Foss or gtfo. Im not letting a black box see my files. I dont care what you claim, I have been burned before.
I tried foss. I couldn't get it to work so i'm trying something different.
I'm sure it's a hard problem to solve. However, I'm still not using a product missing a critical feature just because the developer found it too difficult to include the feature. Sympathy to the developer but also I need that feature.
By feature, do you mean "foss"? (Wondering if you're replying to the correct thread)
If so, then it's unfortunate I'm investigating this direction, it seems nessesary.
Otherwise feel free to let me know of a critical feature missing (if "foss" is not the feature you meant.)
I'm sorry for being a dick, but without seeing what the ones and zeros are doing I'm just not touching it with a ten foot pole. Good luck to you.
I'm the farthest thing from an expert when it comes to programming, etc., but my understanding was that the FOSS end of it is more about which license you use to distribute, and whether or not you provide the code to the public?
I don't really understand how that would affect the functioning of the app itself. But again, I'm not a programmer so maybe I'm missing something here.
I'm no expert on the matter of licences either. I made the open source code some bsd licence because some of the dependencies called for it.
I created some code and made some open source. I don't have to apply that to all my projects.
Closed source and a crowded market.
Sorry to say, but I don't think you understand the audience for this.
If interested in how it works and to see code examples, this project is based on my beefier open-source code seen here: https://github.com/positive-intentions/chat
He probably means that people who want extreme privacy and would use such a tool would also not trust anything close source, even if it's based on an open source project
I mean to draw attention to the open source code in such a case.
People in here are either wannabe snowden or sell some grass
There ain't no trust in this game. If it isn't open source then it's pretty much dead in the water. You can't compete with OSS with closed code in this space, really. There's a few alternatives (and ones that are more mature and proven) that will always be first choices.
Absolutely. Also, it probably is in your best interest to advertise details of your cryptography. What data is shared with whom, what algorithms are used, etc.; if you're doing something more exotic / low-level, Alice-Bob diagrams can be helpful. I'm not sure what other people do but when looking at security-sensitive software, the first thing I do is look for the cryptographic setup and research it.
I'm in the process of rebranding and moving domains, so the documentation links are broken. You can try the search. it seems to work reasonably well. A good place to start could be from here:
https://positive-intentions.com/docs/research/authentication#authentication-sequence
Feel free to reach out for clarity on anything.
strong title
Strong title needed for strong claims.
Its based on open source code. https://github.com/positive-intentions/chat . I'd be happy for feedback on that too.
Webrtc would be able to outperform all other methods for transfer speed (useful for when sending larger files)
I'm sure there is a market for eople who want to transfer files. With a zero-installation, zero-registration, it should make it easy for people to get started.
Hold the phone. You basically modified open source code and plan to sell it on the app store as closed source. Correct?
Just to be clear, my own open source code. Yes.
Does it include even one line of anyone else's contribution to your open source code?
Got it
well more competition = better so good luck!
I use magic wormhole for these sorts of things. There are many FOSS clients and the protocol is open. Here's my android client of choice and my Linux client of choice. There are also many options of other GUI and command line implementations.
By the way this is a maintaned fork of your Android Client: https://github.com/iyox-studios/iyox-Wormhole
Thanks. I hope to get to a point where I can make the experience as seamless as workhole.
To compare solutions, a key details around providing my app as a webapp, is to avoid the requirement of a client. this opens up the set of compatible platforms.
(Note: it's a common request for me, so by popular demand, i will aim to provide binaries for the major platforms.)
this app is not libre software.
useless
That sounds cool 👍 If you do decide to make it FOSS I'd be happy to try it out and give feedback.
Thanks!
Perhaps you'd like to give feedback on a separate but similar foss project: https://github.com/positive-intentions/chat
That looks cool - thanks for the link :)
Cool project, but it seems to be very similar to PairDrop with the major downside of not being open-source. What would be the advantages of using this project over existing FOSS-solutions?
Thanks!
Here is the foss equivalent of this project: https://github.com/positive-intentions/chat
Unfortunately, open source isn't sustainable. I'm investigating close-source as a way to create something competitive. My plan is to try to sell it on the Play store.
As for pairdrop, their approach to peer discovery relies on knowing the network you're connected to. This makes it easy to find peers in cases where you use the same WiFi network. In mine I'm using WebRTC to allow connections over the internet. Peer discovery is achieved by using crypto-random IDs exchanged as a link or QR code.
