Viewing profile — meejah

Here are some fairly simple examples: testing port parsing https://github.com/meejah/fowl/blob/e8253467d7072cd05f21de7c... ...and https://github.com/magic-wormhole/magic-wormhole/b…

I am not a cryptographer, but can explain that Magic Wormhole uses SPAKE2 to negotiate a shared secret (RFC9382 claims equivalent to gap Diffie-Hellman), and then uses NaCl SecretB…

Correct. It does learn some metadata: the endpoints of the messages (unless you use Tor) and the number of bytes in those messages.

...and also "Git-WithMe" for peer-to-peer, one-off Git usage: https://sr.ht/~meejah/git-withme/

Note, too, that you may run your own "transit helper" (code: https://github.com/magic-wormhole/magic-wormhole-transit-rel... ) and then specify this via "wormhole --transit-helper …

You should probably first test and ensure that you're sending "directly" instead of via the relay -- but if that's true then yes.

One use-case could be for SyncThing to actually _use_ magic-wormhole as a way to introduce / join another endpoint to a SyncThing folder.

There are Rust and Haskell implementations too (not quite as feature-full as the Python code yet, though) as well. In principal WebRTC communication could be added to magic-wormhol…

You might even use Magic Wormhole to securely transfer WireGuard keys!

There are several different clients available for Magic Wormhole, including GUIs and phone apps: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...

If two Magic Wormhole clients _are_ on the same LAN they should communicate directly that way (i.e. no relay required).

Yes, there are several alternative clients including several for Android: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...

Building on top of various Magic Wormhole features, "shwim" enables quick and easy 1:1 terminal sharing with durable, end-to-end-encrypted communications using tty-share.

Yes, all the implementations speak the same wire protocol. The Python implementation has the most features. More about which implementations support what features is here: https://…

The Haskell implementation uses the same protocol as the Python implementation. The main difference is that there are some features the Python implementation has that the Haskell i…

That is just using normal STUN/TURN via another server that one of those developers is running

Yes, it does -- via the Rust implementation.

There's also a Haskell implementation (besides the Go one pointed out above). They all interoperate.

There is also https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht... and if that is lacking anything please file a ticket or pull-request

Yes. A technique like this is used to do "invites" in Magic Folder, and also in Tahoe-LAFS. That is, they speak a custom protocol over just the Mailbox server in order to do some s…

I think Pond had better-thought-out decoy traffic https://github.com/agl/pond with a statistical design and clients would always upload and download the same amount of data (so it …

Yes, inter-packet timings are unfortunately pretty good at holding information. (e.g. https://www.freehaven.net/anonbib/cache/stepping-stones.pdf ) Note that Tor doesn't have "glob…

There is a Web client at https://winden.app (although it uses different servers than the defaults in the Python CLI, the latter can be easily configured to use the same servers). H…

"Without needing a server" but both parties have to visit a Web ... server ... to do the exchange. So there _is_ in fact "a server in the middle".