8 ms·

0x0: Share Files from Terminal

200 points by sathishmanohar 4y ago

infosecau 4y ago
I prefer bashupload.com or transfer.sh for this. Both alternatives have worked well for me. Alternatively, you can check out magic wormhole (for a more secure transfer of files between two terminals): https://magic-wormhole.readthedocs.io/en/latest/welcome.html#example https://magic-wormhole.readthedocs.io/en/latest/welcome.html...
- mikechalmers 4y ago
  transfer.sh looks amazing (i was recently looking into self hosting a wetransfer alternative) - how can such a service be free and unlimited? I may cancel my WeTransfer subscription right away, unless there is anything else to consider? 2 weeks is fine for my purposes.
- mr_mitm 4y ago
  I wish some magic-wormhole implementation came pre-installed on every major platform. When sharing files with others, getting the other side to install it is still a hurdle.
- ubanholzer 4y ago
  I switched from a self-hosted transfer.sh instance to a selfhosted ffsend instance with r2 backend. Quality is much higher, easy to run on docker and its end-to-end encrypted. With the cli tools you can easily upload files from command line. There are sone public instances too: https://gitlab.com/timvisee/send-instances https://gitlab.com/timvisee/send-instances
  - stavros 4y ago
    I thought of self-hosting this (it's fantastic, by the way), but why do that when there are public instances? Feels like too much work for little benefit.
  - networked 4y ago
    Huh, I have been thinking about setting up a file upload service for myself and didn't even remember Send. What a shame. I should consider it. I have found two different options worth sharing: https://github.com/orhun/rustypaste https://github.com/orhun/rustypaste (very lean and minimal) and https://github.com/9001/copyparty https://github.com/9001/copyparty (someone's pet megaproject with features from WebDAV to a tracker music player).
- networked 4y ago
  I didn't know about https://bashupload.com https://bashupload.com. Thanks for mentioning it. There is also https://chunk.io/ https://chunk.io/ in the https://transfer.sh https://transfer.sh category. It requires free registration by emailing the owner. It has some interesting features, like uploading multiple files in one HTTP request and syntax highlighting for source code. Files are associated with your account, so you can delete them without a per-file token and list them. https://github.com/schollz/croc https://github.com/schollz/croc is like Magic Wormhole but can send multiple files and resume transfers. It is written in Go. It releases official static binaries, including for Free/Net/OpenBSD. (Magic Wormhole has alternative implementations with static binaries: https://github.com/psanford/wormhole-william https://github.com/psanford/wormhole-william, https://github.com/magic-wormhole/magic-wormhole.rs https://github.com/magic-wormhole/magic-wormhole.rs.)
  - blacksmith_tb 4y ago
    Came here just to sing the praises of croc myself. To be fair, it and Magic Wormhole are for different use-cases than 0x0 seems to be, one-time transfers of files between friends, basically. For posting things that should be available for multiple downloads by multiple people, it seems like torrents or IPFS would be reasonable choices.
seszett 4y ago
I used to run such a service but I stopped after police came to my door to get logs because it was used to share very illegal pictures. They were friendly and I was never in cause myself, but I don't want to enable this kind of thing, or to have to deal with moderating content, even passively. I'm happy other people provide such services, but just be aware they will inevitably be used for activities you probably don't want to facilitate.
- SLWW 4y ago
  It's the nature of things. This is a given (or at least I thought it was the usual) for many years now. Your only hope is that your service is too obtuse for the creeps/deviants to really grapple onto. Although considering how they are getting younger and younger (the perpetrators) even that is little condolence. I've found myself in similar situations as yours, however now I just use other people's crap. I'm not willing to answer the phone like I was then; so yeah. It's a problem
- mro_name 4y ago
  I assume you intended this service mostly for your personal use and wonder if making it a) unreliable (e.g. having opening hours a.k.a. intentional downtimes) b) applying client side encryption a la https://privatebin.info https://privatebin.info c) expire & purge the (encrypted) content quickly would have mitigated your problem.
  - fooker 4y ago
    It's fairly easy to be held liable if any of these measures affect law enforcement negativively.
  - II2II 4y ago
    If it is mostly intended for personal use, you may as well use some form of access control. We are long past the day when people would abuse such a service to share distasteful material and in an era when people would abuse such a service to share (rightfully) illegal material. While I was uncomfortable with the former, I certainly do not want to facilitate the latter.
aborsy 4y ago
How is it different from magic wormhole?
- edwinbalani 4y ago
  Wormhole is a synchronous transfer between two peers; this site is essentially a paste bin/upload bin.
xk_id 4y ago
Is there anything actually problematic with file hosting “related to cryptocurrency”? Or is it disallowed on just ideological grounds?
- blueflow 4y ago
  Anonymous file hosting + cryptocurrencies = you'll only get uploads related to scamming operations.
marcodiego 4y ago
How I share files from the terminal: python -m http.server 8000 Then I do a quick look at my IP and pass it. If we're not on the same network, then I quickly create on with lnxrouter: https://github.com/garywill/linux-router https://github.com/garywill/linux-router
- tyingq 4y ago
  You mention constraining by IP, but worth emphasizing that http.server has a history of path traversal and other issues, some fairly recent. In case someone liked the simplicity for some broader use.
  - lapinot 4y ago
    I believe GP is not restricting access by IP, but looking up their server's IP to access from a client.