Ultimately it's worth noting my app is a work in progress. I hope I can update the UX to make the functionality as seamless as pairdrop.
So it's like croc, but closed source?
I have a weird setup with open and closed source.
I have open source examples of this code in action. If interested: https://github.com/positive-intentions/chat
I understand you want to make money from this, but for privately sending files, the much more mature and free open source projects will be greatly preferred. So I dont see this app going anywhere. Closed source doesn't lend itself to privacy all that well. Gl.
From Switzerland, Sharrr, OpenSource, encrypted EE2E, no knowledge, 10GB/file, one time download. From the same author, https://scrt.link/, for share autodestructive encrypted notes.
I'm of the opinion that you should probably provide Source Code on a "Source Available" basis to people who ask and have a need to see it to audit or self-compile. The lack of "Open-ness" in your code is disturbing.
I won't comment or judge on your decision to refuse to offer this software on a Libre basis. You absolutely have the right to monetize as necessary; especially if this code is speaking to a backend infrastructure that you maintain for it. Even if all you do is aim to break even and pay for those servers.
The experience is extremely unintuitive. I couldn't get your app to work at all on my privacy enforcing browser within the confines of my privacy enforcing LAN. (Yes; I do/did enable WebRTC and the other required technologies, however they're enabled in a privacy respecting manner.) Neither of my devices would show or remain connected once added. There were no popups or information given to me by the app to troubleshoot the issue; and I'm not going to crank open a Dev Console for something that I can't contribute to anyways. If your software is going to remain closed in source; "It should just work™".
thanks!
im a developer im not much of an expert on licences of any kind. i created code and decided to open source it here: https://github.com/positive-intentions/chat . when i say the close source app is "based on" the open source code, i hope it doesnt undermine that it itself is a fully functional p2p messaging system (im of the opinion that all projects will always need refinement). anyone with issues about close-source code should take a look at the open-srouce version. its basically more functional but it seems too complex to maintain as open source andd thus this new project.
id like to offer the statics as a zipped folder. this is in the roadmap, but the code will be minified and obfuscated. about as opaque as possible for "source available". i dont know much on the matter, but id like to learn more about if this can be made into libre software. its hardly modifyable or studyable.
while i dont want you to "trust me bro", i am actively developing it and improving the functionality. so that static bundle will have to be build by the CI/CD and it will update along with the app. it goes without saying, the project is not mature enough to have things like security audits.
thanks! for your feedback there! ahh the connection bugs. unfortunately this is is one of the trickier bugs. im working towards fixing that asap. i have an idea of a fix, but im trying to avoid rewriting a core piece. have you tried closing the app on both devices and trying again (sorry, i know its a bit cliche).
if its not a secret, can you maybe tell me more about your LAN setup for me to set something up and try? i certainly aim for it to "just work".
Network is standard double NAT grade B. [ISP <-> Router <-> Firewall <-> Client] with all necessary port forwards in place (TCP/UDP 1025-65535 to Firewall). Firewall is standard pfSense CE; and will forward invisibly and does automatically perform necessary UPnP and port forwarding as detected. STUN may be necessary but does function and establish the route(s) and the ports your application selected would ordinarily be invisibly NAT'ed quickly by the firewall as long as the packets are solicited.
ICE Candidates udp <Public IPv4>:65359 srflx udp <Public IPv6>:65363 srflx udp [<Public IPv6 /64 issued by ISP>]:54597 srflx udp [<Public IPv6 /64 issued by ISP>]:58798 srflx Error: No active TCP candidates were found
To my knowledge your application does not appear to opinion or declare if it uses STUN. (Perhaps it should, there are valid reasons to offer STUN or not offer STUN). The application provides no meaningful errors so I can't tell what might need adjusted or allowed network-wise.
Obfuscated code is not "Source Available". You will need to provide the code without obfuscation; though I don't personally blame you if you're choosy about what reasons you will release the source for.
I need this. But ffsend + encrypted zip file works most of the time. Or onionshare.
Not sure I see how this helps.
For me, it's an achievement for it to be comparable to those tools. I aim to get to a similar feature set and make the user experience intuitive.
How is this different than FTP?
This is using the WebRTC protocol. As a webapp it's immediately good to go, there isn't a need to run something like a FTP server.
Of course limitations apply like sending larger files nukes my ram... But I after it's sent, it seems to settle down.
Just use OnionShare
This is really cool. What kind of cryptography are you using?
I'm trying to keep it vanilla. I'm using module federation (love it or hate it), to get it from this repo.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)