Bitfly
Security and privacy
secure file transfer
SHOW HN2016
How HN took it
4 positive, 11 neutral or asking, 2 mixed, 6 critical, out of 23 comments about the project. Thread score +0.03.
Idea: 3 for, 2 againstPrivacy: 1 for, 4 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Neat and useful idea for direct file sharing
From 3 comments
From the HN title: "secure" I have a question: Secure against what thread model? The FAQ has an entry for "How do I know you're not sending all my data to the NSA?" but that's…
CiPHPerCoder on HNWith some sort of peer discovery functionality, this could be a pretty cool open, cross-platform replacement for Apple's AirDrop. ...but would probably need WebRTC functionality…
crcastle on HNAwesome, I'm looking to incorporate some of this into a project I'm working on.
iolothebard on HN
Objections
Claims of security are unclear; WebRTC signaling via a server allows MITM
From 3 comments
A big problem is that webRTC is highly MITM-able. You have to exchange initial connections using a server. So no party has any way of knowing if you are MITM attacking. You might…
Rhapso on HNFrom the HN title: "secure" I have a question: Secure against what thread model? The FAQ has an entry for "How do I know you're not sending all my data to the NSA?" but that's…
CiPHPerCoder on HN"Secure" but "we advise against using Bitfly for highly sensitive data. You have been warned.". So is it secure or isn't it?
calanya on HN
Serving JavaScript from a server means code could be altered
From 2 comments
that only works if you have a way to assure the JS has not being modified every time the page is ever loaded everywhere. That only works on a content addressed protocol like IPFS
Rhapso on HNThe server can silently decide to start sniffing the keys at any time. That isn't security.
sneak on HN
Requests
Support for multiple file selection
From 1 comment
Happy to see that it works with CyanogenMod Chrome Beta on an old HP TouchPad. ps: although it says the HTTPS connection is not safe.. weird. pps: lazy me would love a multiple…
agumonkey on HN
Questions
What threat model does it protect against?
From 1 comment
From the HN title: "secure" I have a question: Secure against what thread model? The FAQ has an entry for "How do I know you're not sending all my data to the NSA?" but that's…
CiPHPerCoder on HN
How does it compare to WebTorrent and similar tools?
From 1 comment
Does anyone know how FilePizza and Bitfly compares to WebTorrent?
bobajeff on HN
Alternatives named
FilePizza
From 1 comment
Similar project: FilePizza – https://file.pizza/ github: https://github.com/kern/filepizza show hn: https://news.ycombinator.com/item?id=9535332
helb on HN
ShareDrop
From 1 comment
There's also http://sharedrop.io, which was featured on HN a couple years ago and also uses WebRTC. Source: https://github.com/cowbell/sharedrop Discussion:…
tjohns on HN
Instant.io
From 1 comment
Yet another is instant.io
doomrobo on HN
Magic Wormhole
From 1 comment
My favorite of these tools is magic womhole (command-line only): https://github.com/warner/magic-wormhole It gives you a few words for you to give the recipient, they type them…
StavrosK on HN