Live data from Hacker News

Show HN: CryptSend.io – Share encrypted files with randomly generated links

cryptsend.io

31–40 of 45 posts

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#31

Is there any advantage to this over https://send.firefox.com/ ?

It says "Big Files" but I don't see an explicit size. Whereas send.firefox.com is 1GiB. Self hosted I imagine you're only limited by filesystem max file size.

One thing I like about send.firefox.com is it's a one time download, and then the URL is denied to have ever existed. CryptSend sounds like you could share the URL with multiple destinations; multiple downloads.

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#32
Hello HN!

Cryptsend was created as a result of my company having to share large amounts of medical data with our clients. We couldn't find an easy and secure solution, so we sat down and created cryptsend. Our codebase is currently in alpha stages so any audits/improvements/security vulns you find would be really appreciated!

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#33
post #14
post #10

Earlier quoted context omitted.

You can indeed self-host Firefox Send: https://github.com/mozilla/send

Or use the docker container directly: $ docker pull mozilla/send https://github.com/mozilla/send/blob/master/docs/docker.md

Thanks. Do you know of other self-hosted Mozilla products with ready-made containers?

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#34
post #24

Earlier quoted context omitted.

> This sounds like a terrific thing to host on a vps. Just make sure your provider has backup and redundancy in place for the data storage. Imagine waking up to total loss of data for all of your customers. Ouch!

Recently I have become a fan of the Hetzner Cloud: https://www.hetzner.com/cloud?country=us I don't know how competitive their prices are, but I like their easy to use interface which is complemented by and also easy to use API. Adding a 7-day automatic backup history is just a matter of about two clicks, and the additional costs seem reasonable to me.

Nightly backups still mean you can lose up to ~24 hours of data.

This is in stark contrast to, for example, AWS S3. From the FAQ [0]:

> Amazon S3 [is] designed to provide 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000,000 objects with Amazon S3, you can on average expect to incur a loss of a single object once every 10,000 years.

> Amazon S3 ... storage classes redundantly store your objects on multiple devices across a minimum of three Availability Zones (AZs) in an Amazon S3 Region before returning SUCCESS.

In AWS parlance, an AZ is a physical data center, and they're built far enough apart so a fire, flood or tornado will not affect all of them.

There's a reason S3 (and similar) cost so much more than "hard drive attached to a server" storage. If you don't need the durability than of course it is overpriced -- but on the other hand, if you try to provide that level of durability yourself you'll quickly see it's a bargain.

[0] https://aws.amazon.com/s3/faqs/#Durability_.26_Data_Protecti...

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#35
post #31

Is there any advantage to this over https://send.firefox.com/ ?

It says "Big Files" but I don't see an explicit size. Whereas send.firefox.com is 1GiB. Self hosted I imagine you're only limited by filesystem max file size. One thing I like about send.firefox.com is it's a one time download, and then the URL is denied to have ever existed. CryptSend sounds like you could share the URL with multiple destinations; multiple downloads.

Firefox Send doesn't have an explicit limit either:

> For the most reliable operation, it’s best to keep your file under 1GB

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#36
post #3

Hi. Thank you for your work, this will be useful. However, the `Get folder link` does not work. Is it deactivated for now ?

Hmm, it's working for me on Chrome. What browser are you using? Do you see any javascript errors in your dev tools console (provided you know what that is)?

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#37
post #18

Earlier quoted context omitted.

There are JavaScript files in the GitHub repository, so I'm going to assume they mean third-party dependencies, but some more clarification would be nice. There is a file called cipher.js with encrypt and decrypt functions https://github.com/countable-web/cryptsend/blob/develop/publ...

Yea, and I just noticed it downloading a bunch when visiting the page. So it's probably safe to assume they mean 3rd Party.

Confirmed. The intent is anyone can audit our whole codebase in one GitHub repo for vulnerabilities and not scripts spread across many CDNS and projects which may change over time.

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#38
post #20

So one thing, it mentions that it is JS dependence free. How are you encrypting the files client side then? If you are encrypting the files server side, then that is NOT E2E encryption.

I wonder what JS dependencies FTP has...

Good catch, thanks! We'll fix that.

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#39

I've recently analysed pricing of various storage providers when thinking of building a side project, and I was surprised at how costly the services were. S3, Drive, Dropbox, Spaces, B2, Box, several Object Storage solutions. Some cases storage was cheap, but the transfer was costly. Everything seemed costly for the simple use case of providing an end user 10GB monthly upload + ~50GB bandwidth at low cost. A vps with…

I previously considered the idea of creating a cloud storage solution where customers are only billed for what they use. This was spurred by looking at dropbox's $10/mo plan for 1TB of storage. But I decided against it. Storage is already free for the average user. 15GB with Google is enough. If you want more, the option is there and not that expensive. $2/mo for 100GB. I see no reason why a consumer would switch to…

Is https://cloudbuddy.cloud something like what you considered creating?

Re: Show HN: CryptSend.io – Share encrypted files with randomly generated links

#40
post #30

Earlier quoted context omitted.

Yeah, the best solution I've found was Sharelock[0], but I couldn't for the life of me self-host the app without weird errors cropping up. It's also not free if you want more than one social sign-in via Auth0. [0]: https://sharelock.io/about

it require login with fb, google, twitter or MS. this does not solve the problem with secure key exchange

Do you not trust the OAuth protocol?
Post reply on HN