1. Footguns in Golang

When and where

Date and time

Fri, Oct 2 · 1:30 a.m.PDT — local Abbotsford time

Location

RMIT Swanston Academic Building 80. level 2 room 2445 Swanston Street, Melbourne, MelbourneAbbotsford

About this event

*Talk Submissions*: [ruxmon@proton.me](http://ruxmon@proton.me%2A%2A/) **Footguns in Golang - Zoltan (@loltan)** Automated tooling and AI assistants have raised the floor for code review — the obvious Go bugs now get caught on the first pass by anyone. But that floor is also where most reviewers stop, because the tooling only flags what it already knows to look for. This talk goes past it, into Go's subtle and dangerous behaviours: silent integer overflows that smuggle SQL queries at the protocol level, null-byte auth bypasses at the CGO boundary, JSON marshallers that silently leak the very secrets they were written to redact, reverse-proxy hop-by-hop header abuse, and the JSON-parsing quirks that keep CSRF alive in modern REST APIs. These footguns and the Semgrep rules to catch them were the subject of a recent elttam blog post — but rules are only interesting once you point them at real code. So for Ruxmon, we've turned them loose on a swathe of large, widely-used open source Go pr

Official details

Tickets:

Official ticket page for 1. Footguns in Golang

Price:

Free

Organizer:

Ruxmon Melbourne

Listing source:

meetup

Last verified September 18, 2026 · evntally doesn't sell tickets — we point you to the box office.