News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

Is Flask ok to use as the back end? : OnionDev | Torhoo darknet markets

Good evening all, I am working on building a hidden service that's still maybe 2 years away because I'm doing it myself. I'm planning on making the back end in Flask and I was wondering if that's secure enough to protect against all or most vulnerabilities and also people trying to exploit them. I can learn PHP and such if it's really better but I'm pretty comfortable with python. Besides that I don't have too much more questions, I'm pretty sure I'm going to use a vps and not going to self host it. As far as development goes I adore Flask but am willing to use another language if its not good enough. Please let me know, thanks.
/u/doctor_dev
1 points
2 weeks ago*
Basically its better to use django than flask if you go with python as it has a lot of security features out of the box, flask is more of a minimalist framework, django is basically pure steroids

but generally speaking python isn't as secure language as others, you better go with rust or php if you looking for that security, about rust less attack surface = more secure, for php its so mature and "basic" so its more secure than other languages.

conclusion: you have 2 options that will be more useful
1. staying with python which is comfortable and using django with some tweaks to increase security.
2. learning rust and using actix-web which is a really "secure" option.

no matter what you choose you will still have work to do to secure the code, no framework(or anything else) will give you out of the box full security.
/u/malloc
1 points
2 weeks ago
Not a big Python fan here either but what makes you say that python "isn't a secure language"?

Are you referring to the possibility of supply chain attacks? If yes, how is that language related? That has nothing to do with the language itself but with the programmer.

You could apply that same logic to C / any other language that involves manual memory management and call it insecure because the programmer can mess lots of stuff up.

-

To @OP:

I'd say Python is totally fine if you use it properly.
/u/doctor_dev
1 points
2 weeks ago
ya my bad ment to say not as secure as others for web development like rust and php
/u/Holo 📢
1 points
1 week ago
Thank you for your input (: