Johanna Ratliff

Summary: Trail of Bits published a blog post by Johanna Ratliff on November 24, 2020, describing smart and simple ways to prevent symlink attacks in Go. The post notes that Go developers' habitual error-checking pattern can sometimes prevent critical thinking about what a function's error actually means.
Bottom line: The piece targets a specific gap: rote nil-checking in Go can substitute for reasoning about symlink behavior, leaving code exposed to symlink attacks even when every error appears handled.

Read the original at Trail of Bits Blog ↗