Solidity
JavaScript / TypeScript
Python
Go (Golang)
C++ / Rust
isnt non java script markets not only more secure but isnt java script also effectivly useless considering 99% of tor users have it off
and python doesnt have security in mind would be alright for some completly offline scripts but for a market complete security risk i belive
c++ also isnt nativly memory safe like rust
solidity is just not privacy based
and python doesnt have security in mind would be alright for some completly offline scripts but for a market complete security risk i belive
c++ also isnt nativly memory safe like rust
solidity is just not privacy based
yes the concepts are a needed aspect of market creation but the languages also have a good amounbt on anonynimity for example if you were to use python it would be a huge security risk considering how it behaves and so on
that is a concept, cybersecurity concepts
"right tool for the job" is a big thing when engineering anything
"right tool for the job" is a big thing when engineering anything
You can still use JavaScript on the backend. Server rendered pages don’t require client side JS so disabling JS only affects what runs in the browser, not the server
binge read case studies on hacks and historical exploits even if they are deprecated
for darknet scales php,js/typescript,python anything works with good hygeine
that said java with springboot will push you to best practices automatically there is a reason its the gold standard
can try go , rust and kotlin but i would stick with java
for darknet scales php,js/typescript,python anything works with good hygeine
that said java with springboot will push you to best practices automatically there is a reason its the gold standard
can try go , rust and kotlin but i would stick with java
don't listen to any bafoons that dare to say javascript.. it's incredibly stupid to.
php & python can work, but still sucks. I recommend only static-compiled languages; I can attest for Go, Zig & OCaml.. though many more like rust (I don't really use, but still fine).
As others say though it's not inherently about the language unless it explicitly has an unsafe runtime. If you plan on building a platoform you gotta layer defense on multiple levels.
The devel & host OS (ie. qubes), the app itself (application bugs), transport (protocols, or rpc/ipc, proxy/loadbalancing & even tor itself), firewall (such as nftables) process management (ie. systemd or s6), mac filter (selinux/apparmor/tomoyo), syscall filtering ie. seccomp, maybe mixed with bpf filtering.. these together will matter more than if you have an unsafe binary with crappy code vs. a professionally-written binary with zero bugs.. with none of these things. If you care, read documentation, rfcs, cves, break stuff, build stuff, learn systems & networking. But I wouldn't recommend trying to build a service if you don't know what you are doing, so learn !!
Goodluck.
php & python can work, but still sucks. I recommend only static-compiled languages; I can attest for Go, Zig & OCaml.. though many more like rust (I don't really use, but still fine).
As others say though it's not inherently about the language unless it explicitly has an unsafe runtime. If you plan on building a platoform you gotta layer defense on multiple levels.
The devel & host OS (ie. qubes), the app itself (application bugs), transport (protocols, or rpc/ipc, proxy/loadbalancing & even tor itself), firewall (such as nftables) process management (ie. systemd or s6), mac filter (selinux/apparmor/tomoyo), syscall filtering ie. seccomp, maybe mixed with bpf filtering.. these together will matter more than if you have an unsafe binary with crappy code vs. a professionally-written binary with zero bugs.. with none of these things. If you care, read documentation, rfcs, cves, break stuff, build stuff, learn systems & networking. But I wouldn't recommend trying to build a service if you don't know what you are doing, so learn !!
Goodluck.
no not anything works if you plan on having a actualy secure market place to ensure feds arnt banging on your door you dont choose to use non nativly safe languages like (python,js,etc) you opt for the safer languages that actualy know how to be secure and dont need insecure dependices
Backend: Go (Golang) or Rust. They compile to a single binary with zero external server dependencies.
Frontend: Pure HTML and CSS. Absolutely zero client-side JavaScript.
Database: PostgreSQL with table-level encryption at rest.
Crypto: Monero-RPC running on a separate backend node.
The language just prevents basic memory bugs. Your real security is server hardening and preventing backend IP leaks.
Frontend: Pure HTML and CSS. Absolutely zero client-side JavaScript.
Database: PostgreSQL with table-level encryption at rest.
Crypto: Monero-RPC running on a separate backend node.
The language just prevents basic memory bugs. Your real security is server hardening and preventing backend IP leaks.
Members-only continuation
This discussion contains more posts.
Create an account or sign in to continue reading the full conversation. 4 additional posts await inside.