Live data from Hacker News

Firefox Send: Free encrypted file transfer service

blog.mozilla.org

301–310 of 542 posts

Re: Firefox Send: Free encrypted file transfer service

#301
post #12

I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?

there is https://snapdrop.net/ but it didnt work for me

Re: Firefox Send: Free encrypted file transfer service

#302

Earlier quoted context omitted.

Syncthing is in dire need of an iOS client. There's an unofficial one, but it was unmaintained and didn't sync with recent versions of Syncthing last I checked.

Is it a technical limitation, insufficient developers, or a license issue? IIRC GPL doesn't work with the store.

I feel like there must be some iOS limitations as well. Dropbox can't even sync files in the background, so if I take a bunch of photos, I have to leave it running and touch the screen every couple of minutes in order to get all the photos uploaded. I feel like Dropbox apps are generally pretty good, and this was way janky, and had to be an iOS limitation, but I'm not 100% sure.

Re: Firefox Send: Free encrypted file transfer service

#303

Earlier quoted context omitted.

The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....

Anybody who can catch the link in transit can get the file. Emailing these links with the decryption key right in the fragment is going to allow any party in between the sender and the receiver to fetch the file. (If the file is set to only allow downloading once, the receiver can at least let the sender know that it got intercepted.) So you have to send the link through some previously-negotiated secure channel. At…

True, but I don't think I'd use this website for anything I'm that concerned about. At that point, I'd encrypt it myself with something like gpg or openssl on the command line.

This fills a handy gap for a lot of people with smaller needs.

Re: Firefox Send: Free encrypted file transfer service

#304
post #53

Is the source available for this? A self-hosted version of this would be nice... (Update: Yep, just found it: https://github.com/mozilla/send , just before the comment below was posted :))

boop: https://github.com/mozilla/send

As far as I can see, this requires S3 or a S3 compatible service. Kind of defeats the purpose of self hosting unless you can set one yourself (it may be, I didn't look).

EDIT: Apparently there's a way to use filesystem instead of S3, it's just not well documented.

Re: Firefox Send: Free encrypted file transfer service

#305
post #125

Earlier quoted context omitted.

>I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. KDE Connect, https://community.kde.org/KDEConnect#What_is_KDE_Connect.3F i've been using it for years

I've been using this, but I just switched to the Sway for my WM and I'm unsure of how to use KDEConnect with Sway. Any ideas?

I've been using sway for a few weeks as well. I just used it once to share a file from my phone, and here's what I did:

    export $(dbus-launch)
    kdeconnect-cli -l
    *then I sent the file from the phone*
It could be launched on start; there's also appindicator-kdeconnect that should work with a tray icon, as well, AFAIK.

Re: Firefox Send: Free encrypted file transfer service

#306
post #12

I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?

Dozens of responses, and not one mention of Dropbox. Works perfectly for this exact purpose on Android.

You missed the "without going through the internet" part.

Re: Firefox Send: Free encrypted file transfer service

#307

Earlier quoted context omitted.

Mounting MTP is transparent to the user on non-apple OSes as well. You can drag and drop files as you could when it was when mounting the VFAT block device. Its only on MacOS that this isn't handled gracefully. So yeah, apple is only mobile you cant do this on at all, and apple is only desktop OS you cant access other phones that permit it on (without installing some 3rd party tool). As an aside, I write this as an a…

I've used MTP and my experience is it that it leaves a lot to be desired regardless of the platform. My wife's Samsung phone never worked right with her Windows 7 laptop. Neither my Huawei nor the HTC handset I had before worked properly with any of my Linux machines either. I get the point of MTP is that is't supposed to be a transparent (to the user) interface but my experience is it falls short by a long way of ac…

Yeah, I agree - MTP is abominable on every device Ive used too.

Re: Firefox Send: Free encrypted file transfer service

#308

Earlier quoted context omitted.

The client encrypts the file that is uploaded, along with some metadata. The key is appended to the share URL provided by the URL, in the fragment/hash, and is never sent to the remote server. Only people having the URL including the secret will be able to download and decrypt your shared file. See https://github.com/mozilla/send/blob/master/docs/encryption....

Anybody who can catch the link in transit can get the file. Emailing these links with the decryption key right in the fragment is going to allow any party in between the sender and the receiver to fetch the file. (If the file is set to only allow downloading once, the receiver can at least let the sender know that it got intercepted.) So you have to send the link through some previously-negotiated secure channel. At…

Absolutely. Security and secrecy are not binary, though, it's a spectrum. There are many things where you would mostly want to avoid dragnet attacks and undetected intrusion but don't have concerns for targeted attacks like the one you are describing.

I think this fills the gap for when you want to share not-critically-secret stuff with non-technical people and would today likely send it over something like e-mail, Drive or Dropbox.

Re: Firefox Send: Free encrypted file transfer service

#309
post #115

Earlier quoted context omitted.

I recently switched back to iOS after years on Android, and on this point I've been very impressed with Airdrop. Dead simple UI, very quick transfer speeds, uses WiFi or Bluetooth as available. It's just a shame that it's limited to Apple devices.

Agreed. And app hand-off (for the small number of apps that use it, basically only Safari for me) is fantastic as a "task transfer" tool as well.

I also use copy/paste between my Mac and iPhone quite a lot, which is a Handoff feature

Re: Firefox Send: Free encrypted file transfer service

#310
post #189

Earlier quoted context omitted.

It's a BSD world thing :). Local (i.e. non-system) executables and libraries go under /usr/local around here (i.e. libraries under /usr/local/lib, binaries under /usr/local/bin and so on, the hierarchy under /usr/local has the same structure as that under /usr).

You can work around it by creating a cargo config with a wrapper. Eg: cat ~/.cargo/config [target.x86_64-unknown-freebsd] linker = "/home/drewg123/bin/cargo-ld" Where cargo-ld is just a wrapper: #!/bin/sh exec /usr/bin/ld -L/usr/local/lib $*

For proper formatting of code snippets, indent the entire snippet with two spaces.
Post reply on HN