[ajsnigrutin]

I find it funny, how sending files securely still isn't a solved problem.

Record your neice blowing off the candles at her birthday party, and the next day, her mom asks you for the original (high quality) video file, so she can create a party-video... the file is shot on a phone in 4K and uses 300MB of space.

Mail? Nope, too big. Chat platforms? Too big. Cloud upload? You have to share a link, and some services (ahem, skype) actually open those links when you send them... who knows, they might even save the files there. Also, do you really wan't personal videos in the cloud? HTTP/(S)FTP servers too much of a pain to set up for a one time need. We atleast had DCC on irc, now not even that.

So a USB flash drive it is... and a car ride.

[0xbadcafebee]

The problem is receiving files, not sending files. You can mail someone an SD card and they will receive it at their house's mailbox. But if their mailbox fills up, the letter will be returned to you. And there is a maximum size for mail that fits in a mailbox. Similarly, people need a digital mailbox you can send files to, but they need to extract their mail from it and empty it out or it will fill up.

We actually made a great solution for this in the 90s: mailservs, inspired by Usenet. We made AOL bots that would take a file, chunk it into 1.5MB sections, and send each via email attachment. Then a client side program would download all the attachments and reassemble them. We downloaded entire movies this way. After download, the mailbox was emptied; if it wasn't, the next transfer would fail.

So people just need mailserv programs to send files, and download their mail regularly.

[digikata]

For a while now I think we have been lacking an enabling shareable storage and auth abstraction to build cloud apps on. From this standpoint email is a little bit of shared storage: owner read, public write (with email specific secure acceptance algos), group chat: account read, account write; note app: owner read, write.

[0xbadcafebee]

I'm sure you can come up with abstractions, but without first doing a whole system design (FRs & NFRs, mapping dependencies, customer requirements, etc) you'll have to scrap those abstractions when they don't match up with how the system ends up needing to operate. So I would recommend not even thinking about technical abstractions until you have a very large multi-layered system visualization.

For example: what is storage? A router stores packets temporarily; is that storage? A DNS resolver caches records; is that storage? A browser stores cookies; is that storage? A chat or email server & client may both store messages in different states for different purposes. What storage should be shared and shouldn't be, in what specific circumstances? Who is allowed to read and write to which thing at which time in which circumstance? All of that will affect your abstraction.

[digikata]

These are fair suggestions for the low level detail of my comment. I think the core functionality is providing a web friendly storage access api providing for user control and syncing between multiple nodes. It's been done before but not recently with more recent and lighter protocols. Apps like the classic sample todo or note taking apps frequently shown on HN should really just be able to connect to a user owned storage - get authorized for a stoage allocation either fronting local storage or easy to spin up a node on a cloud hosted vm.

It's sort of a shame that so much of the new web3 storage work intrinsically links storage to a blockchain, instead providing a blockchain integration as one of many authentication/provisioning models.

[0xbadcafebee]

> Apps like the classic sample todo or note taking apps frequently shown on HN should really just be able to connect to a user owned storage - get authorized for a stoage allocation either fronting local storage or easy to spin up a node on a cloud hosted vm.

Let's think of the simplest possible implementation of that.

A todo app wants to write to 'your storage'. What are your options for storage? If it's some thing like Google Drive, that is a proprietary interface, so right off the bat, you are now implementing vendor-specific things, so an abstraction is not worth much. You could make some kind of "JavaScript Framework For Storage", aka a js library that has 50 different proprietary implementations, but that would only work for javascript apps. Which, if you only code in JavaScript, is fine, but if you want to support some other application written in another language, now somebody has to maintain those 50 different proprietary implementations in another language too. That's just not sustainable.

If instead you want to create one standard web API to access storage through, even if you could define exactly what it should do, you now need to get Google to implement that one standard web API. But why would they? They already have their own Google Drive API which works perfectly well for their own purposes. You would have to show them some significant business advantage to throwing away all the money and code they've sunk into their own API (not to mention that all their customers and their apps have sunk into it) and build and adopt this new API. (That assumes you could even get them to agree to whatever standard API you created, as they may want a half dozen extra features that have nothing to do with storage)

By modeling the whole system, you can quickly see all the weird quirky problems that you will run into trying to make this API and get it adopted. It's not impossible, but it's a much larger problem space than you imagine at first.

[crabmusket]

This sounds like Tim Berners-Lee's new project. https://solidproject.org/

[digikata]

Maybe? Skimming the protocol there aspects of the spec I may not be understanding that superficially seem at odds with a storage container with fairly simple interfaces. Though the security aspects seem at about at the complexity they have to be. I'm probably missing the full aims of the protocol though.

[waste_monk]

In my opinion TBL has lost all credibility after the encrypted media extensions debacle. This pays lip service to privacy but given he has put corporate interests ahead of individuals before I would not trust it. I suspect it is some kind of poisoned chalice.

