Re: [tor-talk] Programming language for anonymity network

2014-04-19 Thread Aymeric Vitte
Le 18/04/2014 19:48, Nick Mathewson a écrit : Personally, if I were starting over, I'd look into a multi-languge approach: a memory-safe compiled language for most of the programming, with cryptographic and lowest-level networking code in C, and a scripting language for higher level tasks and fo

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread coderman
On Fri, Apr 18, 2014 at 6:45 AM, nb.linux wrote: >... I use Ada only for a short time. But I don't > want to use C (or C++ or Java) again, because a paradigm of "everything > is an integer" simply seems not appropriate to me in this millennium. old C: int* modern C++: std::vector move constructo

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread Nick Mathewson
[Replying to Stevens and tor-talk only. Crossposting runs against my religious beliefs.] On Fri, Apr 18, 2014 at 4:26 AM, Stevens Le Blond wrote: > > Hello, > > We are a team of researchers working on the design and implementation of > a traffic-analysis resistant anonymity network and we would l

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread Ted Smith
OCaml. http://ocaml.org/ 1. OCaml is more obscure than many languages, but it supports programming in imperative, object-oriented, and functional styles (though it's obviously best suited for a functional style). I've seen people write Java in OCaml and produce clean,

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread nb.linux
Stevens Le Blond: > Hello, > > We are a team of researchers working on the design and implementation of > a traffic-analysis resistant anonymity network and we would like to > request your opinion regarding the choice of a programming language / > environment. Here are the criteria: Hi, (disclai

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread Aymeric Vitte
Redefining anything in js is visible as "your nose on your face", as well as importing silently anything, whatever obfuscation/minification means are used it's trivial to check. But here you do not have necessarly to import things and/or libraries, you can package everything with your app so y

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread David Rajchenbach-Teller
On 18/04/14 11:30, Aymeric Vitte wrote: [...] > - nodejs is easy to audit (assuming that modules like V8 can be > audited), you can override node's functions/objects if you like [...] Actually, in my mind, that's one point against safety of Node.js applications. Redefining, say, Array.prototype.fo

Re: [tor-talk] Programming language for anonymity network

2014-04-18 Thread Aymeric Vitte
Without any hesitation: js + nodejs (note: I am not part of the node's team) - the code is very reduced and transparent, difficult to backdoor including nodejs itself - js is familiar but not trivial as many people think - works on any platform, can even be browserified (see links below) --> n