How does this compare to LanXchange?
Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
11–20 of 101 posts
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#12Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, manipulating raw bytes and lengths, which is a receipe for memory safety vulnerabilities.
Use an pre vetted implementation of a good security protocol for this, or if this is a hobby project, spend some time reading up on crypto protocol design.
[1] https://github.com/LANDrop/LANDrop/blob/master/LANDrop/crypt...
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#13First off, this looks like a nice project. So please take this as constructive criticism: 1. This really should have screenshots published. Especially when comparing with something polished like AirDrop, the UX is important. You even call this out as one of the features, so it's really odd not seeing the screenshots to support that statement. 2. "Uses state-of-the-art cryptography algorithm" isn't very reassuring. It…
App seems to be using this:
https://libsodium.gitbook.io/doc/secret-key_cryptography/aea...
I have little experience with cryptography, and have no idea whether it is a good choice or not.
If it is, how would you convince regular people that the state of the art “something something sodium chachacha” crypto algorithm in the app is the best for them?
It might be better not to mention the name.
Some stats would be nice, like: your files would take X years to decrypt if stolen (backed by some trusted sources).
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#14Sharing from win10 to iPadOS (14.4.2) was very flakey. Installed the app on PC and tablet easily, however win10 couldn't see the tablet unless I restarted the app each time.
After understanding the workflow, sending files was pretty slick, but janky.
I suspect the iPadOS app is only announcing when it opens for the first time.
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#15Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#16First off, this looks like a nice project. So please take this as constructive criticism: 1. This really should have screenshots published. Especially when comparing with something polished like AirDrop, the UX is important. You even call this out as one of the features, so it's really odd not seeing the screenshots to support that statement. 2. "Uses state-of-the-art cryptography algorithm" isn't very reassuring. It…
App seems to be using this: https://libsodium.gitbook.io/doc/secret-key_cryptography/aea... I have little experience with cryptography, and have no idea whether it is a good choice or not. If it is, how would you convince regular people that the state of the art “something something sodium chachacha” crypto algorithm in the app is the best for them? It might be better not to mention the name. Some stats would be nice…
libsodium is a solid choice.
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#17Looks neat, nice work. I would suggest changing the download links to have more affordances that they're clickable, it just looked like a table of version numbers to me at first and I didn't realize they were links at all.
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#18Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…
Any pointers to good sources on crypto protocol design?
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#19Does it support M1 Mac?
Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool
#20Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…
Any pointers to good sources on crypto protocol design?
https://blog.cryptographyengineering.com/useful-cryptography... this link page is from 2012, but still pretty good.