fml9000 VS Tink

this has not gotten very far off the ground but making a foobar2000-like music player using gtk4-rs https://github.com/cmdcolin/fml9000

I am trying to make my own gui music player https://github.com/cmdcolin/fml9000/. I've used cmus (command line) and it didn't click. also used quod libet and foobar under wine. foobar is the best but i want to get a bit custom. I mostly listen to stuff on youtube so I want my gui music player to support connecting to youtube and maybe bandcamp (I have many bandcamp purchases also, so being able to access those without bulk download is ideal to me even though I've used bandcamp-collection-downloader, it just takes up space on my laptop)

i'm attempting to make a music player with rust and gtk (both new things to me) at https://github.com/cmdcolin/fml9000

my gtk4-rs app that i'm writing is pretty spaghetti-codey but feel like it could be cleaned up over time. relm4 is interesting and may help code organization, but i went with raw gtk4-rs to start with to avoid trying to learn too many things at once. my nooby code just for ref https://github.com/cmdcolin/fml9000

> I wonder what people say when they find a bug despite you using standard crypto?

Not using TLS doesn't automatically mean you need to "roll your own crypto". They could have used a well documentend library such as Google Tink[1] instead of doing their own crypto.

[1] https://github.com/google/tink

I sort of rewrote google's tink project in rust. There is already a rust version by project oak but it didn't exactly jive.

PassManager uses the Tink library for encryption, which provides state-of-the-art** security for your passwords. Tink uses industry-standard encryption algorithms like AES to ensure that your passwords are kept safe from prying eyes.

Note that in the example jwt refers to the Tink jwt package.

What I can't tell is if the new version had any fixes related to the bug being discussed here

Even the slightest hiccup could leave me vulnerable. I don't want to roll my own encryption. I want to use something like tink (a secure crypto library by Google) but unfortunately they don't support node or Javascript (there's a library that was published 2 years ago).

I dont have an answer for you, but 2 resources that are worth checking out: https://developer.android.com/guide/topics/security/cryptography and https://developers.google.com/tink

> Do C (or something where the mapping to C is known), and lots of languages have FFI libs where wrapping that is fairly trivial

That is an interesting idea, yet still a lot of work, sadly. I was hoping somebody had done the legwork already. I looked at Tink [1] and age [2] based on my co-worker's recommendation, but they all seem to have limited implementations in other languages.

[1] https://github.com/google/tink

[2] https://github.com/FiloSottile/age