My friend and former colleague has built a bunch of stuff over magic-wormhole like fowl[0], shwim[1] and so on. There is a lot of nice work on "dilated" wormhole.
[0] https://github.com/meejah/fowl>
[1] https://github.com/meejah/shwim>
Magic Wormhole: Get things from one computer to another, safely
51–60 of 107 posts
Re: Magic Wormhole: Get things from one computer to another, safely
#52>Copying files through encrypted email requires bootstrapping a GPG key as well as an email address. Do people realize that GPG supports symmetric encryption?
You need to be sure to use a sufficiently strong password/passphrase for PGP symmetric encryption. For GPG I would use at least 4 diceware words. The thing being discussed here only requires a digit and 2 words due to the use of a PAKE.
It would be nice if things like GPG would generate an appropriate passphrase for you by default.
I guess if you are only going to send one file the difference is not really all that significant. Otherwise the experience after exchanging email addresses and fingerprints would probably be better with encrypted email.
Re: Magic Wormhole: Get things from one computer to another, safely
#53Great tool.
Very minor web page issue report: please add a replay to the video. Thanks.
Re: Magic Wormhole: Get things from one computer to another, safely
#54Folks at Coder authored a p2p file transfer tool using Tailscale (no account needed, the setup is entirely ephemeral, and the code apparently runs a Headscale control server in-memory): https://github.com/coder/wush
Unsure how Tailscale rate limits, if at all, such traffic flowing through its public relays ("DERP"), as a tool like this is just ripe for abuse?
Re: Magic Wormhole: Get things from one computer to another, safely
#55This project made me learn about and attempt to implement the SPAKE2 protocol and HKDF as an exercise. It's quite fascinating. It lets you upgrade a short password to a long key, but requires trusting a server to rate limit attempts on brute-forcing that short password. It seems difficult to find a practical use case for it tho. Because it's only relevant when it is impractical to send a long key. But if you think fo…
That's all nice and dandy, but what about sending data the other way, from a phone to a desktop? Meticulously typing in long strings of text with no mistakes is not really a practical solution for the vast majority of users.
The moderately technical solution is a single-file webserver on the computer that supports file uploads, like https://github.com/sigoden/dufs.
Once it is running all you need to type on the phone is the IP:port.
Re: Magic Wormhole: Get things from one computer to another, safely
#56Earlier quoted context omitted.
It uses a rendezvous server to handle connecting.
Googled. > Because of firewall network address translation (NAT) issues, rendezvous protocols generally require that there be at least one unblocked and un-NATed server that lets the peers locate each other and initiate concurrent packets at each other. So probably cant help with a VPC unless you pierce a hole for it. I guess this makes sense, since by design this shouldn't be possible.
Well it allows you to customize the rendezvous server, so if you're on a network with no internet access you can host the server there.
Re: Magic Wormhole: Get things from one computer to another, safely
#57croc[1] has worked better for me. It supports resuming transfers, which is a must. It is very wormhole like and written in Go. [1] https://github.com/schollz/croc
Note that it's less clear how secure croc is. Magic Wormhole would be the reference there, I think. I have seen issues on the croc repository regarding security, not sure what the state is today.
Granted croc supports resuming transfers, which magic wormhole doesn't.
Re: Magic Wormhole: Get things from one computer to another, safely
#58croc[1] has worked better for me. It supports resuming transfers, which is a must. It is very wormhole like and written in Go. [1] https://github.com/schollz/croc
coc is also available on android which maked it really useful. Although kde connect works very well at least for smallish files, it requires pairing devices you might not want to pair permanently.
Isn't there an Android app supporting magic wormhole?
Re: Magic Wormhole: Get things from one computer to another, safely
#59Don't want to crash my friend's server, but he made a Mac app with this: https://www.viawormhole.xyz/
Any screenshots or further reading? "Download this zip with no description" is tough to recommend.
Re: Magic Wormhole: Get things from one computer to another, safely
#60Earlier quoted context omitted.
coc is also available on android which maked it really useful. Although kde connect works very well at least for smallish files, it requires pairing devices you might not want to pair permanently.
Isn't there an Android app supporting magic wormhole?
There is Destiny https://leastauthority.com/community-matters/destiny/. Although there hasn't been much activity lately.