Live data from Hacker News

Arti – An implementation of Tor in Rust

blog.torproject.org

111–120 of 143 posts

Re: Arti – An implementation of Tor in Rust

#111
post #105

Earlier quoted context omitted.

How so?

Because it is just a library for rust programs. Not even close to reimplementation of Tor for general use. edit: yea, downvoters, show your own inability to process truth. I love this grown up behavior here on HN.

I think the downvotes were for an very emotional claim ("infuriating") backed up by 0 arguments. Although it is weird to me that the actual explanation got downvoted instead of the original claim

Re: Arti – An implementation of Tor in Rust

#112
post #104

I2P should be preferred. IP2D it's a nice daemon.

Yeah I hate to always be that guy, but while I think Tor is great in that it exists at all and has inspired other projects, I think I2P is an overall better design. Not having a history with the US military or funding from DARPA is a plus, IMO. Tor isn't necessarily flawed for that reason, but I trust less anything the US government takes an interest in.

For anyone wondering what we're talking about:

https://geti2p.net (Official Java implementation)

https://github.com/PurpleI2P/i2pd (C++ implementation)

The unfortunate thing is that, as far as I'm aware, I2P doesn't have a "Tor Browser" of sorts, and most people would want to use I2P as a clearnet proxy; the audience for I2P may always be significantly less than that of Tor even if it was revealed that Tor was totally flawed.

I think that I2P could benefit from selling itself less as a means of anonymity and more as decentralized, censorship-resistant web hosting. The clearnet should then have inproxies to expose I2P sites rather than the other way around, as is the typical use case for Tor. That way you can spin up an I2P instance anywhere, instantly have a web server on a unique address, and have it be available on any number of clearnet inproxy nodes as well as to anyone connected directly to the network.

Having played a lot with I2P recently, I find it more "fun" than using Tor. It lacks in content, but its focus on hidden services (eepsites) and the relatively small number of users is reminiscent of he web back when I first started using it in the 90s. I like that it has a sort of DNS system that is only as centralized as you want it, and that it has a built in way of assigning your own domain aliases. Even if you (the reader) aren't interested in anonymous decentralized networking for any practical reason, I'd say it's worth testing out I2P just to get a kick out of how novel it is.

Re: Arti – An implementation of Tor in Rust

#113
post #35

Earlier quoted context omitted.

Do you ask that in the comments of every project on the off chance?

This question is relevant when 1: one of the most important (perceived) adversarial is the NSA; 2: as of 2012, 80% of The Tor Project's $2 million annual budget came from the United States government; 3: the Underhanded C Contest exists and we can assume that however secure Rust is, writing underhanded Rust code is possible. https://en.wikipedia.org/wiki/The_Tor_Project#Funding https://en.wikipedia.org/wiki/Underhand…

The perceived adversary is not the NSA. Tor is mean to protect agents and journalists from average state level actors. It is not meant to protect you from superpowers that control most of the internets backbone. I would trust tor to protect me from Assad (or some other dictator of a mid level power) I would not trust it to keep me safe from Putin or Xi.

Re: Arti – An implementation of Tor in Rust

#114
post #97
post #33

Earlier quoted context omitted.

Do those same people also use SELinux?

Of course not. SELinux is functionally unusable due to it's historical ties. Which is a real shame, because the network limiting (used to be, it's been a while since I looked) is very easy to use and quite good.

SELinux is not unusable, it’s open source anyway.

Re: Arti – An implementation of Tor in Rust

#115
post #56

Earlier quoted context omitted.

Dunno, is that relevant? Are any among us completely devoid of any inconsistencies or hypocrisy?

Given it was developed by NSA, completely relevant.

But Tor wasn’t, so it’s a derail to begin with

Re: Arti – An implementation of Tor in Rust

#116
post #105

Earlier quoted context omitted.

How so?

Because it is just a library for rust programs. Not even close to reimplementation of Tor for general use. edit: yea, downvoters, show your own inability to process truth. I love this grown up behavior here on HN.

I’m not in the slightest bit surprised you are being downvoted — your comment is overly dramatic and not a remotely useful contribution. The title of the post of “An implementation of Tor in Rust”. The project claims to be an implementation of Tor, which it is, and it claims to be written in Rust, which it is. It doesn’t claim to be a standalone replacement, it doesn’t claim to be finished and it doesn’t claim to be not-a-library.

Re: Arti – An implementation of Tor in Rust

#117
post #56

Earlier quoted context omitted.

Given it was developed by NSA, completely relevant.

But Tor wasn’t, so it’s a derail to begin with

Tor was developed by the US Naval Research Laboratory to protect communications of the US intelligence community, so while it wasn't strictly developed by the NSA, if one considers products of the NSA contaminated by their connection to the US intelligence community, it's pretty hard not to see Tor as tainted in the same way.

Re: Arti – An implementation of Tor in Rust

#118
post #48

Earlier quoted context omitted.

I don't think you can generally expect all processes to transparently use a SOCKS proxy? You might be able to finagle a custom vpn around it, I suppose. But AFAIK SOCKS isn't 100% transparent at the IP layer allowing all protocols to transparently layer on top? I guess SOCKS5 handles tcp and udp - so you might get away with redsocks (which explicitly recommends against using with TOR): https://github.com/darkk/redsoc…

Tor itself does not support UDP, even if SOCKS might

Good point. Makes it a better fit for SOCKS I suppose. Tor does dns over tcp - or no dns?

Re: Arti – An implementation of Tor in Rust

#119
post #105

Earlier quoted context omitted.

How so?

Because it is just a library for rust programs. Not even close to reimplementation of Tor for general use. edit: yea, downvoters, show your own inability to process truth. I love this grown up behavior here on HN.

It's also a SOCKS proxy, which at least the last time I used Tor standalone (where I'd have to configure it myself, as opposed to as part of TBB or TAILS where it's set up for me) was the main way a client would access the network.

Re: Arti – An implementation of Tor in Rust

#120

Earlier quoted context omitted.

Taking a donor's money is at most an implicit endorsement. If an active serial killer gave me a million dollars to make the world a better place, it would be wrong for me to refuse to move money from a bad actor to those in need.

Great strawman but I still disagree and it is not what is happening here, it is still an endorsement of crypto scams, and in the case for crypto, this only amplifies the adoption of ransomware, scams and sure bad actors because of the donation. It just makes it all worse.

I don't understand how what I said is a strawman. I think an active serial killer is orders of magnitude worse than any crypto scam, but I would still take their money- ie. I'm disagreeing with a stronger version of your point.
Post reply on HN