[tor-dev] Stormy update
griffin at cryptolab.net
Wed Jul 1 04:42:40 UTC 2015
It seems like time to give the tor-dev list an update on Stormy's
development. Right now, the scripts are undergoing third-party testing
to identify any obvious bugs before sending them to security auditors.
Testing should be finished imminently, any bugs found will be fixed this
week, and then sent to auditors (along with the GUI). The security
audit may take about two to three weeks .
Currently, Stormy's functions include installing typical onion service
dependencies (webserver+tor), setting up a Ghost-based content
management system, creating a personal cloud server to handle files/rss
feeds/calendars/tasks, installing an XMPP/jabber server for private
communications, and installing an IRC server for group communications.
Shortcomings and future work:
Like all software projects, Stormy has some shortcomings. Users can't
configure multiple onion services on the same machine as Stormy doesn't
account for virtual hosts. For users to run more than one onion
service, they must be on separate physical or virtual machines. Stormy
also doesn't detect the currently-running clearnet service, so users who
seek to make their existing service also an onion service may need to
adjust their configuration manually. Currently, Stormy lives on my
github page , though once it passes a security audit, the goal is for
it to live within Tor's git repositories.
 Cupcake's audit took about two weeks, so that's really my only real
data point for audit timing.
“Sometimes the questions are complicated and the answers are simple.”
― Dr. Seuss
More information about the tor-dev