Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

Prossimo

@ProssimoISRG@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

Moving the Internet's security-sensitive software infrastructure to memory safe code. A project from ISRG. http://memorysafety.org

0 Followers
0 Following
17 Posts
Joined December 01, 2022
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

We're happy to announce a new Prossimo initiative—sudo and su! We’re partnering with @tweedegolfbv and @FerrousSystems to reimplement these ubiquitous utilities in memory safe Rust. Thanks to @AWSOpen for your generous support of this critical work.
https://www.memorysafety.org/blog/sudo-and-su/

Bringing Memory Safety to sudo and su
Prossimo

Bringing Memory Safety to sudo and su

Our Prossimo project has historically focused on creating safer software on network boundaries. Today however, we're announcing work on another critical boundary - permissions. We're pleased to announce that we're reimplementing the ubiquitous sudo and su utilities in Rust. Sudo was first developed in the 1980s. Over the decades, it has become an essential tool for performing changes while minimizing risk to an operating system. But because it's written in C, sudo has experienced many vulnerabil

23
0
26
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

We're thankful for the support of
AWS, who has just announced their $1 million gift for Prossimo. It was announced today by Phil Estes during Open Source Summit! You can learn more about it in our newest blog post:

https://www.memorysafety.org/blog/aws-funding/

AWS commits $1M to bring memory safety to critical parts of the Web
Prossimo

AWS commits $1M to bring memory safety to critical parts of the Web

Amazon Web Services (AWS) has long supported ISRG's mission through sponsorships of projects such as Let's Encrypt. Today, we're pleased to announce that AWS has continued its commitment to Prossimo through a contribution of $1 million, funding four initiatives focused on improving memory safety: building a memory safe AV1 decoder, rav1d, rewriting sudo/su, furthering our efforts with Rustls, as well as building out ntpd-rs. "At AWS, security is job zero and we are constantly looking for ways to

7
0
4
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

Have you heard the news? We're supporting a rewrite of sudo and su in Rust via a joint development effort by @tweedegolfbv and @FerrousSystems -- made possible thanks to @AWSOpen. Read about it here in an article from @TechTimes_News: https://www.techtimes.com/articles/291122/20230504/ferrous-systems-and-tweede-golf-get-rust-rewrite-with-support-from-aws.htm

Ferrous Systems and Tweede Golf Get Rust Rewrite with Support from AWS
Tech Times

Ferrous Systems and Tweede Golf Get Rust Rewrite with Support from AWS

Two Unix-like utilities, Sudo and Su, are being rewritten on Rust with support from AWS. Learn more.

6
1
3
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 28mo ago
Replying to
Check out Tweede golf's new blog post where they present a path toward the adoption of secure time synchronization. Grateful to them for serving as the permanent home for ntpd-rs, our memory safe implementation of NTP. @tweedegolf @sovtechfund @nlnet @sidnfonds
1
0
4
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

Prossimo is behind several critical memory safety initiatives -- but have you ever wondered who's behind Prossimo?

Meet ISRG, the Internet security nonprofit that brought you Prossimo and Let's Encrypt. Learn about their work on their webiste, at https://www.abetterinternet.org/.

Internet Security Research Group
Internet Security Research Group

Internet Security Research Group

ISRG’s mission is to protect Internet users by lowering monetary, technological, and informational barriers to a more secure and privacy-respecting Internet.

2
0
1
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

We are glad to share the memory safety advocacy space with @ConsumerReports, who published their report on the Future of Memory Safety in January.

Read the report here: https://advocacy.consumerreports.org/research/report-future-of-memory-safety/

CR Advocacy

Report: Future of Memory Safety - CR Advocacy

In October 2022, Consumer Reports hosted an online convening to discuss ways to encourage widespread adoption of code written in memory-safe languages. The event gave…

2
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Moving all the Web's software infrastructure to memory safe code is an ambitious goal. That's why Prossimo focuses on software that is widely used, on a network boundary, performs a critical function, and is written in a languages that aren't memory safe. https://www.memorysafety.org/about/

About Prossimo
Prossimo

About Prossimo

Who We Are Prossimo is an Internet Security Research Group (ISRG) project. ISRG couldn't do it alone though. We have a strong community of developers, maintainers, advisors, and funders helping us out! Goals Our first goal is to move the Internet's security-sensitive software infrastructure to memory safe code. Many of the most critical software vulnerabilities are memory safety issues in C and C++ code. While there are ways to reduce the risk, including fuzzing and static analysis, such mitigat

2
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

Our memory safe NTP implementation ntpd-rs has a new home with @tweedegolfbv. Learn about this exciting announcement in this blog post from April: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/

Memory Safe Network Time (NTP) Has New Home, Seeks Early Adopters
Prossimo

Memory Safe Network Time (NTP) Has New Home, Seeks Early Adopters

Today we're pleased to announce that an open source memory safe implementation of NTP - ntpd-rs - has a new long-term home and is looking for early adopters. The implementation includes a server and client, as well as full support for Network Time Security (NTS), which brings encryption and greater integrity to time synchronization. Timing is precise and stable, as reflected by excellent performance in the NTP pool. ISRG's Prossimo project set out to develop a strategy, raise funds, and select a

