[flagged]
In this day and age, it’s probably best to understand that blindly suggesting something should be in Rust is indistinguishable from zealotry. Or from mockery of the people who do it.
TinySSH is a small SSH server using NaCl, TweetNaCl
21–30 of 128 posts
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#22[flagged]
Can you justify this further in the context of this specific offering which appears not to manage dynamic memory?
You don't need further justification if you just agree that using Rust makes everything automatically better... somehow... and you need to agree with it without evidence.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#23I am pleased to see another "small"-is-beautifull alternative of a critical network protocol, and in plain in simple C (I am sorry for the fan boys of absurdely complex computer languages...).
There will be plenty of compiler generated holes, and other security issues, but keep your head above the water and fix all of them, you are going for the long run there.
We also have drop-bear, which is in between openssh and tinycc if I recall properly.
I have to admit... I may deploy tinyssh for my everyday work (I rarely code directly on my workstation, usually I am "away" and do ssh to it via 4g internet IPv6/ssh).
Now a bit of whining (come on, we are on HN), microsoft github is always a bad idea, should move to a fully noscript/basic (x)html friendly git repository (aka not gitlab based for instance, yet).
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#24>easy auditable - TinySSH has less than 100000 words of code Is approximately one hundred thousand words really easily auditable?
Well, at least it fits into GPT-4 Turbo context. I think we are not far away from a fully automated audit that can at least check for 99% of common bugs and security issues.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#25[flagged]
I feel like someone has to say this:
What about LISP?!
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#26>easy auditable - TinySSH has less than 100000 words of code Is approximately one hundred thousand words really easily auditable?
Not really, especially when they have:
> TinySSH has its own crypto library
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#27[flagged]
This kind of comment had become a joke these days, especially when you say that under a project written in C. Nobody is going to even think about that until Rust has as good portability as C.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#28I am pleased to see another "small"-is-beautifull alternative of a critical network protocol, and in plain in simple C (I am sorry for the fan boys of absurdely complex computer languages...). There will be plenty of compiler generated holes, and other security issues, but keep your head above the water and fix all of them, you are going for the long run there. We also have drop-bear, which is in between openssh and…
You are fighting a losing battle if you don't want to see GitHub links on HN.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#29 tinysshd doesn't implement unsafe features (such as password or hostbased authentication)
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#30I am pleased to see another "small"-is-beautifull alternative of a critical network protocol, and in plain in simple C (I am sorry for the fan boys of absurdely complex computer languages...). There will be plenty of compiler generated holes, and other security issues, but keep your head above the water and fix all of them, you are going for the long run there. We also have drop-bear, which is in between openssh and…
You are fighting a losing battle if you don't want to see GitHub links on HN.
it's still worthwhile to point out the issues for people who have recently jumped into the occupation/hobby and haven't yet had the time to meditate on why Microsoft having the keys to the worlds' software kingdom might be A Very Bad THing down the line.