6 ms·

Rewrite it in Rust. Only half joking - this kind of critical infrastructure should not be written in C anymore.

by st3fan 4y ago

speedgoose 4y ago
I expose Teleport instead of OpenSSH and it's not Rust but Golang.
- outworlder 4y ago
  But OpenSSH is still in the picture, is it not?
  - duskwuff 4y ago
    I'm not specifically familiar with Teleport, but Go has its own native SSH implementation which doesn't depend on OpenSSH: https://pkg.go.dev/golang.org/x/crypto/ssh https://pkg.go.dev/golang.org/x/crypto/ssh
  - tptacek 4y ago
    Teleport replaces OpenSSH.
    - outworlder 4y ago
      Only if you deploy a teleport node, no? AFAIK it's optional
yjftsjthsd-h 4y ago
Feel free:) Once your replacement is fully functional, make sure to post it to HN so the rest of us know it's available.
deleted 4y ago
[deleted]
steponlego 4y ago
OpenBSD isn't switching away from C, and people are getting sick to their stomachs over the constant Rust "advocacy." It's just spam at this point.
- pdimitar 4y ago
  Advocating for better safety is spam, mmmkay. <takes notes>
  - snvzz 4y ago
    "Advocating for rust" and "Advocating for safety" are not the same thing and should never be confused as such.
    - pdimitar 4y ago
      They have an overlap. Your point? Apart from trying to act like a living breathing dictionary? Which apparently counts as a discussion technique?
  - acdha 4y ago
    I’m a huge fan of memory safety but if you’re going to hector other people about open source projects you should either be volunteering code or sending serious money.
    - pdimitar 4y ago
      Huh? You mean if you find a bug, you're not allowed to point it out unless you have a PR ready that fixes it? Not sure what you're saying.
      - acdha 4y ago
        “You should rewrite your large C project” is not helpful unless you’re showing up to help. “Here’s a specific bug you should fix” is different because it’s multiple orders of magnitude less work and doesn’t involve throwing out a ton of perfectly serviceable code.
peoplefromibiza 4y ago
> Rewrite it in Rust. Only half joking Waiting to put a star on your Github repo. Maybe I even send $5 as a support for your work.
- xvilka 4y ago
  See my comment about russh.
  - peoplefromibiza 4y ago
    has it been battle tested for years and has a very solid security track record though? because that's what I want from an SSH client/server. Like, yeah, this one's nice but https://github.com/warp-tech/russh/issues/16 https://github.com/warp-tech/russh/issues/16
xvilka 4y ago
There's russh[1][2] [1] https://docs.rs/russh/latest/russh/ https://docs.rs/russh/latest/russh/ [2] https://github.com/warp-tech/russh https://github.com/warp-tech/russh

Rewrite it in Rust. Only half joking - this kind of critical infrastructure should not be written in C anymore.

by st3fan 4y ago

Rewrite it in Rust. Only half joking - this kind of critical infrastructure should not be written in C anymore.

speedgoose 4y ago

I expose Teleport instead of OpenSSH and it's not Rust but Golang.

outworlder 4y ago
But OpenSSH is still in the picture, is it not?
- duskwuff 4y ago
  I'm not specifically familiar with Teleport, but Go has its own native SSH implementation which doesn't depend on OpenSSH: https://pkg.go.dev/golang.org/x/crypto/ssh https://pkg.go.dev/golang.org/x/crypto/ssh
- tptacek 4y ago
  Teleport replaces OpenSSH.
  - outworlder 4y ago
    Only if you deploy a teleport node, no? AFAIK it's optional

yjftsjthsd-h 4y ago

Feel free:) Once your replacement is fully functional, make sure to post it to HN so the rest of us know it's available.

deleted 4y ago

[deleted]

steponlego 4y ago

OpenBSD isn't switching away from C, and people are getting sick to their stomachs over the constant Rust "advocacy." It's just spam at this point.

pdimitar 4y ago
Advocating for better safety is spam, mmmkay. <takes notes>
- snvzz 4y ago
  "Advocating for rust" and "Advocating for safety" are not the same thing and should never be confused as such.
  - pdimitar 4y ago
    They have an overlap. Your point? Apart from trying to act like a living breathing dictionary? Which apparently counts as a discussion technique?
- acdha 4y ago
  I’m a huge fan of memory safety but if you’re going to hector other people about open source projects you should either be volunteering code or sending serious money.
  - pdimitar 4y ago
    Huh? You mean if you find a bug, you're not allowed to point it out unless you have a PR ready that fixes it? Not sure what you're saying.
    - acdha 4y ago
      “You should rewrite your large C project” is not helpful unless you’re showing up to help. “Here’s a specific bug you should fix” is different because it’s multiple orders of magnitude less work and doesn’t involve throwing out a ton of perfectly serviceable code.

peoplefromibiza 4y ago

> Rewrite it in Rust. Only half joking Waiting to put a star on your Github repo. Maybe I even send $5 as a support for your work.

xvilka 4y ago
See my comment about russh.
- peoplefromibiza 4y ago
  has it been battle tested for years and has a very solid security track record though? because that's what I want from an SSH client/server. Like, yeah, this one's nice but https://github.com/warp-tech/russh/issues/16 https://github.com/warp-tech/russh/issues/16

xvilka 4y ago

There's russh[1][2] [1] https://docs.rs/russh/latest/russh/ https://docs.rs/russh/latest/russh/ [2] https://github.com/warp-tech/russh https://github.com/warp-tech/russh