I don't know much about Tor. But I hope I can route all of my home network traffic through it. That or route everything through VPN. I'll bet you can guess why I'm suddenly interested.
Tor in a safer language: Network team update from Amsterdam
21–30 of 254 posts
Re: Tor in a safer language: Network team update from Amsterdam
#22I am curious why they were advised not to use Go. Probably not a safety concern. Edit: cgo != Go. Thanks for the responses. I have done a bit of Go, but just pure Go.
Re: Tor in a safer language: Network team update from Amsterdam
#23As a mere average user of computer languages, every time I play around with Go I start wondering how a language like this became so popular. It feels like it was invented in a universe where Haskell, OCaml, Erlang, Smalltalk, Lisp and so many more languages and research in languages never happened.
Iterative languages seem to match more closely how people speak/think in verbal language.
Re: Tor in a safer language: Network team update from Amsterdam
#24This is exciting not only because of the Tor project itself but because this will set an example for other projects to follow.
This creates also an opportunity to engage Mozilla into contributing
[1] shameless plug: https://github.com/duneroadrunner/SaferCPlusPlus
Re: Tor in a safer language: Network team update from Amsterdam
#25Since bitexploder asked, I'll add what I wrote on this on other forums. If it's about secrets or anonymity, make sure you always use a safe language that supports careful control and reasoning about both memory and CPU time. The reason is that this enables covert, channel analysis for vulnerabilities that leak secrets through storage and timing. It's why I wanted Freenet to ditch Java aside from the obvious reasons.…
Re: Tor in a safer language: Network team update from Amsterdam
#26Re: Tor in a safer language: Network team update from Amsterdam
#27Since bitexploder asked, I'll add what I wrote on this on other forums. If it's about secrets or anonymity, make sure you always use a safe language that supports careful control and reasoning about both memory and CPU time. The reason is that this enables covert, channel analysis for vulnerabilities that leak secrets through storage and timing. It's why I wanted Freenet to ditch Java aside from the obvious reasons.…
Looking at the MISRA-C guidelines (or more specifically, a pirated copy - are these available legitimately to the public?), it seems like about half of them aren't problems in Rust, because it's warning you about stupid things in C that can't be fixed for legacy reasons, and half of them are things that could be caught with a linter / static analysis tool like https://github.com/Manishearth/rust-clippy . Do you think building something that implements as many of the MISRA-C checks as possible is useful progress towards the high-assurance Rust goal?
Re: Tor in a safer language: Network team update from Amsterdam
#28This is either a horribly timed announcement or a joke written very seriously. I have no idea which.
Re: Tor in a safer language: Network team update from Amsterdam
#29This is either a horribly timed announcement or a joke written very seriously. I have no idea which.
Re: Tor in a safer language: Network team update from Amsterdam
#30I don't know much about Tor. But I hope I can route all of my home network traffic through it. That or route everything through VPN. I'll bet you can guess why I'm suddenly interested.
Couple of things. With Tor, you cannot control your exit in a sense. Since some websites are really shoddy (a lot of application portals are) and don't have / support SSL, you would be transmitting your entire application profile through TOR unencrypted. Somehow, I trust my ISP more than some random TOR exit when it comes to this. Second, many websites (sadly) do not work if you are using a VPN (like Netflix).