Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arti – An implementation of Tor in Rust

blog.torproject.org

Post reply on HN
Print view View original

81–90 of 143 posts

Re: Arti – An implementation of Tor in Rust

#81

Post by pjmlp »

zozbot234 wrote: post #76
pjmlp wrote: post #34

Earlier quoted context omitted.

Unfortunely there are tons of domains that it will never happen, given the existing ecosystem We as society basically have to undo 50 years of going into the wrong direction, without the economical incentives to fix them, rather mitigate their faults.

There are millions of lines of code written in COBOL in production use, pretty much all of them addressing business-critical needs. FORTRAN scientific codes are not far behind, either. Better get crackin'.

Yet COBOL and Fortran standards are way more modern than WG14 will ever bother doing to C.

Re: Arti – An implementation of Tor in Rust

#82

Post by malfist »

shellac wrote: post #52
DeathArrow wrote: post #9

Quoted post unavailable.

The Tor project was largely funded by the US government initially. If you use Tor currently it's already that compromised, if you consider that an issue.

> If you use Tor currently it's already that compromised, if you consider that an issue

--That's a very bold claim. Got any extraordinary evidence for your extraordinary claim?--

Edit: Misread! Thought you were claiming that tor was compromised. Not that tor was funded. My mistake

Re: Arti – An implementation of Tor in Rust

#83

Post by conradev »

e12e wrote: post #48
qersist3nce wrote: post #8

So at this point it is ready for passing traffic through a SOCKS proxy. Meaning we can `cargo run --release -- proxy` and redirect applications to use port `9150` for their network connections. Couple of related questions: - Does anyone know, in a Linux distro, how to pass all system traffic through a SOCKS proxy port? I'm not looking for intermediary proxy handlers but an official method to force all user and system…

I don't think you can generally expect all processes to transparently use a SOCKS proxy? You might be able to finagle a custom vpn around it, I suppose. But AFAIK SOCKS isn't 100% transparent at the IP layer allowing all protocols to transparently layer on top? I guess SOCKS5 handles tcp and udp - so you might get away with redsocks (which explicitly recommends against using with TOR): https://github.com/darkk/redsoc…

Tor itself does not support UDP, even if SOCKS might

Re: Arti – An implementation of Tor in Rust

#85

Post by kerowak »

colesantiago wrote: post #80
DoItToMe81 wrote: post #66

Earlier quoted context omitted.

Why should they forgo an opportunity for funding that allows people to donate in countries where direct bank transfers to the Tor project would be logged and marked as suspicious, and which is resistant to payment processors deciding not to process the donations? Because you personally don't like cryptocurrency? That is ridiculously childish.

There is no reason to present a personal attack with your non-argument. As I said before in other threads there are alternative ways they can receive grants for funding of Tor projects without endorsing crypto scams. I mentioned Mozilla and Rust foundation as examples. On the crypto tokens, there are tons of reasons not to use them as I have mentioned on this thread and others have mentioned as well. [0] [0] https://…

Privacy coins like zcash and monero should be considered distinct from the rest of the crypto sphere. They actually serve their use case very well, and of all cryptos they easily see the most use as actual currency rather than vehicles for speculation.

Their use case just happens to be purchasing drugs and other illicit products off deep web marketplaces. Or receiving payments for ransomware.

Re: Arti – An implementation of Tor in Rust

#86

Post by shellac »

malfist wrote: post #82
shellac wrote: post #52

Earlier quoted context omitted.

The Tor project was largely funded by the US government initially. If you use Tor currently it's already that compromised, if you consider that an issue.

> If you use Tor currently it's already that compromised, if you consider that an issue --That's a very bold claim. Got any extraordinary evidence for your extraordinary claim?-- Edit: Misread! Thought you were claiming that tor was compromised. Not that tor was funded. My mistake

I crafted this conditional to make no actual claim at all. Personally I don't consider the funding an issue, their processes seemed sound. But if you do then Tor is pretty much a lost cause from the beginning.

