Custom Query (77 matches)
Ticket | Summary | Keywords | Status | Owner | Type | Priority |
---|---|---|---|---|---|---|
#615 | Can JavaScript loaded from Tahoe access all your content which is loaded from Tahoe? | newcaps confidentiality integrity preservation capleak gsoc websec | assigned | davidsarah | defect | critical |
#127 | Cap URLs leaked via HTTP Referer header | confidentiality integrity preservation capleak research websec | assigned | davidsarah | defect | major |
#152 | build "sharing slots" / use mutable files as primitives for sharing messages | performance newcaps revocation | new | enhancement | major | |
#204 | "virtual CDs" | dirnodes newcaps performance random-access space-efficiency tahoe-backup | new | enhancement | major | |
#217 | Ed25519-based mutable files -- fast file creation, possibly smaller URLs | mutable crypto newcaps performance research | assigned | zooko | enhancement | major |
#308 | add directory traversal / deep-verify capability? | vdrive newcaps verify repair privacy anonymity research | new | enhancement | major | |
#366 | address Nathan Wilcox's concerns about "Tahoe and the browser security model" | security capleak docs websec | assigned | blaisep | defect | major |
#383 | large directories take a long time to modify | dirnode performance newcaps | new | enhancement | major | |
#403 | grid identifier | newcaps newurls gridid | new | enhancement | major | |
#432 | writing down filecaps: revise URI scheme | newcaps newurls | new | task | major | |
#453 | safely add plaintext_hash to immutable UEB | integrity newcaps performance | new | enhancement | major | |
#492 | mutable files: add ciphertext hash tree to signature block | newcaps security integrity forward-compatibility backward-compatibility mutable | new | zooko | defect | major |
#500 | what happens if you run out of sequence numbers in mutable files | spec newcaps | new | defect | major | |
#521 | disconnect unresponsive servers (using foolscap's disconnectTimeout) | availability foolscap anti-censorship | new | warner | defect | major |
#541 | remove foolscap 'reference'-token bug workaround in mutable publish | backward-compatibility foolscap | new | defect | major | |
#625 | Can't repair read-only dirnodes/mutable-files | confidentiality integrity preservation verify repair newcaps tahoe-backup usability anti-censorship excess-authority | assigned | warner | defect | major |
#654 | make the storage index be the verifier cap | newcaps verify integrity performance | new | enhancement | major | |
#658 | "tahoe cp" should avoid full upload/download when the destination already exists (using backupdb and/or plaintext hashes) | backupdb tahoe-cp usability newcaps performance | new | enhancement | major | |
#678 | converge same file, same K, different N | newcaps space-efficiency performance research | new | enhancement | major | |
#683 | handle arbitrary URIs in directories | newcaps newurls revocation | new | defect | major | |
#687 | too many "false alarms" in incident reporting | error logging usability foolscap | new | somebody | defect | major |
#711 | repair to different levels of N | repair preservation space-efficiency newcaps research | new | enhancement | major | |
#753 | use longer storage index / cap for collision resistance | newcaps security | new | defect | major | |
#794 | create DSA writecaps from a passphrase | newcaps newurls usability confidentiality integrity | new | enhancement | major | |
#795 | add-only sets | newcaps revocation research | new | enhancement | major | |
#796 | write-only caps | newcaps tahoe-backup research | new | enhancement | major | |
#821 | A script in a file viewed through the WUI can obtain the file's read cap | newcaps newurls confidentiality capleak websec | assigned | davidsarah | defect | major |
#827 | Put file download links ('?save=true') in WUI directory listings | security usability capleak docs download easy | assigned | davidsarah | defect | major |
#869 | Allow Tahoe filesystem to be run over a different key-value-store / DHT implementation | scalability performance forward-compatibility backward-compatibility availability newcaps docs anti-censorship | new | nobody | enhancement | major |
#870 | Prevent socket hijacking on OSes that don't prevent it by default (Windows) | security integrity confidentiality privacy windows foolscap twisted docs | assigned | davidsarah | defect | major |
#922 | The URL of the info page for an unknown dirnode should not grant authority to the containing directory | capleak integrity confidentiality newurls | assigned | davidsarah | defect | major |
#947 | Add file-with-metadata caps | newcaps newurls mutable immutable metadata rollback | assigned | davidsarah | enhancement | major |
#954 | revocable write authority | integrity capleak forward-compatibility newcaps revocation research | new | enhancement | major | |
#955 | use client-side storage to defend against rollback attack | integrity newcaps rollback | new | enhancement | major | |
#956 | embed security metadata in parent directory | mutable newcaps newurls metadata forward-compatibility rollback revocation | new | enhancement | major | |
#957 | embed security metadata in URL | newcaps newurls integrity redirect rollback | new | somebody | enhancement | major |
#958 | LAFS 301 Moved Permanently | forward-compatibility backward-compatibility integrity newcaps newurls http sftp ftpd smb availability security revocation rollback research | new | enhancement | major | |
