Live data from Hacker News

Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

landrop.app

31–40 of 101 posts

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#31
post #6

First off, this looks like a nice project. So please take this as constructive criticism: 1. This really should have screenshots published. Especially when comparing with something polished like AirDrop, the UX is important. You even call this out as one of the features, so it's really odd not seeing the screenshots to support that statement. 2. "Uses state-of-the-art cryptography algorithm" isn't very reassuring. It…

App seems to be using this: https://libsodium.gitbook.io/doc/secret-key_cryptography/aea... I have little experience with cryptography, and have no idea whether it is a good choice or not. If it is, how would you convince regular people that the state of the art “something something sodium chachacha” crypto algorithm in the app is the best for them? It might be better not to mention the name. Some stats would be nice…

You could have "state-of-the-art cryptography algorithm" as a link to a page with more details. Or just put the name of the algorithm in brackets afterwards, e.g. "state-of-the-art cryptography algorithm (ChaCha blah AES blah)".

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#32

Just "python -m http.server" If the network is trusted.

  import os
  from flask import Flask, request, render_template, redirect
  import requests
  import shutil

  app = Flask(__name__)

  @app.route('/handle_form', methods=['POST'])
  def handle_form():
      f = request.files['file']
      f.save(os.getcwd()+'/files/'+f.filename)
      return redirect("/", 302);

  @app.route("/")
  def index():
      return render_template("index.html");

  if __name__ == "__main__":
      app.run(host='0.0.0.0', port=8080, debug=True)

  # 
  # 
  # 
  # 
  #     Send File
  # 
  # 
  #     Send File
  #     
  #         
  #         
  #     
  # 
  # 

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#33

Just "python -m http.server" If the network is trusted.

import os from flask import Flask, request, render_template, redirect import requests import shutil app = Flask(__name__) @app.route('/handle_form', methods=['POST']) def handle_form(): f = request.files['file'] f.save(os.getcwd()+'/files/'+f.filename) return redirect("/", 302); @app.route("/") def index(): return render_template("index.html"); if __name__ == "__main__": app.run(host='0.0.0.0', port=8080, debug=True)…

never tried to post code on here. didn't realise it wouldn't render.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#35
Great effort here. Agree with others re UX and the unsigned APK. I currently use Syncthing to fulfil my LAN file transfer needs. It's not quite the same but it does have a bunch of other use cases which I like, plus it's well-known, well-supported, also open, and I trust it.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#39
post #22
post #12

Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…

If you feel like throwing "newbie" accusations around, it'd be prudent to back your list of grievances up with more than a single link to crypto.cpp. Chances are you misread the code, didn't grok what the op was doing, etc. As it stands your comment reads like a common variety abrasive and dismissive gatekeeping... rant, basically, which is unfortunately so popular in crypto circles. Edit - the project does dearly ne…

> Edit - the project does dearly need a crypto spec. "Uses state-of-the-art cryptography algorithm" claim begs to be described to be valid.

It does not need a spec. It just needs to put a small print on "algorithm" and mention that it is using a cryptography library called libsodium. That's it.

As for the armchair field marshal cryptographers ranting around and nitpicking "useful projects", they are the same ones who praised Signal for their actual "state-of-the-art cryptography algorithm" for end-to-end encryption until they added a cryptocurrency coin in the messenger. Same with Keybase.

At least this project does not have such frivolous features and is only using libsodium like everyone else.

It is very easy to give "expert" criticism (constructive or not) on an open source project (since the project is transparent) but it is much harder for the critics to dive in and fix the aforementioned issues themselves. I would have much more respect for those who do both.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#40
post #37

is the passing badge hardcoded fo always green? - https://github.com/LANDrop/LANDrop/blob/master/README.md - https://github.com/LANDrop/LANDrop/workflows/Package/badge.s...

No, it does link to a file in the repo at all. It will change based on the outcome of the workflow name specified in the URL. https://docs.github.com/en/actions/managing-workflow-runs/ad...
Post reply on HN