My only real question I have since there isn't any source code listed.
How secure/private is the actual file storage service? It runs over the onion project which is nice but, without source code there's no proof or evidence of encryption, nor proof that files actually delete as well as other logging style services that a privacy oriented service would normally have.
Hello, there is currently no end-to-end encryption on the server I’ll explain why below. The reasons why
True end-to-end encryption (where I literally can't read your files) means the server only ever sees encrypted blobs. The problem is, that also means I can't scan anything, and right now every upload is checked against known CSAM and run through malware scanning.
Go fully zero-knowledge and I lose that capability entirely, which on an anonymous host is a real problem it basically turns into a blind dropbox for whatever people want to put there.
So it’s genuinely one or the other either I can see enough of the content to keep it clean, or I can’t see it at all and can’t keep it clean. I chose to keep it scannable, because for an open anonymous service, I think being able to block that kind of content is more important.
That’s the real reason there’s no at-rest encryption not laziness it would compromise security. I’m open to hearing how you’d weigh the pros and cons, though.
The ToS says illegal content is removed, which probably means there's no encryption. And some file extensions are blocked which is weird. Files should be encrypted in the browser and not unencrypted at the server.
Use Firefox Send or OnionShare or something instead..
That face in the bottom right corner is creepy as fuck.
Finally! A replacement for BTSync. I’m encouraged to see that it runs on Tor since my first instinct would be: “this is a security nightmare”. Of course, it could still be a security nightmare but at least they are using the right tech stack to achieve security. It’s more about the implementation at this point and I’m too lazy to check the source code.
My original plan was to launch the site and upload the entire source code so people could use it locally (I’ve fallen a bit behind because I’ve been adding features), but I’ll be uploading the full source code soon.
That said, everything is verifiable (regarding ads and trackers). Thank you very much for the comment!
This seems ideal.
My comment has no substance because I just want to find this post easily later.
Thank you very much for your comment. If you have any ideas, I'd love to hear them
https://0x0.st/ is still goat!
Do they have a .onion address?
Yes, that's great I agree with you. But I preferred to do something with a slightly improved UI (if I may say so)
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)