• Daniel Quinn@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    One red flag from that podcast:

    When asked how they might deal with abuse of the service to distribute illegal files, he suggested that you could compare uploaded files to hashes of known files. This doesn’t make sense in a system where the server has no knowledge of the unencrypted file, since the same file encrypted with two different passwords will result in two different hashes.

    • braveone@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      1 year ago

      Can’t you hash it before uploading and upload just the hash? Or download the banned hash list locally.

      • Daniel Quinn@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        Sure, but then you’re trusting the client. I can always encrypt x and send along the hash for y.

        • myself@lemmy.ml
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          In the end you can always just encrypt the illegal stuff externally before giving it to them…

  • JSens1998@lemmy.ml
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 year ago

    I don’t know know if you guys are aware, but a user named timvisee on Github forked Mozilla Send and brought back the service. He even hosts an instance himself, and provides the instructions on how to set it up yourself. Would be cool to see Mozilla bring it back offically in some form though.