Philip Silva
LightNews LightNews
silva.ph
Philip Silva
@silva.ph
460 followers 410 following 32 posts
Freelance Software Engineer based in Berlin

Working with Web, Go, Linux (also interested in OpenBSD, Plan 9)

silva.ph
Posts Replies Media Videos
silva.ph
2FA reset phishing seems to be quite a thing right now
Phishing E-Mail using Github issue notification through mention redirecting
September 17, 2025 at 7:02 PM
silva.ph
Happy holidays!
December 24, 2024 at 9:24 AM
silva.ph
govulncheck also has a binary mode to increase coverage for reflect based call chains #devsecops #golang
Go example that imports a library with a vulnerable accept header parser function from 2020. It uses the reflect package to call it. Running govulncheck in binary mode results in finding 2 vulnerabilities. Source code: ``` $ cat main.go package main import ( "golang.org/x/text/language" // v0.3.4 (2020) "reflect" ) func Main() { language.ParseAcceptLanguage("00-t-0o") } func main() { reflect.ValueOf(Main).Call([]reflect.Value{}) } ``` Again the same Go example calling a vulnerable function using reflect. This time govulncheck is called in source mode though, reporting: No vulnerabilities found. Your code is affected by 0 vulnerabilities. This scan also found 2 vulnerabilities in packages you import and 0 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities.
December 18, 2024 at 4:26 PM
silva.ph
Logging in nginx without IP and User-Agent when feasible
log_format no_ip_ua '$time_local "$request" $status $body_bytes_sent "$http_referer"'; access_log /var/log/nginx/access.log no_ip_ua;
December 13, 2024 at 7:46 AM