Welcome to the Tahoe-LAFS Weekly News (TWN). Tahoe-LAFS is a secure, distributed storage system. View TWN on the web or subscribe to TWN. If you would like to view the "new and improved" TWN, complete with pictures; please take a look.
The Tahoe-LAFS project released version 1.8.3 and 1.9.0a2 to address a security issue. A vulnerability was discovered in all versions from 1.3.0 to 1.8.2 and 1.9.0a1. This vulnerability allowed a malicious attacker to delete files. To be able to delete the file, an attacker must know its 'storage index'. An upgrade to 1.8.3 resolves this issues. The known issues document provides the technical information regarding this issue.
The Second International Tahoe-LAFS Summit will take place November 7 through November 11, in San Francisco. Mozilla has generously offered to host us in their nice new San Francisco office. (Google , Adobe , and Microsoft also offered to help out in case Mozilla's facilities weren't available—thanks to them as well.)
The Summit will have technical presentations of new features, design discussions, and probably a lot of coding!
There will be live audio and video available for remote participants. Help us organize the Summit on the wiki.
1.9.0a2 was released. In addition to the security fix mentioned above, this release incorporates the following fixes:
The following work remains for the 1.9.0 release:
We highly encourage everyone to throughly test this release. The more bugs we find in the alpha, the less in the beta and the quicker 1.9.0 arrives. Currently, there is a possibility of a Halloween release of 1.9.0.
tahoe-lafs.org experienced multiple outages over the last several days. The outages were the result of a router which was acting up. The router has been replaced. We apologize for any inconvenience these outages may have caused.
We are in the process of migrating the server to a new virtual server with professional hosting instead of being an old server humming away in someone's garage.
The Free/Open Source Project of the Week is HekaFS, formerly known as "CloudFS". Like Tahoe-LAFS, HekaFS offers provider-independent confidentiality by encrypting all of the data on the client side, with an encryption key unknown to the server. It is built on top of GlusterFS, and it inherits most of the performance and scalability of GlusterFS. It also has the same network and filesystem semantics of GlusterFS. In contrast, Tahoe-LAFS invents new semantics such as provider-independent immutability.
The HekaFS project is lead by Jeff Darcy and sponsored by RedHat . In addition to sponsoring HekaFS, RedHat just announced that they are buying the Gluster company.
The Tahoe-LAFS project would like to thank Atlas Networks for their generous donation of four servers. In addition to the generosity of their hardware donation, Atlas Networks provide the Tahoe-LAFS project with remote consoles and technical support, including complete OS reinstalls.
Brian Warner has been using the Atlas Networks servers to do performance measurements of Tahoe-LAFS. These measurements show some performance issues, including one that arises when using large values of K (number of shares needed). Ticket 1264 has details.
Brian Warner suggested the notion of a "Tahoe-LAFS web-app", in which both the data and the code (Javascript) are stored in a Tahoe-LAFS grid and the browser loads them and runs the Javascript app. This would have a similar effect to the TiddlyWiki-on-Tahoe-LAFS hack, and to the Unhosted project.
Kill Your TV posted an issue with Arch Linux and 1.8.3. The issue was the result of the inability of tahoe to find ifconfig. Ticket #1536 was opened to provided more user friendly error messages involving finding and using ifconfig.
There are six (6) tickets still needing review for 1.9:
Let's see if we can't get these reviewed and 1.9 out the door.
The Tahoe-LAFS Weekly News is published once a week by The Tahoe-LAFS Software Foundation, President and Treasurer: Peter Secor . Scribes: Patrick "marlowe" McDonald , Zooko Wilcox-O'Hearn , Editor: Zooko. View TWN on the web or subscribe to TWN . Send your news stories to marlowe@antagonism.org — submission deadline: Friday night.