Live data from Hacker News

Transfer.sh – Easy file sharing from the command line

transfer.sh

71–80 of 88 posts

Re: Transfer.sh – Easy file sharing from the command line

#71
post #44

For text I like http://termbin.com . It just accepts text on port 9999, no HTTP required.

Just text, you say? https://termbin.com/0nlm

`curl -s "https://termbin.com/0nlm" | base64 --decode | file -`

I guessed but how could I have identified the string as a base64 hash?

Re: Transfer.sh – Easy file sharing from the command line

#72
post #17

Earlier quoted context omitted.

I would like to know if there are any advantages to use nc instead of scp ?

You don't need an account on the target system. Target PC opens a port and starts listening (outputting to file) Sending machine establishes a connection to the listening port, and starts copying the file. Example (hide a file transfer as DNS traffic) Listening computer: nc -l -u -p 53 > output.file Sending computer: cat original.file > nc -u [destination ip address] 53 In this case you'd be dumb not to encrypt the f…

Thanks!

- Your 'sending' snippet should use | instead of >.

- ports 1-1023 are privileged.

Re: Transfer.sh – Easy file sharing from the command line

#73
post #66
post #8

This is exactly the use case for Magic Wormhole, which is what the cool kids use to transfer files: https://github.com/magic-wormhole/magic-wormhole Magic Wormhole uses an end-to-end PAKE to create an encrypted transport between two points in the Internet, using a rendezvous server. It doesn't store files, which is almost never what you want; it's not a way to send a file and have 10 or 100 people download it. But it…

I wish magic wormhole used federated rendezvous servers, was usable from within a locked down corporate network, had a .NET implementation with a pretty GUI so that even my mom could use it, came with all major OS by default and was as accepted as e-mail so that I can actually share files with everyone, not just my nerdy friends. Is that even remotely a realistic thought?

I feel like a web clone of it hits some of your goals: https://webwormhole.io/

Re: Transfer.sh – Easy file sharing from the command line

#74
post #8

This is exactly the use case for Magic Wormhole, which is what the cool kids use to transfer files: https://github.com/magic-wormhole/magic-wormhole Magic Wormhole uses an end-to-end PAKE to create an encrypted transport between two points in the Internet, using a rendezvous server. It doesn't store files, which is almost never what you want; it's not a way to send a file and have 10 or 100 people download it. But it…

What stops someone from using up all the channel IDs on the rendezvous server.

Also why no attempt at NAT traversal; instead relaying traffic through a transit server.

It's almost as if the project's purpose is not so much to create superior file transfer but more just to showcase a use of SPAKE2.

Re: Transfer.sh – Easy file sharing from the command line

#75
post #8

This is exactly the use case for Magic Wormhole, which is what the cool kids use to transfer files: https://github.com/magic-wormhole/magic-wormhole Magic Wormhole uses an end-to-end PAKE to create an encrypted transport between two points in the Internet, using a rendezvous server. It doesn't store files, which is almost never what you want; it's not a way to send a file and have 10 or 100 people download it. But it…

Thanks for sharing wormhole!

Re: Transfer.sh – Easy file sharing from the command line

#76
post #8

This is exactly the use case for Magic Wormhole, which is what the cool kids use to transfer files: https://github.com/magic-wormhole/magic-wormhole Magic Wormhole uses an end-to-end PAKE to create an encrypted transport between two points in the Internet, using a rendezvous server. It doesn't store files, which is almost never what you want; it's not a way to send a file and have 10 or 100 people download it. But it…

What stops someone from using up all the channel IDs on the rendezvous server. Also why no attempt at NAT traversal; instead relaying traffic through a transit server. It's almost as if the project's purpose is not so much to create superior file transfer but more just to showcase a use of SPAKE2.

I think this is your question, if not, my apologies https://youtu.be/oFrTqQw0_3c?t=1594

Re: Transfer.sh – Easy file sharing from the command line

#77

Earlier quoted context omitted.

Just text, you say? https://termbin.com/0nlm

`curl -s " https://termbin.com/0nlm " | base64 --decode | file -` I guessed but how could I have identified the string as a base64 hash?

I could have created a header of some kind to identify it but I figured it would be more fun in this case to give people some ducktective work to do ;-)

Re: Transfer.sh – Easy file sharing from the command line

#78
post #73
post #66

Earlier quoted context omitted.

I wish magic wormhole used federated rendezvous servers, was usable from within a locked down corporate network, had a .NET implementation with a pretty GUI so that even my mom could use it, came with all major OS by default and was as accepted as e-mail so that I can actually share files with everyone, not just my nerdy friends. Is that even remotely a realistic thought?

I feel like a web clone of it hits some of your goals: https://webwormhole.io/

It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time and unless a specific version is somehow pinned by default, you are in principle vulnerable to MitM attacks.

Re: Transfer.sh – Easy file sharing from the command line

#79
Since this is conspicuously lacking among other threads here, allow me to thank the creators and maintainers for a service invaluable to those of us who are grateful for the ability to share files without installing new software, and who mightn't need e2e protection for it (though as the examples show, this is possible, again without installing additional software).

Thank you! :)

https://github.com/dutchcoders/transfer.sh/#creators

Re: Transfer.sh – Easy file sharing from the command line

#80
post #78
post #73

Earlier quoted context omitted.

I feel like a web clone of it hits some of your goals: https://webwormhole.io/

It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time and unless a specific version is somehow pinned by default, you are in principle vulnerable to MitM attacks.

Host your own version and hash all the JavaScript sources https://www.srihash.org/
Post reply on HN