Live data from Hacker News

Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

techcrunch.com

91–98 of 98 posts

Re: Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

#92
A (non-programmer) friend of mine has been bugging me to do this for years.

So, one anecdotal data point in favor of your idea :)

(and one example of a missed startup opportunity for me, but I really don't find the time between the 8 to 6 job and 20 hrs/week university)

Re: Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

#93
post #43

Earlier quoted context omitted.

Interesting. How do you punch through NATs and firewalls? If you're doing it with p2p proxies, how do you do authentication and avoid mitm attacks?

If Sendoid is completely relying on RTMFP then the core security technology would have to be coming from Adobe. Check out Matthew Kaufmann's two year old talk on the subject: http://tv.adobe.com/watch/max-2008-develop/future-of-communi... Or Tom Krcha's blog which contains a number of Flash P2P entries: http://www.flashrealtime.com/ RTMFP is pretty fascinating technology that originates with a couple of very smart gu…

Thanks, and I'm hoping that part of flash works better than the video component on 64 bit linux.

Re: Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

#95
Very smooth, interesting use of RTMFP.

Couple of thoughts; you might want to consider a conditional note somewhere that Flash is required for those without.

Selecting and sending multiple files worked perfectly/instantly on my local network, though I could not select a folder.

I noticed that the list of successfully transferred files on the receiving end is partially hidden/obscured by a fixed height div. Also, files in that list are not autoamtically selected; it seems safe to assume the recipient would want to select and download all (rather than having to manually select or check the box.)

Good work, and good luck!

Re: Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

#96
post #43

Earlier quoted context omitted.

Interesting. How do you punch through NATs and firewalls? If you're doing it with p2p proxies, how do you do authentication and avoid mitm attacks?

If Sendoid is completely relying on RTMFP then the core security technology would have to be coming from Adobe. Check out Matthew Kaufmann's two year old talk on the subject: http://tv.adobe.com/watch/max-2008-develop/future-of-communi... Or Tom Krcha's blog which contains a number of Flash P2P entries: http://www.flashrealtime.com/ RTMFP is pretty fascinating technology that originates with a couple of very smart gu…

If I understand RTFMP (what I know I got from reading Cumulus, an open source C++ implementation), the security side of this is not thrilling me:

* It's Diffie Hellman for key agreement, which is trivially MITM'd (odds are, you can even zero out the DH key and it won't notice).

* It uses AES in CBC mode with all-zeroes IV's (so it's less secure than CBC mode).

* It's using a 16 bit CRC for message integrity checks instead of a cryptographic MAC.

I say all this with the caveat that I could be misreading Cumulus or Cumulus could have it wrong, but if this is where RTMFP is today, then Sendoid is substantially less secure than an HTTPS file transfer site.

Re: Sendoid (YC W11): Finally, Sharing Big Files Isn’t A Huge Pain

#97
What prevents URL wardialing? 5 digits, radix 36 = 60 million URLs (e.g. "hg4ba" ). Do you rate limit? Will you add more digits as you get more active shares?

It is nice that the key is short enough that it's easy to remember and enter manually (esp. for any smartphone apps in the future).

To answer my question: there's an option for setting a password. The UI for that should be improved for sharing multiple files with the same password, but there's no need to prevent URL guessing.

Post reply on HN