How is this using end-to-end encryption? It seems like the recipient just clicks a link to download. How can it have been encrypted for that person? end-to-end encryption normally means that there's no way for the intermediary to unencrypt the data but I can't see how that's possible in this case.
Firefox Send: Free encrypted file transfer service
61–70 of 542 posts
Re: Firefox Send: Free encrypted file transfer service
#62Earlier quoted context omitted.
Tangentially related - I've always thought it's dumb that I can't just plug my iPhone in to any PC and have it show up as a removable storage device. I'm sure people who know more than me will give me a list of great reasons why it's not straightforward to implement... But it doesn't change the fact that I have this incredible device (iPhone X) with 256gb of blindingly fast NAND flash storage, of which I am only util…
> I'm sure people who know more than me will give me a list of great reasons why it's not straightforward to implement... Nah, Android phones have done this forever, it's not technical difficulties stopping it from working. It's The Apple Way . They don't want you using your phone that way, or something.
Argh! I just went through this with a friend's iPhone when he asked spur of the moment to have a video on his iPhone displayed on some monitors for a presentation. The monitors are driven by a Win10 computer. My first thought was to transfer the file from the iPhone with Bluetooth to the computer, but apparently an iPhone can't be paired in that manner. So lame. The video was too big to email, so I used send.firefox.com and uploaded the video to it, and then downloaded the video to the computer. Thanks to the iPhone's protective wall that little stunt cost my friend 200MB of cellular data. The computer didn't have iTunes, and there was no Lightning cable available so direct hardwired transfer wasn't an option either.
Re: Firefox Send: Free encrypted file transfer service
#63Obligatory https://xkcd.com/949/
Re: Firefox Send: Free encrypted file transfer service
#64How is this using end-to-end encryption? It seems like the recipient just clicks a link to download. How can it have been encrypted for that person? end-to-end encryption normally means that there's no way for the intermediary to unencrypt the data but I can't see how that's possible in this case.
Client side JavaScript that encrypts locally befor uploading and puts the encryption key in the url you share with someone that never gets sent to Mozilla. Also client side decryption on the person you shared the link with. It’s end to end.
Re: Firefox Send: Free encrypted file transfer service
#65what is the business case for this tho? Who pays for the bandwidth??
Re: Firefox Send: Free encrypted file transfer service
#66I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?
I just use iCloud Drive. Files on my desktop and in my documents folder get automatically synced to my phone and vice versa. It's extremely easy and painless. I often find myself on my phone, saving a file to my iCloud desktop, and finding the file on my desktop the next time I open the lid of my laptop.
Re: Firefox Send: Free encrypted file transfer service
#67Is the source available for this? A self-hosted version of this would be nice... (Update: Yep, just found it: https://github.com/mozilla/send , just before the comment below was posted :))
boop: https://github.com/mozilla/send
Reminded me of zerobin / privatebin. We used this internally at a previous company to share passwords and sensitive files.
Data is encrypted at client and a url with a key is generated.
Can be used 'burn after reading or with some specific lifetime.
Re: Firefox Send: Free encrypted file transfer service
#68Earlier quoted context omitted.
https://send.firefox.com/legal > We receive IP addresses of downloaders and uploaders as part of our standard server logs. These are retained for 90 days, and for that period, may be connected to activity of a file’s download URL. Although we develop our services in ways that minimize identification, you should know that it may be possible to correlate the IP address of a Send user to the IP address of other Mozilla…
Why is it a necessity to store information for 90 days? Why not 10 or 30?
> Why is it a necessity to store information for 90 days? Why not 10 or 30?
Is there something special about 10 or 30? (You wouldn't ask the same question about 10 or 30?)
Re: Firefox Send: Free encrypted file transfer service
#69I can't believe that there isn't a simple service to transfer data between my cellphone and my computer without going through the internet. iTunes is terribly bloated, MTP is a mess, and Bluetooth is slow and frustrating. Back in my hacker day I used to have an SSH server open on my cellphone and use it to transfer files back and forth with my computer. Why isn't there a mainstream service like that?
I'm a bit confused, in what sense is accessing an SSH server not going through the internet? Was the phone connected to the same LAN as the desktop via Wifi?
Re: Firefox Send: Free encrypted file transfer service
#70How is this using end-to-end encryption? It seems like the recipient just clicks a link to download. How can it have been encrypted for that person? end-to-end encryption normally means that there's no way for the intermediary to unencrypt the data but I can't see how that's possible in this case.
The url effectively contains the decryption key, so the web server could be set to capture the urls and decrypt files.
If you want, you can also set a passphrase on the file to share via another channel