Live data from Hacker News

Magic-Wormhole – Get things from one computer to another, safely

github.com

111–120 of 192 posts

Re: Magic-Wormhole – Get things from one computer to another, safely

#112

My life is so much happier with Windows. Accessing files on any computer is very easy. Wannacry and that other nasty worm prove it to the world. :)

Didn't catch any malware or viruses since the 90s on my Windows. Copying files with a few mouse clicks is much more comfortable and fast then this...

Re: Magic-Wormhole – Get things from one computer to another, safely

#113
post #102
post #74

Earlier quoted context omitted.

Okay. Step 1. Open ports on your router. It's your job to figure out which ports those may be. Step 2. Redirect said ports to the box in question, hopefully you'll know the ip address that was assigned by your home router's DHCP Step 3. Make sure rssh is installed. Step 4. If rssh is not installed, please simply follow the simple instructions to get it installed for your system. Step 4a. If it's a mac, use brew. Type…

Okay. The equivalents to steps 1-11 were done by the Wormhole authors when they created the rendezvous server. So yes, if you use Wormhole in SaaS mode, it's simpler, but you have to trust the rendezvous server. Operating scp with a working ssh server is as simple as working with wormhole: To push: scp foobar.txt tmp@www.example.com: #equivalent to wormhole send To pull: scp tmp@www.example.com:foobar.txt . #equivale…

> but you have to trust the rendezvous server.

Do you? It seems that magic-wormhole does end-to-end encryption, and the rendezvous server acts only as a relay if one or both parties are behind NAT. So yes, you leak the two parties' IP addresses, but not the files you transfer.

Re: Magic-Wormhole – Get things from one computer to another, safely

#115
post #102

Earlier quoted context omitted.

Okay. The equivalents to steps 1-11 were done by the Wormhole authors when they created the rendezvous server. So yes, if you use Wormhole in SaaS mode, it's simpler, but you have to trust the rendezvous server. Operating scp with a working ssh server is as simple as working with wormhole: To push: scp foobar.txt tmp@www.example.com: #equivalent to wormhole send To pull: scp tmp@www.example.com:foobar.txt . #equivale…

> but you have to trust the rendezvous server. Do you? It seems that magic-wormhole does end-to-end encryption, and the rendezvous server acts only as a relay if one or both parties are behind NAT. So yes, you leak the two parties' IP addresses, but not the files you transfer.

You have no way to verify that the rendezvous server you're connecting to isn't playing the role of the client or server.

Re: Magic-Wormhole – Get things from one computer to another, safely

#116
post #60

> Copying files with ssh/scp is fine, but requires previous arrangements and an account on the target machine, and how do you bootstrap the account?~ Assuming that you have openssh and rssh installed, you bootstrap like this: useradd -m -g users -s /usr/bin/rssh tmp passwd tmp edit /etc/rssh.conf and uncomment allowscp Share the password with the party you want to exchange data with. Make sure your ports are open. Se…

Surprised no-one has mentioned socat ('netcat on steroids') in this context, which is what I use to quickly transfer files, especially in closed network contexts.

Re: Magic-Wormhole – Get things from one computer to another, safely

#117
post #68
post #60

> Copying files with ssh/scp is fine, but requires previous arrangements and an account on the target machine, and how do you bootstrap the account?~ Assuming that you have openssh and rssh installed, you bootstrap like this: useradd -m -g users -s /usr/bin/rssh tmp passwd tmp edit /etc/rssh.conf and uncomment allowscp Share the password with the party you want to exchange data with. Make sure your ports are open. Se…

> you bootstrap like this Ah, yes. oh come on please it's easy just /etc/init.apt-get/frob-set-conf --arc=0 - +/lib/syn.${SETDCONPATH}.so.4.2 even my grandma can do that

Classic, https://news.ycombinator.com/item?id=9224

Re: Magic-Wormhole – Get things from one computer to another, safely

#119

Earlier quoted context omitted.

Instead you get to pip install. But pip isn't installed. easy-install pip? What's easy-install - it's not there? (brew|yum|apt-get) disttools. Forget this... download get_pip.py, run python get_pip.py... Some error about libsodium now? Where do I get gcc for Windows 10 again? Python's greatest weakness is its packaging and distribution, and this project makes no effort to make it simple.

But pip isn't installed. It's been bundled with Python for years now, and even if you don't have it, it's easy to get: https://pip.pypa.io/en/latest/installing/

This is true but not completely. You will only get pip when you install the binary downloaded from python.org. On osx, people use brew, on Debian, they use apt. It is most likely only Windows people will download those binaries but actually they use Anaconda, WinPython instead

Re: Magic-Wormhole – Get things from one computer to another, safely

#120
post #75

I would highly recommend looking into this (seemingly-obscure) technique for NAT hole punching: https://samy.pl/pwnat/ It would allow for a "magic wormhole"-style system without the need for a MITM (trusted or otherwise).

That's cute. But will it work if you have two sessions behind the same NAT trying to use it?
Post reply on HN