On Wed, Jun 8, 2011 at 8:02 AM, Andrew Lewman <andrew@torproject.org> wrote:
On Tue, 7 Jun 2011 15:36:45 -0700
Jacob Appelbaum <jacob@appelbaum.net> wrote:

> > We would also need a way for users to easily change the hashed
> > password. I can't remember if this is a feature that is already
> > present in Vidalia.
> Yes, we do need a way to change the password. We will also need a way
> to reset the password if the user is locked out of the control port. I
> generally think that this means we'll need a web UI... :-)

It's built into vidalia.  Just click Advanced and you can change the
password all you want.


Sure, I think that's good for a local socket but not going to help with remote control ports or a locked out password.
 
> I think the best thing is to make an autoconfiguring device with a
> web UI; we can easily rate limit Tor to something reasonable and make
> it a middle node by default. In all cases it stands alone and simply
> plugging it into a wall (power/ethernet) will provide more capacity
> to the network if the OR port is reachable (ala tor-fw-helper + tor +
> init.d scripts to start Tor on boot).

Most of me wants to wait for the freedombox people to derive their web
interface, and then we can plug tor into it.  I realize this could be
years at the current rate of progress. If someone whips up a quick
interface that isn't a security nightmare, we could use that until
freedombox has something tangible.


I generally agree.
 
I suggest we ship the dreamplug with cli access only for those who want
a cheap device to be a bridge or relay.


That seems reasonable.
 
I suggest we ship the excito with the web ui as the easy to use
option.


How's that web UI doing?
 
In either case, we need to start testing, not keep thinking about what
we could do.  We're going to get a flood of feedback from actual people
testing the excito or dreamplug.


I agree. My excito is pushing a lot of data without any trouble, my dreamplug hasn't arrived.

I was thinking that we should talk about clocks. I think djb solved the main problem of syncing clocks a while ago:
http://cr.yp.to/clockspeed.html

I think we should consider this as something we push for any embedded system with Tor.

All the best,
Jake