Secure the connection between scylla-server and Zenoh
Maintainers usually reply within 4 days
Nobody has claimed this yet.
Assessment
This issue has not been assessed yet.
Description
Idea
Make sure only trusted parties can read car telemetry and send car commands over Zenoh, for a basic first pass at security.
Rationale
The Zenoh configs in siren-base have no authentication or access control enabled, so anyone who can reach the router can subscribe to telemetry and publish to command key expressions that Calypso turns into CAN messages. A basic pass closes the most dangerous gaps, especially sending commands to the car, before the network grows.
Approaches to explore
- What "secure" means for this pass: the threats that matter (stray clients, sniffing, unauthorized commands) and what is explicitly out of scope.
- Who is allowed in: user/password, certificates, or network-level restriction.
- Encryption in transit: TLS or QUIC links, or relying on the network for now.
- What each party may do: access control per key expression (e.g. read-only telemetry vs. command publishing).
- Dominant language
- TypeScript
- Stars
- 5
- Forks
- 1
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 33
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Northeastern-Electric-Racing/Argos
-
by: ai-assisted frontend good-for: new-member spike
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Northeastern-Electric-Racing/Argos#847 ·
Maintainers usually reply within 4 days
-
Show the car on an offline track map and time laps from GPSPossibly taken @TheJeffreyKuo claimed this 1 day ago. Openbackend by: ai-assisted dev work frontend
Northeastern-Electric-Racing/Argos#850 · 1 assignee ·
Maintainers usually reply within 4 days
-
Redesign the car command pagePossibly taken @TheJeffreyKuo claimed this 3 days ago. Openby: ai-assisted frontend idea
Northeastern-Electric-Racing/Argos#846 · 1 assignee ·
Maintainers usually reply within 4 days
-
Make notifications reliable and redesign the notification systemPossibly taken @TheJeffreyKuo claimed this 3 days ago. Openbackend by: ai-assisted frontend idea
Northeastern-Electric-Racing/Argos#845 · 1 assignee ·
Maintainers usually reply within 4 days
-
Replay a recorded RunPossibly taken @TheJeffreyKuo claimed this 3 days ago. Openbackend by: ai-assisted frontend idea
Northeastern-Electric-Racing/Argos#843 · 1 assignee ·
Maintainers usually reply within 4 days
All issues in Northeastern-Electric-Racing/Argos
Similar issues
-
fix(frontend): correct VITE_IS_DEVELPOMENT typo in shared/app.ts and align dev environment flagsOpen
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
vicharanashala/ajrasakha#1439 ·
Maintainers usually reply within 1 day
-
Add: TV5Monde AsieOpenapproved check:passed streams:add
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
codex-team/editor.js#3037 ·
-
complexity: trivial good first issue impact: low
Difficulty 1/5 Under an hour Newbie friendliness 78/100
ueberdosis/tiptap#8522 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
wormhole-foundation/wormhole#5062 ·
Maintainers usually reply within 1 day