4 ms·

Interesting, it seems to work very similarly to Firefox Send. For communications in the other direction, such as when you want to make sure the other person se

by dethos 6y ago

Interesting, it seems to work very similarly to Firefox Send. For communications in the other direction, such as when you want to make sure the other person sends you the content securely, there is https://github.com/whitesmith/hawkpost https://github.com/whitesmith/hawkpost (disclaimer, this was an hackathon project I participated some years ago). Hawkpost doesn't even store the encrypted content. I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption).

garettmd 6y ago
Thanks for the link to Hawkpost, it looks really cool!
- hathym 6y ago
  you might also be interested in https://github.com/magic-wormhole/magic-wormhole https://github.com/magic-wormhole/magic-wormhole
  - fernandotakai 6y ago
    one of my favorite tools, i just wish there was a good GUI for it.
    - bj0 6y ago
      There's a webapp version (clone?) of it: https://webwormhole.io/ https://webwormhole.io/ There's also a nice go port (single binary) of it: https://github.com/schollz/croc https://github.com/schollz/croc
    - Klonoar 6y ago
      I've been building a Rust macOS app for it, actually - could use testers in a week, I think. Let me know if you're interested? https://twitter.com/ryanmcgrath/status/1368027469068963843/photo/1 https://twitter.com/ryanmcgrath/status/1368027469068963843/p...
    - psanford 6y ago
      Have you tried this? https://github.com/Jacalz/wormhole-gui https://github.com/Jacalz/wormhole-gui
timvisee 6y ago
By the way, Mozilla's Send is down, but I'm maintaining a fork with a public instance. :) https://send.vis.ee/ https://send.vis.ee/ (https://github.com/timvisee/send https://github.com/timvisee/send)
- mushufasa 6y ago
  That is very neat! That said, I think a lot of the value of Firefox Send, which I used a bunch, was that it was maintained by a trusted brand in Mozilla. Indie groups won't have that reputation. And if I wanted to self-host, I would just use magic-wormhole.
  - timvisee 6y ago
    Definitely. But many still use it, partially because of `ffsend` (https://github.com/timvisee/ffsend https://github.com/timvisee/ffsend), so it's nice to have around.
- haunter 6y ago
  Do you have any problem with spam? Afaik that was one of the main issue why Mozilla shut down the service originally, it was _too good_
  - timvisee 6y ago
    Not that I know of. Got a DMCA only once. Mozilla's instance was obviously associated with the big names 'Mozilla' and 'Firefox' which made it easy to abuse. That isn't an issue now. I guess that helps.
    - GraemeMeyer 6y ago
      The Mozilla one was being used to deploy malware, so you should watch out for that in advance. Frankly, I don't know how though, and I think Mozilla couldn't figure it out either -that's why it was shut down instead of fixed
prophesi 6y ago
This is really clever. And looks like it's easy to self-host via Docker. > I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption). I'm actually in the midst of building out a tool for that exact scenario[0]. You can send it to anyone so long as you know the email or username they use for a service that implements OAuth. If they successfully authenticate and the server sees their username / email match up, it sends back the encrypted data to the frontend, which then decrypts it with the key in the URI fragment. It's neither audited nor open source just yet, so I don't recommend using it for actual secret sharing until then. [0] https://intended.link/ https://intended.link/
- RussianCow 6y ago
  This is a fantastic idea! Bookmarked. Is there a GitHub repo of this? I would be more than happy to contribute some PRs.
  - prophesi 6y ago
    There hopefully will be one soon! The backend was written haphazardly in a weekend, so once I clean it up to save myself some embarrassment, I'll open up the source on Github. I'll send you an email if that happens (using the one in your HN profile).

by dethos 6y ago

garettmd 6y ago

Thanks for the link to Hawkpost, it looks really cool!

hathym 6y ago
you might also be interested in https://github.com/magic-wormhole/magic-wormhole https://github.com/magic-wormhole/magic-wormhole
- fernandotakai 6y ago
  one of my favorite tools, i just wish there was a good GUI for it.
  - bj0 6y ago
    There's a webapp version (clone?) of it: https://webwormhole.io/ https://webwormhole.io/ There's also a nice go port (single binary) of it: https://github.com/schollz/croc https://github.com/schollz/croc
  - Klonoar 6y ago
    I've been building a Rust macOS app for it, actually - could use testers in a week, I think. Let me know if you're interested? https://twitter.com/ryanmcgrath/status/1368027469068963843/photo/1 https://twitter.com/ryanmcgrath/status/1368027469068963843/p...
  - psanford 6y ago
    Have you tried this? https://github.com/Jacalz/wormhole-gui https://github.com/Jacalz/wormhole-gui

timvisee 6y ago

By the way, Mozilla's Send is down, but I'm maintaining a fork with a public instance. :) https://send.vis.ee/ https://send.vis.ee/ (https://github.com/timvisee/send https://github.com/timvisee/send)

mushufasa 6y ago
That is very neat! That said, I think a lot of the value of Firefox Send, which I used a bunch, was that it was maintained by a trusted brand in Mozilla. Indie groups won't have that reputation. And if I wanted to self-host, I would just use magic-wormhole.
- timvisee 6y ago
  Definitely. But many still use it, partially because of `ffsend` (https://github.com/timvisee/ffsend https://github.com/timvisee/ffsend), so it's nice to have around.
haunter 6y ago
Do you have any problem with spam? Afaik that was one of the main issue why Mozilla shut down the service originally, it was _too good_
- timvisee 6y ago
  Not that I know of. Got a DMCA only once. Mozilla's instance was obviously associated with the big names 'Mozilla' and 'Firefox' which made it easy to abuse. That isn't an issue now. I guess that helps.
  - GraemeMeyer 6y ago
    The Mozilla one was being used to deploy malware, so you should watch out for that in advance. Frankly, I don't know how though, and I think Mozilla couldn't figure it out either -that's why it was shut down instead of fixed

prophesi 6y ago

This is really clever. And looks like it's easy to self-host via Docker. > I wonder if there is a solution that would correctly deal with both situations (never requiring the other end to sign up or know anything about encryption). I'm actually in the midst of building out a tool for that exact scenario[0]. You can send it to anyone so long as you know the email or username they use for a service that implements OAuth. If they successfully authenticate and the server sees their username / email match up, it sends back the encrypted data to the frontend, which then decrypts it with the key in the URI fragment. It's neither audited nor open source just yet, so I don't recommend using it for actual secret sharing until then. [0] https://intended.link/ https://intended.link/

RussianCow 6y ago
This is a fantastic idea! Bookmarked. Is there a GitHub repo of this? I would be more than happy to contribute some PRs.
- prophesi 6y ago
  There hopefully will be one soon! The backend was written haphazardly in a weekend, so once I clean it up to save myself some embarrassment, I'll open up the source on Github. I'll send you an email if that happens (using the one in your HN profile).