News for hackers. Stuff that matters.
Re:Patchwork – Decentralized messaging and sharing app built... by happynaut on Wednesday January 31, 2018 @05:53PM (#16278301)
What's your reservations about it being implemented in nodejs? It's not my favourite technology stack either (I much prefer scala / haskell), but it hasn't deterred me from using it or contributing to the project.

I wonder if a security review is something that can be funded through the open collective that is being set up (https://opencollective.com/secure-scuttlebutt-consortium ) or some other funding source.

By the way, the repositories that I mentioned earlier for the Rust implementation of the protocol in progress are mostly here:

https://github.com/AljoschaMeyer?tab=repositories

Re:Patchwork – Decentralized messaging and sharing app built... by Rhapso on Thursday February 01, 2018 @02:53PM (#16285256)
I have issues with js as a language but those are not security issues. My security-related issues are with the nodejs package infrastructure.

https://www.csoonline.com/article/3214624/security/malicious... The sprawling dependencies alongside potential security/breaking issues are huge. It is a large and vulnerable attack surface.

Re:Patchwork – Decentralized messaging and sharing app built... by happynaut on Saturday February 03, 2018 @11:44AM (#16298285)
Fair play!