I'm seeing that ppl are pointing to have their hidden service written in rust, go etc. and if i'm not wrong, there reason for that is, they're compiled language, but does it really matter? if the system/VPS is compromised, the attacker can use the app binary to find out what they want, any other reason, why are ppl not talking of using python, java etc for creating their services?
Also, any way to keep the code unreadable in case of server compromise?
Dark Web Talk
Is there any actual benefit in using compiled languages like Rust, Go for our backend, in terms of privacy/security?
Started by hemorrhage · Nov 25, 2025
Some of these languages make it less likely to make mistakes. As when not needing to worry about memory allocation and other bits whom can trip you up without realizing.
Binaries is one way to make the source code itself unreadable. However every binary can be reverse engineered. If you learn some Aseembly and play with debugger you'll see every single application big or small can be reverse engineered to high percentage of functions. They won't get your code but they can understand exactly what it does nearly line by line. Python and java being one of the easiest ones to RE.
No language will give you security of code. The only way you can partially mitigate is by using server side parts whom are hidden from being assembled in. Encoders are another option but they're all trash.
Binaries is one way to make the source code itself unreadable. However every binary can be reverse engineered. If you learn some Aseembly and play with debugger you'll see every single application big or small can be reverse engineered to high percentage of functions. They won't get your code but they can understand exactly what it does nearly line by line. Python and java being one of the easiest ones to RE.
No language will give you security of code. The only way you can partially mitigate is by using server side parts whom are hidden from being assembled in. Encoders are another option but they're all trash.
Some of these languages make it less likely to make mistakes.
This is especially true with Rust. The whole syntax is designed to force the developer/maintainer to explicitly validate every memory allocation and and exceptions. Huge asset for building robust code. I've wrote about it earlier /post/a95cd78180e79e1597e7.
Or use https://freenet.org/ so there is no server/VPS to compromise. Freenet isn't yet widely adopted by hidden site operators. The questions you ask about backend code show that you should not attempt to use Freenet to offer a hidden site. However, Freenet is noteworthy and this community (the more technical among this community) should look at Freenet. Additional secrecy layers could be added to Freenet.