Re: Who do I have to pay to get The Big Manual of Thread Safety distributed to the EFF?

[Dan Moniz <dnm () pobox com>]

Dave Aitel wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> 14:36 < dave> tor has some sort of weird bug
> 14:48 < dave> 0xd21102 <select+922>:  mov    0x440(%edi),%esi
> 14:48 < dave> 0xd21108 <select+928>:  mov    %esi,0xfffffe70(%ebp)
> 14:48 < dave> (gdb) print/x $edi
> 14:48 < dave> $2 = 0x448
>
> hmmm...let's google a bit....oh.
>
> What won't work with this?
> - --------------------------
>
> ...
>
> Finally, the tsocks library is NOT thread-safe, with or without this
> patch.
> You should not 'torify' multithreaded applications.
>
> (for what it's worth, Verizon needs the manual too)
> (seriously, if there's some dude I can pay to fix this, it would be
> cool to at least know the price)

For what it's worth, as a former employee of EFF, and as friend of both 
the people there and the guys who work on Tor (Nick Matthewson and Roger 
Dingledine), who are *not* and have never been EFF employees, this isn't 
an EFF thing.

EFF funded development of Tor for about a calendar year, and still hosts 
the website. Contact Nick <nickm () alum mit edu> and/or Roger 
<arma () freehaven net> with bugs and fixes. And for all things related to 
dollars.


--
Dan Moniz <dnm () pobox com> [http://pobox.com/~dnm/]