Show HN: File.io – Ephemeral file sharing • Hacker News Board

Post by dublinben » Fri, Jul 31, 2015, 1:19 PM UTC

theoneone wrote: post #89

dublinben wrote: post #85

Earlier quoted context omitted.

You can't provide information that you don't have. Keeping no logs is the best default practice from a legal and privacy perspective.

Privacy yes, but legal? If you operate a website/ service that may be used for illegal purposes then I think you need to be able to track down illegal activities.

The US actually does not have any kind of legally mandated data retention for internet services. If you do not log the data, you cannot be compelled to turn it over.

http://www.internetlawyer-blog.com/2013/09/isp-data-retentio...

https://www.ivpn.net/data-retention-laws/united-states

https://www.bestvpn.com/blog/5539/data-retention-and-vpn-log...

Post by STRML » Sat, Aug 08, 2015, 2:41 PM UTC

tattler wrote: post #83

STRML wrote: post #62

Earlier quoted context omitted.

I built a service for this a few years back - it encrypts and decrypts on each side, all in JS. It's pretty quick with web workers. https://securesha.re

This is close to something I keep meaning to make. It would be awesome if I could download the file without the password to verify that it's stored encrypted though.

That could be faked. The best way to ensure I'm not cheating is to watch the network requests and to look at the code (https://github.com/STRML/securesha.re-client/tree/master/jqu...).

You'll see the POST to the server going up encrypted, and the subsequent GET when you download the file coming down encrypted as a binary XHR.

Show HN: File.io – Ephemeral file sharing

Re: Show HN: File.io – Ephemeral file sharing

Re: Show HN: File.io – Ephemeral file sharing