Go Team's Ingenious Solution Secures Packages Effortlessly!

8 Apr 2026 · 1 min

Watch on YouTube

0:32

Google's Go team built an automatic dependency-pinning system with a transparency log that stops supply-chain attacks without developers doing anything extra. It required new computer science theory and actually works at scale.

Chapters

It's taken decades for people to actually figure out how to do secure package management. And I think the Go team at Google, I think, did an incredible job here. And if there's ever some award for securing systems at scale with elegant solutions that people don't ever have to think about, I think they all deserve to win that prize. The way they built the transparency log, and the go.mod, and go.sum system to stop these attacks at the source without people even having to think about it, and pin all of this stuff by default. It's novel work they did. It's new computer science theory they had to invent, and did all of this in an ergonomic way.

More from Anton

30:39

youtube.com

EP290 Project Atlas: Wiz's AI Vulnerability Research

2mo ago

27:17

youtube.com

CISO Tested, Board Approved: Cloud Resilience with General Mills CISO Noah Korba

2mo ago

40:01

youtube.com

Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder

2mo ago

27:28

youtube.com

EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier

3mo ago

27:15

youtube.com

EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank

3mo ago

52:28

youtube.com

EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter

4mo ago

0:50

youtube.com

Native vs Third Party Cloud Security Which is REALLY Better #shorts #podcast #CloudSecurity

4mo ago

0:31

youtube.com

The Future of Multi Cloud Is Working WITH Each Provider? #shorts #podcast #CloudSecurity

4mo ago

0:31

youtube.com

AI Accelerates, Humans Ensure Enforcement Accuracy! #shorts #podcast #cybersecurity #CloudSecurity

4mo ago

0:21

youtube.com

Unlock Agentic #SOC Success - Start Right for Sustainable Wins! #shorts #podcast #cybersecurity #AI

4mo ago

1:01

youtube.com

AI's Code Revolution - Secure Production & Faster Response! #shorts #podcast #cybersecurity #AI #SOC

4mo ago

See all content