meejah

9 ms·

1.
by meejah 11mo ago
Here are some fairly simple examples: testing port parsing https://github.com/meejah/fowl/blob/e8253467d7072cd05f21de7c... ...and https://github.com/magic-wormhole/magic-wormhole/blo
2.
by meejah 1y ago
I am not a cryptographer, but can explain that Magic Wormhole uses SPAKE2 to negotiate a shared secret (RFC9382 claims equivalent to gap Diffie-Hellman), and then uses NaCl SecretBox to symmetrically encrypt all data between the peers. (If
3.
by meejah 1y ago
Correct. It does learn some metadata: the endpoints of the messages (unless you use Tor) and the number of bytes in those messages.
4.
by meejah 1y ago
...and also "Git-WithMe" for peer-to-peer, one-off Git usage: https://sr.ht/~meejah/git-withme/
5.
by meejah 1y ago
Note, too, that you may run your own "transit helper" (code: https://github.com/magic-wormhole/magic-wormhole-transit-rel... ) and then specify this via "wormhole --transit-helper tcp:<your host>:&
6.
by meejah 1y ago
You should probably first test and ensure that you're sending "directly" instead of via the relay -- but if that's true then yes.
7.
by meejah 1y ago
One use-case could be for SyncThing to actually _use_ magic-wormhole as a way to introduce / join another endpoint to a SyncThing folder.
8.
by meejah 1y ago
There are Rust and Haskell implementations too (not quite as feature-full as the Python code yet, though) as well. In principal WebRTC communication could be added to magic-wormhole, but that work has not been done yet. There is WebSocket s
9.
by meejah 1y ago
You might even use Magic Wormhole to securely transfer WireGuard keys!
10.
by meejah 1y ago
There are several different clients available for Magic Wormhole, including GUIs and phone apps: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...
11.
by meejah 1y ago
If two Magic Wormhole clients _are_ on the same LAN they should communicate directly that way (i.e. no relay required).
12.
by meejah 1y ago
Yes, there are several alternative clients including several for Android: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...
13.
Shell-with-me/shwim: instant E2EE terminal sharing(meejah.ca)
2 points by meejah 1y ago|1 comments
14.
by meejah 1y ago
Building on top of various Magic Wormhole features, "shwim" enables quick and easy 1:1 terminal sharing with durable, end-to-end-encrypted communications using tty-share.
15.
by meejah 2y ago
Yes, all the implementations speak the same wire protocol. The Python implementation has the most features. More about which implementations support what features is here: https://magic-wormhole.readthedocs.io/en/latest
16.
by meejah 2y ago
The Haskell implementation uses the same protocol as the Python implementation. The main difference is that there are some features the Python implementation has that the Haskell implementation still lacks (most notable "Dilation"
17.
by meejah 2y ago
That is just using normal STUN/TURN via another server that one of those developers is running
18.
by meejah 2y ago
Yes, it does -- via the Rust implementation.
19.
by meejah 2y ago
There's also a Haskell implementation (besides the Go one pointed out above). They all interoperate.
20.
by meejah 2y ago
There is also https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht... and if that is lacking anything please file a ticket or pull-request
21.
by meejah 2y ago
Yes. A technique like this is used to do "invites" in Magic Folder, and also in Tahoe-LAFS. That is, they speak a custom protocol over just the Mailbox server in order to do some secrets-exchanging. They never set up a "bulk
22.
by meejah 2y ago
I think Pond had better-thought-out decoy traffic https://github.com/agl/pond with a statistical design and clients would always upload and download the same amount of data (so it was very hard to determine if they &qu
23.
by meejah 2y ago
Yes, inter-packet timings are unfortunately pretty good at holding information. (e.g. https://www.freehaven.net/anonbib/cache/stepping-stones.pdf ) Note that Tor doesn't have "global passive adversary&qu
24.
by meejah 3y ago
There is a Web client at https://winden.app (although it uses different servers than the defaults in the Python CLI, the latter can be easily configured to use the same servers). However, see further discussion in this article a
25.
by meejah 3y ago
"Without needing a server" but both parties have to visit a Web ... server ... to do the exchange. So there _is_ in fact "a server in the middle".
26.
by meejah 3y ago
For sure making the _process_ public is a big plus! (All companies should make their hiring process transparent and public).
27.
by meejah 3y ago
Yes, I was making a more general comment (I think it does still apply whether there's actual code-exercises or not though). If it's "too much work" for you, might be time to re-examine how much work you're asking fo
28.
by meejah 3y ago
Yes, 100% Also, if "everyone" has a 1 hour interview (or whatever) then you're more-or-less comparing equal things. If some people use a week to craft their "asynchronous" responses while some have an hour to do so
29.
by meejah 3y ago
If someone demands hours of free labour for "code exercises" or whatever, the absolute bare minimum is that you put some portion of that back into meaningful code review. So you should probably be spending _more_ time on the feedb
30.
by meejah 3y ago
https://winden.app is a Web client "Destiny" is an Android and iOS client https://github.com/LeastAuthority/destiny/ (These two use servers run by Least Authority by default so to talk to oth

More ›