[ctf1er]

YoU'vE g0t mE nOstAlgiC for AOL. I wrote my own chat file servers and apps for downloading(which amounted to opening a span of emails and adding to download manager.) Chat servers I made/used forwarded the uploaded emails, first made with a tool like you're talking about if not included, but then you'd typically unpack it yourself after dl. AOL has a bad rep with tech people, but it was sure nice them hosting all this rather than what you might have elsewhere and a fun platform to play on.

Tasks like this or even punters(html heading tag denial of service through instant message lol) were what got me interested in programming in middle school, no training or education, just hacking around trying to figure things out in a pirated VB3.0. The community was great with private chatrooms full of users testing and helping others, trying out tools. People shared libraries to learn from, use, adapt. Anyone remember the popular old and terribly named genocide.bas? I'd like to get my hands on some of these old proggies and code if they're still out there.. Or even just the cartoon sheep program which would run around the desktop interacting with window borders.

[Tarq0n]

A passworded zip file would probably be my choice, easy enough to open at the other end even for technologically illiterate people, and doesn't take anything fancy to make.

[yaomtc]

The video is already compressed, a ZIP will not save any significant amount of space in that case.

[pessimizer]

Pretty sure they're zipping for the encryption, not the compression.

edit: the way I'd solve the rest is just by using a torrent magnet link. The problem with that is that you might have to teach someone how to open a port for UDP traffic, but after they've done it, sending files of any size to them becomes trivial.

[IAmLiterallyAB]

If P2P wasn't so awful we could just download from computer to computer. But alas, NAT and IPv4 make that difficult

[capableweb]

I also opt for P2P whenever I can, but it does have drawbacks as well, besides NAT. First, both have to be online at the same time. Second, seems many connections are still not symmetric, so sending files are limited by the upload speed of the sender, and together with the first problem, makes the downloaders experience suffer because of the uploader.

With that said, better infrastructure (IPv6 + better connections) can make P2P very feasible in the future, hopefully. Or software that defaults to local connections if it's possible (so if we can find the device via a private IP, use that connection instead).

[mindslight]

The difficulty created by NAT and IPv4 is drastically overstated. Even if users' devices generally had public IPs, users still wouldn't want to install server software nor leave their computer on. There is no money to be made pushing solutions that cut out the middlemen, so no advertising continually telling people "Try FooTransfer", and thus no network effects. Instead, one user goes "I can send you this using FooTransfer" and the second user goes "that sounds scary and hard".

And doesn't Dropbox work for the given example? That's the mass-market productized/paid/marketed/surveilled solution.

[brnt]

Is P2P awful? I've been using Resilio Sync (neé Bittorrent Sync) for a decade now; if there is a reliable piece of software in my stack, this is it! Sharing files is a matter of passing someone a code. It works so well I really don't think about this as a problem.

[qbasic_forever]

https://webwormhole.io/

[myself248]

There seems to be a never-ending stream of these services, each very similar to the last, but none seem to survive more than a few months, a few years at the outside.

I think GP's point is that this churn indicates that it's not a "solved problem". It's clearly solvable, but whoever runs these services doesn't find a revenue stream. It should probably be provided by your ISP just like email and usenet once were, but the cultural expectation isn't there. Maybe they get shut down because people use them for bad things? I don't know.

[qbasic_forever]

This has been around for years. There's 'churn' because there's almost nothing to hosting this service. None of the data is sent or goes through a cloud service, it's all P2P connections. There only needs to exist a central server for brokering initial connections and handshake between clients. Anyone can setup and run a service like this with just a few dollar domain name and a couple bucks a month of VPS hosting.

I think you're really just wanting some big name or trustworthy player like Dropbox to come out with a similar service. It's not going to happen--like I said by design wormhole and similar tech doesn't send or store data on any central service. There's no value for some big company to give people this service, they're literaly just burning bandwidth to shuttle invisible (to them) bits and data. They can't extract anything like advertising targeting, revenue, etc. from the service. It will always exist as some weird self-hosted thing.

[freeAgent]

I use a personal NAS which solves that problem nicely. The other option that’s much closer to sneaker net would be use of a direct file transfer protocol like Airdrop. There’s also stuff like file.pizza, but that’s not always reliable IME.

[tetris11]

NAS with a DynDNS you have to pay for because ipv4 addresses are scarce I take it? I remember when I could fire up a http.server in python to host some local file, and it would be accessible across the world for as long as I wanted it

[freeAgent]

I point my own custom domain at it, so that part isn’t free. I have my NAS configured to automatically update the DNS record when/if it changes.

[jandrese]

The difficulty in sending files isn't a technical problem, it's a political problem. In particular any efficient file transfer system will immediately be used by people to make copies of copywritten materials. This will ultimately get them in trouble with the law and shut down. So we can only have file transfer systems with obnoxious limitations.

[reidjs]

Google drive or Dropbox link shared to their email address isn’t secure enough for a video of your nieces birthday party??

[megaperplex]

What is your take on this: encrypt your large file and send it over via some common transfer service?

[cookiengineer]

Isn't this the exact use cases of all WebRTC based file sharing tools?