Live data from Hacker News

Magic-Wormhole – Get things from one computer to another, safely

github.com

151–160 of 192 posts

Re: Magic-Wormhole – Get things from one computer to another, safely

#152
post #83

Earlier quoted context omitted.

Instead you get to pip install. But pip isn't installed. easy-install pip? What's easy-install - it's not there? (brew|yum|apt-get) disttools. Forget this... download get_pip.py, run python get_pip.py... Some error about libsodium now? Where do I get gcc for Windows 10 again? Python's greatest weakness is its packaging and distribution, and this project makes no effort to make it simple.

On the mac, you can: brew install magic-wormhole [1] And that covers 90% of the people that care. Granted I think you're right that software packaging and distribution is still generally broken in 2017, but that's a problem across the board. It's a problem with java, node.js, python, etc. [1] https://github.com/warner/magic-wormhole

And that covers 90% of the people that care

Disagree. I don't know a single non-programmer with brew installed on their Mac, and non-programmers make up 90% of the people who have the most trouble copying files between two computers.

Re: Magic-Wormhole – Get things from one computer to another, safely

#153
post #74
post #60

> Copying files with ssh/scp is fine, but requires previous arrangements and an account on the target machine, and how do you bootstrap the account?~ Assuming that you have openssh and rssh installed, you bootstrap like this: useradd -m -g users -s /usr/bin/rssh tmp passwd tmp edit /etc/rssh.conf and uncomment allowscp Share the password with the party you want to exchange data with. Make sure your ports are open. Se…

Okay. Step 1. Open ports on your router. It's your job to figure out which ports those may be. Step 2. Redirect said ports to the box in question, hopefully you'll know the ip address that was assigned by your home router's DHCP Step 3. Make sure rssh is installed. Step 4. If rssh is not installed, please simply follow the simple instructions to get it installed for your system. Step 4a. If it's a mac, use brew. Type…

You forgot "Step 4a.1" Go to brew.sh and follow the instructions to install brew.

Re: Magic-Wormhole – Get things from one computer to another, safely

#155
Interesting to see the various approaches. I've been using a pair of simple scripts myself for ages:

https://github.com/pflanze/chj-bin/blob/master/netoffer https://github.com/pflanze/chj-bin/blob/master/netfetch

(they use a few other scripts from the same repo) used like follows (only practical when being able to copy-paste, my use case is to copy things between servers without needing ssh authentication between them, but having open ssh sessions into both from the same desktop/laptop):

    chris@a:/tmp/chris$ echo Hello > World
    chris@a:/tmp/chris$ netoffer World
    --Run:--
    echo jxqtrb7xfq2e4dqy3uitc7986ydj56w59iqu84b | netfetch 78.47.51.206 15123

    chris@b:/tmp/chris$ echo jxqtrb7xfq2e4dqy3uitc7986ydj56w59iqu84b | netfetch 78.47.51.206 15123
    chris@b:/tmp/chris$ cat World 
    Hello
(Uses gpg symmetric encryption underneath.)

Re: Magic-Wormhole – Get things from one computer to another, safely

#156
post #107

Earlier quoted context omitted.

Why would I use magic worm-hole instead of Syncthing or Signal? They are both user-friendly and easy to install for the person I want to send the file to. The only shortcomings I can imagine: _AFAIR Signal has a size limit on the file you can send _you need a phone number and a smartphone to use Signal _The Synching key you have to share is complicated, but sending it via email and making sure you add the hosts quick…

Signal and Syncthing are great. magic-wormhole is more about setting up that initial connection: when two humans know each other, but their computers haven't met yet (i.e. know each others pubkeys). In Signal, the security of the initial message exchange depends upon the phone network (did somebody spoof caller-id to claim Alice's phone number?) and the Signal servers (did they report the correct key for Alice's phon…

Thanks a lot for the reply! Indeed I was thinking that the main use case that would make sense is the integration of your tool in other more complicated protocols, as a simple first step. As you mentioned, the Syncthing "device id" is 56 characters long that are pseudo-random and thus nigh impossible to remember. Having magic-wormhole as a first step in the handshake would make everything easier.

P.S.: some have mentioned that using apt to install dependencies and then pip to install Magic-Wormhole itself is complicated. You should probably replace these instructions for Debian by "sudo apt install magic-wormhole", as it is included in Debian as of Stretch (stable). It should be the recommended option anyway.

Re: Magic-Wormhole – Get things from one computer to another, safely

#158
post #60

> Copying files with ssh/scp is fine, but requires previous arrangements and an account on the target machine, and how do you bootstrap the account?~ Assuming that you have openssh and rssh installed, you bootstrap like this: useradd -m -g users -s /usr/bin/rssh tmp passwd tmp edit /etc/rssh.conf and uncomment allowscp Share the password with the party you want to exchange data with. Make sure your ports are open. Se…

You can use ssh/scp in pure Python (e.g., StaSh on Pythonista for iOS provides scp/ssh commands).

Re: Magic-Wormhole – Get things from one computer to another, safely

#159

Earlier quoted context omitted.

I'm not gonna argue against that. Using pip-install certainly limits our current audience to people who are comfortable with python packaging tools, which basically means python developers. I'm hoping to get beyond that, once I get the protocol and feature set stabilized. Using something like PyInstaller or py2app to get a single-file executable will be the first step. Porting it to other languages (I've started on S…

A stand alone static binary that does not depend on system libraries. Specifically, one that 'just works' on windows, and doesn't require that you open powershell and need to change into an obscure directory to use it, or have the binary sit in a folder full of DLLs to run. In fact, ideally one you don't have to even type anything in; for example, if you can just say; grab this one file from some safe known url (eg.…

FWIW, that's what the Go tools produce by default.

Re: Magic-Wormhole – Get things from one computer to another, safely

#160
Great collection of tools here. I'm adding here my own approach, aimed at getting around proxies/firewalls: the files are encrypted and sent in the body of a HTTP request. The receiving end is a simple nodejs http server that can be started on the fly.

https://github.com/mihaifm/getransfer

Post reply on HN