Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

$ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

transfer.sh

Post reply on HN
Print view View original

101–110 of 125 posts

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#101

Post by kedean »

Fice wrote: post #92

Why depend on a centralized service when there are easy-to-use decentralized alternatives? $ ipfs add myfile.txt added QmeeLUVdiSTTKQqhWqsffYDtNvvvcTfJdotkNyi1KDEJtQ myfile.txt # Access via a public gateway $ curl https://ipfs.io/ipfs/QmeeLUVdiSTTKQqhWqsffYDtNvvvcTfJdotkNyi1KDEJtQ # or via a local node $ curl http://127.0.0.1:8080/ipfs/QmeeLUVdiSTTKQqhWqsffYDtNvvvcTfJdotkNyi1KDEJtQ

This isn't for long term storage, it's for ephemeral transfers between two well defined entities. Like if I, as developer A, need to give a large binary blob to another developer B. If we are not in close enough proximity for physical media transfer, something like this might be the next quickest option. There's no need to go through the work of distributed it through the ipfs network.

TLDR; different usecases.

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#103

Post by Depado »

developer2 wrote: post #91
Depado wrote: post #76

Haw. I made quite the same service, curl compliant and stuff except it encrypts the file on disk upon reception (creating an AES cipher, piping the file through it while receiving it) and sending back the id of the file and the key that allows decryption of said file. If anyone is interested there's plenty of documentation, even a client that allows to take screenshots and upload them on the fly. https://up.depado.eu…

Very cool, though I find it a little odd. If someone is going the extra mile to store the file encrypted, it stands to reason that trusting the service with the initial unencrypted byte stream is a no-go. The file being uploaded over HTTPS, and your assurance that the stream is piped directly through encryption, is of little consequence if you or an infiltrator to your server were to choose to be malicious. I underst…

Obviously it comes to personal judgment when people use my tools. I mean they could also do as described in transfer.sh, pipe first the data through gpg. The server accepts any kind of data as long as it doesn't overflow the current set size limit.

But indeed I do agree that I can't guarantee or even prove that I can't access the files on my server. That's why I offer a quick and simple way for people to setup this on their own machine, so they can have this lightweight server and use it as if it was mine just by modifying a line in the configuration file of the client (or changing the URL in the curl commands)

I'm glad you enjoyed the tool though :D

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#105

Post by codedokode »

chopete wrote: post #99
Xylakant wrote: post #58

Earlier quoted context omitted.

We're lucky that some people are fine with becoming an unwilling partner since without them no internet, no phone, no email, no snail mail, no roads, no electricity, no open source software, no nothing. It's a sad fact of life that pretty much every useful technology, service or piece of infrastructure will be used for illegal dealings of some kind.

False analogy. Creating a file upload service with no authentication or no resources to keep it safe is like installing a fully loaded AK 47 at an intersection and hoping people would just use it to learn how it works or use in an emergency to shoot at criminals passing that intersection. There are free file upload services and there are ways to upload from command line(1). [1] https://github.com/andreafabrizi/Dropbo…

You cannot compare bytes on a disk with a gun. People don't die from transferring data.

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#107

Post by yuubi »

pmarreck wrote: post #88
xorcist wrote: post #80

Earlier quoted context omitted.

The first cat does absolutely nothing in your example.

are you sure? how else would you pipe to GPG?

Just redirect gpg's input from the file?

    gpg ...
Its stdin will be the file instead of a pipe, but few programs care about the difference and fewer still in such a way that you'd prefer to use the pipe.

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#108

Post by tyre »

pmarreck wrote: post #87
parfe wrote: post #70

Earlier quoted context omitted.

https://www.microsoft.com/en-us/photodna Microsoft provides an API which identifies child expoilting images.

How can you even test such a service legally? This is a general problem with banning things instead of simply regulating them somehow. How would one scientifically study methamphetamine, for example, in a country where it is illegal to even possess it? Without arguing for or against CP, what if I wanted to look up evidence that use of CP leads to increase or decrease of actual child abuse, without setting off red fla…

MSFT provides a set of sample images[1], some of which return as if they matched. The sample images are not child pornography, generally pictures of celebrities (which is really strange.)

[1]: http://wbintcvsstorage.blob.core.windows.net/matchedimages/S...

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#109

Post by pmarreck »

tyre wrote: post #108
pmarreck wrote: post #87

Earlier quoted context omitted.

How can you even test such a service legally? This is a general problem with banning things instead of simply regulating them somehow. How would one scientifically study methamphetamine, for example, in a country where it is illegal to even possess it? Without arguing for or against CP, what if I wanted to look up evidence that use of CP leads to increase or decrease of actual child abuse, without setting off red fla…

MSFT provides a set of sample images[1], some of which return as if they matched. The sample images are not child pornography, generally pictures of celebrities (which is really strange.) [1]: http://wbintcvsstorage.blob.core.windows.net/matchedimages/S...

But wouldn't those matches count as classification errors?

Re: $ cat ~/myfile | curl -X PUT --upload-file “-” https://transfer.sh/myfile.txt

#110

Post by pmarreck »

jacquesm wrote: post #97
pmarreck wrote: post #87

Earlier quoted context omitted.

How can you even test such a service legally? This is a general problem with banning things instead of simply regulating them somehow. How would one scientifically study methamphetamine, for example, in a country where it is illegal to even possess it? Without arguing for or against CP, what if I wanted to look up evidence that use of CP leads to increase or decrease of actual child abuse, without setting off red fla…

> How can you even test such a service legally? It's actually quite well designed and questions such as these were definitely taken into account during the design phase. I came up with a similar scheme about 15 years ago (as a result of operating that file sharing service) and proposed to the local LE that we set up a service where a 'fingerprint' of an image could be tested against known bad images, and if an image…

So basically (probability of legal entity being a good actor) x (size of legal entity) must be >= some large number.

sigh, that's still less than ideal.

Post reply on HN