[Noisebridge-discuss] Unlocking the door via SMS

[Micah Lee]

The script doesn't log anything right now, but it does display verbose
info when someone sends a new text message. It would be easy to change
that to only contain the contents of the message and the time, and not
include the phone number or the SMS ID number. And you can do lots of
stuff with pygooglevoice, like delete SMS messages after they've been
processed. I think that's about as much removing logs as we can do.

On Wed, Mar 10, 2010 at 5:25 PM, Jonathan Lassoff <jof at thejof.com> wrote:
> Whomever has access to an account on pony that is either UID 0, or is in
> the "adm" group.
> Only a few people, but who knows what unknown root access there is to
> this machine.
>
> It seems like pony is keeping copious apache logs. Logrotate is
> configured to keep 52 rolled-out copies of logs on pony.

Since the script doesn't actually log anything itself, people with
root actually won't have access to the logs. And as far as apache logs
are concerned, each time someone sends an SMS to unlock the door, the
IP in the apache logs will be 127.0.0.1, since pony itself will send
the request.

And also, in terms of keeping really stripped down logs, this stuff
might help: http://dev.riseup.net/privacy/

micah