- sgt 4y ago
  Just don't do it in your home dir.
enriquto 4y ago
Don't kids these days know how to use netcat? You only need the other's ip. No need to involve a third party.
- mr_mitm 4y ago
  Different use case, obviously. netcat won't work if both peers are using NAT. Plus, this service enables distribution to many peers as well as asynchronous transmission.
- mro_name 4y ago
  nat with ipv4 may be a showstopper.
  - ilyt 4y ago
    clearly someone needs to make natcat
    - hunter2_ 4y ago
      https://unix.stackexchange.com/a/420281 https://unix.stackexchange.com/a/420281 Also: https://samy.pl/pwnat/ https://samy.pl/pwnat/
    - nutcut 4y ago
      [flagged]
- dxuh 4y ago
  Maybe kids these days know how to use netcat, but sometimes want to send files to people that don't know how to use it.
- sathishmanohar 4y ago
  Can this work async? meaning when can the sender turn off their computer.
  - enriquto 4y ago
pantalaimon 4y ago
Expired files aren't really cleanly handled, the handler code just crashes when trying to access the non-existing file and prints a trace https://0x0.st/-L59.txt https://0x0.st/-L59.txt
- tyingq 4y ago
  That's interesting, as the error calls out "at fhost.c:139". There is no "fhost.c" in the repo, though there is an fhost.py. https://git.0x0.st/mia/0x0 https://git.0x0.st/mia/0x0 Ah, I see. If I go back to an old version of fhost.py, the error you're seeing is just a big hardcoded string. So there is a deliberate handler, made to look like a crash. Strange. def notfound(e): return u"""<pre>Process {0} stopped * thread #1: tid = {0}, {1:#018x}, name = '{2}' frame #0: Process {0} stopped * thread #8: tid = {0}, {3:#018x} fhost`get(path='{4}') + 27 at fhost.c:139, name = 'fhost/responder', stop reason = inv... https://github.com/mia-0/0x0/blob/714de58180072a5563ae1f3d96b8697892f20506/fhost.py#L366 https://github.com/mia-0/0x0/blob/714de58180072a5563ae1f3d96...
  - oefrha 4y ago
    No need to go to an old version, it's in templates/404.html at the moment: https://github.com/mia-0/0x0/blob/c2b5e95903053d084ce9208a2e96226e9f5feebd/templates/404.html https://github.com/mia-0/0x0/blob/c2b5e95903053d084ce9208a2e... Quite interesting.
    - tyingq 4y ago
      Ah, yep. With some "enhancements" too :) {% set pid = range(20,100)|random %} <pre>Process {{ pid }} stopped
vrglvrglvrgl 4y ago
[dead]
Arch-TK 4y ago
I bought 0xf.st a while ago and am still in the process of writing my own custom private paste service out of it.
eminence32 4y ago
Inspired by 0x0.st, I wrote my own version powered by CloudFlare workers. It was initially mostly an excuse to learn more about CF Workers, but it ended up being useful to me too
Bluecobra 4y ago
Props to the person hosting this, reminds me of the early days of the net. It’s interesting that *.rar files are banned but other archives are not. My guess is that it was to stop some bot from uploading warez, or maybe due to password protection. It would be trivial to re-compress it again in another format, so it seems like a constant whack-a-mole game to me.
user- 4y ago
I dont understand something. There are countless forums and sites that ask for donations for hosting costs, and then on the other hand there are countless anon fileupload sites like this which happily store gigs of files/user without asking for money or putting up ads. Whats the incentive for these sites? How do they stay operational?
- calgarymicro 4y ago
  Well, this one does have a donations button. Granted it looks like they're only getting a net 9.52 euros a week.
- detaro 4y ago
  This site also asks for donations. > How do they stay operational? By not growing too large (so costs don't explode) and the owner not minding to pay a bit to run it. Which usually means that they don't stay operational long-term-ish, or introduce stricter and stricter limits. Image hosting sites are something where one could observe this very well over the years: an image hosting site launches and is fast and simple, operator offers generous service for free. Lots of people start using it. Bandwidth costs explode. Site adds advertising, cuts down on hotlinking, strictly limits free tiers ... to make some money back. Users get annoyed. Among them is a techy who thinks: "I can pay for a server or two, I'll launch a better image hosting site, without all the ads!". Such repeats the cycle of life (of image hosting sites) Scale really hurts here - many people can easily run a service that doesn't have too many users (or many users that don't create much load) for years, but scale quickly pushes it out the side-hobby-thing budget.
- from 4y ago
  > Whats the incentive for these sites? How do they stay operational? Intelligence gathering operation?
niux 4y ago
I wanted to learn a bit of Go and I wrote a simple client for it: https://github.com/overflowy/null-pointer-uploader https://github.com/overflowy/null-pointer-uploader
janandonly 4y ago
I wish there was a command line program like this, but one that would make a torrent of that file [1] and return a magnet link for the torrent. The next weak point is the centralization around the tracker. You can solve this by sharing all the tracker information on Nostr [2], maybe? 1. https://instant.io https://instant.io 2. https://nostr.info https://nostr.info
- somat 4y ago
  I just use ipfs ipfs add file_name share the hash with whoever and they run ipfs get hash
- doublepg23 4y ago
  Does DHT solve this? I haven’t had issues sharing a torrent once the DHT info caught up.
- anacrolix 4y ago
  https://github.com/anacrolix/torrent/blob/master/cmd/torrent/serve.go https://github.com/anacrolix/torrent/blob/master/cmd/torrent... does exactly that. Install with `go get github.com/anacrolix/torrent/cmd/torrent@latest`, and then run `torrent serve <torrent paths>`.
adolph 4y ago
Oh, this is a file stash with curl instructions. I was thinking a little more like: Listener: nc -l 19000|bzip2 -d|dd bs=16M of=/dev/sdb Sender: dd bs=16M if=/dev/sda|bzip2 -c|nc serverB.example.net 19000 https://www.ndchost.com/wiki/server-administration/netcat-over-ssh https://www.ndchost.com/wiki/server-administration/netcat-ov...

