Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox Send: Private, Encrypted File Sharing

send.firefox.com

Post reply on HN
Print view View original

31–40 of 285 posts

Re: Firefox Send: Private, Encrypted File Sharing

#31

Post by icebraining »

HalfwayToDice wrote: post #7

Mozilla have donated $100,000 to the radical left-extremists RiseUp (who on their website state they want a worldwide revolution against capitalism). By doing so, Firefox have made themselves a political organisation. So... my question is this. Is this Send feature safe to use for people who have different political opinions?

Mozilla was always and primarily a political organization.

To answer your question, while I'm not a Mozilla employee or developer, I'd say yes since the contents are encrypted end-to-end, so they can't actually tell the user has different political opinions.

Re: Firefox Send: Private, Encrypted File Sharing

#32

Post by justusthane »

sarabande wrote: post #28

I'm curious -- Mozilla says it can't decrypt the file on their side: Mozilla does not have the ability to access the content of your encrypted file [...] https://testpilot.firefox.com/experiments/send How is the receiver able to decrypt the file -- i.e. what is the decryption key if not the URL slug, which presumably Mozilla has as well?

I would guess public key cryptography at the client-side.

Re: Firefox Send: Private, Encrypted File Sharing

#33

Post by KwanEsq »

sarabande wrote: post #28

I'm curious -- Mozilla says it can't decrypt the file on their side: Mozilla does not have the ability to access the content of your encrypted file [...] https://testpilot.firefox.com/experiments/send How is the receiver able to decrypt the file -- i.e. what is the decryption key if not the URL slug, which presumably Mozilla has as well?

The key is the hash, which isn't sent over the wire when loading a page. Now granted it's accessible via location.hash in the client, but one has to trust Mozilla not to do that.

Re: Firefox Send: Private, Encrypted File Sharing

#34

Post by manveru »

HalfwayToDice wrote: post #12
vesinisa wrote: post #8

Do they share my files and "anonymized" upload history with a third party (edit: was "advertising company") for this service as well?

They share it with RiseUp, the radical-left organisation they fund. Don't worry my friend, your files are safe with them.

What you're referring to is this: https://blog.mozilla.org/blog/2017/10/03/mozilla-awards-half...

RiseUp seems to be an organization providing VPNs, Email-service, Jabber, and general security advice.

Citing from https://riseup.net/en/about-us (at least what you seem to be worried about):

> The Riseup Collective is an autonomous body based in Seattle with collective members world wide. Our purpose is to aid in the creation of a free society, a world with freedom from want and freedom of expression, a world without oppression or hierarchy, where power is shared equally. We do this by providing communication and computer resources to allies engaged in struggles against capitalism and other forms of oppression.

I'm interested what exactly they do wrong in your eyes to deserve your passion?

Re: Firefox Send: Private, Encrypted File Sharing

#35

Post by soapdog »

metahost wrote: post #10

So, where is the money coming from ? Who's the product here ?

When thinking about a Mozilla offering, it is healthy to think beyond "money and product" as this type of analysis will usually leave you with a conclusion of "this doesn't make business sense".

Mozilla is in the game of keeping the internet healthy. Part of it involves products, such as Firefox and its quest to recover userbase. Parts of it involves money, such as MOSS awarding grants or prizes for FOSS stuff they use and see value.

But most of Mozilla actions can be thought on "how close they get Mozilla to achieve its mission as stated in the Mozilla Manifesto[1]". In the case of Firefox Send, it enables less friction sending files and protects the user privacy, so it IMHO advances item #4 of the manifesto: "Individuals’ security and privacy on the Internet are fundamental and must not be treated as optional." It also serves as a nice branding reminder for people, as it works with other browsers, makes people using some other solution remember Firefox...

[1]: https://www.mozilla.org/en-US/about/manifesto/

Re: Firefox Send: Private, Encrypted File Sharing

#36

Post by sarabande »

KwanEsq wrote: post #33
sarabande wrote: post #28

I'm curious -- Mozilla says it can't decrypt the file on their side: Mozilla does not have the ability to access the content of your encrypted file [...] https://testpilot.firefox.com/experiments/send How is the receiver able to decrypt the file -- i.e. what is the decryption key if not the URL slug, which presumably Mozilla has as well?

The key is the hash, which isn't sent over the wire when loading a page. Now granted it's accessible via location.hash in the client, but one has to trust Mozilla not to do that.

Thanks. I was just looking at the screenshots and didn't seen any hashes, but when I tried it out and copied to the clipboard I saw the form "https://send.firefox.com/download/xxxxx/#yyyyy".

Re: Firefox Send: Private, Encrypted File Sharing

#37

Post by icebraining »

HalfwayToDice wrote: post #27
mtmail wrote: post #21

Earlier quoted context omitted.

In another comment you say the donated money to that organisation. Why do you think user data would be shared with them?

Because by donating to RiseUp, Mozilla have made themselves a political organisation, and political organisations do things for political ends, not privacy ends.

Defending privacy rights is a political goal.

Re: Firefox Send: Private, Encrypted File Sharing

#38

Post by dang »

HalfwayToDice wrote: post #7

Mozilla have donated $100,000 to the radical left-extremists RiseUp (who on their website state they want a worldwide revolution against capitalism). By doing so, Firefox have made themselves a political organisation. So... my question is this. Is this Send feature safe to use for people who have different political opinions?

Ok, since you've ignored our requests to stop breaking the site guidelines, we've banned this account. If you don't want to be banned on HN, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

Re: Firefox Send: Private, Encrypted File Sharing

#39

Post by padenot »

AndrewDucker wrote: post #25
padenot wrote: post #23

Earlier quoted context omitted.

WebRTC solves all the issues you're mentioning, and is available in Chrome and Firefox (in some for in Edge, and soon in Safari). Three examples of this, implemented and working: - https://www.sharedrop.io/ - https://www.justbeamit.com/ - https://file.pizza/

So, three systems which all require a central service?

Those services are for the initial peer discovery and SDP exchange, which can be done by other means (using any other side-channel).

Ongoing work is happening, for example by the webtorrent folks, to remove this constraint.

Re: Firefox Send: Private, Encrypted File Sharing

#40

Post by thinkMOAR »

AndrewDucker wrote: post #17
thinkMOAR wrote: post #11

Just my experience/test: it takes longer to upload the file to mozilla then it would have sending directly to DSL of a friend.. edit- Download tested now too, not bad, though nothing to write home about.

What software did you use to create a direct connection to your friend?

https
Post reply on HN