Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Croc: Easily and securely send things from one computer to another

github.com

Post reply on HN
Print view View original

51–60 of 146 posts

Re: Croc: Easily and securely send things from one computer to another

#51

Post by mc10 »

ajkjk wrote: post #29

Which public server does it use by default? I'm surprised the docs don't mention it. More generally, it feels like in 2023 that connecting two computers via a public relay ought to be a solved problem, on the level of, like, DNS. Or maybe it is and I haven't heard?

The default relay can be found in constants.go [1]:

  // DEFAULT_RELAY is the default relay used (can be set using --relay)
  var (
   DEFAULT_RELAY      = "croc.schollz.com"
   DEFAULT_RELAY6     = "croc6.schollz.com"
   DEFAULT_PORT       = "9009"
   DEFAULT_PASSPHRASE = "pass123"
   INTERNAL_DNS       = false
  )
[1]: https://github.com/schollz/croc/blob/f91c7a9948f94007d6be2b0...

Re: Croc: Easily and securely send things from one computer to another

#52

Post by stkdump »

dennis-tra wrote: post #45

I’m currently working on a new version of pcp [0]. Based on croc, magic-wormhole and the likes it doesn’t require a relay. It uses the IPFS DHT as a discovery point to connect two machines. Haven’t touched the currently released code in two years but the new hole punching capabilities of libp2p show promising result so I’m working on a new version. [0] https://github.com/dennis-tra/pcp

Can you send files from one mobile network connected computer to another?

Re: Croc: Easily and securely send things from one computer to another

#53

Post by dennis-tra »

mc10 wrote: post #49
dennis-tra wrote: post #45

I’m currently working on a new version of pcp [0]. Based on croc, magic-wormhole and the likes it doesn’t require a relay. It uses the IPFS DHT as a discovery point to connect two machines. Haven’t touched the currently released code in two years but the new hole punching capabilities of libp2p show promising result so I’m working on a new version. [0] https://github.com/dennis-tra/pcp

Does this run a mini IPFS node on the sender and relayer and rely instead on the IPFS network being up to propagate the DHT changes through the network?

It’s just running a very lightweight libp2p host that speaks the DHT protocol. It’s basically just taking the bare minimum part of Kubo (IPFS) that’s necessary to interact with the DHT.

It’s then relying on the rest of the IPFS network to propagate the record for discovering the sender and receiver.

Re: Croc: Easily and securely send things from one computer to another

#54

Post by fmajid »

mrintegrity wrote: post #47
fmajid wrote: post #39

Earlier quoted context omitted.

My CVE feed just had a raft on croc: https://nvd.nist.gov/vuln/detail/CVE-2023-43616 https://nvd.nist.gov/vuln/detail/CVE-2023-43617 https://nvd.nist.gov/vuln/detail/CVE-2023-43618 https://nvd.nist.gov/vuln/detail/CVE-2023-43619 https://nvd.nist.gov/vuln/detail/CVE-2023-43620 https://nvd.nist.gov/vuln/detail/CVE-2023-43621 I will stick with wormhole-william, thank you very much.

Perhaps you missed this https://news.ycombinator.com/item?id=37608110 but it has given me fresh, sceptical, eyes with which to read cve reports.

Yes, I subscribe to Daniel Stenberg's RSS feed and have seen his many articles bemoaning excessive classification of bugs as vulnerabilities. One of these bugs, however, show serious cryptographic deficiencies. Unfortunately there are a lot of cryptography amateurs making stuff without a proper understanding ond making grandiose claims, so my default stance is one of skepticism unless reputable cryptographers have looked at it.

I use wormhole-william, the Go version of the Python magic wormhole, and age, mostly because of this Latacora endorsement:

https://www.latacora.com/blog/2019/07/16/the-pgp-problem/

Re: Croc: Easily and securely send things from one computer to another

#57

Post by mixmastamyk »

winrid wrote: post #38

I don't see KDE Connect mentioned so I'd like to just say it's great. Send files and clipboard between PC/Mac/Linux/Android/iOS. And it's a native QT app so pretty light. Only works on same network though.

Unfortunately didn't work well for me using the gnome libraries on linux or mobian/phosh. (If you don't want to install KDE just for file transfer, etc.) scp on the other hand is bulletproof when hosts are directly accessible.

Re: Croc: Easily and securely send things from one computer to another

#58

Post by throwaway-4LGvv »

tptacek wrote: post #8

A more popular and, I think, carefully analyzed alternative, from which croc was inspired, is Magic Wormhole; a good Golang implementation that compiles down to a single binary is wormhole-william: https://github.com/psanford/wormhole-william/releases I believe croc has some features wormhole doesn't (and some anti-features, like being able to pick curves and hashes). But also just that it's worth knowing that Magic…

winden.app is a Magic Wormhole web app for files up to 200MB https://github.com/LeastAuthority/winden

Re: Croc: Easily and securely send things from one computer to another

#59

Post by mixmastamyk »

dheera wrote: post #55

I wish there was an easier way to send things to/from a phone. I use a 1-person slack channel for this because I can't find a simpler way. Google Drive and Dropbox are both awful mobile clients.

Was just dissing KDE connect but it works well in most combinations.

Also you can connect a USB cable.

Re: Croc: Easily and securely send things from one computer to another

#60

Post by ComodoHacker »

carterschonwald wrote: post #15

So one thing is that this by default uses a specific public relay server to setup the handshake. So there’s a little mitm by default.

There's no MITM, transfers are end-to-end encrypted. You don't have to trust the relay.
Post reply on HN