Live data from Hacker News

Curl.io – Share files from your terminal or ssh

curl.io

31–40 of 68 posts

Re: Curl.io – Share files from your terminal or ssh

#32

Earlier quoted context omitted.

Don't know about you, but an SSL certificate does nothing to increase my level of trust of a website.

Without TLS, absolutely anyone along the link (not just curl.io) can inject some BS into your command line if you choose to copy-paste. If you don't trust curl.io, fine. But without TLS the list of people you need to trust is not only curl.io, but everyone else in the tubes too.

Or just yourself. As it really should be.

Re: Curl.io – Share files from your terminal or ssh

#33
Great idea but where I'd find value in something like this is for securely transferring files to people who, presumably, are somewhat clued. If I needed to do that, doing it without SSL seems counter productive (as has been pointed out). Additionally, while the four hour deletion is nifty, were I building this (could be a fun toy to hack together), I'd like a settable timer or download count. The comment about auto generating to URI path is spot on too. Sure, it would be nice to be able to choose but in many cases, a randomized path is ideal.

Again, cool toy and a fun idea but...

Too bad the code isn't available so I could hack it up a bit. I've saved this, in case bored and want to give it a try on my own some time.

Re: Curl.io – Share files from your terminal or ssh

#35

Great idea but where I'd find value in something like this is for securely transferring files to people who, presumably, are somewhat clued. If I needed to do that, doing it without SSL seems counter productive (as has been pointed out). Additionally, while the four hour deletion is nifty, were I building this (could be a fun toy to hack together), I'd like a settable timer or download count. The comment about auto g…

You might be interested in this project I worked on https://github.com/abemassry/wsend-gpg it's end to end encryption, there's no settable timeout but there is a delete command so something like what you're saying might be possible.

I've already posted below but wanted to share this with you incase you're interested.

Re: Curl.io – Share files from your terminal or ssh

#36
post #2

Just awesome. I tried custom shell scripts to upload to dropbox and other cloud storages but it never felt right. The other magic is, on Mac you can see the upload status in the browser window if you keep curl.io open.

What were your difficulties with other storage?

S3 is as easy as:

s3cmd put FILE [FILE...] s3://BUCKET[/PREFIX]

Dropbox is automatic, just move a file to a local directory. They have CLI tools, though. If you want the public url, it's just:

$ ~/bin/dropbox.py puburl ~/Dropbox/Public/file.zip

If you don't want dropbox running all of the time, just use the 'start' and 'stop' arguments to dropbox.py.

References: http://s3tools.org/usage

http://www.dropboxwiki.com/tips-and-tricks/using-the-officia...

Re: Curl.io – Share files from your terminal or ssh

#38

Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste

That's not really relevant to what's going on here. This isn't some script you're blindly downloading/executing from an untrusted source, and it's certainly not a phishing attempt with a seemingly innocuous URL that is actually malicious once you copy it. You can just `man curl` and find out exactly what's going on here. ( http://unixhelp.ed.ac.uk/CGI/man-cgi?curl , scroll down to the bit on "--form", and check out t…

It is absolutely relevant. Did you check the link I posted? I understand completely what's going on here, and the important part is that the website is inviting you to copy a command from the website and paste it into your terminal.

Now, even if you're OK with giving curl.io your files and trust it enough to not insert malicious commands into the command you're pasting (see link from my GP comment), since the connection is on clear text, anyone between your machine and curl.io can in theory modify the command text you're invited to copy-paste, and inject malicious commands of their choosing.

Re: Curl.io – Share files from your terminal or ssh

#39
post #2

Just awesome. I tried custom shell scripts to upload to dropbox and other cloud storages but it never felt right. The other magic is, on Mac you can see the upload status in the browser window if you keep curl.io open.

What were your difficulties with other storage? S3 is as easy as: s3cmd put FILE [FILE...] s3://BUCKET[/PREFIX] Dropbox is automatic, just move a file to a local directory. They have CLI tools, though. If you want the public url, it's just: $ ~/bin/dropbox.py puburl ~/Dropbox/Public/file.zip If you don't want dropbox running all of the time, just use the 'start' and 'stop' arguments to dropbox.py. References: http://…

There were 2 issues, one copying the script onto every machine and the second one related to login credentials. Some scripts needed an authentication file and others need it on prompt. Unfortunately keys(both S3 and dropbox) are not handy all the times.
Post reply on HN