Hacker News new | ask | show | jobs
by sandGorgon 3905 days ago
what do you think about the Lamson[1]/Salmon[2] project (originally by Zed Shaw)? It seemed really cool but seemed to have fizzled out.

[1] https://github.com/zedshaw/lamson

[2] https://github.com/moggers87/salmon

1 comments

I like the concept and some attributes of it. Some good ideas might come out of those projects. The thing I can't overemphasize here, though, is that this kind of application might be attacked or just fail in many ways. So, whatever people do, they need to keep the main functionality simple for human and/or machine analysis. Python helps with readable logic but obscures how it's actually implemented (attacker's focus). A similar project in Go might be a better idea as it's easier to see what assembler comes out of it and Go is often the replacement for Python in server apps.

Regardless, the main worry areas are parsing, protocol handling, formats, and limiting effects of any given external action on system's state. Making sure those are correct should knock out most issues. Not that it will be simple or easy. ;)