3 ms·
Lots of people have looked at the spiped source code; it has been around since 2011 and I've even handed out a few bug bounties. It's also considerably simpler
by cperciva 6y ago
Lots of people have looked at the spiped source code; it has been around since 2011 and I've even handed out a few bug bounties.
It's also considerably simpler than wireguard, which reduces the potential for vulnerabilities; and operates on a per-connection basis, which means you can do things like establishing a secure connection to another host but have a socket endpoint which can only be accessed by certain users.
- nirav 6y ago"lots of people looking at source code" is contemporarily a weak argument against audit and review by experts, I really love spiped.
- cperciva 6y ago"lots of people looking at source code" is contemporarily a weak argument against audit and review by experts I would absolutely love to get some deliberate code review from experts. I know tedu has looked at some of the code -- he sent me some minor corrections -- and I would certainly count him as an expert, but I don't know if his review was systematic or if he just glanced at a handful of files.
- qbasic_forever 6y agoThat's awesome, thanks for clarifying! Looks like a really handy and useful tool to keep in the toolbox.