I prefer bashupload.com or transfer.sh for this. Both alternatives have worked well for me. Alternatively, you can check out magic wormhole (for a more secure transfer of files between two terminals): https://magic-wormhole.readthedocs.io/en/latest/welcome.html#example https://magic-wormhole.readthedocs.io/en/latest/welcome.html...

mikechalmers 4y ago
transfer.sh looks amazing (i was recently looking into self hosting a wetransfer alternative) - how can such a service be free and unlimited? I may cancel my WeTransfer subscription right away, unless there is anything else to consider? 2 weeks is fine for my purposes.
mr_mitm 4y ago
I wish some magic-wormhole implementation came pre-installed on every major platform. When sharing files with others, getting the other side to install it is still a hurdle.
ubanholzer 4y ago
I switched from a self-hosted transfer.sh instance to a selfhosted ffsend instance with r2 backend. Quality is much higher, easy to run on docker and its end-to-end encrypted. With the cli tools you can easily upload files from command line. There are sone public instances too: https://gitlab.com/timvisee/send-instances https://gitlab.com/timvisee/send-instances
- stavros 4y ago
  I thought of self-hosting this (it's fantastic, by the way), but why do that when there are public instances? Feels like too much work for little benefit.
- networked 4y ago
  Huh, I have been thinking about setting up a file upload service for myself and didn't even remember Send. What a shame. I should consider it. I have found two different options worth sharing: https://github.com/orhun/rustypaste https://github.com/orhun/rustypaste (very lean and minimal) and https://github.com/9001/copyparty https://github.com/9001/copyparty (someone's pet megaproject with features from WebDAV to a tracker music player).
networked 4y ago
I didn't know about https://bashupload.com https://bashupload.com. Thanks for mentioning it. There is also https://chunk.io/ https://chunk.io/ in the https://transfer.sh https://transfer.sh category. It requires free registration by emailing the owner. It has some interesting features, like uploading multiple files in one HTTP request and syntax highlighting for source code. Files are associated with your account, so you can delete them without a per-file token and list them. https://github.com/schollz/croc https://github.com/schollz/croc is like Magic Wormhole but can send multiple files and resume transfers. It is written in Go. It releases official static binaries, including for Free/Net/OpenBSD. (Magic Wormhole has alternative implementations with static binaries: https://github.com/psanford/wormhole-william https://github.com/psanford/wormhole-william, https://github.com/magic-wormhole/magic-wormhole.rs https://github.com/magic-wormhole/magic-wormhole.rs.)
- blacksmith_tb 4y ago
  Came here just to sing the praises of croc myself. To be fair, it and Magic Wormhole are for different use-cases than 0x0 seems to be, one-time transfers of files between friends, basically. For posting things that should be available for multiple downloads by multiple people, it seems like torrents or IPFS would be reasonable choices.

