TorLang (Tor implemented in Erlang)
Source code repository
https://github.com/dnet/TorLang
Motivation
Tor is currently implemented in C which makes it possible for an attacker to find vulnerabilities specific to unmanaged environment such as buffer overflows. Successfully compromised Tor nodes could lead to leakage of plaintext traffic and (since every node runs the same implementation) disclosure of a whole circuit. This way, even hidden services could be discovered and localized, which gives people running these a false sense of security/anonimity.Why Erlang
- managed -> security
- scalablility
- free as in both senses
- available to a wide range of operating systems
Potential sources of code reuse
- ErlTunnel (MIT license)
- Surrogate forward/reverse proxy (Apache 2.0)
- Tsung load testing tool with HTTP/HTTPS support (undeclared license -> copyright?)