Edit: no worries :-)

Re: Arti – An implementation of Tor in Rust

#87

Post by conradev »

colesantiago wrote: post #61
Akaahn wrote: post #45

Earlier quoted context omitted.

Using crypto is a good thing in my eyes, but you seem to be convinced that crypto is all evil and a scam. We've seen in recent years that fiat payment systems are ran by bad actors, that will on a whim revoke access to their systems to any entity they deem "problematic", even if no laws have been broken. Crypto allows entities to freely exchange money without having to worry about passing some arbitrary purity test o…

It simply is. Not just 'ZCash' but the entire space [0]. [0] https://lukeplant.me.uk/blog/posts/the-technological-case-ag...

The entire space is a scam? Luke makes some good points and some not so good points about the challenges with the technology.

He acknowledges that every single digital transaction you make can be seen by banks, for example, and yet does not propose an alternative solution. Credit card data is among the most valuable, and sold many times over to advertisers.

Do you personally think that that is a problem worth figuring out how to solve? If you don’t, it’s going to be hard to see the point. Similar to how we don’t need encryption because we have nothing to hide.

Re: Arti – An implementation of Tor in Rust

#88

Post by paskozdilar »

onedognight wrote: post #79
qersist3nce wrote: post #8

So at this point it is ready for passing traffic through a SOCKS proxy. Meaning we can `cargo run --release -- proxy` and redirect applications to use port `9150` for their network connections. Couple of related questions: - Does anyone know, in a Linux distro, how to pass all system traffic through a SOCKS proxy port? I'm not looking for intermediary proxy handlers but an official method to force all user and system…

One way is to enable a global `LD_PRELOAD=libtsocks.so` (transparent socks) environment variable where you provide an optionally suid (to allow suid binaries to use it if you want) library that overrides `connect`, etc. and forwards them to your socks proxy. Make sure you get ipv4 and ipv6 support if you care. This is not bullet proof by any means. Any application that doesn't using the C library (e.g. go) will not p…

There is a shell wrapper `tsocks` that does all that - all you need is to configure the SOCKS server/port in /etc/tsocks.conf and run `tsocks $COMMAND`, and all the TCP connections of `$COMMAND` will be tunneled through the SOCKS proxy.

Combined with ssh's `-D` option, it becomes a powerful ad-hoc VPN tool.

Re: Arti – An implementation of Tor in Rust

#89

Post by esyir »

oefrha wrote: post #43
esyir wrote: post #21

Earlier quoted context omitted.

I despise crypto, but telling an underfunded OSS project to abandon scarce funding for what is a relatively minor ideological reason definitely rubs me the wrong way. Rather than demanding them to change, why not find a way to help secure them a source of less objectionable funding.

Is it underfunded? (Genuine question.) According to the 2020 fiscal report they received ~$4.5mm in donations and grants which isn’t too shabby. https://blog.torproject.org/transparency-openness-and-our-20...

While funding is decent, you'd also want to compare to expenses, as well as reserves. The 2020 report did show an overall gain, but this has to be contrasted against the depletion of reserves in the previous year, not to mention the overall trend.

Re: Arti – An implementation of Tor in Rust

#90

Post by colesantiago »

conradev wrote: post #87
colesantiago wrote: post #61

Earlier quoted context omitted.

It simply is. Not just 'ZCash' but the entire space [0]. [0] https://lukeplant.me.uk/blog/posts/the-technological-case-ag...

The entire space is a scam? Luke makes some good points and some not so good points about the challenges with the technology. He acknowledges that every single digital transaction you make can be seen by banks, for example, and yet does not propose an alternative solution. Credit card data is among the most valuable, and sold many times over to advertisers. Do you personally think that that is a problem worth figurin…

Yes. Web3, Crypto, all of it.

This website [0] chronicles all what is going on in web3 and this site is an excellent rebuttal of the entire space [1]

[0] https://web3isgoinggreat.com/

[1] https://www.stephendiehl.com/blog/against-crypto.html

Post reply on HN