OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] Who do I have to pay to get The Big Manual of Thread Safety distributed to the EFF?

From: Dan Moniz (dnmpobox.com)
Date: Wed Apr 12 2006 - 15:11:51 CDT

Dave Aitel wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> 14:36 < dave> tor has some sort of weird bug
> 14:48 < dave> 0xd21102 <select+922>: mov 0x440(%edi),%esi
> 14:48 < dave> 0xd21108 <select+928>: mov %esi,0xfffffe70(%ebp)
> 14:48 < dave> (gdb) print/x $edi
> 14:48 < dave> $2 = 0x448
>
> hmmm...let's google a bit....oh.
>
> What won't work with this?
> - --------------------------
>
> ...
>
> Finally, the tsocks library is NOT thread-safe, with or without this
> patch.
> You should not 'torify' multithreaded applications.
>
> (for what it's worth, Verizon needs the manual too)
> (seriously, if there's some dude I can pay to fix this, it would be
> cool to at least know the price)

For what it's worth, as a former employee of EFF, and as friend of both
the people there and the guys who work on Tor (Nick Matthewson and Roger
Dingledine), who are *not* and have never been EFF employees, this isn't
an EFF thing.

EFF funded development of Tor for about a calendar year, and still hosts
the website. Contact Nick <nickmalum.mit.edu> and/or Roger
<armafreehaven.net> with bugs and fixes. And for all things related to
dollars.

--
Dan Moniz <dnmpobox.com> [http://pobox.com/~dnm/]