[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Monotone-devel] Google Summer of Code 2006
From: |
Timothy Brownawell |
Subject: |
Re: [Monotone-devel] Google Summer of Code 2006 |
Date: |
Fri, 21 Apr 2006 13:23:22 -0500 |
On Fri, 2006-04-21 at 13:29 -0400, Ethan Blanton wrote:
> The extra security comes in in that the usher server which listens to
> the outside world and the privileged server cooperate in a very simple
> and well-defined manner (e.g., perhaps the listening server sends
> simply a tuple of {hostname, collection} to the privileged server, and
> receives a port number in return). I believe netsync cannot be
> considered a simple and well-defined manner.
It doesn't actually parse the netsync stream; it considers it an opaque
bytestream and just forwards it to the monotone server.
What it does understand is that the stream starts with a sequence of
[byte] [byte] [size] [size] [host] [size] [pattern]
, which is the only thing it looks at. This is a simple {hostname,
collection} tuple, just with 2 opaque bytes in front of it. (The only
slight complexity is that the sizes are in uleb128 format, instead of
fixed-size integers.)
Really, I'd be more worried about how it handles the server list (since
that code has had crashes in it), which has to be on the secure side.
Tim
- Re: [Monotone-devel] Google Summer of Code 2006, (continued)
- Message not available
- Message not available
- Re: [Monotone-devel] Google Summer of Code 2006, Ingo Maindorfer, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Richard Li, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Thomas Keller, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Richard Li, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Chad Walstrom, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Richard Levitte - VMS Whacker, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Ethan Blanton, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Richard Levitte - VMS Whacker, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Ethan Blanton, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Richard Levitte - VMS Whacker, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006,
Timothy Brownawell <=
- Re: [Monotone-devel] Google Summer of Code 2006, Timothy Brownawell, 2006/04/24
- Re: [Monotone-devel] Google Summer of Code 2006, Chad Walstrom, 2006/04/21
- Re: [Monotone-devel] Google Summer of Code 2006, Nathaniel Smith, 2006/04/22
- [Monotone-devel] Re: Google Summer of Code 2006, Bruce Stephens, 2006/04/21