1
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

More coverage of our new sudo and su initiative by @kevinpurdy in @arstechnica!
---
RT @arstechnica
Two core Unix-like utilities, sudo and su, are getting rewrites in Rust https://arstechnica.com/information-technology/2023/05/two-core-unix-like-utilities-sudo-and-su-are-getting-rewrites-in-rust/?utm_brand=arstechnica&utm_source=twitter&utm_social-type=owned&utm_medium=social
https://twitter.com/arstechnica/status/1653085770675101696

Ars Technica (@arstechnica) on X
X (formerly Twitter)

Ars Technica (@arstechnica) on X

Two core Unix-like utilities, sudo and su, are getting rewrites in Rust https://t.co/RH5I3c2K5P

1
0
2
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

Get to know the C API for Rustls that existing C-based projects can use to make their TLS implementation memory safe. Developed by ISRG engineer Jacob Hoffman-Andrews as part of the Prossimo Rustls initiative. https://github.com/rustls/rustls-ffi

GitHub

GitHub - rustls/rustls-ffi: Use Rustls from any language

Use Rustls from any language. Contribute to rustls/rustls-ffi development by creating an account on GitHub.

1
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Our initiative to support a memory safe DNS resolver is running full steam ahead. Visit our work plan to see what we've accomplished so far and what's next: https://www.memorysafety.org/initiative/dns/dns-work-plan/

memorysafety.org
1
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Take a look at Miguel Ojeda's Rust for Linux website to learn about the full history of the Prossimo initiative and where it's at now. https://rust-for-linux.com/

Rust for Linux
rust-for-linux.com

Rust for Linux

Adding support for the Rust language to the Linux kernel

1
0
1
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Our work includes everything from supporting a memory safe DNS resolver to building a memory safe AV1 decoder. Take a look at our initiatives over on the Prossimo website, at https://www.memorysafety.org/.

Prossimo
Prossimo

Prossimo

ISRG

1
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

We're happy to have helped support this memory safe NTP implementation!
---
RT @tweedegolfbv
*ANNOUNCEMENT* @I_S_R_G and @ProssimoISRG@infosec.exchange have officially made us the new home of "ntpd-rs", the #opensource #memorysafe implementation of the Network Time Protocol.

Thanks to @0xjosh and @ProssimoISRG@infosec.exchange

https://tweedegolf.nl/en/blog/90/memory-safe-network-time-ntp-has-new-home-seeks-early-adopters
https://twitter.com/tweedegolfbv/status/1650881595740389381

Tweede golf (@tweedegolfbv) on X
X (formerly Twitter)

Tweede golf (@tweedegolfbv) on X

*ANNOUNCEMENT* @I_S_R_G and @ProssimoISRG have officially made us the new home of "ntpd-rs", the #opensource #memorysafe implementation of the Network Time Protocol. Thanks to @0xjosh and @ProssimoISRG https://t.co/PoqXhxjQy0

1
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 41mo ago

Thanks to @michaellarabel for covering our new sudo and su initiative in @phoronix!
---
RT @phoronix
sudo & su Being Rewritten In Rust For Memory Safety

https://www.phoronix.com/news/sudo-su-rewrite-rust
https://twitter.com/phoronix/status/1652340341150826497

phoronix.com

sudo & su Being Rewritten In Rust For Memory Safety

With the financial backing of Amazon Web Services, sudo and su are being rewritten in the Rust programming language in order to increase the memory safety for the widely relied upon software.

0
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Our memory safe NTP Implemntation has a new home with @tweedegolfbv. Visit our blog to learn about this exciting next step: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/

Memory Safe Network Time (NTP) Has New Home, Seeks Early Adopters
Prossimo

Memory Safe Network Time (NTP) Has New Home, Seeks Early Adopters

Today we're pleased to announce that an open source memory safe implementation of NTP - ntpd-rs - has a new long-term home and is looking for early adopters. The implementation includes a server and client, as well as full support for Network Time Security (NTS), which brings encryption and greater integrity to time synchronization. Timing is precise and stable, as reflected by excellent performance in the NTP pool. ISRG's Prossimo project set out to develop a strategy, raise funds, and select a

0
0
0
0
Open post
Prossimo @ProssimoISRG@infosec.exchange
· 42mo ago

Memory safety vulnerabilities are just the tip of the iceberg. Languages that aren't memory safe can negatively impact stability, developer productivity, and application performance. Learn how on our website, at:
https://www.memorysafety.org/docs/memory-safety/#what-other-problems-are-associated-with-languages-that-are-not-memory-safe

What is memory safety and why does it matter?
Prossimo

What is memory safety and why does it matter?

Memory safety is a property of some programming languages that prevents programmers from introducing certain types of bugs related to how memory is used. Since memory safety bugs are often security issues, memory safe languages are more secure than languages that are not memory safe. Memory safe languages include Rust, Go, C#, Java, Swift, Python, and JavaScript. Languages that are not memory safe include C, C++, and assembly. Types of Memory Safety Bugs To begin understanding memory safety bugs

0
0
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Pricing
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 06:36:36 UTC