Show HN: YouTransfer – Self-hosted file sharing

Post by scrollaway » Mon, Oct 05, 2015, 11:05 PM UTC

hobs wrote: post #67

scrollaway wrote: post #59

Earlier quoted context omitted.

There's a lot of things that can track presence around the web and gravatar's not one of them. Iff you decide to implement gravatar without mirroring their images, avatars are indeed loaded on their first query (and not subsequent ones) and, god knows what they're doing with that information ohgod . They certainly can't "track my presence around the web", though - no js means no fingerprinting, no tracking cookie, no…

I think we disagree on one basic topic, I dont want an easily distinguishable identity to track across the internet. I would rather external actors (say gravatar does nothing wrong) not be able to identify which email address I use on a site they do not own, and not be able to track my user signups by something that might be public information, which generally a site does not advertise. It just feels wrong.

Post by breakingcups » Tue, Oct 06, 2015, 11:58 AM UTC

daave wrote: post #62

rbolte wrote: post #2

YouTransfer is a simple but elegant self-hosted file transfer & sharing solution. It is an alternative to paid services like Dropbox and WeTransfer by offering similar features but without limitations, price plans and a lengthy privacy policy. You remain in control of your files. Created to be installed behind the firewall on private servers, YouTransfer aims to empower organisations and individuals that wish to comb…

Sounds fairly similar to bradfitz's Camlistore ( https://camlistore.org/ ). If you're familiar with that project, could you comment on the main differences in YouTransfer?

Post by dchest » Wed, Oct 07, 2015, 6:32 AM UTC

teddyh wrote: post #68

dutchbrit wrote: post #28

Earlier quoted context omitted.

I'd use a uuid

RFC 4122¹: 6. Security Considerations Do not assume that UUIDs are hard to guess; they should not be used as security capabilities (identifiers whose mere possession grants access), for example. A predictable random number source will exacerbate the situation. Do not assume that it is easy to determine if a UUID has been slightly transposed in order to redirect a reference to another object. Humans do not have the ab…

Post by yAnonymous » Fri, Oct 09, 2015, 11:14 AM UTC

JupiterMoon wrote: post #72

yAnonymous wrote: post #27

Earlier quoted context omitted.

Don't worry, it's not critical or anything. JupiterMoon just seems to be a bit of an entitled *ss.

I thought that HN policy was that posts should keep a civil tone.