From d375d63646abb975f65de3bc0197956f836178f5 Mon Sep 17 00:00:00 2001 From: Jeff Parsons Date: Sun, 12 Oct 2014 10:29:03 -0700 Subject: [PATCH] Update READMEs --- logs/.gitignore | 1 - logs/README.md | 21 +++++---------------- logs/bugs/README.md | 3 +++ 3 files changed, 8 insertions(+), 17 deletions(-) create mode 100644 logs/bugs/README.md diff --git a/logs/.gitignore b/logs/.gitignore index 2ae43099b..756bba11c 100644 --- a/logs/.gitignore +++ b/logs/.gitignore @@ -1,5 +1,4 @@ *.json *.log bugs.html -bugs/ users/ \ No newline at end of file diff --git a/logs/README.md b/logs/README.md index 7e69b27bf..984cc43c2 100644 --- a/logs/README.md +++ b/logs/README.md @@ -1,20 +1,9 @@ Logs --- -This is where Node website activity is logged, and where per-user data is stored (temporarily). +This is where Node web server activity is logged, where bug reports are saved, and where per-user data is stored. -Copies of the remote AWS server logs are saved here as well, whenever you run [awsget.sh](../bin/awsget.sh) -or [awspush.sh](../bin/awspush.sh). See the [Bin](../bin/) directory for details. +Per-user data is still in the experimental phase, and is enabled ONLY for users that have requested and received +their own per-user directory. -Also, to minimize the number of random root directories, I've moved all the per-user data into this folder -as well. [users.log]() contains all the user IDs that are allowed to have per-user machine states and disk -images on the server. - -Per-user support is still in the experimental phase, and security is woefully inadequate. At the very least, -every user should also have a "secret key" (the hash of which would also be stored in users.log), not to mention -login and logout pages, key request and recovery pages, https support, and so on. That's an entire infrastructure -I'm not interested in supporting yet, so for now, the integrity of per-user support relies on the use of -obscure user IDs, and the users of those IDs avoiding open, unencrypted networks. - -Storing user data on the same server as the web server is also temporary, because this (or any other folder) -can be completely wiped out every time a new version is pushed to AWS. So we will need a completely different -strategy for preserving per-user data. +The website does not use cookies or any other form of user tracking, and Express server logs are maintained only to +help identify problems with the web server. diff --git a/logs/bugs/README.md b/logs/bugs/README.md new file mode 100644 index 000000000..38e1727e4 --- /dev/null +++ b/logs/bugs/README.md @@ -0,0 +1,3 @@ +Bugs +--- +This is where the server stores [bug reports](../bugs.html) and machine state files that users have agreed to submit. \ No newline at end of file