seszett 4y ago

I used to run such a service but I stopped after police came to my door to get logs because it was used to share very illegal pictures. They were friendly and I was never in cause myself, but I don't want to enable this kind of thing, or to have to deal with moderating content, even passively. I'm happy other people provide such services, but just be aware they will inevitably be used for activities you probably don't want to facilitate.

SLWW 4y ago
It's the nature of things. This is a given (or at least I thought it was the usual) for many years now. Your only hope is that your service is too obtuse for the creeps/deviants to really grapple onto. Although considering how they are getting younger and younger (the perpetrators) even that is little condolence. I've found myself in similar situations as yours, however now I just use other people's crap. I'm not willing to answer the phone like I was then; so yeah. It's a problem
mro_name 4y ago
I assume you intended this service mostly for your personal use and wonder if making it a) unreliable (e.g. having opening hours a.k.a. intentional downtimes) b) applying client side encryption a la https://privatebin.info https://privatebin.info c) expire & purge the (encrypted) content quickly would have mitigated your problem.
- fooker 4y ago
  It's fairly easy to be held liable if any of these measures affect law enforcement negativively.
- II2II 4y ago
  If it is mostly intended for personal use, you may as well use some form of access control. We are long past the day when people would abuse such a service to share distasteful material and in an era when people would abuse such a service to share (rightfully) illegal material. While I was uncomfortable with the former, I certainly do not want to facilitate the latter.

aborsy 4y ago

How is it different from magic wormhole?

edwinbalani 4y ago
Wormhole is a synchronous transfer between two peers; this site is essentially a paste bin/upload bin.

xk_id 4y ago

Is there anything actually problematic with file hosting “related to cryptocurrency”? Or is it disallowed on just ideological grounds?

blueflow 4y ago
Anonymous file hosting + cryptocurrencies = you'll only get uploads related to scamming operations.

marcodiego 4y ago

How I share files from the terminal: python -m http.server 8000 Then I do a quick look at my IP and pass it. If we're not on the same network, then I quickly create on with lnxrouter: https://github.com/garywill/linux-router https://github.com/garywill/linux-router

tyingq 4y ago
You mention constraining by IP, but worth emphasizing that http.server has a history of path traversal and other issues, some fairly recent. In case someone liked the simplicity for some broader use.
- lapinot 4y ago
  I believe GP is not restricting access by IP, but looking up their server's IP to access from a client.
sgt 4y ago
Just don't do it in your home dir.

enriquto 4y ago

Don't kids these days know how to use netcat? You only need the other's ip. No need to involve a third party.

mr_mitm 4y ago
Different use case, obviously. netcat won't work if both peers are using NAT. Plus, this service enables distribution to many peers as well as asynchronous transmission.
mro_name 4y ago
nat with ipv4 may be a showstopper.
- ilyt 4y ago
  clearly someone needs to make natcat
  - hunter2_ 4y ago
    https://unix.stackexchange.com/a/420281 https://unix.stackexchange.com/a/420281 Also: https://samy.pl/pwnat/ https://samy.pl/pwnat/
  - nutcut 4y ago
    [flagged]
dxuh 4y ago
Maybe kids these days know how to use netcat, but sometimes want to send files to people that don't know how to use it.
sathishmanohar 4y ago
Can this work async? meaning when can the sender turn off their computer.
- enriquto 4y ago

pantalaimon 4y ago

Expired files aren't really cleanly handled, the handler code just crashes when trying to access the non-existing file and prints a trace https://0x0.st/-L59.txt https://0x0.st/-L59.txt

