17 ms·
X0.at: upload files from cURL
- umvi 6y agoThese are always nice little sites to have around, but they can't really grow much in popularity before users start abusing them to distribute illegal things at which point the site has to start doing more and more content moderation or be shut down.
- jtokoph 6y agoCame to say this. OP: If this is your site it will be used for piracy, underage porn and phishing within hours.
- faeyanpiraat 6y agoIt might be a honeypot for exactly that purpose aswell
- anderspitman 6y agoWhat would it lead them to other than the user's VPN ip/Tor exit node?
- ivan888 6y agoIt might lead to: someone who wasn't careful enough to use one of those options, identifying metadata in the file, etc
- philshem 6y agowhich makes the p2p file transfer websites so special https://file.pizza/ https://file.pizza/ and https://webwormhole.io/ https://webwormhole.io/ (*based on https://github.com/magic-wormhole/magic-wormhole https://github.com/magic-wormhole/magic-wormhole)
- deleted 6y ago[deleted]
- bityard 6y agoNot OP, but this site has been around for months at least, maybe a year, it would be sad if it had to taken down right after landing on the front page of HN.
- deleted 6y ago[deleted]
- anderspitman 6y agoSad but true. One reason why easy self hosting is important for these types of projects.
- geek_at 6y agoCan confirm. I had a public demo of my open source image hosting solution [1] (where you can resize images and videos by just entering a different URL) up for years without problems, until idiots started uploading CSAM (Children sexual abuse material). Luckily I found out before law enforcement did [2] so I proactively talked to my federal bureau for months generating Excel sheets of IPs and access times and devices and countries. I didn't see many of the images myself, basically just looked at one upload per IP which was like three in total and forwarded all uploads of that IP to the police but man.. what the hell is wrong with people. 4 digit number of uploads of CSAM. [1] https://github.com/HaschekSolutions/pictshare https://github.com/HaschekSolutions/pictshare [2] https://blog.haschek.at/2018/fight-child-pornography-with-raspi-and-deep-learning.html https://blog.haschek.at/2018/fight-child-pornography-with-ra...
- ivan888 6y agoThe process of properly reporting and working with authorities seems daunting. (Anecdotally,) It sounds too easy to implicate yourself for a technical violation of the law by (even unknowingly) hosting this content, or accidentally transferring it to one of your personal devices. Much worse following the advice of your local police to print out images which would be completely illegal! On the other hand, if the process was too lenient on reporters, hosting a file sharing service that "gets abused" with illegal content might turn into the ultimate scapegoat for illegal content users/creators/brokers Nice job going through the reporting process and I'm glad you blogged about it to share with others
- tobylane 6y agoAgreed. I was using it* for TravisCI, and having moved to Github Actions I'm glad they have uploads stored per run. *this one and another few before it.
- _joel 6y agoAlternatively https://transfer.sh/ https://transfer.sh/
- smartbit 6y agoIt’s back! I thought it stopped nov 30, 2018? +1
- _joel 6y agoIndeed, they had a bit of a hiatus but the service was brought back.
- jonathantf2 6y agoLink is dead for me.
- _joel 6y agoWhich one? https://downforeveryoneorjustme.com/transfer.sh https://downforeveryoneorjustme.com/transfer.sh says it's up and fine for me. If you're curling don't include the last character that the URL has in response. That's effectively a carriage return/end of data
- laurensr 6y agoAlternatively https://bashupload.com/ https://bashupload.com/
- geocrasher 6y agoWith the CurlyTP protocol, any server can be uploaded to using curl or wget. Access might be a problem though. https://miscdotgeek.com/curlytp-every-web-server-is-a-dead-drop/ https://miscdotgeek.com/curlytp-every-web-server-is-a-dead-d...
- the_arun 6y agoUploading files without auth layer - is asking for trouble IMHO. Change without audit trail will encourage wrong doers. But I get the idea, this is an example for a file upload in a simple way using Curl or other tools.
- ju-st 6y agoThe website is already blocked because of "Malicious Sources/Malnets" in the firewall of the company I work at.
- raverbashing 6y ago"This is why we can't have nice things..." sigh
- southerntofu 6y ago> Uploading files without auth layer - is asking for trouble IMHO. If you make it super user-friendly and advertise it as the next Megaupload, sure. But if you keep a small audience of good-faith users it's not asking for problems. If you can teach me to make my file upload as hacker-friendly as this service while implementing auth, i'd be glad. Here the entire point is you don't need further configuration/credentials for example to upload log/config from a server.
- the_arun 6y ago1. How are you blocking someone from uploading millions of files programmatically? 2. How do you know someone is from small audience of good-faith? 3. What if a file has virus and corrupt all the files on your end? If you don't need auth, there are few measures you can take on your end: 1. TTL - Make these files temporary - They will be erased after x hours. Eg. x=1 2. Throttle - Limit number of uploads from a given IP/machine or control by uploads per sec 3. May be adding a malware scanner?
- xvector 6y ago4. Block IPs known for abuse. This includes VPNs, Tor exit nodes, and more.
- southerntofu 6y agoAnother alternative: the famous nullpointer https://github.com/mia-0/0x0 https://github.com/mia-0/0x0 A small script i use very regularly: #!/usr/bin/env bash if [ ! -f $1 ]; then echo "MISSING: $1"; exit 1; fi torify curl -F"file=@$1" https://YOURSERVER || echo "UPLOAD FAILED (code: $?)"
- koeng 6y agoThis is kinda similar to ix.io. Cool!
- calvinmorrison 6y agoThe longest running one that I've used for a long time is ix.io
- _whm1 6y agoAnother self-hosted script (Python) that aims for easy integration with curl https://github.com/kennell/curldrop https://github.com/kennell/curldrop
- hprotagonist 6y agoi’ve been using 0x0.st pretty happily.
