291–300 of 542 posts
Earlier quoted context omitted.
[deleted]
> With Send you can share file sizes up to 1GB quickly. To send files up to 2.5GB, sign up for a free Firefox account. From the blog post linked in this topic. Edit (to address your edit about marketing emails and privacy): Respectfully, I disagree. Privacy issues center around the invasion, and in extreme cases outright elimination, of privacy of individuals. This is when entities use (your) data to identify you eve…
Earlier quoted context omitted.
Right below the big "drag-and-drop here to send up to 1 GB"? (insert exact english text here, translating the translated version I'm shown) Also, to get to the second point: you didn't click the opt-in checkbox and still got marketing e-mails?
[deleted]
(Just signed up for a new account, will do that with a GDPR template if I receive unwanted e-mails)
[Deleting this post as much as able. Didn't realize that the fanboys would be so insulted that I disagreed with Mozilla's marketing policy.]
It only takes screenshots within the confines of a Firefox window.
I don't understand the end-to-end encryption claim. 1. Bob uploads a file, but specifies no password. 2. ??? 3. Sue downloads the file. Best case, Bob's browser encrypts it (with javascript?) before uploading. Either Mozilla provides a key, or Bob sends the key he used. When Sue's browser downloads it, Mozilla sends the key and her browser decrypts it client side. In either case, Mozilla has the password for decrypti…
The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....
So you have to send the link through some previously-negotiated secure channel. At that point, why not just send the file through that channel? Is it because signal/whatsapp/etc don't allow large files or because the interface is cumbersome?
Earlier quoted context omitted.
Thanks for the info. Let me see if I understand this correctly. Browsers don't send the anchor tag (ie: with GET requests). FF Send takes advantage of this by using the anchor tag to store the key for decryption. That is kinda novel. You still need to trust the upload client to not leak the key, but I see that you've written a CLI version. Interesting! Thanks for the response.
You got it! The only thing you'd have to worry about is malicious JavaScript on the Firefox Send website which I believe would be highly unlikely. And of course, you must keep your link secret. Yes, such a CLI tool would help protect you against a MITM with malicious JavaScript.
Earlier quoted context omitted.
of all of the people you could be mad at about privacy you choose Mozilla to be mad at?
If Mozilla cares so much about privacy, why don't they disable 3rd party cookies by default like Apple does? That would make a huge difference and while it may break a few sites (i use this setting since a decade or so and have encountered very few), if Apple is OK with that, why shouldn't Mozilla be ok? I'll tell you why: Because they depend on Google's money.
Its interesting you bring this up because of all the browsers ONLY Apple does that and the level of headache that gave me recently suggests part of the reason why. Fundamentally it breaks the default implementation of ASP.NET session state which when combined with first-pass implementations of OAuth results in infinite authentication loops when hosting other sites in IFRAMEs.
Maybe that's part of the reason why?
I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?