tyingq 4y ago
That's interesting, as the error calls out "at fhost.c:139". There is no "fhost.c" in the repo, though there is an fhost.py. https://git.0x0.st/mia/0x0 https://git.0x0.st/mia/0x0 Ah, I see. If I go back to an old version of fhost.py, the error you're seeing is just a big hardcoded string. So there is a deliberate handler, made to look like a crash. Strange. def notfound(e): return u"""<pre>Process {0} stopped * thread #1: tid = {0}, {1:#018x}, name = '{2}' frame #0: Process {0} stopped * thread #8: tid = {0}, {3:#018x} fhost`get(path='{4}') + 27 at fhost.c:139, name = 'fhost/responder', stop reason = inv... https://github.com/mia-0/0x0/blob/714de58180072a5563ae1f3d96b8697892f20506/fhost.py#L366 https://github.com/mia-0/0x0/blob/714de58180072a5563ae1f3d96...
- oefrha 4y ago
  No need to go to an old version, it's in templates/404.html at the moment: https://github.com/mia-0/0x0/blob/c2b5e95903053d084ce9208a2e96226e9f5feebd/templates/404.html https://github.com/mia-0/0x0/blob/c2b5e95903053d084ce9208a2e... Quite interesting.
  - tyingq 4y ago
    Ah, yep. With some "enhancements" too :) {% set pid = range(20,100)|random %} <pre>Process {{ pid }} stopped

vrglvrglvrgl 4y ago

[dead]

Arch-TK 4y ago

I bought 0xf.st a while ago and am still in the process of writing my own custom private paste service out of it.

eminence32 4y ago

Inspired by 0x0.st, I wrote my own version powered by CloudFlare workers. It was initially mostly an excuse to learn more about CF Workers, but it ended up being useful to me too

Bluecobra 4y ago

Props to the person hosting this, reminds me of the early days of the net. It’s interesting that *.rar files are banned but other archives are not. My guess is that it was to stop some bot from uploading warez, or maybe due to password protection. It would be trivial to re-compress it again in another format, so it seems like a constant whack-a-mole game to me.

user- 4y ago

I dont understand something. There are countless forums and sites that ask for donations for hosting costs, and then on the other hand there are countless anon fileupload sites like this which happily store gigs of files/user without asking for money or putting up ads. Whats the incentive for these sites? How do they stay operational?

calgarymicro 4y ago
Well, this one does have a donations button. Granted it looks like they're only getting a net 9.52 euros a week.
detaro 4y ago
This site also asks for donations. > How do they stay operational? By not growing too large (so costs don't explode) and the owner not minding to pay a bit to run it. Which usually means that they don't stay operational long-term-ish, or introduce stricter and stricter limits. Image hosting sites are something where one could observe this very well over the years: an image hosting site launches and is fast and simple, operator offers generous service for free. Lots of people start using it. Bandwidth costs explode. Site adds advertising, cuts down on hotlinking, strictly limits free tiers ... to make some money back. Users get annoyed. Among them is a techy who thinks: "I can pay for a server or two, I'll launch a better image hosting site, without all the ads!". Such repeats the cycle of life (of image hosting sites) Scale really hurts here - many people can easily run a service that doesn't have too many users (or many users that don't create much load) for years, but scale quickly pushes it out the side-hobby-thing budget.
from 4y ago
> Whats the incentive for these sites? How do they stay operational? Intelligence gathering operation?

niux 4y ago

I wanted to learn a bit of Go and I wrote a simple client for it: https://github.com/overflowy/null-pointer-uploader https://github.com/overflowy/null-pointer-uploader

janandonly 4y ago

I wish there was a command line program like this, but one that would make a torrent of that file [1] and return a magnet link for the torrent. The next weak point is the centralization around the tracker. You can solve this by sharing all the tracker information on Nostr [2], maybe? 1. https://instant.io https://instant.io 2. https://nostr.info https://nostr.info

somat 4y ago
I just use ipfs ipfs add file_name share the hash with whoever and they run ipfs get hash
doublepg23 4y ago
Does DHT solve this? I haven’t had issues sharing a torrent once the DHT info caught up.
anacrolix 4y ago
https://github.com/anacrolix/torrent/blob/master/cmd/torrent/serve.go https://github.com/anacrolix/torrent/blob/master/cmd/torrent... does exactly that. Install with `go get github.com/anacrolix/torrent/cmd/torrent@latest`, and then run `torrent serve <torrent paths>`.

adolph 4y ago

Oh, this is a file stash with curl instructions. I was thinking a little more like: Listener: nc -l 19000|bzip2 -d|dd bs=16M of=/dev/sdb Sender: dd bs=16M if=/dev/sda|bzip2 -c|nc serverB.example.net 19000 https://www.ndchost.com/wiki/server-administration/netcat-over-ssh https://www.ndchost.com/wiki/server-administration/netcat-ov...