This really feels like something the old Opera (not the Chromium version) would have done back in the day.
Firefox Send: Free encrypted file transfer service
241–250 of 542 posts
Re: Firefox Send: Free encrypted file transfer service
#242Earlier quoted context omitted.
The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....
That's cool, but it's still the same party providing both the storage mechanism, and the JS that encrypts the content on the client-side. You have to trust them that they are not "peeking" at the keys you are generating using their code in your browser.
But at least you only need to trust them now, and not every incarnation of them in the future =)
Re: Firefox Send: Free encrypted file transfer service
#243Earlier quoted context omitted.
Syncthing is in dire need of an iOS client. There's an unofficial one, but it was unmaintained and didn't sync with recent versions of Syncthing last I checked.
Is it a technical limitation, insufficient developers, or a license issue? IIRC GPL doesn't work with the store.
License is MLP 2.0.
Re: Firefox Send: Free encrypted file transfer service
#244I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?
I recently switched back to iOS after years on Android, and on this point I've been very impressed with Airdrop. Dead simple UI, very quick transfer speeds, uses WiFi or Bluetooth as available. It's just a shame that it's limited to Apple devices.
Just to be clear, Wifi network doesn't need to be available. If I remember correctly, initial connection setup is done through Bluetooth, then one device invisibly sets up an adhoc wifi connection to the other to transfer. The two devices don't have to be attached to a Wifi network. Quite spiffy.
Re: Firefox Send: Free encrypted file transfer service
#245Earlier quoted context omitted.
The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....
Thanks for the info. Let me see if I understand this correctly. Browsers don't send the anchor tag (ie: with GET requests). FF Send takes advantage of this by using the anchor tag to store the key for decryption. That is kinda novel. You still need to trust the upload client to not leak the key, but I see that you've written a CLI version. Interesting! Thanks for the response.
[deleted]
Re: Firefox Send: Free encrypted file transfer service
#246Earlier quoted context omitted.
The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....
That's cool, but it's still the same party providing both the storage mechanism, and the JS that encrypts the content on the client-side. You have to trust them that they are not "peeking" at the keys you are generating using their code in your browser.
This is where WebCrypto in browser extensions begins to get interesting, I think.
Re: Firefox Send: Free encrypted file transfer service
#247Earlier quoted context omitted.
I'm not going to debate you in three places at once, that's just obnoxious and clutters the thread. Ultimately this is an argument about the precise semantics of "removable storage". I don't regard an MTP device as "removable storage" - it's another computer that one speaks to using a special protocol, with severe limitations. So is an iPhone - with special, protocol-speaking software, you can certainly put arbitrary…
> Ultimately this is an argument about the precise semantics of "removable storage". I don't regard an MTP device as "removable storage" This is absurd. You don't get to tell someone, "you're wrong", then later when it's pointed out that the original assertion was actually true, then say, "oh, I meant that you're wrong as long as we're using my version of the word, the one that's very different from the one everyone…
Well, I'm sorry to have upset you, and I hope that the precise technical situation is now clear to anyone reading this thread.
Re: Firefox Send: Free encrypted file transfer service
#248This project sucks. Another bullshit firefox.com product that reinvent something existing and well established (eg. Jirafeau or Lufi). I hate so much what Mozilla become.
Re: Firefox Send: Free encrypted file transfer service
#249Is the source available for this? A self-hosted version of this would be nice... (Update: Yep, just found it: https://github.com/mozilla/send , just before the comment below was posted :))
Anybody have a nice docker version to run this at home?
It looks like Mozilla publishes a container and has instructions:
Re: Firefox Send: Free encrypted file transfer service
#250Wow, this is really awesome and really cool! First I've heard of it. Just tested it and it worked great. Is it possible to audit the tech? Is Firefox send open source?