| 5 | | |
| 6 | | Students: you don't have to use one of the following Ideas. You can come up with your own Ideas, either inspired by these or your own Blue Sky idea. The most important thing is to e-mail the Mentor team (listed at the bottom of this page) saying that you are interested. |
| 7 | | |
| 8 | | = Ideas = |
| 9 | | ''What could a smart student do in one summer, if they didn't need to worry about getting a summer job to pay the bills?'' |
| 10 | | |
| 11 | | [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~gsoc Trac tickets labelled 'gsoc'] (please add this label to any tickets that might make a good GSoC project). |
| 12 | | |
| 13 | | == Deep Security Issues == |
| 14 | | ''Want to implement strong security features which advance the state of the art? It isn't easy! To tackle these you'll need to think carefully and to integrate security and usability, which are two halves of the same coin. But you'll have excellent mentors and the support of a wide community of interested security hackers.'' |
| 15 | | |
| 16 | | * Fix Same-Origin-Policy design issue. Web content from different authors can interact in unintended ways in the victim's browser, such as !JavaScript peeking at other frames or referrer headers. Before this project is undertaken, the problem description and proposed solutions need careful design review and consideration! The solutions should be considered prototypes and should be backwards compatible with the Tahoe network. Main ticket: #615 (Can !JavaScript loaded from Tahoe access all your content which is loaded from Tahoe?) [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~capleak Tickets labelled 'capleak'] |
| 17 | | * Domain Mangling approaches: |
| 18 | | * HTTP proxy approach |
| 19 | | * Special scheme handling in browser add-ons |
| 20 | | * [http://code.google.com/p/google-caja Caja] approach: Require all Javascript to pass the Caja verifier in the Tahoe-LAFS web frontend, then create an interface to the tahoe webapi which matches the intended capability semantics. |
| 21 | | * Tahoe-LAFS Cryptography: |
| 22 | | * Help us author a paper proving the security of the crypto that will be used to implement new shorter caps (such as the [NewCaps/WhatCouldGoWrong Elk Point protocol] or the "Semi-Private Key" construction from http://allmydata.org/~zooko/lafs.pdf ). [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~newcaps Tickets labelled 'newcaps'] |
| 23 | | |
| 24 | | == Free The Windows Client == |
| 25 | | * Make the [http://allmydata.org/trac/tahoe-w32-client Windows client] use only free open-source software. (Implementing WebDAV is an alternative that would achieve a similar effect.) |
| 26 | | |
| 27 | | == Connecting Tahoe-LAFS To Other Things == |
| 28 | | * Filesystem access: |
| 29 | | * improve the FUSE frontend ([source:contrib/fuse source code]). [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~fuse Tickets labelled 'fuse'] |
| 30 | | * support WebDAV for access from Windows and various filesystem browsers. [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~webdav Tickets labelled 'webdav'] |
| 31 | | * integrate Tahoe-LAFS with the GVFS Gnome virtual filesystem |
| 32 | | * Explore running a Tahoe-LAFS grid over [https://torproject.org Tor] or [https://i2p2.de I2P] to provide anonymity to servers and/or clients. |
| 33 | | * Rescue the neglected C client library [http://allmydata.org/trac/libtahoeclient_webapi libtahoeclient_webapi]. |
| 34 | | |
| 35 | | == Server Selection == |
| 36 | | ''Which servers are connected to your client, and which of them have which shares of your files?'' |
| 37 | | * Dynamically migrate shares to maintain file health. |
| 38 | | * Use Zeroconf or similar so nodes can find each other on a local network to enable quick local share migration. |
| 39 | | * Deal with unreliable nodes and connections in general, getting away from allmydata.com's assumption that the grid is a big collection of reliable machines in a colo under a single administrative jurisdiction. [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~availability Tickets labelled 'availability'] |
| 40 | | * Abstract out the server selection part of Tahoe-LAFS so that the projects in this category of "grid membership and server selection" can be mostly independent of the rest of Tahoe-LAFS. See also [http://testgrid.allmydata.org:3567/uri/URI:DIR2-RO:j74uhg25nwdpjpacl6rkat2yhm:kav7ijeft5h7r7rxdp5bgtlt3viv32yabqajkrdykozia5544jqa/wiki.html#2009-02-06 this note about standardization of LAFS]. |
| 41 | | * Write a GUI to visualize and manipulate the set of servers connected and the set holding shares of files. |
| 42 | | |
| 43 | | == Networking Improvements == |
| 44 | | * Dealing with NAT, ideally making it as easy to ignore as possible (taking advantage of upnp-igd and Zeroconf NAT-PMP). [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~firewall Tickets labelled 'firewall'] |
| 45 | | * 'tahoe sync'. Like dropbox (http://www.getdropbox.com/), the user could have a daemon which keeps the grid in sync with the local filesystem (maybe using inotify for uploads). |
| 46 | | * Optimize upload/download transfer speed. [http://allmydata.org/trac/tahoe-lafs/query?status=!closed&order=priority&keywords=~performance Tickets labelled 'performance'] |
| 47 | | * Implement storage server protocol over HTTP. #510 |
| 48 | | |
| 49 | | == Building Things On Top Of Tahoe == |
| 50 | | * an interactive tree browser web frontend in !JavaScript (Nathan has written most of one -- what can it grow into?) |
| 51 | | * Extend and improve the {{{tiddly_on_tahoe}}} implementation. |
| 52 | | * Port another light-weight open source web app to Tahoe-LAFS+javascript (calendar, photo album, [https://bespin.mozilla.com Bespin]). |
| 53 | | |
| 54 | | = Mentors = |
| 55 | | ''Who is willing to spend about five hours a week (according to Google) helping a student figure out how to do it right?'' |
| 56 | | [[br]] |
| 57 | | * [http://testgrid.allmydata.org:3567/uri/URI:DIR2-RO:j74uhg25nwdpjpacl6rkat2yhm:kav7ijeft5h7r7rxdp5bgtlt3viv32yabqajkrdykozia5544jqa/wiki.html Zooko O'Whielacronx] (core coding, Python/C/C++/JavaScript, cryptography) |
| 58 | | * [http://www.randombit.net Jack Lloyd] (C/C++/Python, cryptography) |
| 59 | | * David-Sarah Hopwood (david-sarah at jacaranda.org) (Python/C/JavaScript, SFTP frontend, security+cryptography) |
| 60 | | |
