Live data from Hacker News

Show HN: NoFile.io – A simple file storage site with lots of perks

nofile.io

151–160 of 193 posts

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#151

I have some thoughts for you as someone who's done this before. I used to run a file hosting site called MediaCrush with a buddy of mine. It was moderately successful, but we ended up shutting it down. I later switched to a file host called pomf.se, which eventually was shut down as well. I wrote a blog post that sums up my thoughts on public file hosting: On the profitability of image hosting websites - https://drew…

I think that in the end, the way to really address these issues is with WebTorrent or a similar service. When you're online, you should be: 1. contributing your own bandwidth to the images you upload 2. contribute your own bandwidth to the images you look at. If you look at an image, maybe you should be required to seed it twice over. If you upload your image, maybe you have to seed it at least 10 times for it to sta…

I liked everything you said.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#152

Check your contact area. I notified you of an XSS issue.

Thanks for reporting the issue. The XSS was related to the filenames.

Although most operating systems don't allow users to upload files containing greater-than/less-than symbols, it's possible to add them by tampering the requests and changing the filename.

From there you could change the filename to "alert("xss")" and run an XSS. This has now been patched by encoding the characters.

Once we're a bit more stable we'll be sure to release a bug bounty program.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#153
post #142

I have some thoughts for you as someone who's done this before. I used to run a file hosting site called MediaCrush with a buddy of mine. It was moderately successful, but we ended up shutting it down. I later switched to a file host called pomf.se, which eventually was shut down as well. I wrote a blog post that sums up my thoughts on public file hosting: On the profitability of image hosting websites - https://drew…

This was an interesting read and we will do our best to avoid this fate. Right now we're focusing on patching bugs and providing a stable service, but in the future a premium service will be created which targets heavy users. PS You can change the status of the last active host in your list (Minus.com) to shut down as well.

I've been running a public file hosting site for 11 years, I've always treated it as a side project to use for playing with technology.

The primary reason it's still alive today is out of obligation to the URLs (2 million or so) that call it home. If you don't already find this fun and don't feel the same obligation, then you'll join the thousands of others littering the web with 404s.

Also, be aware that people will upload bad shit, and you can look forward to phone calls from the FBI and others.

The site is open source, maybe you'll find it useful: https://github.com/kudos/hostr

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#154

Just in the way of feedback (and I might be really out of the loop/not your target market!) but here was my brain-in-action after I clicked on the link from HN: "Hmm, this looks pretty... what is it for? It has a huge area that says "click here or drag and drop to start uploading"... but uploading what? And why? Let's scroll down and read the 'about'!: "Fast", "Compatible", "Encryption"... um... ok but WHY?! Is it pe…

I guess it might be a cultural thing, but it seemed pretty obvious to me that it's something in the style of Mediafire/RapidShare/Hostr, before they all went to crap.

Err, Hostr founder here. Not sure if I'm happy that it was mentioned, or sad that it went to crap :P

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#155
post #126
post #91

I'm operating DropJar.om and I can say it's a big headache. For some reason I keep getting DMCA notices from all kinds of lawyers and the occasional take down notice from police when ISIS videos are uploaded there. No income and tons of complaints. http://dropjar.com

"For some reason I keep getting DMCA notices from all kinds of lawyers and the occasional take down notice from police when ISIS videos are uploaded there. No income and tons of complaints." Everyone I have shown Oh By[1] to has immediately wondered "Oh, could you upload an image instead of text ?". The answer is no and will always be no, for these reasons. It's evident right here on HN - limiting people to text weed…

Pastie sites experience similar problems. Personal details being released, messages from terrorist networks and mirrors to various disallowed content.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#156

From looking at "upload.js" you are using AES in counter mode. var aesCtr = new aesjs.ModeOfOperation.ctr(encryptionKeyBytes, new aesjs.Counter(-1)); Please use https://github.com/bitwiseshiftleft/sjcl which supports a very high-level sjcl.encrypt(passphrase, plaintext) API and has been audited, instead of using crypto primitives. One specific issue is you are only encrypting, not authenticating, so if the servers ar…

AES-CTR is indeed what's currently being used. SJCL is definitely an option and we will compare the two to see if there are any large advantages to switching over, thank you for your suggestion.

The reason to why the content isn't being authenticated is due to memory issues in the browser, but we're close to adding a solution for that as well.

Overall the encryption feature is currently in BETA and there will be large amount of improvements before it's finalized.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#157
post #75
post #69

Earlier quoted context omitted.

The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads. "Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen." Another user pointed this out and a toggle for the animations will be added to the settings so that you can turn them off. 'Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading…

> The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads. This is a very very naive view of the situation. You're allowing user A to upload content which can be downloaded by an infinite(?) number of other users they give the link to. Therefore it will be used for piracy. And worse. Edit: actually, a free unmonetized file hosting site? In this day and…

This guy gets it. But hey if the NSA wants to provide free hosting that is private and secure -- or apparently so until the drones level your neighborhood -- that's fine.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#158
Does anyone remember the name of the file hosting platform that had a music player built into it? It was so goddamn elegant and easy to use, but was bought out by Facebook. It was a huge staple for me all throughout high school for my band, it's kind of shame that there was no way it could have been viable.

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#159
post #31

Earlier quoted context omitted.

> compete with older (& less crappy) services like mediafire? Did you mean to infer that MediaFire was less crappy than this showcased one? Or crappier than this one? Your follow up sentence would indicate the latter.

I think he/she meant the less crappy among the older services.

I meant less crappy among the usual "file hosting sites". Mediafire for one is a pretty good service with 10GB for free but some times has too many annoying ads

OP's site looks great!

Re: Show HN: NoFile.io – A simple file storage site with lots of perks

#160

Does anyone remember the name of the file hosting platform that had a music player built into it? It was so goddamn elegant and easy to use, but was bought out by Facebook. It was a huge staple for me all throughout high school for my band, it's kind of shame that there was no way it could have been viable.

drop.io?
Post reply on HN