Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: I built a website to share files and messages without any server

neighbor-share.vercel.app

Post reply on HN
Print view View original

61–70 of 112 posts

Re: Show HN: I built a website to share files and messages without any server

#61

Post by INTPenis »

p4bl0 wrote: post #45
INTPenis wrote: post #27

Earlier quoted context omitted.

What about sharing from your phone to your laptop?

KDE Connect allows you to send individual files both ways and also to browse files on your phone from your computer. It is also capable of sharing the clipboard and open link from one device to another, as well as controlling input (mouse and keyboard) from another device.

Yeah I know but we were talking about CLI alternatives and the person said they used a quick python http webserver, but that doesn't work the other way.

Re: Show HN: I built a website to share files and messages without any server

#62

Post by lozf »

INTPenis wrote: post #14
p4bl0 wrote: post #12

Earlier quoted context omitted.

I use KDE Connect for that. Have you given it a try?

No, I did try the Gnome equivalent a long time ago but these days I use a more minimal setup. So I'd prefer a CLI tool.

I like the wormhole-william[0] Go implementation of "Magic Wormhole" protocol on the CLI. There's a couple of compatible Android apps[1][2] in the F-Droid store and Rydmport[3] for your GUI loving friends.

[0](https://github.com/psanford/wormhole-william)

[1](https://f-droid.org/en/packages/com.pavelsof.wormhole/)

[2](https://f-droid.org/en/packages/com.leastauthority.destiny/)

[3](https://github.com/Jacalz/rymdport)

Re: Show HN: I built a website to share files and messages without any server

#63

Post by leeoniya »

NayamAmarshe wrote: post #6

Looks good but any plans to make it open source? Similar open source solutions exist like: - https://pairdrop.net/ - https://wormhole.app/ - https://www.snapdrop.net/ How does this compare?

also https://github.com/schollz/croc

Re: Show HN: I built a website to share files and messages without any server

#64

Post by d-z-m »

dkraj wrote: post #29
d-z-m wrote: post #8

I looked around and couldn't find a description of the protocol by which two peers authenticate to each other/transfer files. Also, is the E2EE encryption referred to simply whatever is being used to encrypt the transport(DTLS/SRTP/etc)? or are you doing additional encryption/decryption of files? Also I'm curious like others, does this only work if no nat traversal is required? or are you leveraging public stun/turn…

WebRTC it is: https://webrtc.org/ Yes only the network layer encryption. No file encryption as it will cost client browsers a lot in case of encrypting and then decrypting that at other end. I have written more about it here: https://dikshantraj2001.medium.com/nat-stun-turn-and-ice-466... Currently, I am using the public STUN servers only. If the IPs are not reachable, it would show an error and won't work as setting…

Ideally I would not have to trust the signalling server to ensure I'm transferring files to who I think I am[0]. Not as much of a knock against your project as a knock against webRTC in general.

[0]: https://webrtchacks.com/webrtc-and-man-in-the-middle-attacks...

Re: Show HN: I built a website to share files and messages without any server

#68

Post by matheusmoreira »

aster0id wrote: post #54

Obligatory callout to the excellent server-free CLI file transfer tool magic wormhole which is open source and battle tested

> This program uses two servers

> the mailbox server, and the transit relay.

The dream of the P2P internet died with NAT.

Re: Show HN: I built a website to share files and messages without any server

#69

Post by realusername »

ramchip wrote: post #37
jfoster wrote: post #15

Earlier quoted context omitted.

That is true, but unless you develop an application yourself, it is always coming from somewhere else. Web apps are better than native apps from a security perspective. Browsers have fairly decent built-in debugging tools that you could use to verify that data isn't being uploaded to a 3rd party. On the other hand, to do the same with a native application you would need to use a separate network protocol analyzer app…

You have to trust the original developers either way, but the distribution mechanism is much weaker for a web app. The server / hosting platform can be compromised, the code can change at any time and even depend on the client that's connecting, and there's no software signing providing non-repudiation. Not saying native apps are universally better, but I do think their treat model tends to be a better match for encr…

The signature doesn't mean much on the mobile store though, Apple and Google could modify anything they want, resign it and push a new app.

With the web you have to trust the app developer and with mobile you have to trust the app developer plus Google or Apple on top of that.

Fdroid is maybe the only exception to that.

Post reply on HN