News for hackers. Stuff that matters.
Re:Transfer.sh – Easy file sharing from the command line by mr_mitm on Tuesday July 06, 2021 @02:31AM (#27744866)
I wish magic wormhole used federated rendezvous servers, was usable from within a locked down corporate network, had a .NET implementation with a pretty GUI so that even my mom could use it, came with all major OS by default and was as accepted as e-mail so that I can actually share files with everyone, not just my nerdy friends. Is that even remotely a realistic thought?
Re:Transfer.sh – Easy file sharing from the command line by AgentME on Tuesday July 06, 2021 @04:25AM (#27745517)
I feel like a web clone of it hits some of your goals: https://webwormhole.io/
Re:Transfer.sh – Easy file sharing from the command line by mr_mitm on Tuesday July 06, 2021 @06:37AM (#27746488)
It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time and unless a specific version is somehow pinned by default, you are in principle vulnerable to MitM attacks.
Re:Transfer.sh – Easy file sharing from the command line by alephu5 on Tuesday July 06, 2021 @08:02AM (#27747258)
Host your own version and hash all the JavaScript sources https://www.srihash.org/