[tor-bugs] #26849 [Internal Services/Service - dist]: Upload sbws releases in dist.torproject.org

[Tor Bug Tracker & Wiki]

#26849: Upload sbws releases in dist.torproject.org
----------------------------------------------+-------------------------
 Reporter:  juga                              |          Owner:  (none)
     Type:  defect                            |         Status:  closed
 Priority:  Medium                            |      Milestone:
Component:  Internal Services/Service - dist  |        Version:
 Severity:  Normal                            |     Resolution:  wontfix
 Keywords:  sbws                              |  Actual Points:
Parent ID:  #26848                            |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+-------------------------

Comment (by arma):

 For historical context, we spoke of four options:

 (a) you give one of the torwww people a link to a thing and they stick the
 thing on dist. there are enough people in torwww that i bet this would
 work fine.

 (b) we pick one of the three and add them to torwww and hope that it
 doesn't make the fire that is torwww burn higher. (knowing that every
 person in the group can go modify every download, if
 they want or if their computer gets compromised enough)

 (c) stick the files somewhere else" if that's a fine choice for you

 (d) make a new group that can write to one dir.  torwww can still steal
 your thing, and it means torwww is unable to clean things up without root
 because it's a bad option.

 I am unexcited about 'd' because it means we go even deeper into the wrong
 solution.

 The right solution is to implement #13134 so torwww actually has a
 scalable way to keep track of files. Right now 13 people can go edit any
 the files on dist, and adding more people to that set is not necessarily
 wise.

 That said, I am open to options 'a' or 'b' if they resume looking better
 than option 'c'.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26849#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online