Conversation

Notices

1. Verius (verius@community.highlandarrow.com)'s status on Saturday, 01-Apr-2017 08:33:39 UTC Verius
   Tor is apparently going to be rewritten in Rust.
   
   As much as I like to dislike Rust (due to the culture around it) Tor is a case where the extra checks of Rust make sense. Tor deals with massively untrusted input on a hostile network with the most technologically competent adversaries trying to actively break it.
   
   I just hope Rust doesn't have bugs that introduce security weaknesses. Because getting in a Ken Thompson patch in the Rust compiler may be easier than getting a backdoor into Tor due to Tor folks being sensibly paranoid.
   • Hallå Kitteh repeated this.
   • Bob Mottram (bob@social.freedombone.net)'s status on Saturday, 01-Apr-2017 08:50:30 UTC Bob Mottram

     in reply to
     @verius is that an April fools? Rewriting security things in Rust might make some kind of sense though and it would be nice to have onion routing built into Redox at a fundamental level.
     Hallå Kitteh repeated this.
   • Bob Mottram (bob@social.freedombone.net)'s status on Saturday, 01-Apr-2017 08:57:25 UTC Bob Mottram

     in reply to

     • Bob Mottram
     @verius https://lists.torproject.org/pipermail/tor-dev/2017-March/012088.html
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:05:57 UTC Hallå Kitteh

     in reply to

     • Bob Mottram
     @bob @verius That sounds like a very principled and reasonable approach. Another example, like librsvg, where people try to find the strengths and benefits and evaluate them, rather than going full utopian.