell them support, take their money, and take the job seriously.

Most maintainers post GitHub Sponsors links though.

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@GergelyOrosz @patio11 Sure, that's for the judge's consideration, but “this is illegal but not as bad as Madoff's” feels like a reasonable thing for the defense to argue.

Like Patrick said, “zealous defense of one’s client”.

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@GergelyOrosz @patio11 This is a sentencing memorandum. The argument is not that it's legal (the verdict already said it's not!) but about how bad it is.

Without expressing an opinion on the specifics, I do think it's reasonable to say that creating a whole single-purpose fraud enterprise is worse.

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@julianor Fair enough, it's hard to gauge tone on Twitter and I was probably a little too jumpy because I was in the middle of yet-another-mailing-list-fight 🤗

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@julianor I'm not sure how to answer that... am I supposed to try to get more Twitter likes?

Anyway, are you saying the next exploit chain will involve vulnerabilities in the PQC code, or simply that there will be one? Because the latter, I mean, sure?

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@julianor The PQC algorithm implementation is.

The changes announced today do far more than integrate PQC, iMessage was far behind on protocol crypto, but then the benefit is not just defending "against adversaries wielding imaginary computers".

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@defendtheworld @julianor https://t.co/gIKW8oXM8N

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@defendtheworld @julianor That analysis was contradicted on pqc-forum, but never retracted, and I know precisely zero cryptographers who take those allegations seriously.

[GopherCon @GopherCon]

We believe everyone deserves a chance to be a part of the #GopherCon magic!🪄

If you're passionate about Go and would like to join us in July, but don't have the financial means to do so, consider our scholarship program.

⏰The submission deadline is Monday, February 5th, at 11:00 p.m. Central Standard Time, so don't delay and apply today! https://t.co/pCpTvaOJBU

#RoadToGopherCon #golang

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

@goinggodotnet That's because you have "go 1.21" in your go.mod, so the toolchain will do its best to behave like Go 1.21 did.

https://t.co/lBHQXoyCVH

The new backwards/forwards compatibility features take a moment to get familiar with, but are pretty nice.

[Sovereign Tech Agency @sovtechagency]

We're commissioning ~€600,000 in work on critical structural improvements, security, maintenance, and documentation from @ApacheLog4j maintainers.

Announcement: https://t.co/7cmhqz19u5

Milestones: https://t.co/4cT58whF4G

[Go Time ⏰ @GoTimeFM]

🎉 New episode of Go Time!

🗣 What's new in Go's crypto libs: Part 2
✨ with Nicola Murino, @FiloSottile
💫 and @rolandshoemaker
⚡️ hosted by @nataliepis
🏷 #golang #infosec

💚 https://t.co/GywqoiB131

[🇺🇦 Go performance channel @go_perf]

Inlining after devirtualization is merged! #golang https://t.co/EHNWHgQ6kL

CC: @FiloSottile 😂

[GoLab @golab_conf]

Special thanks to Filippo Valsorda for yesterday afternoon's talk on 'The job of a #GoLang maintainer.' We delved into what it means to become an independent professional open-source maintainer.
@FiloSottile #GoLab2023 #MaintainerLife

[Teleport @goteleport]

As an open-core company, it’s vital that we support other open-source projects and maintainers. We're proud to sponsor @FiloSottile & we appreciate all he’s done to advance the state of security in Go, TLS and SSH.

📰~ Subscribe to Cryptography Dispatches https://t.co/2FsMNwpgBQ

[Go Time ⏰ @GoTimeFM]

💚 New episode of Go Time!

💬 What's new in Go's cryptography libraries
🌟 with @FiloSottile & @rolandshoemaker
🎙 hosted by @nataliepis
🗄️ #golang #infosec #notcrypto

🎧 https://t.co/IGaq5xD85t

[patrickogrady.xyz @_patrickogrady]

At @avalabsofficial, we believe the sustainable maintenance and development of open source cryptographic protocols is critical to the broad adoption of blockchain technology.

We are proud to support this necessary and impactful work through our ongoing sponsorship of @FiloSottile and his team.

https://t.co/yxOmMCVBeE