Rewrite tor-fw-helper in Go (or another memory-safe language)
Our firewall helper is scary because the code it pulls in is unmaintained garbage that's probably full of security vulnerabilities.
Yawning mentioned the idea of having go versions of these things. That would sure be swell. If they were maintained.
Even if not, it would still be better than not maintaining the C versions.