github: https://github.com/kern/filepizza show hn: https://news.ycombinator.com/item?id=9535332
FilePizza and Bitfly are much simpler implementations, doing 1-to-1 file transfers in the browser using the basic WebRTC Datachannel API.
Looks like FilePizza is now using WebTorrent too now, as it's mentionned in their FAQ:
"Where are my files sent? Your files never touch our server. Instead, they are sent directly from the uploader's browser to the downloader's browser using WebTorrent and WebRTC. This requires that the uploader leave their browser window open until the transfer is complete."
ps: although it says the HTTPS connection is not safe.. weird. pps: lazy me would love a multiple file options ..
I have a question: Secure against what thread model?
The FAQ has an entry for "How do I know you're not sending all my data to the NSA?" but that's the wrong question to ask (i.e. Even if you're not behaving maliciously, that doesn't mean our data is safe against highly sophisticated threats).
It would really be great if you could demonstrate what makes this more secure than alternative solutions.
That said, this is kind of neat.
Therefore, can't they download the sample just like the connected client?
I'm not sure about how I should go about demonstrating what makes this model more secure, except making it more obvious that it doesn't involve storing your data on servers not under your control which is the case with solutions like email and skype.
You might be able to do something diffie-helman shaped at the javascript level (hard to ensure it actually works) to show a fingerprint of the shared secret that could be confirmed via outside channels.
But all-in-all this does not offer ANY security over a server because there is no way to show it is not just being stored on a server.
For regular Internet to Internet media calls I can use XMPP/Jingle client.
...but would probably need WebRTC functionality in Safari to work on iOS devices
I had it working too casting a chromecast with a system for displaying various file formats and basically file sharing your phone.
Not enough time in the world to finish every side project. Also once I found out about AirDroid I kind of felt they had my main use case pretty covered. Not quite but close. https://www.airdroid.com/
Source: https://github.com/cowbell/sharedrop Discussion: https://news.ycombinator.com/item?id=7468328
So is it secure or isn't it?
https://github.com/warner/magic-wormhole
It gives you a few words for you to give the recipient, they type them in, and boom, transfer starts.
It's great to see this being implemented using WebRTC now, which was just popping onto the radar back then. I envy you building this without having to write any action script or flex code! Best of luck with the project.
If you are worried about security, encrypt before sending.
