Brian Warner - Magic Wormhole- Simple Secure File Transfer - PyCon 2016.mp4

Ойын-сауық

"Speaker: Brian Warner
""magic-wormhole"" is a simple tool to move files from one computer to another, like ""scp"" but without the setup. By telling the recipient just a few secret words, the file is safely encrypted and delivered directly to the correct machine. The talk will explain the security mechanics, the cryptography (NaCl and SPAKE2), and how to use the underlying open-source library in your own applications.
Slides can be found at: speakerdeck.com/pycon2016 and github.com/PyCon/2016-slides"

Пікірлер: 28

  • @Unremarkabler
    @Unremarkabler2 жыл бұрын

    Could be the "Rendezvous relay server" a bit limitation to the transaction performance? How many servers around the world? What about the speed?

  • @nicoladellino8124
    @nicoladellino81245 жыл бұрын

    Nice project

  • @dPointe
    @dPointe5 жыл бұрын

    So the comms is centralized on the rendezvous server. What happens when this serves is offline?

  • @UrSoMeanBoss

    @UrSoMeanBoss

    4 жыл бұрын

    it could probably be decentralized to a DHT of volunteer tracker servers or something if people really wanted to do that

  • @markifi
    @markifi8 күн бұрын

    is this where croc came from?

  • @Vanadain
    @Vanadain4 жыл бұрын

    What is send from host (sender) to wormhole server? I presume at least your IP adresses. Is wormhole server able to read those (I didn't uderstood cryptography part of this video)? If they are ableto read your private IP adress, that's privacy violation. Please explain it to me.

  • @NilesRogoff

    @NilesRogoff

    4 жыл бұрын

    at 15:10 he explains it - the message that contains the ip addresses and ports is encrypted with the session key, so only the recipient would be able to read it, not the intermediary server.

  • @gunnargu

    @gunnargu

    3 жыл бұрын

    @@NilesRogoff tell that to tcp source address

  • @spicybaguette7706

    @spicybaguette7706

    3 жыл бұрын

    @@gunnargu he's talking about the private IP (so in your lan, behind NAT), not the public one

  • @markridlen4380
    @markridlen438018 күн бұрын

    I think I've been to enough conventions to know how to spell "Lotharrr"

  • @ionut5316
    @ionut53164 жыл бұрын

    Nice project. I would host the rendezvous server for my own business. There is no Dockerfile in the server repo so the regular human being can deploy it. The server is written in python using a framework called twisted(never heard of it). I tried to run the server by following "the documentation" (20 lines dropped in a readme file). I gave up. I am open to put some time in re-writing this in a decent programming language like Rust and deliver the server as docker container.

  • @ddpxl

    @ddpxl

    3 жыл бұрын

    idk why my reply gets removed every time but it's just a matter of 3 lines of code to get it working in docker.

  • @shantanunair

    @shantanunair

    2 жыл бұрын

    Um, none of what you said should be difficult for you - a regular human being trying to self host services. I kid. And anyway looks like he beat you to it anyway github.com/magic-wormhole/magic-wormhole.rs/commit/d5588ee0e8b26a7b53f9e0e20491449585d7656f

  • @ionut5316

    @ionut5316

    2 жыл бұрын

    ​@@shantanunair never said that is difficult or that I am not capable (thanks for the insult btw). I just said that the project is nice the author(s) should have added a dockerfile in the repo, pretty much all services are delivered in containers these days. This will make it available to a broader audience, not only to software engineers.

  • @techguyteaches789
    @techguyteaches7895 жыл бұрын

    Why is there no demo here? It's a nice concept, but you need to SHOW and tell.

  • @tmmrtn

    @tmmrtn

    3 жыл бұрын

    Is 1:59 not what you're looking for?

  • @timurtheterrible4062
    @timurtheterrible4062 Жыл бұрын

    I fail to see how this is better than symmetrically encrypting a file with PGP or something and then uploading it to one of those file hosting services he mentioned.

  • @faithful451

    @faithful451

    Жыл бұрын

    it's easier and quicker

  • @gloverelaxis

    @gloverelaxis

    9 ай бұрын

    that's a pretty huge failure on your part. that's something you need to fix.

  • @genhen

    @genhen

    6 ай бұрын

    if it takes 10 seconds from person A to upload a file upload to file server = 10 seconds (to upload to server) + 5 seconds (person B to download from server) direct transfer = 10 seconds (to upload directly to person B) so it's just faster to directly transfer than use an intermediate server

  • @timurtheterrible4062

    @timurtheterrible4062

    6 ай бұрын

    @@genhen Doesn't this rely on a relay if everyone has closed ports?

Келесі