Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
1–10 of 67 posts
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#2This project has come a long way, very fast. Great work to all involved. The biggest security holes in Tor are most likely going to be from the browser going forward.
Hardening the browser is tough, but that's a win for everyone (including those not using Tor).
This sentiment was one that I shared in my Rust work:
> the pickiness of the compiler has been a great boon. Generally speaking, if our Rust code compiles and passes its tests, it is much likelier to be correct than our C code under the same conditions.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#3This project has come a long way, very fast. Great work to all involved. The biggest security holes in Tor are most likely going to be from the browser going forward. Hardening the browser is tough, but that's a win for everyone (including those not using Tor). This sentiment was one that I shared in my Rust work: > the pickiness of the compiler has been a great boon. Generally speaking, if our Rust code compiles and…
I have a question, can I use tor as a middleware? for example, can I build a social network with Tor embedded into the client as the network layer?
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#4How much speed increase can reasonably be expected? I thought bottleneck to Tor is just all the IP relays that occur ?
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#5This project has come a long way, very fast. Great work to all involved. The biggest security holes in Tor are most likely going to be from the browser going forward. Hardening the browser is tough, but that's a win for everyone (including those not using Tor). This sentiment was one that I shared in my Rust work: > the pickiness of the compiler has been a great boon. Generally speaking, if our Rust code compiles and…
I have a question, can I use tor as a middleware? for example, can I build a social network with Tor embedded into the client as the network layer?
Briar does this.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#6How much speed increase can reasonably be expected? I thought bottleneck to Tor is just all the IP relays that occur ?
Their goal was to increase security more than speed.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#7This project has come a long way, very fast. Great work to all involved. The biggest security holes in Tor are most likely going to be from the browser going forward. Hardening the browser is tough, but that's a win for everyone (including those not using Tor). This sentiment was one that I shared in my Rust work: > the pickiness of the compiler has been a great boon. Generally speaking, if our Rust code compiles and…
I have a question, can I use tor as a middleware? for example, can I build a social network with Tor embedded into the client as the network layer?
Yes, it's a socks5 proxy, if your software will obey the proxy rules, you can pipe it all through tor.
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#8Very cool, I fully support this and I plan to experiment with it. The developers should be proud of making such exciting progress.
But doesn’t “ready for production use” sound like hyperbole when the blog post describes a partially completed implementation? It can’t even connect to onion services yet. Similarly, “improved security” is a suspect claim to make when comparing brand new software to a battle-tested codebase.
There’s no point making claims like that in this phase of early-adopter outreach; it burns future credibility for no reason. We’ll play with the software regardless.
IMO a more accurate claim would be “Arti Tor client, socks proxy and Rust crate can now connect to clearnet hosts through the Tor network, but is still missing some features like bridges and pluggable transports.”
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#9> For example, when we've had to get into the fine details of filesystem permissions, we've found that most everything we do takes different handling on Windows.
Amos was right
https://fasterthanli.me/articles/i-want-off-mr-golangs-wild-...
Re: Tor – Arti 1.0.0 is released: Rust Tor implementation ready for production use
#10How much speed increase can reasonably be expected? I thought bottleneck to Tor is just all the IP relays that occur ?
Their goal was to increase security more than speed.
Yup, the core part of Tor is written in C so it can't get much speedier. Rewriting it in rust is almost is entirely to reduce the footguns you get in C