[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] Programming language for anonymity network
- To: tor-talk@xxxxxxxxxxxxxxxxxxxx, p2p-hackers@xxxxxxxxxxxxxxx, liberationtech@xxxxxxxxxxxxxxxxxx, cpunks <cypherpunks@xxxxxxxxxx>
- Subject: Re: [tor-talk] Programming language for anonymity network
- From: David Rajchenbach-Teller <dteller@xxxxxxxxxxx>
- Date: Fri, 18 Apr 2014 11:34:24 +0200
- Cc: wonko@xxxxxxxxxxx, Peter Druschel <druschel@xxxxxxxxxxx>, Dave Choffnes <choffnes@xxxxxxxxxxx>, Nicholas Merritt <nmerritt@xxxxxxxxxxx>
- Delivered-to: archiver@xxxxxxxx
- Delivery-date: Fri, 18 Apr 2014 05:42:02 -0400
- In-reply-to: <5350F0B3.3060007@xxxxxxxxx>
- List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
- List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
- List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
- List-post: <mailto:tor-talk@lists.torproject.org>
- List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
- List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
- References: <5350E1BD.5010304@xxxxxxxxxxx> <5350F0B3.3060007@xxxxxxxxx>
- Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
- Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
- User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
On 18/04/14 11:30, Aymeric Vitte wrote:
[...]
> - nodejs is easy to audit (assuming that modules like V8 can be
> audited), you can override node's functions/objects if you like
[...]
Actually, in my mind, that's one point against safety of Node.js
applications. Redefining, say, Array.prototype.forEach is a good way to
introduce hard-to-track bugs. Doubly so if this is done silently by
importing a package (almost sure the latter is possible, but I haven't
actually checked).
Cheers,
David
--
David Rajchenbach-Teller, PhD
Performance Team, Mozilla
Attachment:
signature.asc
Description: OpenPGP digital signature
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk