SecureScan is a professional document scanning company that delivers modern solutions to free your business from outdated, inefficient paper processes. Keep your records secure, improve data accessibility, and reduce your document storage costs with our secure  scanning services.

SecureScan

Cryptographically secure pseudo-random number generator depends on good entropy; however from Docker containers we don’t always get this. This can cause the random generation be to block the execution of the application. Bone die found at Cantonment Clinch (1823–1834). (source: ) Kolby Kirk on Wikimedia Commons The Problem I had a simple piece of Scala code generating random user ids by using . Something like: java.security.SecureRandom.getInstanceStrong() It worked perfectly on local with the official docker image. However after deploying the application to the application was just hanging, no exception thrown. environment O_penJDK_ Google Container Engine After some investigation I found the cause; source is not gathering enough entropy in environment. /dev/random Google Container Engine Solution In O_penJDK_ docker image ( ) the strong secure random algorithm is This algorithm is using source to get entropy, if there’s not enough entropy it blocks until enough entropy is gathered. On average this algorithm needs 21 seconds to generate a single random byte in my cluster. and most installations NativePRNGBlocking:SUN. /dev/random Google Container Engine Other alternative to this source is source. This source uses a pool of entropy already gathered but it generates pseudorandom numbers if it runs out of entropy. It is still intended for most cryptographic purposes. See the sources below. /dev/urandom (“unlimited” random) One option to use as random source is to explicitly get SecureRandom instance instead of using the method. After applying the following change my problem was fixed: /dev/urandom NativePRNGNonBlocking getInstanceStrong() Sources The Right Way to Use SecureRandom Myths about /dev/urandom Thanks for reading, your comments are appreciated.

Hack: How to Use SecureRandom with Kubernetes and Docker

Can Your Java Cryptography Architecture Survive a Quantum Attack?

McLEAN, United States of America, June 26th, 2024/CyberNewsWire/--FireTail announces a free version of its enterprise-level API security tools, making them accessible to developers and organizations of all sizes. FireTail's unique combination of open-source code libraries, inline API call evaluation, security posture management, and centralized audit trails helps eliminate vulnerabilities and protect APIs in real-time. The free plan covers up to 5 APIs, includes 1M API call logs per month, offers 7 days of data retention, and provides clear developer support. FireTail, a disruptor in API security, unveils free access for all to its cutting-edge API security platform. This initiative opens the door for developers and organizations of any size to access enterprise-level API security tools. Today, over 80% of all internet traffic is computer-to-computer communication via APIs. Every mobile app, IoT device, and most modern software applications use APIs, creating a broad attack surface for potential threats. FireTail’s hybrid approach to API security blends open-source code libraries with a feature-packed cloud platform and equips businesses with a unique suite of tools to eliminate API vulnerabilities and provide robust runtime API protection. "API security is essential for modern applications, and every developer and tech team should have access to effective security tools," said Jeremy Snyder, CEO and Co-Founder of FireTail. "Security through obscurity is no longer a viable approach. We’re on a mission to secure all of the world’s APIs and our new free plan ensures ongoing access to an API security platform that delivers genuine insight into the most pressing attack vectors - design flaws in APIs. It’s perfect for smaller organizations striving for stronger API protection, and a great way for individuals or teams within larger organizations to get started. "Riley Priddle, Co-Founder and CTO at FireTail, added, "We’re excited to help organizations of all sizes to better protect their APIs. We want FireTail to become the de facto standard when it comes to API security. Just because you have a small number of APIs, it doesn’t mean they aren’t critical. We want everyone to have access to the best, enterprise-level API security tools. That’s why we offer both this free tier, as well as our open source libraries." For developers and small to medium-sized organizations needing to secure up to 5 APIs, FireTail's free tier includes comprehensive API security features such as discovery, inventory, assessment, detection and response, and inline runtime protection. Key features include: Protection for up to 5 APIs 1M API calls per month 7 days of logging retention Thomas Martin, Founder at NephoSec, shared "We’ve been working with FireTail from the outset as both a customer and a distribution partner. Having proven that the platform works for even the largest enterprises with the most complex API security requirements, it’s great to see the team opening that technology up to everyone.This will enable us to solve API security challenges for organizations of all shapes and sizes." To access the FireTail API security platform, users can visit https://www.firetail.app or join the team on Tuesday, July 2nd for an in-depth look at what FireTail’s free tier can do. About FireTail FireTail allows customers to solve all the most critical problems facing APIs today with a hybrid approach, bringing together cloud, application and code with full blocking capabilities to solve the root causes of API data breaches - flaws at the application and business logic layer in authentication, authorization and data handling. Headquartered in McLean, VA, with offices in Dublin, Ireland, and Helsinki, Finland, FireTail is backed by leading investors, including Paladin Capital, Zscaler, General Advance, and SecureOctane. Users can learn more at https://www.firetail.io. Contact Marketing Director Alan Fagan FireTail media@firetail.io This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. McLEAN, United States of America, June 26th, 2024/CyberNewsWire/--FireTail announces a free version of its enterprise-level API security tools, making them accessible to developers and organizations of all sizes. FireTail's unique combination of open-source code libraries, inline API call evaluation, security posture management, and centralized audit trails helps eliminate vulnerabilities and protect APIs in real-time. The free plan covers up to 5 APIs, includes 1M API call logs per month, offers 7 days of data retention, and provides clear developer support. FireTail, a disruptor in API security, unveils free access for all to its cutting-edge API security platform. This initiative opens the door for developers and organizations of any size to access enterprise-level API security tools. Today, over 80% of all internet traffic is computer-to-computer communication via APIs. Every mobile app, IoT device, and most modern software applications use APIs, creating a broad attack surface for potential threats. FireTail’s hybrid approach to API security blends open-source code libraries with a feature-packed cloud platform and equips businesses with a unique suite of tools to eliminate API vulnerabilities and provide robust runtime API protection. "API security is essential for modern applications, and every developer and tech team should have access to effective security tools," said Jeremy Snyder, CEO and Co-Founder of FireTail. "API security is essential for modern applications, and every developer and tech team should have access to effective security tools," said Jeremy Snyder, CEO and Co-Founder of FireTail. "Security through obscurity is no longer a viable approach. We’re on a mission to secure all of the world’s APIs and our new free plan ensures ongoing access to an API security platform that delivers genuine insight into the most pressing attack vectors - design flaws in APIs. It’s perfect for smaller organizations striving for stronger API protection, and a great way for individuals or teams within larger organizations to get started. "Security through obscurity is no longer a viable approach. We’re on a mission to secure all of the world’s APIs and our new free plan ensures ongoing access to an API security platform that delivers genuine insight into the most pressing attack vectors - design flaws in APIs. It’s perfect for smaller organizations striving for stronger API protection, and a great way for individuals or teams within larger organizations to get started. "Riley Priddle, Co-Founder and CTO at FireTail, added, "We’re excited to help organizations of all sizes to better protect their APIs. We want FireTail to become the de facto standard when it comes to API security. Just because you have a small number of APIs, it doesn’t mean they aren’t critical. We want everyone to have access to the best, enterprise-level API security tools. That’s why we offer both this free tier, as well as our open source libraries." "Riley Priddle, Co-Founder and CTO at FireTail, added, "We’re excited to help organizations of all sizes to better protect their APIs. We want FireTail to become the de facto standard when it comes to API security. Just because you have a small number of APIs, it doesn’t mean they aren’t critical. We want everyone to have access to the best, enterprise-level API security tools. That’s why we offer both this free tier, as well as our open source libraries." For developers and small to medium-sized organizations needing to secure up to 5 APIs, FireTail's free tier includes comprehensive API security features such as discovery, inventory, assessment, detection and response, and inline runtime protection. Key features include: Protection for up to 5 APIs 1M API calls per month 7 days of logging retention Thomas Martin, Founder at NephoSec, shared "We’ve been working with FireTail from the outset as both a customer and a distribution partner. Having proven that the platform works for even the largest enterprises with the most complex API security requirements, it’s great to see the team opening that technology up to everyone.This will enable us to solve API security challenges for organizations of all shapes and sizes." To access the FireTail API security platform, users can visit https://www.firetail.app or join the team on Tuesday, July 2nd for an in-depth look at what FireTail’s free tier can do. https://www.firetail.app About FireTail FireTail allows customers to solve all the most critical problems facing APIs today with a hybrid approach, bringing together cloud, application and code with full blocking capabilities to solve the root causes of API data breaches - flaws at the application and business logic layer in authentication, authorization and data handling. Headquartered in McLean, VA, with offices in Dublin, Ireland, and Helsinki, Finland, FireTail is backed by leading investors, including Paladin Capital, Zscaler, General Advance, and SecureOctane. Users can learn more at https://www.firetail.io . https://www.firetail.io Contact Marketing Director Alan Fagan FireTail media@firetail.io media@firetail.io This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Cyberwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

