News for hackers. Stuff that matters.
Re:Cloud Functions: Go 1.11 is now a supported language by st3fan on Wednesday January 16, 2019 @07:27PM (#18927167)
I don't really understand what you are saying here .. It should not be difficult to run `go build` locally and then tell a tool to upload `foobar` instead of `main.go`.

Uploading source code is a dealbreaker for me because I do not trust Google or myself. Google probably has language in their terms that they may do whatever they want with anything you upload to them.

I also do not trust myself to properly configure security parameters around this with the risk of leaking source code.

Binaries are a great strength of Go. Too bad this platform doesn't use them. I will take a peek at the new Container platform that they are building, but that sounds more heavyweight, which probably comes with a higher price. (I have not seen any actual pricing)

Re:Cloud Functions: Go 1.11 is now a supported language by nikki93 on Wednesday January 16, 2019 @07:49PM (#18927306)
can't your security params be read out of the binary in any case? i'm not sure how binaries offer more security.
Re:Cloud Functions: Go 1.11 is now a supported language by weberc2 on Wednesday January 16, 2019 @09:10PM (#18927694)
His post is super unclear but I think he is concerned about someone getting their hands on his source code. In general, a compiled Go binary is not trivial to reverse engineer, so there’s some security through obscurity there.
Re:Cloud Functions: Go 1.11 is now a supported language by saagarjha on Wednesday January 16, 2019 @11:57PM (#18928495)
Not a whole lot, though. A determined reverse engineer will likely be able to grab something close to your source code without much difficulty, assuming you haven't applied any wacky obfuscation.
Re:Cloud Functions: Go 1.11 is now a supported language by st3fan on Wednesday January 16, 2019 @10:08PM (#18927991)
Not 'someone'. Google.
Re:Cloud Functions: Go 1.11 is now a supported language by nikki93 on Thursday January 17, 2019 @08:33PM (#18936314)
Your secrets are not safe by embedding them in a binary. Compilation is not (necessarily, and at least so in the Go compiler's case) security...