Security updates for Friday
Security updates have been issued by AlmaLinux (buildah, expat, grafana, grafana-pcp, httpd, iperf3, openssh, php, php8.4, php:7.4, php:8.2, and php:8.3), Debian (aide, chromium, clamav, erlang, linux-6.12, roundcube…
Developer news aggregator
Hand-picked from 51 RSS feeds — AI & machine learning, security, DevOps, JavaScript & TypeScript, Python, Rust, Go, Java, open source and software architecture. No algorithm, no ads, no paywalls.
Security updates have been issued by AlmaLinux (buildah, expat, grafana, grafana-pcp, httpd, iperf3, openssh, php, php8.4, php:7.4, php:8.2, and php:8.3), Debian (aide, chromium, clamav, erlang, linux-6.12, roundcube…
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, cockpit-files, cockpit-machines, fetchmail, glycin-loaders, go-toolset:rhel8, golang, hostapd, jackson-core, kernel, kernel-rt, librsvg2…
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21…
This article was derived from my GopherCon Israel 2020 presentation. It’s also quite long. If you’d prefer a shorter version, head over to the-zen-of-go.netlify.com . A recording of the presentation is…
In the previous post I discussed how leaf inlining allows the Go compiler to reduce the overhead of function calls and extend optimisation opportunities across function boundaries. In this post I’ll discuss the…
Per the overlapping interfaces proposal , Go 1.14 now permits embedding of interfaces with overlapping method sets. This is a brief post explain what this change means: Let’s start with the definition of the three…
The Go compiler’s SSA backend contains a facility to produce HTML debugging output of the compilation phases. This post covers how to print the SSA output for function and methods. Let’s start with a sample…
This is a thought experiment in API design. It starts with the classic Go unit testing idiom: func TestOpenFile(t *testing.T) { f, err := os.Open("notfound") if err != nil { t.Fatal(err) } // ... } What’s the…
Today’s post comes from a recent Go pop quiz. Consider this benchmark fragment. 1 func BenchmarkSortStrings(b *testing.B) { s := []string{"heart", "lungs", "brain", "kidneys", "pancreas"} b.ReportAllocs() for…
Here’s a silly example extracted from real code. package main import "fmt" type Location int const ( KITCHEN Location = iota BATHROOM ) type Ingredient struct { name string location Location } func (i *Ingredient)…
Here’s a small quiz derived from some incorrect advice from an AI coding assistant. package main import ( "fmt" "time" ) func main() { fmt.Println(time.Now()) defer fmt.Println(time.Now()) time.Sleep(10 *…
The Rust Security Response Team was notified that Miri stores all environment variables to target/ , allowing secrets to persist in caches. While not necessary a vulnerability in and of itself, when paired with GitHub…
One of the biggest challenges Rust developers report in our annual surveys is a subpar debugging experience. So, back in February, we ran our first Rust Debugging Survey , in the hopes of identifying how Rust developers…

 
 

 
 
 The Go Blog 
 

 Introducing the pkg.go.dev API 
 
 
 Ethan Lee, Hana Kim, and Jonathan Amsterdam 
 21 May 2026
 
 
 
 Since its inception…
You may have spotted that MDN has a new frontend. There's plenty happening under the surface, so let's unpack the technologies we chose, the architectural decisions we made, and why we did a rebuild at all.
Preface This essay argues that rational people don’t have goals, and that rational AIs shouldn’t have goals. Human actions are rational not because we direct them at some final ‘goals,’ but…
MDN turns 20! Let's look at how we started, how MDN became the most trusted resource for web developers, the impact it's had on the open web, and yes, there's cake, too.
"In projecting language back as the model for thought, we lose sight of the tacit embodied understanding that undergirds our intelligence." –Terry Winograd The recent successes of generative AI models have…
Browsers are starting to roll out changes in default UA styles for nested section headings. This post describes the incoming changes, how to identify if it's an issue on your websites, and hints for conformant and…
A new way to handle dates and times is being added to JavaScript. Let's take a look at Temporal, what problems it solves, the current state, and what you'll find in the new documentation about it on MDN.
It's free, ad-free and built by one developer in their spare time. If it's become part of how you stay current, a small donation keeps the lights on.
The project
About
GeeksPulse is designed, built and maintained by Majid Abarghooei. It exists because keeping up with software engineering shouldn't take twelve browser tabs and a feed algorithm optimised for outrage. It aggregates 51 hand-picked RSS feeds with no ads, no paywalls and no outside pressure.
Open source
The feed list grows through community pull requests. Whether you write code, spot bugs or know a great source that's missing, there's a way to help.
Feedback
Found a dead feed, a UI bug or an idea that would make your morning read better? GitHub Issues is the fastest path to a fix — every report gets read.
GeeksPulse is a free, independent developer news aggregator. It collects the latest articles from 50+ hand-picked RSS feeds into one fast, distraction-free feed covering AI and machine learning, cybersecurity, DevOps, JavaScript, Python, Rust, Go, Java, open source and software architecture — with no ads and no paywalls.
Eleven topics: general tech news for developers (Hacker News, Lobsters, Ars Technica, IEEE Spectrum), AI and machine learning (MIT AI News, Google AI Blog, The Gradient), cybersecurity (Bleeping Computer, Krebs on Security, The Hacker News), DevOps and cloud (Docker, Kubernetes, HashiCorp, AWS DevOps), JavaScript and TypeScript (JavaScript Weekly, Node Weekly, MDN Blog), Python (Planet Python, Real Python), Rust (Rust Blog, This Week in Rust), Go (Go Blog, Go Weekly, Dave Cheney), Java and the JVM (Spring Blog, InfoQ Java), open source and Linux (LWN.net, GitHub Blog) and software architecture (Martin Fowler, Netflix Tech Blog, Cloudflare Blog, High Scalability).
Yes. GeeksPulse is completely free, with no ads, no paywalls and no sign-up. It is an open-source project built and maintained by a solo developer and supported by optional donations.
The feed is rebuilt automatically every hour from every curated source. You can also refresh it with the Refresh button or the R key, or turn on auto-refresh in Settings.
Yes. Filter by topic, search by keyword, or open a single source. My Pulse lets you hide topics, mute sources, hide sponsored posts and limit article age. Bookmarks, light and dark themes and keyboard shortcuts are built in.
Yes. The Security topic aggregates Bleeping Computer, The Hacker News, Krebs on Security, Schneier on Security and the SANS Internet Storm Center — covering CVEs, zero-days, data breaches, ransomware, malware analysis and security best practices.
No account is needed. Bookmarks and preferences are stored only in your browser and never leave your device. Google Analytics loads only if you accept it in the consent banner.
Yes. The aggregated feed is published as machine-readable JSON at https://geekspulse.dev/public/feed.json, and the source code is open on GitHub at github.com/dante0747/geekspulse.dev.