From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.2 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,
	DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM autolearn=no autolearn_force=no
	version=3.4.4
Received: (qmail 7698 invoked from network); 14 Dec 2022 00:38:33 -0000
Received: from 9front.inri.net (168.235.81.73)
  by inbox.vuxu.org with ESMTPUTF8; 14 Dec 2022 00:38:33 -0000
Received: from mail-vs1-f41.google.com ([209.85.217.41]) by 9front; Tue Dec 13 19:37:09 -0500 2022
Received: by mail-vs1-f41.google.com with SMTP id 128so16406660vsz.12
        for <9front@9front.org>; Tue, 13 Dec 2022 16:37:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
         :date:message-id:reply-to;
        bh=3RTs+btuCaSvyBNF1VTPTRIaJ8Rdj8+V7lgabWzPr40=;
        b=HY+v3KdNfx2MDTe4WtJZJBgMeLkiuupKdNrSLX/dCj5lODbfRdsEP5IpUqEUlkM1Uv
         gJHk0yhi9UEa0936B1tRv+srYRM4TaMt/gPAFXerIw1/y2AI5GjKMMHeGnL0+Ra+/fIw
         8Z1e/hMyJFWT1o48U4Wgw38cLMRbyvngHDatVqRd2+mLhzT541nKoggqy6RIiGfqnVC5
         uwx5pQqehGXbyrfOvjro3wp5JvkMosOusut5FmrxUkToiNVT072RL9hUi8EoSp2zUjeH
         dAfEKZqyjruuufhefhB/WjMwR+yFpMGBRfzphs0LH/ni1HFuRWCFg+wtPhD4MiyUMNf/
         KgWw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=3RTs+btuCaSvyBNF1VTPTRIaJ8Rdj8+V7lgabWzPr40=;
        b=NXVX9+Z8/LsPdFCXwzVY6HoxJHTVJMGJnq5/TRVKafx59JNoGCZe+9FBzUpMChxXs6
         utBGWqg2La690j3PbqxyreTojj5eDJk7Kt1RjU+dS5ooHLrFNPY4t4q3e4XeLjLGrQ87
         3KIQ02Zb9zQCRZsNbM8Tlwto/LVejGqP/UtLCyUgwuJHbU6PJD6xw6/e+6qspbHVh45z
         9Td+/hWcQjABS9W2QsWbeuFPnc03ITskciSu3IwaMZKEM21uTZFYsY13Obnl09Tgp8C1
         MZYntqMUnnFxdJLwYglFk/pqItROUe8LltzboBJJq/iEIvmDhL/d/QhmUpBXjxTtrC1m
         FfRw==
X-Gm-Message-State: ANoB5pmfPzGoZlYTfffcCWfJhufauJTsQSiXTrBg/6mos/9X946mtZXi
	XJmSSFnlVTqXyKFtki8IpbObxOQdjc0jBZZxIHvHCwp5
X-Google-Smtp-Source: AA0mqf5+eGilDDtUhTd7gDEO7is2TwntFHIBIkb0u5gWyWldUKbV2MMRQQxnwkMza11HC/LIbM0LbbSe+6oQmMrp9nA=
X-Received: by 2002:a67:de88:0:b0:3b1:190b:b505 with SMTP id
 r8-20020a67de88000000b003b1190bb505mr16906262vsk.66.1670978225019; Tue, 13
 Dec 2022 16:37:05 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ab0:60d7:0:0:0:0:0 with HTTP; Tue, 13 Dec 2022 16:37:04
 -0800 (PST)
From: hiro <23hiro@gmail.com>
Date: Wed, 14 Dec 2022 01:37:04 +0100
Message-ID: <CAFSF3XPKvPoEA7SucRPgbKrV_yuwceAxtVF6RzY_J+7=i+Z60w@mail.gmail.com>
To: 9front <9front@9front.org>
Content-Type: text/plain; charset="UTF-8"
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: stable scripting-based TOR strategy pipelining control 
Subject: [9front] cwfs footgun
Reply-To: 9front@9front.org
Precedence: bulk

some of you have found out that noauth is turned on by default.

that's why in the fqa it is described how to turn it off during the
first boot in cwfs' configuration mode.

if you setup your system in another way, not precisely according to
the fqa, you might have been tempted to try and remedy the fact that
noauth is on by default, by connecting to the cwfs.cmd console and
typed noauth, to toggle it.
but that setting doesn't persist. after a reboot, cwfs loads the old
value form configuration.

fyi.