@vasgo Wormhole is faster than other services because it uses peer to peer transfer. That means when you're sending files between two devices on the same network the files don't have to go Up to the cloud and then back down to your recipients device. They can get sent right over your home network.
Also, wormhole gives you a link to share to your recipient within a second or two. No need to wait for the file to fully upload to the cloud before you can get a share link to send. Just copy the link and send it, and let the file upload keep going in the background.
@feross slightly confused here (reading https://wormhole.app/security). If the point of this is meant to be trustless (in the sense that you don't have to trust the server), then surely you can just get the secret key using window.location.hash and then decode the contents of the files?
@mandeep But isn't this true of products like 1Password and LastPass too? Couldn't they just steal your master password when you type it in?
I publish open source software that is downloaded 500 million times per month and is used in almost every JavaScript project. If you find any security issues with the design or the implementation, you can report the issue to us and we'll promptly fix it and offer you bug bounty reward.
Report
@feross Hmm... I guess so. I suppose I personally find it hard to wrap my head around secure methods that aim to (effectively) reduce the trust one has to place in the service provider, but suffer from that fatal flaw I mention. The way I see it: with Dropbox, whilst they have the private key, one trusts them not to go around reading people's files casually. IMO the same applies to services like this; one has to trust the operator isn't going to introduce malicious JS.
Maybe I just have a weird, minority perspective on this. In any case, the product – and particularly the UI – looks great. I think what I particularly like, compared to Dropbox/GDrive/etc, is not the security aspect but the no-account-necessary, speedy drag-and-drop a file and immediately see the link. It works super fast with no hassle.
Wish you the best of luck with the project :)
@mandeep I totally understand your perspective. Auditing a web app is always a challenging prospect, but I think that what we're aiming to do counts for something. For example, I trust 1Password more than other password management services because they claim to employ end-to-end encryption, even though I can't fully verify that fact when I use their web interface. It's still better than a service that doesn't make any such claim.
That said, we want to do more to re-assure users with concerns similar to yours. We're going to open source the cryptography code and explore building other types of client frontends, including potentially a CLI client, so you can be more sure that the code hasn't changed out from under you when using Wormhole.
And I totally agree with you re the user interface and no accounts needed. The truth is that, for most people, an app with better security or privacy alone isn't ten times better than an insecure or un-private alternative. Most people just don't understand or care about the details of the apps they use.
This may be starting to change, but to make an app that is truly "better" for most people, you need more than just better privacy and security. The app, holistically, needs to be ten times better.
Report
?makers Cool UI/UX and overall a great Product! Is the wormhole graphic/animation open source? If yes, where can I find it :)? If no, can you make it open source :D? it's so brilliant!! All the best and keep up the good work
Well, I’ve been using almost the same project for over 2 years already - https://encrypt.one/. Passwords, .docx/.xls files sending etc. So this one is not so unique, but this one can transfer up to 5Gb, Encrypt sends only 5Mb(
Replies
BCPRO.APP
Socket for Python
BCPRO.APP
Helpdesk by LabiDesk
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Twake
Socket for Python
Socket for Python
Socket for Python
Socket for Python
Socket for Python