Live data from Hacker News

Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

github.com

21–30 of 38 posts

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#21
post #20

AWS S3 scares the shit out of me. The company I worked for misconfiguration one of the buckets and allowed uploads. A couple of months later there was a bill for $15k. Since apparently some spammers were using our service. Which is OK for a company but I would not want to use it as a private individual.

I have never had to use them directly but the use-now-pay-later model feels scary to me for the same reason. Maybe they allow setting the upper cap to the monthly bill (crossing which they don't serve you until you intervene) but I have never heard of it. On the other hand there are many stories extremely ballooned bills for some unforeseen reasons.

They have "AWS Budgets" for alerting you if you go over an amount but no automatic stops.

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#22

Apparently Thunderbird are working on reviving Firefox Send and adding encryption. Overall Thunderbird seem to be doing white well from themselves since rejoining Mozilla: >$8m in donations last year I think.

FF Send already had encryption -- IIRC, Mozilla shut it down because it was being abused.

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#23

Apparently Thunderbird are working on reviving Firefox Send and adding encryption. Overall Thunderbird seem to be doing white well from themselves since rejoining Mozilla: >$8m in donations last year I think.

FF Send already had encryption -- IIRC, Mozilla shut it down because it was being abused.

Abused in what way? Content? How would they know, if it was encrypted. Or volume?

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#24
post #19

AWS S3 scares the shit out of me. The company I worked for misconfiguration one of the buckets and allowed uploads. A couple of months later there was a bill for $15k. Since apparently some spammers were using our service. Which is OK for a company but I would not want to use it as a private individual.

Notwithstanding the fact that this was a user misconfiguration, S3 allows you to configure public access blocks to prevent this sort of thing.

These days, you have to remove the public access block AND explicitly write a bucket policy (or set up deprecated ACLs) to allow public access.

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#25

Earlier quoted context omitted.

FF Send already had encryption -- IIRC, Mozilla shut it down because it was being abused.

Abused in what way? Content? How would they know, if it was encrypted. Or volume?

Likely law enforcement found out about it being used to distribute illegal content and then applied pressure. Companies don’t have a strong history of successfully resisting that pressure.

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#28
post #11

Can we have this but something server less? Like using cloudflare workers and R2 (I know R2 is S3 compatible)

xkcd949.com is serverless (azure only tho, github.com/gfody/webrelay)

Whoops, http only

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#29
The staying power of “Firefox Send” as a brand is baffling to me. It never did anything that wasn’t already available by multiple other services, didn’t do it better, and it was embarrassingly obvious from day one it was another one of those projects Mozilla would abandon in no time.

Just goes to show how powerful (and mismanaged) “Firefox” is a brand.

Re: Gokapi: Lightweight selfhosted Firefox Send alternative with AWS S3 support

#30

Earlier quoted context omitted.

Abused in what way? Content? How would they know, if it was encrypted. Or volume?

Likely law enforcement found out about it being used to distribute illegal content and then applied pressure. Companies don’t have a strong history of successfully resisting that pressure.

law enforcement is so bass-ackward on privacy/security tools

Of course, if a hammer is for sale, some will use it to build houses and a subset will use it to hurt people. Just because something can possibly be bad doesn't mean we shouldn't have it

Post reply on HN