- acco102 6y agoSia https://siasky.net/ https://siasky.net/ has also upload from curl.
- 40four 6y agoI like the simplicity of it. One PHP file, throw it on a server with Apache and rock and roll. Other comments are right to point out that this site is setting itself up to be abused. My feeling is that this is intended to be a demo. I doubt the creator is trying to provide a real service here. And they might be in for a rude awakening if it gains traction. But, it looks like they intend this to be open source. Anyone can clone the repo and run this on their own server! Unfortunately, the repo does not have a license file, which makes me a little uneasy. Edit: I didn’t say that very well. With no license file, technically we cannot actually use this code since it defaults to ‘All rights reserved’. I think the author might not realize that though. It seems they intend it to be ‘open’ based on line 334. Also, it is not particularly good PHP code, a little rough around the edges. But hey, it's a cool demonstration on a very straight forward way to upload & share files! Could be a good starting point to develop further.
- s_dev 6y ago>the repo does not have a license file, which makes me a little uneasy. Surely the author is bearing the liability of getting burned by not specifying a licence.
- cyberbanjo 6y agoWhy? I thought this type of situation would default non-permissive licensing in-lieu of an explicitly permissive one.
- frabert 6y agoI don't think you have much responsibility in not specifying a license, since it defaults to "all rights reserved", thus preventing anyone else from using that code.
- gugagore 6y agoNo. If you find some code online, or on a thumb drive on the sidewalk, and it is unlicensed, it's incorrect to assume that it's equivalent to being permissively licensed for you to do whatever you want with it.
- 6y ago
- uploaderwin 6y agoYeah this is asking for trouble. We only had a small demo on our homepage where users could upload media files and they were deleted after 24 hours and still some people managed to abuse it and nearly got our site killed, domain blacklisted in Google with a big red screen of death. I don't want to spam any links here but if you are interested please do look at my last post about the dangers of doing this and lessons I learned from my mistake. Please do not keep the files for 10 days. Even 24 hours is a deal-breaker. From what I've learned, anything more than 30 minutes can get you into trouble.
- dheera 6y agoI once had a location-based file sharing service that also got blacklisted by Google with no recourse. I hate Google trying to police the internet with no timely appeals process. I wonder though if you could simply just block the Google crawler and bypass it. Or use a JavaScript to auto-POST something before the file gets sent for download. The Google crawler doesn't issue POST requests as far as I know.
- gowld 6y agoBy "police", do you mean "warn people about dangers" ?
- dheera 6y agoThere wasn't any danger. Nothing more than Google Drive or Dropbox. And they didn't have any way to contact them and explain. Way to heavy-handedly shut down a potential business idea.
- xyzzy_plugh 6y agoDrive and Dropbox are at least moderated.
- planetafro 6y ago
- apayan 6y agoIf you like the convenience of transferring a file temporarily into the cloud to download it elsewhere (great for getting stuff out of a rancher environment), check out patchbay[0]. It uses what it calls 'HTTP channels' so if you start a POST request to a patchbay URL, it will block until a corresponding GET is made to the same endpoint which will receive the data from your POST. The operation can be done in reverse as well, with the GET blocking until the POST begins. [0] https://patchbay.pub/ https://patchbay.pub/
- orf 6y agoGotta love PHP https://github.com/Rouji/single_php_filehost/blob/master/index.php https://github.com/Rouji/single_php_filehost/blob/master/ind...
- mratzloff 6y agoFor simple peer-to-peer file sending between technically-inclined people, I use Magic Wormhole. https://github.com/magic-wormhole/magic-wormhole https://github.com/magic-wormhole/magic-wormhole
- SeriousM 6y agoBecause this is an austrian domain you need to put an Impressum on it with details about the hosters name and address. Sorry to spoil the fun :(
- naturalpb 6y agoOne can upload a file to their Dropbox via a cURL post, provided they have created an app and have an access token, which just takes a few minutes to set up. curl -X POST https://content.dropboxapi.com/2/files/upload https://content.dropboxapi.com/2/files/upload --header "Authorization: Bearer ACCESSTOKEN" --header "Dropbox-API-Arg: {\"path\": \"/DROPBOXFILEPATH/DROPBOXFILENAME\"}" --header "Content-Type: application/octet-stream" --data-binary @/LOCALFILEPATH/LOCALFILENAME
- derwiki 6y agoOr directly to S3 https://gist.github.com/tuxfight3r/7ccbd5abc4ded37ecdbc8fa46966b7e8 https://gist.github.com/tuxfight3r/7ccbd5abc4ded37ecdbc8fa46...
- mlang23 6y agoPerfect. a replacement for transfer.sh. I use it to make small audio snippets (synthesized speech) available as URL for Sonos to play. With a decent turnaround time, it works to create your own spoken announcements with something like espeak as the synthesizer. I hope this service will survive the spam it will atract...
- qrv3w 6y agoI'll tack on mine as well, which you can self-host: https://github.com/schollz/share https://github.com/schollz/share Also there is a cute alias you can do to easily 'share' files: alias share='f() { curl --progress-bar --upload-file "$1" https://share.schollz.com https://share.schollz.com | tee /dev/null; echo };f'
- deleted 6y ago[deleted]
- georgewsinger 6y agoWolfram also allows this with with CopyFile["/path/to/file",CloudObject["your.file"]] I use it all of the time.
- jchook 6y agoReminds me of https://0x0.st/ https://0x0.st/
- miguelmota 6y agoI've been using sprunge.us for years cat file.txt | curl -F 'sprunge=<-' http://sprunge.us http://sprunge.us