4 ms·

Why blockchain? Because there's one FAQ that you're obviously missing: "How do I delete a compromised/accidentally-uploaded file?" and I suspect it's because t

Why blockchain? Because there's one FAQ that you're obviously missing: "How do I delete a compromised/accidentally-uploaded file?" and I suspect it's because the answer is "You can't." This would be the last place I'd upload anything important. Once that URL/password get out, whatever "secure" file I've uploaded is exposed forever.

AndrewStephens 7y ago
> Once that URL/password get out, whatever "secure" file I've uploaded is exposed forever. That is true even if you can delete the uploaded file. Once someone else has seen it you no longer control distribution. That said, you are right to distrust file transfer services by default. They are in a position to mess with you in many ways.
Fnoord 7y ago
I'd say the primary use case is data which you want to keep public forever. Such as your legacy before you pass away (it is pay once, host forever, right?). Such as an encrypted insurance file for Mr. Assange. I can also imagine this would be interesting for copyright infringement (eventually with spliced files; e.g. with RAR .rar .r01 r02 etc), or for an activism, or whistle-blower. I suppose though that once that 'blockchain' has a too bad ratio of 'morally bankrupt content' (that'd be our jurisdiction's definition) it'd just be forced to closed down the hard way.
- DanHulton 7y ago
  In that case, that should be part of the selling point of the service. If it were pitched like that, I wouldn't have even considered "can't delete it" as an objection as I did, more as a strength.
  - Fnoord 7y ago
    Agreed. Without that selling point then I'd say for all non-sensitive content, the cross-platform (Python) magic-wormhole [1] should suffice. [1] https://github.com/warner/magic-wormhole https://github.com/warner/magic-wormhole
    - Walterion 7y ago
      It seems a nice project, but BlackHole point is to give nontechnical people a hassle-free way to send file without sacrificing privacy.
- rtkwe 7y ago
  Speaking of did anything happen with all those insurance files he posted during his exile/asylum in the embassy? Were the conditions extradition or did nothing ever come of them.
- Walterion 7y ago
  Yes Fnoord, this is one potential use case but not the primary one. Our focus is on giving people an EASY and SECURE way to send their file to each other. Most other services out there are easy to use but not secure or private, or very secure, but you need to be a semi developer to use them. If anyone shares their file publicly, it will be their responsibility.
  - DanHulton 7y ago
    https://send.firefox.com/ https://send.firefox.com/ is probably the easiest way to securely send a file that I can think of off the top of my head. You don't need to be a developer, and the file is automatically deleted after a period of time. With a file stored on the blockchain, I remain continuously and permanently vulnerable to a data breach or any other loss of secrecy control. The moment that link/password combo is compromised, that file is permanently public. Now, you could argue that the moment a file is briefly public, it can be downloaded and thus is outside of your control anyway, and you'd be correct. But the case I'm more specifically thinking of is trying to send a large, reasonably secret file through email. You can't attack 1GB to mail, so you upload it somewhere and send the email with the url/password. If you use Firefox Send, that file gets to its recipient, and then shortly thereafter, the link becomes invalid. If I use this service, that link stays valid forever. If my company's email archive is then later exfiltrated by a hacker or disgruntled employee, that secure file in the first case remains secure. In the second case, it's now compromised. This doesn't invalidate certain uses of your service, but to not mention anywhere on your site that uploaded files will remain available irrevocably and forever is negligent.
Walterion 7y ago
All the files will be split and encrypted, then uploaded to a random hub on your provider of choice. Of course, we provide a free provider. No matter what provider, all files will be encrypted before leaving your machine. About delete, as the name suggests, we don't have control on your file, we will encrypt it, give you the key, and then send it, like a very secure post.

AndrewStephens 7y ago

> Once that URL/password get out, whatever "secure" file I've uploaded is exposed forever. That is true even if you can delete the uploaded file. Once someone else has seen it you no longer control distribution. That said, you are right to distrust file transfer services by default. They are in a position to mess with you in many ways.

Fnoord 7y ago

I'd say the primary use case is data which you want to keep public forever. Such as your legacy before you pass away (it is pay once, host forever, right?). Such as an encrypted insurance file for Mr. Assange. I can also imagine this would be interesting for copyright infringement (eventually with spliced files; e.g. with RAR .rar .r01 r02 etc), or for an activism, or whistle-blower. I suppose though that once that 'blockchain' has a too bad ratio of 'morally bankrupt content' (that'd be our jurisdiction's definition) it'd just be forced to closed down the hard way.

DanHulton 7y ago
In that case, that should be part of the selling point of the service. If it were pitched like that, I wouldn't have even considered "can't delete it" as an objection as I did, more as a strength.
- Fnoord 7y ago
  Agreed. Without that selling point then I'd say for all non-sensitive content, the cross-platform (Python) magic-wormhole [1] should suffice. [1] https://github.com/warner/magic-wormhole https://github.com/warner/magic-wormhole
  - Walterion 7y ago
    It seems a nice project, but BlackHole point is to give nontechnical people a hassle-free way to send file without sacrificing privacy.
rtkwe 7y ago
Speaking of did anything happen with all those insurance files he posted during his exile/asylum in the embassy? Were the conditions extradition or did nothing ever come of them.
Walterion 7y ago
Yes Fnoord, this is one potential use case but not the primary one. Our focus is on giving people an EASY and SECURE way to send their file to each other. Most other services out there are easy to use but not secure or private, or very secure, but you need to be a semi developer to use them. If anyone shares their file publicly, it will be their responsibility.
- DanHulton 7y ago
  https://send.firefox.com/ https://send.firefox.com/ is probably the easiest way to securely send a file that I can think of off the top of my head. You don't need to be a developer, and the file is automatically deleted after a period of time. With a file stored on the blockchain, I remain continuously and permanently vulnerable to a data breach or any other loss of secrecy control. The moment that link/password combo is compromised, that file is permanently public. Now, you could argue that the moment a file is briefly public, it can be downloaded and thus is outside of your control anyway, and you'd be correct. But the case I'm more specifically thinking of is trying to send a large, reasonably secret file through email. You can't attack 1GB to mail, so you upload it somewhere and send the email with the url/password. If you use Firefox Send, that file gets to its recipient, and then shortly thereafter, the link becomes invalid. If I use this service, that link stays valid forever. If my company's email archive is then later exfiltrated by a hacker or disgruntled employee, that secure file in the first case remains secure. In the second case, it's now compromised. This doesn't invalidate certain uses of your service, but to not mention anywhere on your site that uploaded files will remain available irrevocably and forever is negligent.

Walterion 7y ago

All the files will be split and encrypted, then uploaded to a random hub on your provider of choice. Of course, we provide a free provider. No matter what provider, all files will be encrypted before leaving your machine. About delete, as the name suggests, we don't have control on your file, we will encrypt it, give you the key, and then send it, like a very secure post.