Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: NoFile.io – A simple file storage site with lots of perks

nofile.io

Post reply on HN
Print view View original

71–80 of 193 posts

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#71

Post by orless »

NoFile wrote: post #69
orless wrote: post #65

I liked the service but I'm afraid it will end up like all the 1-click-hosters: as a storage for pirated content, blacklisted in most corporate networks. Few comments: Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen. Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading" makes me think it's some kind of a link. Any reason to underline it? If I uploa…

The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads. "Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen." Another user pointed this out and a toggle for the animations will be added to the settings so that you can turn them off. 'Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading…

Settings to toggle animated background? Seriously?

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#72

Post by NoFile »

megawatthours wrote: post #67
NoFile wrote: post #58

Earlier quoted context omitted.

The key is the truncated hash of the file for the purpose of file deduplication. However, it will not impose any security risks as the person who wishes to decrypt it would have to know the hash of the file which requires them to already know the contents of the file making it useless. The password encryption is indeed server-side, but it is mainly there to protect the file against anyone who somehow finds/guesses th…

> would have to know the hash of the file which requires them to already know the contents of the file That is incorrect. Knowing the hash does not mean you know the contents of the file. You should generate encryption keys randomly, preferably using a secure random method such as that shipped with SJCL, rather than JavaScript's random API.

Unfortunately it's required for the file deduplication. Although it slightly degrades the security it's not serious enough to impose any security risks as the attacker would already have to know the hash of the file which almost always requires them to know the contents of the files.

Random strings and numbers are also securely generated through a CSRPNG with window.crypto.getRandomValues().

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#73

Post by ikeboy »

NoFile wrote: post #69
orless wrote: post #65

I liked the service but I'm afraid it will end up like all the 1-click-hosters: as a storage for pirated content, blacklisted in most corporate networks. Few comments: Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen. Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading" makes me think it's some kind of a link. Any reason to underline it? If I uploa…

The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads. "Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen." Another user pointed this out and a toggle for the animations will be added to the settings so that you can turn them off. 'Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading…

There are plenty of sites not offering rewards that get used for piracy. There are other ways to monetize, and many pirates don't do it for money anyway. Don't expect that to keep pirates away.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#75

Post by pjc50 »

NoFile wrote: post #69
orless wrote: post #65

I liked the service but I'm afraid it will end up like all the 1-click-hosters: as a storage for pirated content, blacklisted in most corporate networks. Few comments: Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen. Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading" makes me think it's some kind of a link. Any reason to underline it? If I uploa…

The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads. "Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen." Another user pointed this out and a toggle for the animations will be added to the settings so that you can turn them off. 'Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading…

> The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads.

This is a very very naive view of the situation. You're allowing user A to upload content which can be downloaded by an infinite(?) number of other users they give the link to. Therefore it will be used for piracy. And worse.

Edit: actually, a free unmonetized file hosting site? In this day and age? Behind whoisguard and cloudflare? Ideal law enforcement honeytrap tbh.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#77

Post by resurge »

NoFile wrote: post #2

"It's ridiculously difficult to share a single file online without a bunch of hassle. Most sites either riddle their pages with ads so you have to guess where the correct download button is and usually restrict useful features to their premium users. All those useful features have been added to NoFile and made available for anyone who wants to use it - all free from ads, registrations, payments and it respects your p…

> Securely view your upload history without having to create an account (history is stored in your browser's local storage)

How can I view my history? I think I've clicked every link available but I can't find this at all.

I do see some data in my localstorage. I'm not expected to fish it out myself from there am i..?

> You can set an expiry time by pressing the "Options"-button that's next to your uploaded file

Same for this. There is no such option to be found. Screenshot: https://www.NoFile.io/f/FHA0M03bmm0#057e7d69b089e719

Also, I tried downloading my own screenshot but nothing actually happens. (The loader does pop up) Downloading & preview does work for an unencrypted file.

Firefox 51.0.1 (64-bit)

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#79

Post by jamescostian »

megawatthours wrote: post #64

From looking at "upload.js" you are using AES in counter mode. var aesCtr = new aesjs.ModeOfOperation.ctr(encryptionKeyBytes, new aesjs.Counter(-1)); Please use https://github.com/bitwiseshiftleft/sjcl which supports a very high-level sjcl.encrypt(passphrase, plaintext) API and has been audited, instead of using crypto primitives. One specific issue is you are only encrypting, not authenticating, so if the servers ar…

Re authentication: the site uses HTTPS, and doesn't HTTPS provide authentication that you are connected to the right server, receiving only data from that server (assuming the server and it's contents aren't compromised)? Or are you referring to another type of authentication
Post reply on HN