Robert Tonic

Summary: Trail of Bits wrote that its Assurance practice received an influx of Go projects after completing a Kubernetes assessment in summer 2019, and that it has been adapting security assessment techniques and tactics used with other compiled languages for Go. The post says the team started by understanding the language's design and identifying its security-relevant characteristics.
What's compelling: The firm's Go assessment work followed directly from a Kubernetes engagement, a signal that container-orchestration codebases are drawing the kind of scrutiny that surfaces language-specific weaknesses before attackers find them.

Read the original at Trail of Bits Blog ↗