Firefox Send: Free encrypted file transfer service • Hacker News Board

Re: Firefox Send: Free encrypted file transfer service

#261

Post by simias » Tue, Mar 12, 2019, 3:51 PM UTC

NKCSS wrote: post #227

bjt2n3904 wrote: post #225

Earlier quoted context omitted.

Thanks for the info. Let me see if I understand this correctly. Browsers don't send the anchor tag (ie: with GET requests). FF Send takes advantage of this by using the anchor tag to store the key for decryption. That is kinda novel. You still need to trust the upload client to not leak the key, but I see that you've written a CLI version. Interesting! Thanks for the response.

It's not a new idea, the megaupload successor first did it as far as I can remember

Indeed, the website serves you the crypto code but it runs totally on the client so it's perfectly safe and could in no way be backdoored.

More seriously, did they do anything to fix this obvious design flaw? If they want to fish a key they can just serve you a modified JS file and retrieve the key. Unless of course you chose to audit the JS served every time you browse the website.

Re: Firefox Send: Free encrypted file transfer service

#262

Post by pwg » Tue, Mar 12, 2019, 3:51 PM UTC

mFixman wrote: post #12

I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?

To add to the options (for Android phones):

https://f-droid.org/en/packages/org.primftpd/

Re: Firefox Send: Free encrypted file transfer service

#263

Post by lmedinas » Tue, Mar 12, 2019, 3:54 PM UTC

a bit off topic but here it goes...

This is how i think Mozilla can capture more users back to Firefox. By providing "extra" services attached to the Mozilla and Firefox brand will make them a superior product to the end user. Sure it's hard to compete with Chrome but if you offer useful features and services integrated in your Browser i see that Mozilla actually has a chance to compete with Google for the browser space.

This is one of the "advantages", if you are a heavy Google user, of Chrome over the competition is that everything is attached to your Google account. Passwords, history, spellers, dictionaries, shortcuts, etc...

If Mozilla comes with Send, Notes, Password Manager all integrated in Firefox i see a good way to bring back some of the previous users that switched to Chrome.

Re: Firefox Send: Free encrypted file transfer service

#264

Post by svnpenn » Tue, Mar 12, 2019, 3:54 PM UTC

crusso wrote: post #253

[Deleting this post as much as able. Didn't realize that the fanboys would be so insulted that I disagreed with Mozilla's marketing policy.]

thanks for heads up

i wont be using the service now

Re: Firefox Send: Free encrypted file transfer service

#265

Post by dhimes » Tue, Mar 12, 2019, 3:55 PM UTC

crusso wrote: post #253

[Deleting this post as much as able. Didn't realize that the fanboys would be so insulted that I disagreed with Mozilla's marketing policy.]

Is that really a privacy issue?

Re: Firefox Send: Free encrypted file transfer service

#266

Post by Sammi » Tue, Mar 12, 2019, 3:55 PM UTC

_bxg1 wrote: post #100

Ah man, I literally came up with (and prototyped) this exact thing in 2013. Minus the end to end encryption. I dropped it mostly because I wasn't sure how to prevent illegal use and didn't want to be liable. Edit: mine was actually (partially) better because it assigned a short PIN instead of a full link, which meant you could just look at it and remember it for typing-in, instead of requiring a separate channel to "…

Encrypting it with a random key that doesn't get sent to the server, but is in the URI that the user sends to the receiver means that only the sender and receiver know what the file actually contains. Means neither you nor law enforcement can know what you are storing unless the URI is captured.

Re: Firefox Send: Free encrypted file transfer service

#267

Post by Quarrelsome » Tue, Mar 12, 2019, 4:01 PM UTC

crusso wrote: post #253

[Deleting this post as much as able. Didn't realize that the fanboys would be so insulted that I disagreed with Mozilla's marketing policy.]

of all of the people you could be mad at about privacy you choose Mozilla to be mad at?

Re: Firefox Send: Free encrypted file transfer service

#268

Post by justusthane » Tue, Mar 12, 2019, 4:01 PM UTC

yjftsjthsd-h wrote: post #180

jamesgeck0 wrote: post #141

Earlier quoted context omitted.

Syncthing is in dire need of an iOS client. There's an unofficial one, but it was unmaintained and didn't sync with recent versions of Syncthing last I checked.

Is it a technical limitation, insufficient developers, or a license issue? IIRC GPL doesn't work with the store.

I believe just insufficient developers. It seems like they're open to someone taking it on: https://forum.syncthing.net/t/on-syncthing-ios-port-again/89...

Re: Firefox Send: Free encrypted file transfer service

#269

Post by waplot » Tue, Mar 12, 2019, 4:03 PM UTC

crusso wrote: post #253

[Deleting this post as much as able. Didn't realize that the fanboys would be so insulted that I disagreed with Mozilla's marketing policy.]

are you that stupid? just enter a bogus email.

Re: Firefox Send: Free encrypted file transfer service

#270

Post by roryokane » Tue, Mar 12, 2019, 4:03 PM UTC

In the past, I used https://volafile.org/ for sharing files that will be deleted within a week. Volafile doesn’t do end-to-end encryption like Firefox Send, but it allows you to upload files over 2.5 GB.

Volafile’s multi-file “room” functionality, with chat, makes it more suited for sharing files among multiple people, while Firefox Send is optimized for sending a single file to a single person or a targeted group.