-
Posts
299 -
Joined
-
Last visited
-
Days Won
5
Everything posted by Disappointed Cat
-
Sync: Security Is Our Highest Priority
Disappointed Cat replied to kos13's topic in Sync General Discussion
IP addresses and peer data could be encrypted with a derived key, like the ENC-RO key. That's just one idea. -
Oh, noes.
-
Sure. Here: https://i.imgur.com/3o3bnhG.jpg ... and after a service restart: https://i.imgur.com/y7qTLoq.jpg
-
I figured as much but it would've been nice to turn off notifications for these. Anyway, I think there are no more tickets left of mine.
-
Can we please do something about the ticket system's automatic e-mails? It's going haywire. In the last ~24 hours I've got like 12 useless mails already. Things like "How would you rate the support?" or "This request is automatically closed by a script due to inactivity." Put me out of my misery!
-
I very much prefer the new WebUI. It's great! I don't need to - nor do I want to - see a mile long page of peers. One small bug at first glance: Encrypted secrets don't show up in the input box like read-only secrets. And a question: At first, it only showed the basename of the paths, now it shows full paths. Why? Can it be configured?
-
I'd take this to the network layer: It'd be awesome if BTSync peers could create a P2P VPN. Then we could use it for virtually anything. At first 1-to-1 could do, then n-to-n. Indeed, this would be a huge side-project and the only thing that we could reuse is the peer discovery, as far as I "know" the system. A VPN can't have delays, so torrent as a transport protocol is not really a viable option. Should I open a thread for this? Is it feasible?
-
Here's a good example: freedns.afraid.org ... and a script for CloudFlare: (original source unknown), but they have decent tutorials/scripts too if you need one. #!/usr/bin/env pythonimport urllib2, json, socketfrom urllib import urlencodedef setipforsubdomain(subdomain, domain, email, tkn, apiaddr, ip): dictionary = dict([ ('a', 'rec_edit'), ('type', 'A'), ('z', domain), ('tkn', tkn), ('email', email), ('name', subdomain), ('content', ip), ('service_mode', '0'), ('ttl', '1')]) rec_all = urllib2.urlopen(apiaddr, urlencode(dict([ ('a', 'rec_load_all'), ('tkn', tkn), ('email', email), ('z', domain)]))) rec_all = json.loads(rec_all.read()) for dicts in rec_all['response']['recs']['objs']: if dicts['name'] == host: id = dicts['rec_id'] else: pass dictionary['id'] = id rec_edit = urllib2.urlopen(apiaddr, urlencode(dictionary)) print urlencode(dictionary) print rec_edit.read()if __name__ == "__main__": subdomain = "dyn" domain = "domain.tld" email = "cloudflare-login@domain.tld" tkn = "secret_api_token" apiaddr = "https://www.cloudflare.com/api_json.html" host = "%s.%s" % (subdomain, domain) ip = urllib2.urlopen("http://icanhazip.com").read()[:-1] current_ip = socket.gethostbyname(host) if ip == current_ip: pass else: setipforsubdomain(subdomain, domain, email, tkn, apiaddr, ip)
-
There are countless free dyn DNS providers, some actually work. If you already own a domain, CloudFlare's API can do this for you with the help of a little script.
-
I vaguely remember it uses Win Crypt API. Am I right? By the way, when can we have a look at the black box crypto specification?
-
Get_peers should also return IP addresses along with client names.
-
Automatically disable auto-sleep on android when the device is plugged in.
- 130 replies
-
Better yet, rename the file to sync.conf and put it in C:\Users\{YourUser}\AppData\Roaming\BitTorrent Sync. This way it will be loaded even if the app is started automatically.
-
Will the Plus version have (free) centralized management? If not and there still won't be anything good floating around when I'll have time for it (early 2014 maybe) then I'm planning on doing that. Until then, a couple of important feature ideas for the API, I'd really like: Option to pause sync per share like on android and as some of us said before, event listeners which could be of two types: URL callbacks and local application/script callbacks (for example for stopping sync while working on a project in an IDE).
-
extreme slowness when btsync encounter symlinks when stat() files
Disappointed Cat replied to metagog's topic in Developers
Symlinks should be propagated from Linux to Windows and vice versa? Neither Win nor *nix symlinks are synced, but Win junction points are which is good. -
It'd be nice to know about these changes or maybe even get full feature specifications... I hope these command characters are escapable.
-
Android builds have different version numbers. Besides, you can get the latest version from Google Play.
-
I started syncing pidgin settings and it's annoying to see the buddy list xml being updated every minute and clogging the logs. So please consider adding the option to rate limit certain files or entire shares.
-
Sounds like a job for SQL replication. Preferably over a secure channel like an SSH or a VPN tunnel. (It's easier to keep a VPN connection truly persistent.)
-
Accessing WebUI through Apache reverse proxy
Disappointed Cat replied to nxmehta's topic in Sync General Discussion
Just change the RewriteRule line to RewriteRule ^ /btsync/gui/en/index.html [L,R=301] in my last example. It does an ugly JS redirection which is hard to handle without overriding and redirecting /gui as well. Other than that, everything should work fine. P.S: The new rewrite rule does not apply to all versions. -
Best Practices for Sending Secret
Disappointed Cat replied to MerceanCoconut's topic in Sync General Discussion
Security through obscurity is bad practice. Use PGP or steganography and send it in cat pictures. -
Please forgive me for reviving a security thread. In this new spy-age would you consider adding the option to change the cipher to AES256-GCM or something similar? I'm not saying AES128-CTR is not sufficient but we'd better be prepared for the future.