🤩 Exciting news! I'm ready to share the project I've been working on for the past 2 months.
✨ Wormhole – the fastest way to send files ✨
Wormhole lets you share files with end-to-end encryption and it's super fast.
Our #1 goal was speed – you should be able to get a link to send in less than 2 seconds. Everything is end-to-end encrypted and the server never knows anything about your files.
It supports instant streaming (no need to wait for your files to upload to the cloud before you can send the link to your recipient), super fast P2P transfer over local networks, and 24 hour file hosting so the link keeps working even after you close the site.
Give it a shot and please tell me what you think!
Send a file in 2 seconds: https://wormhole.app
Read our manifesto: https://wormhole.app/about
Read our security design: https://wormhole.app/security
@ferminrp@giuseppegurgone@feross might be good to include white label in the pro plan. This looks like a good solution for a problem that my company is facing.
@ferminrp@giuseppegurgone@darren_t_jansen Can you send me an email to (my first name AT my first name DOT org) with information about what problem your company is trying to solve? Thanks!
Wow, this looks amazing!! How do you plan on making sure that it doesn't go the same way as Firefox Send did?
(also, that animation when you upload is sooo cool 😍)
@booligoosh I think Firefox Send shut down because of abuse. We'll deal with that when it becomes an issue. But we have some ideas. We'll add a "Report" button which allows the reporter to send us the bad files for analysis and ban IPs which continually send reported files. More speculatively, we can include client-side malware scanning and use fancy crypto to attest to the server that the files have passed the scan before we authorize upload. Worst case if it came down to it, we could require an account to send files, but we want to avoid that if we can.
End-to-end encrypted messaging apps like Signal manage to fight abuse without access to their user's messages, so we know there must be a way.
UI is very good, thanks.
QR code can be beneficial instead of the only URL, when transferring files between desktop and mobile phone.
I am using https://drop.lol/ . I love the easy-to-use functionality. It is not a direct alternative for wormhole, It transfers files directly between clients.
@alfonsopereze We're going to add an option to disable it, as well as detect your operating system's "prefer reduced motion" setting, if you've set that.
?makers Cool UI/UX and overall a great Product! Is the wormhole graphic/animation open source? If yes, where can I find it :)? If no, can you make it open source :D? it's so brilliant!! All the best and keep up the good work
Saw this tool a while ago and saved it to the browser. Tried it for the first time today and I was unable to download the received files through the link. It would be great if you could look into this :(
@harsh_gelda Are you sure that you waited until the files were fully uploaded before you closed the tab on the sender side? Also, how large were the files? We don't store files larger than 5GB on our servers – so for those you'll need to keep your browser open on the sender side.
@jan_mazurek We don't use onion routing like Tor -- we're not trying to hide your identity from the person you're sending files to. But we do use end-to-end encryption, which, of course, is used in Tor and also lots of other places too.
@vasgo Wormhole is faster than other services because it uses peer to peer transfer. That means when you're sending files between two devices on the same network the files don't have to go Up to the cloud and then back down to your recipients device. They can get sent right over your home network.
Also, wormhole gives you a link to share to your recipient within a second or two. No need to wait for the file to fully upload to the cloud before you can get a share link to send. Just copy the link and send it, and let the file upload keep going in the background.
@feross slightly confused here (reading https://wormhole.app/security). If the point of this is meant to be trustless (in the sense that you don't have to trust the server), then surely you can just get the secret key using window.location.hash and then decode the contents of the files?
@mandeep But isn't this true of products like 1Password and LastPass too? Couldn't they just steal your master password when you type it in?
I publish open source software that is downloaded 500 million times per month and is used in almost every JavaScript project. If you find any security issues with the design or the implementation, you can report the issue to us and we'll promptly fix it and offer you bug bounty reward.
@feross Hmm... I guess so. I suppose I personally find it hard to wrap my head around secure methods that aim to (effectively) reduce the trust one has to place in the service provider, but suffer from that fatal flaw I mention. The way I see it: with Dropbox, whilst they have the private key, one trusts them not to go around reading people's files casually. IMO the same applies to services like this; one has to trust the operator isn't going to introduce malicious JS.
Maybe I just have a weird, minority perspective on this. In any case, the product – and particularly the UI – looks great. I think what I particularly like, compared to Dropbox/GDrive/etc, is not the security aspect but the no-account-necessary, speedy drag-and-drop a file and immediately see the link. It works super fast with no hassle.
Wish you the best of luck with the project :)
@mandeep I totally understand your perspective. Auditing a web app is always a challenging prospect, but I think that what we're aiming to do counts for something. For example, I trust 1Password more than other password management services because they claim to employ end-to-end encryption, even though I can't fully verify that fact when I use their web interface. It's still better than a service that doesn't make any such claim.
That said, we want to do more to re-assure users with concerns similar to yours. We're going to open source the cryptography code and explore building other types of client frontends, including potentially a CLI client, so you can be more sure that the code hasn't changed out from under you when using Wormhole.
And I totally agree with you re the user interface and no accounts needed. The truth is that, for most people, an app with better security or privacy alone isn't ten times better than an insecure or un-private alternative. Most people just don't understand or care about the details of the apps they use.
This may be starting to change, but to make an app that is truly "better" for most people, you need more than just better privacy and security. The app, holistically, needs to be ten times better.
Replies
Socket for Python
Socket for Python
Socket for Python
Product Requirement Document Template
Socket for Python
Webstudio
Socket for Python
Socket for Python
1Feed
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python
BCPRO.APP
Socket for Python
Helpdesk by LabiDesk
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Twake
Socket for Python
Socket for Python
Socket for Python
Socket for Python