Live data from Hacker News

Firefox Send: Private, Encrypted File Sharing

send.firefox.com

61–70 of 285 posts

Re: Firefox Send: Private, Encrypted File Sharing

#61
post #35

So, where is the money coming from ? Who's the product here ?

When thinking about a Mozilla offering, it is healthy to think beyond "money and product" as this type of analysis will usually leave you with a conclusion of "this doesn't make business sense". Mozilla is in the game of keeping the internet healthy. Part of it involves products, such as Firefox and its quest to recover userbase. Parts of it involves money, such as MOSS awarding grants or prizes for FOSS stuff they u…

Not sure how true that is anymore. They seem to by trying hard to squander their reputation. First their MITI officially signaled they now consider themselves a political force, then the whole Cliqz debacle following shortly after showed their willingness to sacrifice their principles.

Re: Firefox Send: Private, Encrypted File Sharing

#62

Earlier quoted context omitted.

Key is in the hash. Check 0bin.net. We use the same trick to encrypt the pastebin content. The sources are available so you can see the gist of it. It's a very simple code.

Curious why in your FAQ at 0bin.net you say: But JavaScript encryption is not secure! Is there something inherently insecure about the JS crypto library you're using ( https://github.com/bitwiseshiftleft/sjcl )?

I'd imagine it's similar to the arguments at https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

Re: Firefox Send: Private, Encrypted File Sharing

#63
post #3

This has been out for a while. I use it occasionally, but a single download is a narrow use case.

I've used this once or twice a week since it was announced a month or two back here on HN, and love it. It's my go-to way to send any file that's > 10MB.

I remember doing some mortgage applications last year and being frustrated that the built-in Zip encryption in Windows is weak/broken, and begging them to have a secure file upload feature.

With this, it's all set - as long as the recipient picks it up within 24 hours of course. 48 would be better but I'm not quibbling, I can always resend and if 24 is what they need to keep the service up, 24 it is.

This is simple and awesome and I appreciate everyone who worked on it.

Re: Firefox Send: Private, Encrypted File Sharing

#64

It really is a shame that there still isn't a easy way (A person whose computer knowledge extends to using facebook), that I know of, of sending arbitrarily large files that isn't tethered to a specific cloud service and is also reliable (can tolerate connection dropping). It seems that bitorrent protocols are pretty close, but I don't think there is a seamless client that allows for "magical" point to point transact…

Local-wise you can use Nitroshare. I use it all the time to quickly send files between my computers.

https://nitroshare.net/

Re: Firefox Send: Private, Encrypted File Sharing

#65

Earlier quoted context omitted.

Key is in the hash. Check 0bin.net. We use the same trick to encrypt the pastebin content. The sources are available so you can see the gist of it. It's a very simple code.

Curious why in your FAQ at 0bin.net you say: But JavaScript encryption is not secure! Is there something inherently insecure about the JS crypto library you're using ( https://github.com/bitwiseshiftleft/sjcl )?

"Javascript Cryptography Considered Harmful" has been posted on here and lays things out nicely, as e1ven mentions.

Here's the original discussion: https://news.ycombinator.com/item?id=2935220

Re: Firefox Send: Private, Encrypted File Sharing

#67

It really is a shame that there still isn't a easy way (A person whose computer knowledge extends to using facebook), that I know of, of sending arbitrarily large files that isn't tethered to a specific cloud service and is also reliable (can tolerate connection dropping). It seems that bitorrent protocols are pretty close, but I don't think there is a seamless client that allows for "magical" point to point transact…

Resilio Sync (formerly Bittorrent Sync) pretty much offers that. They use relays in case both peers cannot pierce NAT, but the relays only see ciphertext. They also have apps for Android and iOS, making transfers to mobile devices also possible. Since it is closed-source software, it's up to you to decide whether you trust the software.

SyncThing is a free software alternative, but I wouldn't say that it is usable (yet) for the average user.

Post reply on HN