[deleted]
X0.at: upload files from cURL
71–80 of 93 posts
Re: X0.at: upload files from cURL
#72Earlier quoted context omitted.
There wasn't any danger. Nothing more than Google Drive or Dropbox. And they didn't have any way to contact them and explain. Way to heavy-handedly shut down a potential business idea.
Drive and Dropbox are at least moderated.
I'm surprised to hear that because their response in dealing with actual child porn is absolute atrocious. A sick and sad story:
Couple years ago got a DM from an ex-colleague and security researcher who discovered child porn that was publicly accessible. he contacted Dropbox several times over the course of 3 weeks. Weeks later the links were still up. I reached out to somebody I knew at Dropbox who said they were reluctant to do me this favor and deal with that matter and would prefer if I continue contacting their security. I continued trying on LinkedIn and contacted several people in Germany and the UK. No response other than "thank you for your email". The head of security in Germany even blocked me for saying "there is child porn on the site please help me get hold of somebody in charge". Getting really fed up by then, I contacted sales from my company email (a fortune 500 company) and asked them to give me a quote for what looked to them like a multi million $ client. Within 2 hours I got a call from the VP of sales to talk about my "storage needs". I told them about the child porn and that they are helping to actively distribute it now since several weeks. One of the videos was a girl not older than 7 getting raped and tortured. It took another 3 days to take down the material.
Re: X0.at: upload files from cURL
#73Earlier quoted context omitted.
Drive and Dropbox are at least moderated.
I'm surprised to hear that because their response in dealing with actual child porn is absolute atrocious. A sick and sad story: Couple years ago got a DM from an ex-colleague and security researcher who discovered child porn that was publicly accessible. he contacted Dropbox several times over the course of 3 weeks. Weeks later the links were still up. I reached out to somebody I knew at Dropbox who said they were r…
Why didn't you contact the police first?
Re: X0.at: upload files from cURL
#74Perfect. a replacement for transfer.sh. I use it to make small audio snippets (synthesized speech) available as URL for Sonos to play. With a decent turnaround time, it works to create your own spoken announcements with something like espeak as the synthesizer. I hope this service will survive the spam it will atract...
Re: X0.at: upload files from cURL
#75Earlier quoted context omitted.
I'm surprised to hear that because their response in dealing with actual child porn is absolute atrocious. A sick and sad story: Couple years ago got a DM from an ex-colleague and security researcher who discovered child porn that was publicly accessible. he contacted Dropbox several times over the course of 3 weeks. Weeks later the links were still up. I reached out to somebody I knew at Dropbox who said they were r…
Why didn't you contact the police first?
Yeah honestly if I saw something like that I would have saved an offline copy on a USB stick and handed it to police for investigation. The problem that it even happens is much greater than the problem of online distribution, and deleting it and pretending it didn't happen isn't a satisfactory response.
Re: X0.at: upload files from cURL
#76Earlier quoted context omitted.
Why didn't you contact the police first?
Yeah honestly if I saw something like that I would have saved an offline copy on a USB stick and handed it to police for investigation. The problem that it even happens is much greater than the problem of online distribution, and deleting it and pretending it didn't happen isn't a satisfactory response.
> I would have saved an offline copy on a USB stick
Yeah that must be great to walk around with...
Re: X0.at: upload files from cURL
#77Yeah this is asking for trouble. We only had a small demo on our homepage where users could upload media files and they were deleted after 24 hours and still some people managed to abuse it and nearly got our site killed, domain blacklisted in Google with a big red screen of death. I don't want to spam any links here but if you are interested please do look at my last post about the dangers of doing this and lessons…
Similar sites like http://ix.io/ have been up for many years with no issues. I assume spam can be a problem, but these sites must have figured something out.
Re: X0.at: upload files from cURL
#78Yeah this is asking for trouble. We only had a small demo on our homepage where users could upload media files and they were deleted after 24 hours and still some people managed to abuse it and nearly got our site killed, domain blacklisted in Google with a big red screen of death. I don't want to spam any links here but if you are interested please do look at my last post about the dangers of doing this and lessons…
Similar sites like http://ix.io/ have been up for many years with no issues. I assume spam can be a problem, but these sites must have figured something out.
I suspect spam is on the nicer side of things people might upload... :/
Re: X0.at: upload files from cURL
#79Earlier quoted context omitted.
Why didn't you contact the police first?
Yeah honestly if I saw something like that I would have saved an offline copy on a USB stick and handed it to police for investigation. The problem that it even happens is much greater than the problem of online distribution, and deleting it and pretending it didn't happen isn't a satisfactory response.
Yeah honestly if I saw something like that I would have saved an offline copy on a USB stick and handed it to police for investigation
Maybe not a great idea. In some places, that puts you in possession, and is enough for prison time, regardless of your motives.
Re: X0.at: upload files from cURL
#80One can upload a file to their Dropbox via a cURL post, provided they have created an app and have an access token, which just takes a few minutes to set up. curl -X POST https://content.dropboxapi.com/2/files/upload --header "Authorization: Bearer ACCESSTOKEN" --header "Dropbox-API-Arg: {\"path\": \"/DROPBOXFILEPATH/DROPBOXFILENAME\"}" --header "Content-Type: application/octet-stream" --data-binary @/LOCALFILEPATH/L…
Or directly to S3
https://gist.github.com/tuxfight3r/7ccbd5abc4ded37ecdbc8fa46...