On Wed, Jun 8, 2011 at 4:02 PM, Andrew Lewman andrew@torproject.org wrote:
On Tue, 7 Jun 2011 15:36:45 -0700 Jacob Appelbaum jacob@appelbaum.net wrote:
We would also need a way for users to easily change the hashed password. I can't remember if this is a feature that is already present in Vidalia.
Yes, we do need a way to change the password. We will also need a way to reset the password if the user is locked out of the control port. I generally think that this means we'll need a web UI... :-)
It's built into vidalia. Just click Advanced and you can change the password all you want.
I think the best thing is to make an autoconfiguring device with a web UI; we can easily rate limit Tor to something reasonable and make it a middle node by default. In all cases it stands alone and simply plugging it into a wall (power/ethernet) will provide more capacity to the network if the OR port is reachable (ala tor-fw-helper + tor + init.d scripts to start Tor on boot).
Most of me wants to wait for the freedombox people to derive their web interface, and then we can plug tor into it. I realize this could be years at the current rate of progress. If someone whips up a quick interface that isn't a security nightmare, we could use that until freedombox has something tangible.
Yeah, I was hoping the freedombox people would have something we could use. Doesn't seem like it, though. I think that, at some point, we should create a web ui for the dreamplug. But not having one right now should not be a blocker for the dreamplug-torouter.
I suggest we ship the dreamplug with cli access only for those who want a cheap device to be a bridge or relay.
I guess we can set up dreamplugs as bridges by default and include a leaflet explaining the steps to take to change the configuration. Do you think we should touch the default setup of the dreamplug (it serves an open wifi by default, for example)?
I suggest we ship the excito with the web ui as the easy to use option.
Yep, the Tor web ui for the Excito B3 should be ready at the end of the month.
In either case, we need to start testing, not keep thinking about what we could do. We're going to get a flood of feedback from actual people testing the excito or dreamplug.
Valid point.