#995 | It's way too easy to give away write directory caps | wui jsui usability confidentiality capleak websec | new | nobody | defect | major |
#997 | The webapi/WUI should have https enabled by default | confidentiality wui webapi capleak | new | nobody | defect | major |
#1021 | report all exceptions | logging foolscap error | new | warner | defect | major |
#1138 | Timeout of Servermap Update | servermap update timeout mutable download availability hang foolscap | new | nobody | defect | major |
#1234 | UnrecoverableFileError message should say which file it refers to | error usability capleak | assigned | davidsarah | defect | major |
#1254 | eliminate use of urllib.urlopen in check_load | security capleak | assigned | davidsarah | defect | major |
#1288 | support streaming uploads in uploader | streaming performance upload sftp fuse reliability newcaps | new | enhancement | major | |
#1448 | Storage node discovery via avahi | discovery introduction avahi bonjour mesh foolscap | new | alexs | enhancement | major |
#1649 | WUI: the error message page for a writeable file/directory nonobviously includes the write cap | usability security capleak websec | assigned | davidsarah | defect | major |
#1730 | ERROR: AttributeError('NoneType' object has no attribute 'callRemote') | i2p foolscap error | new | warner | defect | major |
#1798 | Segregate gateway HTTP ports: one for raw bytes and one for generated WUI pages | wui same-origin security capleak | new | freddyb | defect | major |
#1859 | Proof-of-concept attack: Upload and execute attacker controlled js from any domain. | security javascript same-origin capleak websec | new | davidsarah | defect | major |
#2090 | Don't expose URIs after failed CLI commands | easy security capleak error cli | new | daira | defect | major |
#2336 | using two copies of the same node directory fails badly | usability foolscap | new | defect | major | |
#1415 | WUI is more useful than CLI | security privacy capleak integrity confidentiality | new | defect | normal | |
#1535 | Allow restricting Tahoe-LAFS gateway to one user by supporting Unix sockets | wui cli socket unix security confidentiality integrity capleak | new | enhancement | normal | |
#1815 | either bridge foolscap log messages to twistd.log, or remove the section of logging.rst about that | logging twisted foolscap docs | assigned | blaisep | defect | normal |
#1823 | is this server telling me over foolscap that its foolscap connection to me just broke? | foolscap | new | defect | normal | |
#1875 | Hanging on dead reference? | hang crash subprocess foolscap s3-backend LeastAuthority.com | new | davidsarah | defect | normal |
#1890 | submit proposal for restrict-referrer-leakage to the CSP standardizers and implementors | referer referrer standards capleak research | assigned | davidsarah | task | normal |
#1906 | constant-time directory lookup | performance directory database newcaps research | new | davidsarah | enhancement | normal |
#1975 | remove the last use of notifyOnDisconnect, in server selection | foolscap upload notifyOnDisconnect | new | defect | normal | |
#1989 | foolscap: "an inbound callRemote ... failed" log entries include all arguments | memory confidentiality capleak logging foolscap | new | warner | defect | normal |
#2009 | One Grid to Rule Them All | extensibility servers-of-happiness location newurls security globalcaps | new | daira | defect | normal |
#2018 | padding to hide the size of plaintexts | confidentiality privacy compression newcaps research | new | nejucomo | enhancement | normal |
#2038 | look for any Y2038 problems in Tahoe-LAFS or its dependencies | time twisted foolscap | new | defect | normal | |
#2056 | bad connection hint in tub.location works once | foolscap tub.location startup config error | new | daira | defect | normal |
#2073 | Wrong ports are reported for connected nodes | wui tub port foolscap firewall | new | defect | normal | |
#2085 | Unit tests should work offline | foolscap test | new | defect | normal | |
#2100 | passphrase-encrypt the aliases file | aliases security capleak usability | new | daira | enhancement | normal |
#2331 | don't display capabilities without user explicitly asking for it | security capleak | assigned | daira | defect | normal |
#2335 | clients shouldn't need to have persistent id | anonymity privacy accounting foolscap | new | enhancement | normal | |
#2720 | format_http_error leaks the URI | security capleak | new | daira | defect | normal |
#2796 | add share-type argument to storage server protocol | newcaps | new | enhancement | normal | |
#280 | get_hash method in webapi for extension caching logic. | webapi cache extension newcaps | assigned | zooko | enhancement | minor |
#306 | Clean up code terminology: "SSK" vs "slot", etc | mutable newcaps docs | new | somebody | task | minor |
#896 | log more info about Foolscap disconnections on storages nodes (to twistd.log) | foolscap DeadReferenceError | assigned | francois | defect | minor |
#907 | Stop caps from leaking to phishing-filter servers | capleak integrity confidentiality forward-compatibility newurls docs websec | assigned | davidsarah | defect | minor |
#1007 | HTTP proxy support for node to node communication | privacy anonymity firewall foolscap anti-censorship i2p | new | davidsarah | enhancement | minor |
#1813 | Choice of tree-hash | newcaps | new | davidsarah | enhancement | minor |
Note: See TracQuery
for help on using queries.