FireTail Unveils Free Access For All To Cutting-Edge API Security Platform

How to Master .NET 8 Web API: From Setup to Security - The Best 50 Tips

কিভাবে .NET 8 ওয়েব এপিআই আয়ত্ত করবেন: সেটআপ থেকে নিরাপত্তা - সেরা 50 টি টিপস

.NET 8 Web API meistern: Von der Einrichtung bis zur Sicherheit – Die 50 besten Tipps

Cómo dominar la API web .NET 8: de la configuración a la seguridad: los 50 mejores consejos

Comment maîtriser l'API Web .NET 8 : de la configuration à la sécurité - Les 50 meilleurs conseils

.NET 8 वेब एपीआई में महारत कैसे हासिल करें: सेटअप से सुरक्षा तक - सर्वोत्तम 50 युक्तियाँ

.NET 8 Web API をマスターする方法: セットアップからセキュリティまで - ベスト 50 のヒント

.NET 8 Web API를 마스터하는 방법: 설정부터 보안까지 - 최고의 50가지 팁

Como dominar a API da Web .NET 8: da configuração à segurança - as 50 melhores dicas

Как освоить веб-API .NET 8: от настройки до безопасности — 50 лучших советов

.NET 8 Web API'sinde Uzmanlaşma: Kurulumdan Güvenliğe - En İyi 50 İpucu

Cách làm chủ API Web .NET 8: Từ thiết lập đến bảo mật - 50 mẹo hay nhất

如何掌握 .NET 8 Web API：从设置到安全 - 50 个最佳技巧

Let's learn about via these 53 free stories. They are ordered by most time reading created on HackerNoon. Visit the to find the most read stories about any technology. Product Market Fit /Learn Repo 1. What the Pandemic Taught Me About Product/Market Fit The question is not, “Does the company have product/market fit or not?”. The more appropriate question is, “What’s the strength of the company’s product/market fit?” 2. How We Iterated on 10 Ideas in a Month After a discussion (that lasted 30 seconds, as it was an obvious decision for us), we decided to share our complete journey with our new startup, Dataline, with as much transparency as possible. Learnings should be shared! Anybody can leverage our journey, and it’s also a good way for us to take a step back and understand what we did right and what we could improve upon. So here is our first story: how we iterated and sorted through 10 ideas in our first month of working on a new startup. 3. How is Product Management in a Tech Startup Different Than a Large Company? I’ve been asked many times what is product management in a tech startup and how the job differs from product management at a larger company with a more mature product. 4. Painkillers, Vitamins and Misunderstood Startup Lessons If you’re a startup founder, you may be short of many things : funding, sleep, the will to live. 5. How Discord Became the Most Successful US Consumer App in the Last 5 Years I recently came across this very interesting Twitter thread which claims that: 6. Everything About Product-Market Fit: And Why You're Probably Confused About It Many people talk about product-market fit, and how important it is in the early days of a startup. Actually, most people agree that product-market fit is fundamental to a startup’s trajectory. 7. Reddit's Origin Story and Persistent  Path to Product Market Fit Welcome to the first edition of Product Stories. The first product that I have chosen is Reddit — a company that thousands of startups have tried to emulate but always failed to do so. Let’s look at why that is and what’s so special about Reddit. 8. Existing Security Tools are not built for developers, so this developer-turned-founder created one SecureStack was nominated as one of the best startups in Gold Coast, Australia in Startups of the Year hosted by HackerNoon 9. Top 5 Effective Product Positioning Strategies Product positioning is one of the most discussed topics in product marketing, and it could either make or mar the performance of any product that you developed. 10. In Search of a Better way to Measure Product/Market fit 11. 3 Questions Founders Should Answer to Scale and Raise VC Investment Do I Understand the VC Asset Class and Perspective? Am I Building a Predictable Customer Acquisition Model? Is My Startup a Billion Dollar Company? 12. The Rise of Refurbished Phones — Except in the U.S. Refurbished phones are becoming more and more popular, but the U.S. is lagging behind in sales. Here's a look at why. 13. Shifting from a sales-led growth to product-led growth mindset The transition from sales-led to product-led growth model: What are the benefits and challenges of the product-led growth model. 14. Introducing Spark: Our New Early-Stage Launchpad for Startup Founders This year we have been quietly developing and launching our first micro-incubator programme at ucreate. Since 2015 we have been working with talented founders as their tech partner across a variety of industries and technologies. 15. What Makes a Successful Product Launch: 6 Lessons for First Time Founders Launch is neither the beginning nor the end. It is a series of overlapping sequences. A typical one may include pre-build, pre-launch, launch, and post-launch. 16. How We Applied Twice for the Same YCombinator Batch Back in September, we were iterating on many ideas. We had come up with a 2-day invalidation process to make sure that we were not wasting too much time on bad ideas. 17. Retool for Startups: Early-stage startups can now build internal tools for free Retool for Startups is a program designed to help early-stage startups build critical internal tools. Eligible startups get 12 months of free Retool credits. 18. Chase Bowers Got His First Thousand Customers Without Spending Any Money - Here's How! How Did Chase Bowers Get 1,000+ New Customers Without Spending a Dime? He gave away 1,000 free plans, used feedback to improve, & then launched paid plans. 19. How to Discover User Issues: A Beginners' Guide First Things First: 20. How to Test Product-market Fit Using Software Prototypes An entrepreneur at any level can make a software prototyping model to show or test how their idealized product would work in real life. 21. How We Carved A Niche For An Rx Delivery Service Few years ago, I consulted for a small Rx delivery startup in HongKong where I focused on strategy, go-to-market and built out their product direction from the 22. Will The Customers Like This Feature? We’ve all had arguments about whether customers are going to want this feature or that. Maybe it’s about how the feature might work or even what colour a button might be. It’s an important debate to have, but all too often an important follow-up question is left out: how many customers will this really serve? 23. How to Find Your Product Market Fit Using Creative Brand Voice – A Guide By Creative Director Manifesting your community's values and unmet needs through creative brand and product ideas is the secret to product market fit. 24. A Deep Dive into the Probability of Future Success Model Intelligence Node’s access to immense online & competitor data & AI analytics puts it at an advantage to understand product trends based on probability model. 25. A Good Product/Market-Fit Needs a Good Roadmap Tech products, whether digital features, products, or services, need to achieve product-market fit if they have any hope of succeeding. 26. How Your Churn Can Aid Business Growth How tracking your churn rate can provide valuable insights into your business. Learn how to calculate churn rate to drive exponential growth. 27. An Overview of our PH Launch for AskMakers v2.0 Oh…I am so sleepy…because I launched AskMakers 2.0 on Product Hunt and I have been monitoring it almost without sleeping😪 28. Looking for a New Smartphone Led Me to Create a Platform That Aims to Reverse the Product-Market Fit We have hundreds of brands producing the same things and no one catering for any other needs, be it in terms of size, keyboard, or other characteristics. 29. Mining Fiat is Unsustainable In an earlier article, I outlined the opportunities that blockchains offer investors from a wide angle. This prompted a number of requests for more in-depth analysis of the disruptive qualities of this technology. The following is a first principle examination of the market opportunities blockchain-based solutions offer within the realm of government-controlled currencies, commonly referred to as "fiat money". Quite literally addressing all the money in the world. 30. A Deep Dive Into Product Manager Roles and Responsibilities Product Manager as a function or practice is fairly old now. It has been around since 1931 (well at least in theory). It originated from a memo written by Neil McElroy, an Advertising Manager at Proctor and Gamble. He wrote this memo to the Executive Team of P&G suggesting the need of a “brand man”, a person solely responsible for the product and not the business. 31. How Doing Product Discovery Can Help You Build A Truly Invincible Company Many teams and organisations jump into build mode too early. Then they build something that customers reject, they miss the mark, or they need extra budget to get it there. When you suggest a Product Discovery as a way to help get better results it gets rejected. This article is a way to answer the question: “Why do Product Discovery?” 32. The Startup Action Framework Explained How to Take Your Startup from Foundation to Flourish 33. How to Find Market Fit for Data Products By the time I entered the bar on that rainy spring afternoon, Justin had already started on his cocktail. It had been a few months since I saw him last; after his product design firm ended their work with my previous healthcare technology employer, he had taken on some new projects and
it was tough to find time to connect. I had recently left that employer myself to take on a new job that ticked all the boxes- pay raise, prestigious company, work from home, great boss. Plenty of changes to catch up on. 34. Design Thinking as a Practice for Business Innovation & Breakthrough There's no denying that Design Thinking is the way of the future. Applying this approach to a strategy and Innovation, brands can completely satisfy the needs of customers. To stay on the top, they should realize the significance of design for product success rates and have a clear understanding of a Design Thinking method. 35. Pre-PMF Startup: How To Do It Right In the beginning of June 2020, we had enough cash to sustain ourselves for 2 years, and had decided to pivot. At the time, we weren’t sure if we needed to move away from our product, on which revenues were growing very slowly, or not. We spent 6 weeks in full exploration mode to identify what our next step was. 36. How to Find Product-Market Fit by Starting With an MVP MVP is a basic version of a product that consists of minimum features and core functionality, solving an important problem for the end-users. 37. Is Telegram Premium Worth Buying Telegram Premium was released in June this year. It brings added customization features, increased limits, and an ad-free experience. 38. 8 Questions Startup Founders Ask Too Late Recently I’ve been able to interview several startup founders, ranging from very early stage to actively scaling, bootstrapped to funded. Along with the lessons learned from my own hands-on work with startups, I’ve put together my highlights on key points that could make or break your startup venture. 39. What was the Product Masterclass by Product School all about? One of the things, I had decided, was that during the lockdown I would sharpen my skills around Product Management. For this, I have been religiously attending many webinars and doing some online courses. One of the courses that hit the chord was this course 40. Service & Marketplace-model fit Services are ambiguous, and creating an online services marketplace requires finding a fit b/w the service and the marketplace model 41. Market Research is the Key to Your Business Success: Here’s Why Today’s customers are smarter than you think. They are capable enough to research your product and make buying decisions on their own. With this in mind, you have to adopt new technologies and learn market trends. You have to understand your customers’ preferences, feelings, and attitudes. For that, you need to do market research. Market research is the core of your every successful business strategy. It’s the one and only way to get a deeper knowledge about your customers, competitors, and most importantly, your employees. 42. Ask Yourself These 80 Questions Before Starting a New Business I think you'll agree with me when I say: 43. Codeless Product Demos is the Key to Closing Deals for the Sales Team in 2021 This article talks about product demo and why codeless product demo creation is critical for sales teams to get leads. 44. The Epic Story of a Stellar Product Manager: From 0 to 100k Users Sunil Tej Gorantla is a product expert, growth hacker, and writer. He believes in solving for what people need and making data-driven decisions. 45. 4 Surprisingly Easy Steps To Make Your Product Into A Habit For Customers I did a survey this summer: I asked the founders what they want help with for their startup. I created a long list of options including sales, metrics, marketing, and product development. 46. How Carta is Capturing the Atomic Unit of the Entrepreneurial Stack When founders, limited partners, and investors ask us which companies exemplify Tribe’s culture, process, and decision-making towards successful outcomes, we point to three companies: Facebook, Slack, and Carta. These companies track our trajectory from operators to investors culminating in our partnership with Carta, where we’ve doubled, tripled and quadrupled down on our initial investment. This article explains why at Tribe we say, “We make N-of-1 companies.” 47. How to Unlock Product Market Fit and Rapid Growth for Startups Discover the key finding the elusive “product market fit” and unlocking rapid growth with steps you can start today. 48. Product Management Experience: Corporate vs. Early Stage Startup Work in a corporation can blind a product manager's eyes, due to the safety provided. Why it is necessary to gain more experience by building your own startup? 49. Make Product Experience The Differentiator [Explained] When someone asks me about how to make a product stand out and what could be one of the key product differentiators. 50. Why Building Enterprise Products Is Awesome While consumer products get all the hype, B2B products are a quiet gem 51. How Blockchain Startups Can Find Product Market Fit Follow our detailed guide for discovering the product-market fit for your startup 52. A Practical Setapp Guide For Measuring Product-Market Fit If you Google anything around "product - market fit", you're going to find hundreds of articles saying why this is so important for startups and software companies. Without it, the experts claim, you can't scale your idea. Won't have a viable company. But there isn't much on how to implement this theory. 53. How We Find A Way to Grow our MRR by 800% in 6 Months At the end of 2018, my co-founder Steve and I sat down and reflected on the year. We had grown 100% across many key metrics during the previous year and usage of doopoll had increased 300% in a matter of weeks. Thank you for checking out the 53 most read stories about Product Market Fit on HackerNoon. to find the most read stories about any technology. Visit the /Learn Repo

53 Stories To Learn About Product Market Fit

240 Stories To Learn About Startups Of The Year

Hey there. I'm Mrinal Wadhwa, CTO at . In the early days of Ockam, we were developing a C library. This is the story of why, many months in, we decided to abandon tens of thousands of lines of C and rewrite in . Ockam Rust Before we begin, I was in a recorded webinar this week together with Paul Dix, the CTO of InfluxData, where we both discussed InfluxDB’s and Ockam’s rewrites in Rust. Why the two open source projects chose to re-write, why we chose Rust as our new language, lessons we learnt along the way, and more. Do check out . It was an insightful discussion. the recording Ockam enables developers to build applications that can trust data-in-motion. We give you simple tools to add end-to-end encrypted and mutually authenticated communication to - any application running in any environment. Your apps get end-to-end guarantees of data integrity, authenticity, and confidentiality … across private networks, between multiple clouds, through message streams in – over any multi-hop, multi-protocol topology. All communication becomes end-to-end authenticated and private. Kafka We also make the hard parts super easy to scale - bootstrap trust relationships, safely manage keys, rotate/revoke short-lived credentials, enforce attribute-based authorization policies, etc. The end result is - you can build apps that have granular control over every trust and access decision - apps that are private and secure-by-design. In 2019, we started building all of this in C. We wanted Ockam to run everywhere - from constrained edge devices to powerful cloud servers. We also wanted Ockam to be usable in any type of application - regardless of the language that the application is built in. This made C an obvious candidate. It can be compiled for 99% of computers and pretty much run everywhere (once you figure out how to deal with all the target-specific toolchains). And all other popular languages can call C libraries through some form of a native function interface - so we could later provide language idiomatic wrappers for every other language: Typescript, Python, Elixir, Java, etc. The idea was we’ll keep the core of our communication-centric protocols decoupled from any hardware-specific behavior and have pluggable adapters for the hardware we want to support. For example, there would be adapters to store secret keys in various HSMs, adaptors for various transport protocols, etc. Our plan was to implement our core as a C library. We would then wrap this C library with wrappers for other languages and run it everywhere with the help of pluggable hardware adapters. Simple and Safe Interfaces But, we also care deeply about simplicity - it's in our name. We want Ockam to be simple to use, simple to build, and simple to maintain. At Ockam’s core is a layered stack of cryptographic and message-based protocols like Ockam and Ockam . These are asynchronous, multi-step, stateful communication protocols and we wanted to abstract away all of the details of these protocols from application developers. We imagined the user experience to be a single one-line function call to create an end-to-end authenticated and encrypted secure channel. Secure Channels Routing Cryptography-related code also tends to have a lot of footguns, one little misstep, and your system becomes insecure. So simplicity isn't just an aesthetic ideal for us, we think it's a crucial requirement to ensure that we can empower everyone to build secure systems. Knowing the nitty-gritty of every protocol involved should not be necessary. We wanted to hide these footguns away and provide developer interfaces that are easy to use correctly and impossible/difficult to use in a way that will shoot your application in the foot. That’s where C was severely lacking. Our attempts at exposing safe and simple interfaces, in C, were not successful. In every iteration, we found that application developers would need to know too much detail about protocol state and state transitions. The Elixir Prototype Around that time I wrote a of creating an Ockam over Ockam in Elixir. prototype Secure Channel Routing Elixir programs run on BEAM, the Erlang Virtual Machine. BEAM provides Erlang Processes. Erlang Processes are lightweight stateful concurrent actors. Since actors can run concurrently while maintaining internal state, it became easy to run a concurrent stack of stateful protocols Ockam Transports + Ockam Routing + Ockam Secure Channels. I was able to hide all the stateful layers and create a simple one-line function that someone can call to create an end-to-end encrypted secure channel over a variety of multi-hop, multi-protocol routes. {:ok, channel} = Ockam.SecureChannel.create(route, vault, keypair) An application developer would invoke this simple function and multiple concurrent actors would run the underlying layers of stateful protocols. The function would return when the channel is established or if there is an error. This is exactly what we wanted in our interface. But Elixir isn’t like C. It doesn’t run that well on small/constrained computers and it's not a good choice for being wrapped in language-specific idiomatic wrappers. Exploring Rust At this point, we knew we wanted to implement lightweight actors but we also knew C would not make that easy. This is when I started digging into Rust and very quickly encountered a few things that made Rust very attractive: Compatibility with the C calling convention Rust libraries can export an interface that is compatible with C's calling convention. This means that any language or runtime that can statically or dynamically link and call functions in a C library can also link and call functions in a Rust library - in the exact same way. Since most languages support native functions in C, they also already support native functions in Rust. This made Rust equal to C from the perspective of our requirement of having language-specific wrappers around our core library. Support for lots of targets Rust compiles using LLVM which means that it can target a very large number of computers. This set is likely not as big as everything that C can target with GCC and various proprietary GCC forks but is still a very large subset and there’s work ongoing to make Rust compile with GCC. With the growing support of new LLVM targets and potential GCC support in Rust, it seemed like a good bet from the perspective of our requirement of being able to run everywhere. Strong typing and a powerful type system Rust’s type system allows us to turn invariants into compile-time errors. This reduces the set of possible mistakes that can be shipped to production by making them easier to catch at development time. Our team and the user of our Rust library become less likely to ship behavioral bugs or security vulnerabilities to production. Memory safety and the borrow checker Rust’s memory safety features eliminate the possibility of use-after-frees, double frees, overflows, out-of-bounds access, data races and many other common mistakes that is known to cause 60-70% of high-severity vulnerabilities in large C or C++ codebases. Rust provides this safety at compile time without incurring the performance costs of safely managing memory at runtime using a garbage collector. This gives Rust a serious advantage to write code that needs to be highly performant, run in constrained environments, and be highly secure. Async/await and pluggable async runtimes The final piece that convinced me that Rust is a great fit for Ockam was . We had already identified that we need lightweight actors to create a simple and safe interface Ockam's stack of protocols. meant that a lot of the hard work to create actors had already been done in projects like tokio and async-std. We could build Ockam's actor implementation on this foundation. async/await async/await Another important aspect that stood out was that in rust has one significant difference from in other languages like Javascript. In Javascript a browser engine or nodejs picks the way it will run async functions. But in Rust you can plugin a mechanism of your own choice. These are called async runtimes - tokio is a popular example of such a runtime that is optimized for highly scalable systems. But we don't always have to use tokio, we can instead chose an async runtime optimized for tiny embedded devices or microcontrollers. async/await async/await This meant that Ockam's actor implementation, which we later called Ockam , if we base it on Rust's can present exactly the same interface to our users regardless of where it is running - big computers or tiny computers. All our protocol interfaces that would sit on top of Ockam Workers can also present the exact same simple interface - regardless of where they are running. Workers async/await At this point we were convinced we should re-write Ockam in Rust. In the conversation, that I mentioned earlier, Paul Dix and I discussed what the transition looked like for our teams at Ockam and InfluxDB after each project had decided to switch to Rust. We discussed how InfluxDB moved from Go to Rust and how Ockam moved from C to Rust. In case you're interested, in that part of our journey go listen to the . webinar recording Many iterations later, anyone can now to create an end-to-end encrypted and mutually authenticated secure channel with a simple function call. use the Ockam crate in rust Here’s that one single line, we had imagined when we started: let channel = node.create_secure_channel(&identity, route, options).await?; It creates an authenticated and encrypted channel over arbitrary multi-hop, multi-protocol routes that can span across private networks and clouds. We are able to hide all the underlying complexity and foot guns behind this simple and safe function call. The code remains the same regardless of how you use it - on servers or tiny microcontrollers. scalable To learn more, check kout or try the step-by-step walk-throughs of the and . Ockam on GitHub Ockam Rust library Ockam Command Also published here. If you've been part of a project that was rewritten in Rust, come share your team's story with us on our . We're also hiring for both Rust and Elixir roles, come - we’re on a quest to make software more secure and private by design. discord server join our team of builders

Why We Rewrote Ockam in Rust

Por qué reescribimos Ockam en Rush

Pourquoi nous avons réécrit Ockam dans Rush

हमने रश में ओकम को दोबारा क्यों लिखा?

SecureScan

securescan.com

80 employees

Since 2002

COMPANY RANKING

SECURESCAN

EVERGREEN INDEX #9638

SecureScan WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

SecureScan

securescan.com

80 employees

Since 2002

COMPANY RANKING

SECURESCAN

EVERGREEN INDEX #9638

RELATED COMPANIESRANK

STORIES ABOUT SECURESCAN

SecureScan WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!