Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Croc: Easily and securely send things from one computer to another

github.com

Post reply on HN
Print view View original

21–30 of 146 posts

Re: Croc: Easily and securely send things from one computer to another

#21

Post by Zambyte »

auxfil wrote: post #12
tptacek wrote: post #8

A more popular and, I think, carefully analyzed alternative, from which croc was inspired, is Magic Wormhole; a good Golang implementation that compiles down to a single binary is wormhole-william: https://github.com/psanford/wormhole-william/releases I believe croc has some features wormhole doesn't (and some anti-features, like being able to pick curves and hashes). But also just that it's worth knowing that Magic…

What does "carefully analyzed" mean in this context? Who analyzed it?

Also if GitHub stars are anything to go off of, croc is several orders of magnitude more popular. Also croc is written in Go and compiles to a single binary, but there are some helper scripts in the repo for a few things. I really don't know why they said all that in their comment.

Re: Croc: Easily and securely send things from one computer to another

#22

Post by _-_-__-_-_- »

gregschlom wrote: post #14

Haven't tried this but I recently started using syncthing.net and I highly recommend it. Like rsync, it only sends the chunks of the file that changed, so it can be extremely fast for small changes in large files. It's able to use a variety of methods to connect including good through relay servers if the machines can't directly talk to each other.

I also use syncthing. It's been working so well that it's magical for sending files and keeping a passwork manager up-to-date between devices. My next step for my homelab, is to run my own announce server and relay on my local network.

Re: Croc: Easily and securely send things from one computer to another

#24

Post by wolverine876 »

Zambyte wrote: post #21
auxfil wrote: post #12

Earlier quoted context omitted.

What does "carefully analyzed" mean in this context? Who analyzed it?

Also if GitHub stars are anything to go off of, croc is several orders of magnitude more popular. Also croc is written in Go and compiles to a single binary, but there are some helper scripts in the repo for a few things. I really don't know why they said all that in their comment.

Emailing files is even more popular; does that make it more secure?

Re: Croc: Easily and securely send things from one computer to another

#25

Post by tptacek »

cphoover wrote: post #16
tptacek wrote: post #8

A more popular and, I think, carefully analyzed alternative, from which croc was inspired, is Magic Wormhole; a good Golang implementation that compiles down to a single binary is wormhole-william: https://github.com/psanford/wormhole-william/releases I believe croc has some features wormhole doesn't (and some anti-features, like being able to pick curves and hashes). But also just that it's worth knowing that Magic…

There is also https://wormhole.app Which looking at your link I guess is unrelated

This is totally unrelated to Magic Wormhole, and the name is problematic; it has a different security model.

Re: Croc: Easily and securely send things from one computer to another

#26

Post by tptacek »

Zambyte wrote: post #21
auxfil wrote: post #12

Earlier quoted context omitted.

What does "carefully analyzed" mean in this context? Who analyzed it?

Also if GitHub stars are anything to go off of, croc is several orders of magnitude more popular. Also croc is written in Go and compiles to a single binary, but there are some helper scripts in the repo for a few things. I really don't know why they said all that in their comment.

Wormhole-william is a Go port of Magic Wormhole. Github stars are not anything to go off of. If you're unaware of Magic Wormhole but have strong opinions about croc, we're not speaking the same language and there's little point in us irritating ourselves by trying fruitlessly to hash things out.

Re: Croc: Easily and securely send things from one computer to another

#29

Post by ajkjk »

Which public server does it use by default? I'm surprised the docs don't mention it.

More generally, it feels like in 2023 that connecting two computers via a public relay ought to be a solved problem, on the level of, like, DNS. Or maybe it is and I haven't heard?

Re: Croc: Easily and securely send things from one computer to another

#30

Post by qrv3w »

rurcliped wrote: post #20

a recent audit claims the author "doesn't have enough resources to address" security issues: https://www.openwall.com/lists/oss-security/2023/09/08/2 https://github.com/schollz/croc/issues/594 etc.

These issues are pretty recent. I would greatly appreciate sponsorship to address issues faster: https://github.com/sponsors/schollz or just help with PRs.
Post reply on HN