Live data from Hacker News

Sshtalk: An SSH-based chat made in assembler

2ton.com.au

31–38 of 38 posts

Re: Sshtalk: An SSH-based chat made in assembler

#31
post #13
post #11

Seems cute. Might be a fun gadget to host on a Pi or whatnot. > Hand-written in x86_64 assembly language Oh. Not sure if cross-internet capable communication tools constitutes the "worst" example of hand written assembly, exactly, but... yeah, it has to be up there. I'm sure it was fun to hack, though.

The only thing really worse there is that the number of people who could audit the code is much smaller. That guy wrote a whole SSL library in assember, so he probably didn't just finish some assembler tutorial and decided this was a good first lil project. Assember is usually just considered bad/dangerous by people who have no clue about it and consider it something magical. It's not. At least not significantly more…

Please. We are in a world where heartbleed happen, as well as an untold number of buffer over flow / memory management vulnerabilities through the years. Companies have spent millions developing languages like Rust and Go to replace C & C++ in more security sensitive applications. Assembly is definitely not just "just considered bad/dangerous by people who have no clue about it and consider it something magical".

Re: Sshtalk: An SSH-based chat made in assembler

#32
post #11

Seems cute. Might be a fun gadget to host on a Pi or whatnot. > Hand-written in x86_64 assembly language Oh. Not sure if cross-internet capable communication tools constitutes the "worst" example of hand written assembly, exactly, but... yeah, it has to be up there. I'm sure it was fun to hack, though.

Run it on qemu on Pi? Qemu can run individual binaries.

Re: Sshtalk: An SSH-based chat made in assembler

#33
post #31
post #13

Earlier quoted context omitted.

The only thing really worse there is that the number of people who could audit the code is much smaller. That guy wrote a whole SSL library in assember, so he probably didn't just finish some assembler tutorial and decided this was a good first lil project. Assember is usually just considered bad/dangerous by people who have no clue about it and consider it something magical. It's not. At least not significantly more…

Please. We are in a world where heartbleed happen, as well as an untold number of buffer over flow / memory management vulnerabilities through the years. Companies have spent millions developing languages like Rust and Go to replace C & C++ in more security sensitive applications. Assembly is definitely not just "just considered bad/dangerous by people who have no clue about it and consider it something magical".

how the hell did I get three downvotes for this

Re: Sshtalk: An SSH-based chat made in assembler

#34
post #32
post #11

Seems cute. Might be a fun gadget to host on a Pi or whatnot. > Hand-written in x86_64 assembly language Oh. Not sure if cross-internet capable communication tools constitutes the "worst" example of hand written assembly, exactly, but... yeah, it has to be up there. I'm sure it was fun to hack, though.

Run it on qemu on Pi? Qemu can run individual binaries.

Can qemu do system call passthrough though?

Re: Sshtalk: An SSH-based chat made in assembler

#37
post #33
post #31

Earlier quoted context omitted.

Please. We are in a world where heartbleed happen, as well as an untold number of buffer over flow / memory management vulnerabilities through the years. Companies have spent millions developing languages like Rust and Go to replace C & C++ in more security sensitive applications. Assembly is definitely not just "just considered bad/dangerous by people who have no clue about it and consider it something magical".

how the hell did I get three downvotes for this

because anything not flowery will get you downvoted

Re: Sshtalk: An SSH-based chat made in assembler

#38
post #11

Seems cute. Might be a fun gadget to host on a Pi or whatnot. > Hand-written in x86_64 assembly language Oh. Not sure if cross-internet capable communication tools constitutes the "worst" example of hand written assembly, exactly, but... yeah, it has to be up there. I'm sure it was fun to hack, though.

Only the boilerplate. The crypto is using Crypto++ https://www.cryptopp.com, which is good, and was even FIPS 140–2 validated.
Post reply on HN