Conversation

Notices

1. Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:34:33 JST Foone🏳️‍⚧️

   It'd be unlikely to have much use outside the one specific situation I find myself in, but it'd be interesting to have a variant on a one-click hoster that works by setting up a temporary one-off SFTP account. Like, you sign up to provide a file named X, and you can securely upload a thing and it gets stored in a server, which won't let you download X back.
   Someone else creates an account to download the same-named file, and it gives them a similar temporary SFTP account

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:36:32 JST Foone🏳️‍⚧️

     in reply to

     the key would be that neither you nor they have to share anything outside of the filename: and it only allows one signup to be the receiving account

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:38:02 JST Foone🏳️‍⚧️

     in reply to

     so the username/password you're given is one use only, the whole thing is fully encrypted the entire upload and download, and for someone else to MITM it, they'd either need to control the server, or spy on your conversation and sign up to receive it before the intended recipient could

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:39:07 JST Foone🏳️‍⚧️

     in reply to

     and since only one person can sign up to get the file, this MITM would be obvious: the intended recipient would go "hey wait I can't sign up because someone else got it"

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:45:19 JST Foone🏳️‍⚧️

     in reply to

     • immibis

     @immibis Trying to transfer some large-and-sensitive data from an semi-anonymous donor to a place it can be archived, and having it accidentally leaked or intercepted before it can be properly sanitized would be very bad

   • immibis (immibis@social.immibis.com)'s status on Thursday, 02-Nov-2023 01:45:20 JST immibis

     in reply to
     @foone indeed. What is the use?
   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:50:09 JST Foone🏳️‍⚧️

     in reply to

     • Leszek

     @makdaam yeah!

   • Leszek (makdaam@chaos.social)'s status on Thursday, 02-Nov-2023 01:50:10 JST Leszek

     in reply to

     @foone So something like https://github.com/onetimesecret/onetimesecret but also for files?

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Thursday, 02-Nov-2023 01:58:49 JST Foone🏳️‍⚧️

     in reply to

     • immibis

     @immibis that's basically the backup we're falling to, but it's more complicated than I'd like

   • immibis (immibis@social.immibis.com)'s status on Thursday, 02-Nov-2023 01:58:50 JST immibis

     in reply to
     @foone so a normal file transfer but you can only do it once. GPG followed by netcat?