Related:
Arti – An implementation of Tor in Rust - https://news.ycombinator.com/item?id=30683879 - March 2022 (135 comments)
Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
11–20 of 67 posts
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#12This project has come a long way, very fast. Great work to all involved. The biggest security holes in Tor are most likely going to be from the browser going forward. Hardening the browser is tough, but that's a win for everyone (including those not using Tor). This sentiment was one that I shared in my Rust work: > the pickiness of the compiler has been a great boon. Generally speaking, if our Rust code compiles and…
I have a question, can I use tor as a middleware? for example, can I build a social network with Tor embedded into the client as the network layer?
(as others have pointed out) Yes, indeed: https://github.com/guardianproject/NetCipher/
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#13It seems the Rust people are especially prone to re implementing things. Nothing is really created, just reimplemented.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#14It seems the Rust people are especially prone to re implementing things. Nothing is really created, just reimplemented.
This was an initiative by the Tor Project itself, in order to make their codebase easier to work on and more secure.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#15It seems the Rust people are especially prone to re implementing things. Nothing is really created, just reimplemented.
I am happy for most software to move from C into almost anything else. Something unlikely to have memory exploits, or with standardized tooling for dependency management and compilation.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#16It's interesting that the funding for this came from the Zcash Community Grants. There's a lot of money involved with cryptocurrency and a lot of it gets invested into the software involved. It's interesting that in this case, serious money got invested into some software that isn't strictly cryptocurrency-related and is useful outside of cryptocurrency. It makes me wonder if there are other software projects that are generally useful, including but not exclusively to cryptocurrency projects, that could benefit similarly from seeking funding from cryptocurrency projects. Even if one disliked cryptocurrency, this could be seen as getting money redistributed to more useful endeavors to benefit everyone.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#17It seems the Rust people are especially prone to re implementing things. Nothing is really created, just reimplemented.
In a way it is nice way to grow Rust ecosystem quickly at-least. Likely makes existing libraries better, and fills up the missing holes in ecosystem. If everyone builds just new stuff, it will likely grow at slower pace, and much smaller ecosystem for libraries.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#18It seems the Rust people are especially prone to re implementing things. Nothing is really created, just reimplemented.
I think this happens with a lot of languages. The Rust implementations just get more eyeballs and press. Presumably because of the inherent memory safety + speed of (non unsafe) Rust.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#19To me this just seems pointless because an implementation in Rust is going to have similar features to one in C, Java, Python, or any of the handful of languages where Tor already exists... I want to rep another project that I think would be more relevant to Tor's goals. It is unfunded yet should it exist: would have the potential to transform privacy on the web. The project is https://github.com/Ayms/node-Tor It's about implementing Tor in Javascript.
Why is this a good idea? Well, if you had a Javascript version of Tor you could quite literally import it on any website. It would be the easiest way to add privacy to millions of users sessions. It would be so ridiculously accessible and easy to use that it would probably lead to rapid innovation in the underlying tech. There is a lot of cool p2p tech already built into the browser that would be an amazing test bed.
Currently Google Chrome are also experimenting with a socket-like API that I believe would be a useful piece of the puzzle [for the project.] It just seems to me that marketing, networking, and being a tech normie is more important than actually having a good idea. So you see pointless projects like this get all the funding while projects like Ayms stay unknown and don't get any. Historical note: the hacker Aaron Swartz (tragically deceased - those who know... know. It was an awful waste) was involved in this project and suggested it as an idea. It's definitely a good one in my opinion.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#20It's interesting that the funding for this came from the Zcash Community Grants. There's a lot of money involved with cryptocurrency and a lot of it gets invested into the software involved. It's interesting that in this case, serious money got invested into some software that isn't strictly cryptocurrency-related and is useful outside of cryptocurrency. It makes me wonder if there are other software projects that ar…
I think .attic has benefited from such an event as well:
https://matrix.org/blog/2018/01/29/status-partners-up-with-n...