44K views · Jun 20, 2016 · 33:24 · 3 HN recommenders · 5 mentions · discussed 2018–2023
Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.
Why Hacker News points people here: Recommended as the author's own explanation of the design and security of magic-wormhole.
“Author has a very good video on it at pycon-2016”HN comment, 2023
“According to parents nice talk[1]”
Talk covering key verification over a public authenticated channel
According to parents nice talk[1] you can add a verify switch that lets you compare the signature of the actual key. So a public authenticated channel is enough. [1] this video
“Here's a link from Brain Warner (the author) talking about that”
Author explains the tool and answers the question
Here's a link from Brain Warner (the author) talking about that: this video Hope it helps, it's a good question.
“Author has a very good video on it at pycon-2016”
Author's PyCon talk on easy, secure file transfer
Magic Wormhole: link An easy and secure file transfer program. I use it almost everyday since I discovered it. Author has a very good video on it at pycon-2016: this video
“here is the timecode from a video that shows it in action”
Shows magic-wormhole in action
I could not find an example on the gibhub page, but here is the timecode from a video that shows it in action: this video Also: link Looks neat.
“An explanation of the cryptography and design was given at PyCon 2016[2].”
Explanation of the cryptography and design of magic-wormhole
Have you taken a look at magic-wormhole[1]? I've started using it recently and it's insanely easy to use. It does have a centralised signalling server for key exchange between peers, but it does attempt to do peer-to-peer data transfer (only falling back to a TURN-style relay if both clients are behind NATs and aren't on the same local network). An explanation of the cryptography and design was given at PyCon 2016[2]. It also has built-in optional Tor support (though I'm not sure if it attempts to use an onion service for data transfer). [1]: link [2]: this video
