Great overview! Best part re gVisor: "I sort of couldn’t believe it was working as well as it did, or, if it was, that it was actually using the code I had read. But I scattered a bunch of panic calls across the codebase and, yup, that all that stuff is actually happening." 😀

I wrote a blog roughly about one way to mitigate security risks in Linux (write a mini version in Go)... gVisor: Protecting GKE and serverless users in the real world Google Cloud cloud.google.com/blog/products/…

gVisor's platform interface gives it the flexibility to support environments like Cloud where hardware virtualization isn't an option. Michael Pratt and I wrote about some of the details. gvisor.dev/blog/2020/10/2…

Very frustrated with FedEx for making my package as delivered without actually delivering, and now providing no help to find it. 😡

Frustrated with priceline for failing to resolve a double charge and then hanging up on me when escalating support.

“A Proposal for Adding Generics to Go” by ianlancetaylor — blog.golang.org/generics-propo… #golang

I wrote about what we did to get SSH working for users at Fly.io and it is elaborate. Someone needs to coin a name for “user mode IP WireGuard”, because it is going to be a whole thing. I nominate “bananagram”. fly.io/blog/ssh-and-u…

#BREAKING: Starting Tuesday, April 6 at 8am, all New Yorkers age 16+ will be eligible to schedule and receive the COVID-19 vaccines. And beginning tomorrow at 8am, all New Yorkers age 30+ will be eligible to schedule and receive the vaccines. Let’s #VaccinateNY

My first #profiling patch just got merged into the #golang core 🎉🍾🥳. In other news: The block profile will become a little more accurate in Go 1.17. 🙏🏻 Huge thanks to Dmitry Vyukov and Michael Pratt for reviews & discussions. go-review.googlesource.com/c/go/+/299991

Disagree. Zero (or low) deps is important if you care about security: having an ecosystem with a big stdlib broadly reduces supply chain attacks surface. Every additional dependency is a liability, and ecosystems that encourage dependencies are incidents waiting to happen.

NYC ballot came early! 🗳️🔢

The Go Code Search site is pretty awesome. Regex, fuzzy, and symbol search across all Go project repositories, and references/go-to-definition based on actual type checking for the major ones. cs.opensource.google/go

And I thought Google killed products quickly!

Dino A. Dai Zovi gVisor is nice in part because it is a virtual process rather than a VM. So we use it around processes we do not trust; it has a vastly smaller TCB than Linux and uses a Go for memory safety. Examples include transcoding for YT and App Engine/Cloud Run.

How performance is evaluated and managed in Big Tech. #BigTech #tech #performance #career #compensation #SquidGames #SquidGamememes 🦑💸💵

You know the old saying, it takes a village to build a good profiler. So here is an in-depth blog post on the low-level tech and open source collaboration stories behind: Profiling Improvements in Go 1.18 🚀 felixge.de/2022/02/11/pro…

New #golang profile-guided optimization proposal github.com/golang/go/issu… + go.googlesource.com/proposal/+/mas… ("new" is more like "new issue/proposal" rather than a "new idea")

🧐 “Go runtime: 4 years later” by mknyszek — go.dev/blog/go119runt… #golang