- cross-posted to:
- firefox@lemmy.ml
- Daniel Quinn ( @danielquinn@lemmy.ca ) English13•1 year ago
One red flag from that podcast:
When asked how they might deal with abuse of the service to distribute illegal files, he suggested that you could compare uploaded files to hashes of known files. This doesn’t make sense in a system where the server has no knowledge of the unencrypted file, since the same file encrypted with two different passwords will result in two different hashes.
- braveone ( @braveone@lemmy.ml ) 7•1 year ago
Can’t you hash it before uploading and upload just the hash? Or download the banned hash list locally.
- Daniel Quinn ( @danielquinn@lemmy.ca ) English9•1 year ago
Sure, but then you’re trusting the client. I can always encrypt
x
and send along the hash fory
.- myself ( @myself@lemmy.ml ) 13•1 year ago
In the end you can always just encrypt the illegal stuff externally before giving it to them…
- m-p{3} ( @mp3@lemmy.ca ) English2•1 year ago
The only way I could see them flagging potentially illegal files on the server-side if they don’t have access to the cleartext file would be through the filesize, and that would lead to too many false-positives. On the client-side it could be done through a local checksum against a denylist (compared locally for privacy reason) before uploading, but that could be easily defeated.
- JSens1998 ( @JSens1998@lemmy.ml ) 8•1 year ago
- ExLisper ( @ExLisper@linux.community ) English5•1 year ago
Cool. Mozilla Send was really nice.
- Otter ( @otter@lemmy.ca ) English4•1 year ago
That’s cool! I don’t have a chance to listen to the podcast right now, does anyone have more details?
- jlow (he/him) ( @jlow@beehaw.org ) 4•1 year ago
I only found this: https://github.com/tdulcet/Thunderbird-Send
but that might be something else?
- Franzia ( @Franzia@lemmy.blahaj.zone ) 4•1 year ago
Awesome. Glad the days are over when important whistleblowers in the white house are using Confide, or some other encrypted bullshit meant for horny young people and like a genuinely professional and email-adjacent encrypted service.
- shiveyarbles ( @shiveyarbles@beehaw.org ) 3•1 year ago
Thundercast assemble!
- d0ntpan1c ( @d0ntpan1c@lemmy.blahaj.zone ) 3•1 year ago
Thundercast is a great listen! Its not all about mozilla stuff either. Mostly a group of thunderbird team members hanging out with a few discussion topics.
Sounds like it will probably be behind a subscription like Firefox Relay and Mozilla VPN, and probably very affordable like those. Server costs and all.
Definitely looking forward to more info about this. I really enjoyed the original send, and solving large files in email without needing to wire up a webDAV drive or go to another service to upload would be awesome. Presumably it’ll be thunderbird focused, but hopefully it can be used from a browser extension or web app to use on the go or with webmail clients too.
- LollerCorleone ( @LollerCorleone@kbin.social ) 1•1 year ago
I am excited for this!