A similar LAN or virtual network oriented tool:
https://github.com/zerotier/toss
... and another less magical one:
Magic-Wormhole – Get things from one computer to another, safely
11–20 of 192 posts
Re: Magic-Wormhole – Get things from one computer to another, safely
#12How is the 16 bit wormhole code secure against brute force?
Any attacker only gets a single guess
Re: Magic-Wormhole – Get things from one computer to another, safely
#13Also, Piknik: https://github.com/jedisct1/piknik
Nice! It might be interesting to use the magic-wormhole API to set up the piknik keys. In the long term, I'm pushing magic-wormhole to serve as a provisioning tool for other (more persistent) connections.
Re: Magic-Wormhole – Get things from one computer to another, safely
#14What's wrong with S/MIME? Email doesn't have to be unencrypted.
Also, you only need to send the public part of an SSH key to the remote end to set up future keyed connections to that system.
This seems like a solution with very narrow problems to solve.
Re: Magic-Wormhole – Get things from one computer to another, safely
#15Also, Piknik: https://github.com/jedisct1/piknik
Cool stuff, thanks.
Re: Magic-Wormhole – Get things from one computer to another, safely
#16Trusting the baked-in rendezvous server would seem to be the most obvious security "nit," which could be addressed by compiling and running your own server. But out-of-the-box, that would seem to be a weak-point for MitM attack.
[deleted]
Re: Magic-Wormhole – Get things from one computer to another, safely
#17Waiting for the security nits, but this looks awesome and I have use cases for it every week
Ditto. This would be very useful if it were available on all platforms (Android, OIS, Rpi)!
Re: Magic-Wormhole – Get things from one computer to another, safely
#18This reminds me of the great tool http://www.fefe.de/ncp/ , which seems like the same thing only without the cryptographic authentication!
Nifty.. I'll look at the network side of that, maybe we can steal some ideas. At the moment magic-wormhole depends upon one of:
* at least one side has a public IP address * both sides are on the same (private) LAN * a TURN-like "Transit Relay" server that I run
That transit server hasn't gotten a worrysome amount of traffic yet, but it's a potential scaling problem. (Fortunately the two sides can offer their own transit servers, and they negotiate the one to use, so it's also not a difficult scaling problem to address).
In the long run I'm hoping to get some NAT-hole-punching tools, maybe WebRTC, to reduce the need for the transit relay somewhat. Also in the long run, if both sides are using Tor, then one of then can run an onion service, which gets you the NAT-punching for free.
Re: Magic-Wormhole – Get things from one computer to another, safely
#19[deleted]