Live data from Hacker News

Show HN: Open-source P2P file transfer

github.com

11–20 of 33 posts

Re: Show HN: Open-source P2P file transfer

#13
post #5

My understanding is that the signaling server could be used as the perfect place to perform MITM attack. The README does not mention how berb addresses this concern at all.

Oh I would love some more details if you think that's the case. With Berb only two clients can connect really. So let's say you somehow guess a peer ID, which is very tough, and connect to a random user. You can technically send a file but they can easily ignore it since they didn't initiate the transfer. That being said, I can definitely add a way to verify the file is legit like the suggestion in the reply with hashes.

Re: Show HN: Open-source P2P file transfer

#17

Is it doing the ICE offer/answer exchange over websocket hosted on your server?

Im not a js programmer but index.js has the line: "Signaling server running on http://localhost:${PORT} " -- is that what you're talking about? I think you're talking about the initial connection right? util.js also contains "copyToClipboard = (value) => {", not sure why that would be needed. and googletagmanager for tracking error/diagnostics I think? its hard to understand this code without learning the language lo…

Thx for the analysis! copyToClipboard is for copying the session link so it can be opened on your other device.

As for analytics, you are exactly right. I need to know if people are using the app the way it was intended and soon need to add more events for errors. Though perhaps it is something I can maintain on a separate repo? idk, the goal for me was to truly make everything on berb.app open source. no hiding anything

Re: Show HN: Open-source P2P file transfer

#18
Connecting browsers directly is a fascinting area to explore in web development. It always goes a little haywire when punching thru NAT and I wish there was more research into what the best methods are.

https://github.com/dmotz/trystero is a one tool I've used to build these kinds of apps.

Re: Show HN: Open-source P2P file transfer

#19
post #18

Connecting browsers directly is a fascinting area to explore in web development. It always goes a little haywire when punching thru NAT and I wish there was more research into what the best methods are. https://github.com/dmotz/trystero is a one tool I've used to build these kinds of apps.

Do you think the AT protocol could ever work for this? I wish we had one centeralized scriptable method that was popular to enable ubiquitous discovery.

Re: Show HN: Open-source P2P file transfer

#20
post #19
post #18

Connecting browsers directly is a fascinting area to explore in web development. It always goes a little haywire when punching thru NAT and I wish there was more research into what the best methods are. https://github.com/dmotz/trystero is a one tool I've used to build these kinds of apps.

Do you think the AT protocol could ever work for this? I wish we had one centeralized scriptable method that was popular to enable ubiquitous discovery.

atproto would be a great pull request for Trystero come to think of it
Post reply on HN