Similar project: FilePizza – https://file.pizza/ github: https://github.com/kern/filepizza show hn: https://news.ycombinator.com/item?id=9535332
Show HN: Peer-to-peer secure file transfer using WebRTC
31–40 of 65 posts
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#32There's also http://sharedrop.io , which was featured on HN a couple years ago and also uses WebRTC. Source: https://github.com/cowbell/sharedrop Discussion: https://news.ycombinator.com/item?id=7468328
fipelines.org is another one (their cert is expired but if you ignore that the site works well)
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#33Earlier quoted context omitted.
Thank you for the feedback! I will change the wording of that FAQ question (+ answer) and make it more detailed. I'm not sure about how I should go about demonstrating what makes this model more secure, except making it more obvious that it doesn't involve storing your data on servers not under your control which is the case with solutions like email and skype.
A big problem is that webRTC is highly MITM-able. You have to exchange initial connections using a server. So no party has any way of knowing if you are MITM attacking. You might be able to do something diffie-helman shaped at the javascript level (hard to ensure it actually works) to show a fingerprint of the shared secret that could be confirmed via outside channels. But all-in-all this does not offer ANY security…
Not knowing enough about this, I am genuinely curious if something like zerodb solves this. It was posted yesterday, but it was started by 2 guys, i think one was from morgan stanely, that allow you to securely send and receive data from the db while it is portected in flight. Would this be helpful in the scenario?
This will betray my lack of domain knowledge but it sort of opperates like a double encryption, so basically the data is encrypted maybe then sent, then it is encrypted by a forwarding proxy which also has a priv./pub key. You query for the hash, get the hash, decrypt it, and send it back.
Could you use this as the broker for webrtc? I know that wasn't exactly Nakomoto's BitcoinD paper, but their model seems to make sense, and a lot in this context.
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#34Sorry for off-topic, does anyone know why Google phone calling (Voice / Hangouts) still doesn't work with WebRTC and requires native plugin? And are there any other services for making phone calls which actually work with WebRTC?
Appear.in
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#35Sorry for off-topic, does anyone know why Google phone calling (Voice / Hangouts) still doesn't work with WebRTC and requires native plugin? And are there any other services for making phone calls which actually work with WebRTC?
Appear.in
Can it make calls to real phone numbers, especially between countries? That's essentially what I need. Google provides that, but it works very poorly and requires a native plugin.
For regular Internet to Internet media calls I can use XMPP/Jingle client.
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#36Earlier quoted context omitted.
Thank you for the feedback! I will change the wording of that FAQ question (+ answer) and make it more detailed. I'm not sure about how I should go about demonstrating what makes this model more secure, except making it more obvious that it doesn't involve storing your data on servers not under your control which is the case with solutions like email and skype.
A big problem is that webRTC is highly MITM-able. You have to exchange initial connections using a server. So no party has any way of knowing if you are MITM attacking. You might be able to do something diffie-helman shaped at the javascript level (hard to ensure it actually works) to show a fingerprint of the shared secret that could be confirmed via outside channels. But all-in-all this does not offer ANY security…
You can do without using a server.
https://github.com/cjb/serverless-webrtc
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#37Sorry for off-topic, does anyone know why Google phone calling (Voice / Hangouts) still doesn't work with WebRTC and requires native plugin? And are there any other services for making phone calls which actually work with WebRTC?
They use nonstandard APIs, and send data over the network in a way incompatible with WebRTC. This post is a bit old at this point but afaik the situation hasn't changed: https://webrtchacks.com/hangout-analysis-philipp-hancke/
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#38Sorry for off-topic, does anyone know why Google phone calling (Voice / Hangouts) still doesn't work with WebRTC and requires native plugin? And are there any other services for making phone calls which actually work with WebRTC?
They use nonstandard APIs, and send data over the network in a way incompatible with WebRTC. This post is a bit old at this point but afaik the situation hasn't changed: https://webrtchacks.com/hangout-analysis-philipp-hancke/
Thanks! What a mess. No wonder it's not working for me - I'm using Firefox. Somehow I doubt Google are interested in fixing this.
Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#39Re: Show HN: Peer-to-peer secure file transfer using WebRTC
#40There's also http://sharedrop.io , which was featured on HN a couple years ago and also uses WebRTC. Source: https://github.com/cowbell/sharedrop Discussion: https://news.ycombinator.com/item?id=7468328
Yet another is instant.io