Hey! Blip co-founder here. We didn't expect to show up on HN, but really grateful to OP for sharing Blip. Here's a little bit more about it. We've built Blip because it's still hard to send original quality photos, videos, and large files to your devices and to other people on the internet. We’re designers and engineers, so our goal has always been to keep the product super simple on the surface, but really fast and…
What's the timeline on rolling out E2EE? Is it for paid users only?
Blip: Peer-to-peer massive file sharing
111–120 of 120 posts
Re: Blip: Peer-to-peer massive file sharing
#112Hey! Blip co-founder here. We didn't expect to show up on HN, but really grateful to OP for sharing Blip. Here's a little bit more about it. We've built Blip because it's still hard to send original quality photos, videos, and large files to your devices and to other people on the internet. We’re designers and engineers, so our goal has always been to keep the product super simple on the surface, but really fast and…
Linux support please!
Re: Blip: Peer-to-peer massive file sharing
#113Android app looks beautiful. Waiting for the Linux version.
Re: Blip: Peer-to-peer massive file sharing
#114Earlier quoted context omitted.
With whose key? I am not saying the service is not trust worthy, just that there is trust involved. Trust not only they are not malicious, but also they won't have some kind of vulnerability. Plus if it's encrypted how is the other party going to read the file? The key will have to take the same path.
> Trust not only they are not malicious, but also they won't have some kind of vulnerability. Wouldn't that still be the case if relay servers didn't exist? A hacked version can send your file to the wrong person.
The vulnerability doesn't even have to be in their software, but in any piece of software they use, ssh, nginx, etc.
Re: Blip: Peer-to-peer massive file sharing
#115Earlier quoted context omitted.
> Trust not only they are not malicious, but also they won't have some kind of vulnerability. Wouldn't that still be the case if relay servers didn't exist? A hacked version can send your file to the wrong person.
There is more attack surface with a server. The vulnerability doesn't even have to be in their software, but in any piece of software they use, ssh, nginx, etc.
A meaningful vulnerability would have to be in either the software itself or in the coordination server. That attack surface is the same whether or not you have relays.
You can reduce the attack surface to just the software if there's a way for users to verify keys manually. But again, same attack surface whether or not you have relays.
Re: Blip: Peer-to-peer massive file sharing
#116Does anyone have an idea of how this is built? I wonder if they are using QUIC with relay servers or something like Tailscale's DERP.
It's something closer to Tailscale DERP. We evaluated QUIC (and many other approaches). Turns out it's a lot harder than you might think to move traffic at high speed across the world, over residential-grade internet, and not drain your battery.
Re: Blip: Peer-to-peer massive file sharing
#117Earlier quoted context omitted.
Cheap has many more meanings than that. It can mean comparatively inexpensive (a cheap Lamborghini), of inferior quality (cheap paperclip), miserly (he's too cheap to buy better), gained with little effort (cheap win).
Sure. Still doesn't make "cheap price" a valid combo.
Re: Blip: Peer-to-peer massive file sharing
#118Like Apple offers this for email for iCloud users. I think Firefox Relay offered it too. There was another company in the late 00s that offered a P2P version.
I mean _cool_, but I’ve not seen a company with this as its primary product last more than 18 months before. With that, _good luck_.
Re: Blip: Peer-to-peer massive file sharing
#119Earlier quoted context omitted.
Why's that, given that files are encrypted?
With whose key? I am not saying the service is not trust worthy, just that there is trust involved. Trust not only they are not malicious, but also they won't have some kind of vulnerability. Plus if it's encrypted how is the other party going to read the file? The key will have to take the same path.