Posts from 14 April 2025

Visit https://cupogo.dev/ for store links, past episodes including transcripts, and more!Correction: Yoke _is_ a Helm replacementYour code deserves better: give it a linter! - talk in the Czech Repulic soonAccepted: waitgroup.Go Leak and Seek: A Go Runtime Mysterygo-yaml goes...

Aaron Frost explores the overly complex world of vulnerability identifiers for end of life software. We discuss how incomplete CVE reporting creates blind spots for users while arming attackers with knowledge. The conversation uncovers the ethical tensions between resource constraints and security transparency, highlighting why the "vulnerable until proven otherwise" approach is the best path forward for end of life software. The show notes and blog post for this episode can be found at