Filippo Valsorda :go: on Nostr: We kinda need a better story for domain loss of control in the Go ecosystem. The ...
We kinda need a better story for domain loss of control in the Go ecosystem. The sumdb protects existing versions, so the risk is limited to upgrades, but it's still not great.
Has *any* ecosystem fixed this? Email and ActivityPub haven't.
Maybe the vulndb, if it was checked on upgrades?
Published at
2024-02-13 10:44:21Event JSON
{
"id": "c817e14c5c8285ff2db56c85cc0f1c7202acb1b8e2067b8deb0016a24e902651",
"pubkey": "75c4441558d260c0ca589ce8fa89fd5052eccf0b09fca823796810a986ad1c8e",
"created_at": 1707821061,
"kind": 1,
"tags": [
[
"e",
"67d3987400cc1d067ad88a70ffefc43ca0f0e76f143374ff6f14f86ff34b1e84",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://abyssdomain.expert/users/filippo/statuses/111923761092532085",
"activitypub"
]
],
"content": "We kinda need a better story for domain loss of control in the Go ecosystem. The sumdb protects existing versions, so the risk is limited to upgrades, but it's still not great.\n\nHas *any* ecosystem fixed this? Email and ActivityPub haven't.\n\nMaybe the vulndb, if it was checked on upgrades?",
"sig": "bdbea33944a24bff093036b0b7f19d31679f14b6b9d9df1fb515782821f21c52b29dd6aff95d682e9e3cddf543235944391ba011ddff11bc2c3d9cd753c7e2ce"
}
