News for hackers. Stuff that matters.

A comment on My minimal, memory-safe Go rsync steers clear of vulnerabilities.

Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by 3eb7988a1663 on Monday May 25, 2026 @11:53AM (#48268291)
Is there a solid reference resource on handling symlinks? It seems a never ending source of security bugs.
[ Parent | on HN ]
Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by d0vs on Monday May 25, 2026 @12:55PM (#48268976)
Agreed. Not a direct answer but this should be interesting: https://github.com/cyphar/filepath-securejoin
[ Parent | on HN ]
Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by euroderf on Monday May 25, 2026 @12:55PM (#48268991)
The new os.Root is supposed to handle symlinks correctly in a sandbox, but (of course?) the first release had a bug related to symlinks.
[ Parent | on HN ]