awesome-LAFS

A curated list of things related to Tahoe-LAFS and its wider ecosystem. See the Awesome Lists GitHub topic for more such lists on many different subjects.

Contributions welcome!

Capability-based Security

• Zooko's triangle is a trilemma of three properties that some people consider desirable for names of participants in a network protocol: global, secure, and memorable. Zooko conjectured that no single kind of name can achieve more than two.
• Good Practices for Capability URLs by the W3C TAG (Technical Architecture Group) gives an introduction, examples, potential issues and recommendations when handling capability URLs. It includes a short chapter on Tahoe-LAFS.
• Christine Lemmer-Webber, 2018: Petnames: A humane approach to secure, decentralized naming Petname systems try to fulfil all three desirable properties.
• Marc Stiegler, 2005: An Introduction to Petname Systems
• ERights.org E is an object-capability programming language and platform for writing distributed, secure, and robust software.
  • Lecture: Mark S. Miller, Immunity from Viruses, Safety from Geeks Bearing Gifts (May 9, 2002)
• Miller, Yee, Shapiro 2003: Capability Myths Demolished
• Mark Samuel Miller: Robust Composition: Towards a Unified Approach to Access Control and Concurrency Control
• Wikipedia: The Object-capability model
• Wikipedia: The Principle of Least Authority (PoLA)

Implementations

• Cap’n Proto Data interchange format with a capablity-based RPC protocol.

• Capsicum Practical capabilities for UNIX.

  • Capsicum in FreeBSD is part of FreeBSD's main branch.
  • Talk@BSDCan2014: Andrea Ross: Capsicum and Casper - more than a lipstick on a pig

• Fuchsia is Google's capability-based "modern open source operating system that's simple, secure, updatable, and performant" (Wikipedia on Fuchsia).

• Redox Unix-like general-purpose microkernel-based operating system written in Rust. Its namespaces functionality is inspired by Capsicum.

• WASI The WebAssembly System Interface (WASI) is an ABI for Web Assembly (WASM).

  • Lin Clark: WASI: A system interface to run WebAssembly outside the web Employing capability-based security for robust sandboxing.
  • Talk: Ed Schouten, 32C3 (2015): CloudABI - Pure capability-based security for UNIX CloudABI is a predecessor of WASI.

Forward Error Correction (FEC) / Erasure Coding

• ZFEC on GitHub efficient, portable erasure coding tool
• ZFEX on GitHub a fork to utilize SIMD instructions (benchmarks)
• FECpp and accompanying blog post introduce using SSE2 to optimize the GF(2⁸) multiplications and implements a bitwise-compatible algorithm to zfex.

(Client-Side) Encryption

• ...

Secure network transfer

• Twisted An event-driven networking engine. Tahoe-LAFS relies heavily on Twisted.
• Magic Wormhole transfers data and files securely between two computers.
• FOWL Get TCP streams from one computer to another, safely.
• iroh Iroh is a library for building on direct connections between devices.

Distributed Storage

• Tahoe-LAFS
• Sia
• IPFS "store NFTs" 😹

Tools that work with Tahoe-LAFS

• Magic Folder syncs local folders to a Tahoe-LAFS grid.
  • The Magic Folder Data Model allows multiple writers.
• Rclone syncs and mounts over 70 cloud storage protocols. (Tahoe-LAFS support via its SFTP frontend)