Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

landrop.app

Post reply on HN
Print view View original

91–100 of 101 posts

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#91

Post by yvbbrjdr »

GekkePrutser wrote: post #86
yvbbrjdr wrote: post #76

Earlier quoted context omitted.

- It's mainly me and some friends that does non-code stuff. No companies involved at this moment. - No cloud service is used. Your app doesn't connect to the Internet. See the privacy policy. - :) will post screenshots when I have time. Will fix the typo!

Ah cool, no company involvement makes it much more interesting to me. Because sooner or later they'll always want to monetise and that has privacy impacts generally. I missed the internet part, sorry! It doesn't say so explicitly, just that the info is not collected. But how do the peers find each other then?

It doesn't use the Internet, but it does send broadcasts to your local network for discovery.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#92

Post by api »

fulafel wrote: post #12

Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…

Your comment about manipulating raw bytes in C++ is a language criticism, not a criticism of this project.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#94

Post by api »

yvbbrjdr wrote: post #93
api wrote: post #83

Does this work on ZeroTier? Most LAN things do.

Does ZeroTier support UDP broadcasting? If so it works.

Yes, usually so, though on Windows there are issues due to Windows TCP stack stupid behaviors around multicast. They're not ZeroTier-specific issues.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#95

Post by api »

_1tan wrote: post #18
fulafel wrote: post #12

Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…

Any pointers to good sources on crypto protocol design?

A great starting point to learn about crypto is to first study current best practices until you understand exactly why they are best practices. Then go through a list of vulnerabilities that have been found in flawed algorithms or constructions and try to understand how each of these vulnerabilities works. Keep digging into these rabbit holes until you feel like you have a grasp on what a good construction looks like and common pitfalls.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#96

Post by usui »

Some good comments on cryptography that I will probably bookmark and use to study in the future, but as an end-user, I've been hoping for years on a local-network-only solution that basically works on all platforms. Functionality-wise, cryptography can shape up in time whereas I can use these non-trivial features today. Bravo for the privacy-conscious approach and development of apps closer to native. I tested it in these directions and double checked with sha256sum:

- Mac Mac (Wireless)

- Mac Mac (Thunderbolt 4 Bridge)

- Mac Android

- Mac iOS

- iOS Android

Features I'd have interest in:

- Choose interface/IP address to listen on by default instead of all interfaces (can still be first-time default). This helps prevent accidentally sending over a not fully-trusted network. I imagine that with the next iPad supporting Thunderbolt 4, it could be easy to send over wire. This also helps smoothen someone's lack of confidence in the network security of the app. You also probably already thought of this since there is an "Advanced" section which currently supports changing the port

- Have some way to verify the target's IP address for the Flutter app on iOS and Android prior to sending

- A command-line interface to automate sending and receiving

- A way to donate if you're open to that

(@yvbbrjdr go bears!)

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#97

Post by 627467 »

yvbbrjdr wrote: post #60
tjohns wrote: post #6

First off, this looks like a nice project. So please take this as constructive criticism: 1. This really should have screenshots published. Especially when comparing with something polished like AirDrop, the UX is important. You even call this out as one of the features, so it's really odd not seeing the screenshots to support that statement. 2. "Uses state-of-the-art cryptography algorithm" isn't very reassuring. It…

Thanks for your advice! 1. Yeah. I should have had screenshots on my webpage :). 2. It's Chacha20-Poly1305-IETF. I haven't have time to document the protocol, so if anyone wants to see it, they need to read the code :). 3. Yeah, that's also in the plan. My point is that average people might not care about the exact algo being used. They might not even care that it's actually encrypted, so there is no need to specify…

I agree with you, the details on the frontpage are enough for 99.99% of users, but IMO security is something that people rely on "trusted sources" so having somewhere easily accessible for these "trusted sources" to learn how it works, helps, specially when a project is new.

After a while people just "know" that signal is secure not because they know how it works but because they heard enough "trusted sources" describe signal as such.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#98

Post by dzhiurgis »

yamrzou wrote: post #8
chetangoti wrote: post #3

This looks good. There is similar tool which web based and opensource Snapdrop[0]( https://snapdrop.net/ ) which works on the same network. [0] https://github.com/RobinLinus/snapdrop

Also ShareDrop: https://www.sharedrop.io/ https://github.com/szimek/sharedrop

Tried using Sharedrop and it was super slow. Way quicker to just upload to wetransfer.

Re: Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool

#99

Post by yvbbrjdr »

usui wrote: post #96

Some good comments on cryptography that I will probably bookmark and use to study in the future, but as an end-user, I've been hoping for years on a local-network-only solution that basically works on all platforms. Functionality-wise, cryptography can shape up in time whereas I can use these non-trivial features today. Bravo for the privacy-conscious approach and development of apps closer to native. I tested it in…

Go bears!
Post reply on HN