HNHacker News
TopNewBestAskShowJobs

NoFile

108 karma · joined February 28, 2017

submissionscomments
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
There is a contact form (https://nofile.io/contact/) where all content removal requests can be sent to.

All requests will be checked and the file will be taken down if the request is valid.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Neither the file type nor the content inside the files are being checked.

This issue must've been caused by something else. Were you able to upload other files?

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
AES-CTR is indeed what's currently being used. SJCL is definitely an option and we will compare the two to see if there are any large advantages to switching over, thank you for your suggestion.

The reason to why the content isn't being authenticated is due to memory issues in the browser, but we're close to adding a solution for that as well.

Overall the encryption feature is currently in BETA and there will be large amount of improvements before it's finalized.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Pastie sites experience similar problems. Personal details being released, messages from terrorist networks and mirrors to various disallowed content.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Thanks for reporting the issue. The XSS was related to the filenames.

Although most operating systems don't allow users to upload files containing greater-than/less-than symbols, it's possible to add them by tampering the requests and changing the filename.

From there you could change the filename to "<script>alert("xss")</script>" and run an XSS. This has now been patched by encoding the characters.

Once we're a bit more stable we'll be sure to release a bug bounty program.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Yes, completely positive. You need to make sure that you're following the 301 redirects as that is not the final file location, hence why the data returned is only 957 bytes.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Other users complained about this as well. A setting will be added which will disable the animations for those that find them annoying.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Any valid content removal requests that come in through the contact form will be obeyed.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
This was an interesting read and we will do our best to avoid this fate.

Right now we're focusing on patching bugs and providing a stable service, but in the future a premium service will be created which targets heavy users.

PS You can change the status of the last active host in your list (Minus.com) to shut down as well.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
"How can I view my history? I think I've clicked every link available but I can't find this at all."

The button had been hidden for some users due to a bug. It's been fixed and you will be able to see it after refreshing the page, thanks for pointing it out.

"Same for this. There is no such option to be found."

This feature was disabled shortly after the launch due to a bug. It'll be added again as soon as possible.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
If we receive valid content removal request through our contact form then we will have to take the content down.

Judging by your username - is there a connection between you and the infamous file hosting site Oron that closed down a few year ago?

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
These services (Mediafire, Zippyshare, Uppit) are among the best file hosting sites online, but unfortunately they have their issues too.

The problem being that you have to jump between different hosts depending on how large your files are and which features that you want to use (e.g Mediafire for larger files, Zippyshare from public PCs so you don't have to login, MEGA for sensitive files that you want to send securely, Dropbox when you don't want grandma's PC to get infected when you're sending her the videos from Christmas).

The goal is to create one single host that saves you from having to jump from each host and having to maintain dozens of accounts to bypass limits.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
The plans were to have the API added from the start. To prevent a rocky beginning the API wasn't released, but it will be added as soon as possible.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
We'll try to work on this. More importantly you can enable the encrypted upload feature for sensitive files if you do not trust the storage servers.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
The only way to prevent this is through valid content removal requests sent in through the contact form.

As mentioned in a previous comment, since uploaders aren't rewarded for downloads this shouldn't become too big of an issue to handle.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Only static content is served over Cloudflare. All uploads/downloads are done directly with the storage servers.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
The page states 10 GB (not Gb). To be completely correct the precise limit is 10.2 GiB.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
This was due to an old client-side limit that hadn't been updated.

It's been changed and you can now upload files up to 10.2 GB, thanks for pointing it out.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
There isn't currently an app, but there shouldn't be any disadvantages between using the site.

You can upload as many files as you wish and save them on your phone to play offline (similar to what an app would do in the background) or play them directly from the site.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
A few years ago bandwidth and storage was much more expensive than it is today.

Rapidshare was a service that had to swiftly and reluctantly change their business model. They were operating out of large offices with over 60 employees and due to the change they saw a sudden drstic drop in revenue.

Rapidshare's financial information isn't public since it's a private company, but one could argue whether they were actually losing money or not making the profits that they expected at the time of the shutdown.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Unfortunately it's required for the file deduplication. Although it slightly degrades the security it's not serious enough to impose any security risks as the attacker would already have to know the hash of the file which almost always requires them to know the contents of the files.

Random strings and numbers are also securely generated through a CSRPNG with window.crypto.getRandomValues().

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
"not active or paused - skipping speed" is sent from the upload speed and estimated time measurement function and won't affect your upload.

The warning message that you receive when trying to close the page is only there to prevent accidental exits and in case you're in the middle of an upload or if you haven't copied the URLs of the uploaded files.

Unfortunately browsers no longer allow you to change the warning message, hence why it's telling you to save.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
The reasons to why NoFile won't become a storage site for pirated content is that uploaders aren't rewarded for downloads.

"Animated backgroud is very distracting. I'm constantly reacting to the new icons floating into the screen."

Another user pointed this out and a toggle for the animations will be added to the settings so that you can turn them off.

'Underlined "Or" in "Click Here Or Drag & Drop To Start Uploading" makes me think it's some kind of a link. Any reason to underline it?'

It's underlined just to separate the two options (clicking and dragging) for those who just read the "Click Here" part and assume that the rest of the sentence is just a description to why they should click here (e.g "Click here to start uploading your file").

"If I upload multiple files (which worked well) I want to be able to copy all the URLs at once. Displaying them in a text box would be good."

Instead of a text box there could be checkboxes next to each file allowing you to copy URLs and delete files in bulk. We'll work on adding this as soon as possible, thanks for your suggestion.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Thanks for the feedback.

The upload box is the first and almost only thing that you see when you go to the page and the purpose is to make the process simple so that you don't have to click through to a second page in order to start uploading.

You do however have a point as it could be confusing for some new user who haven't uploaded files before. We'll try to add an info box or some additional text to make the message more clear, thanks for pointing it out.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Dropbox and S3 are too far from us right now and I wouldn't call them competitors.

NoFile is a simple tool that allows you to quickly share files with lots of options, nearly no limitations and at the same time as you don't have to sign in.

"I'd rephrase this - definitely remove the shouldn't as that tells me that while my files shouldn't be deleted, they might be."

You're right about that as the premium plan will never lead to files uploaded by free users to be deleted. The premium plan will only be targeted to more heavy users and won't affect the free users.

"Finally, just a minor thing, but the down arrow under the "Click Here Or Drag & Drop To Start Uploading" doesn't work for me (latest Chrome on Mac). I assume it should scroll down the page but it didn't for me at least."

The button was indeed not working and it's now been fixed, thanks for pointing it out.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
The key is the truncated hash of the file for the purpose of file deduplication. However, it will not impose any security risks as the person who wishes to decrypt it would have to know the hash of the file which requires them to already know the contents of the file making it useless.

The password encryption is indeed server-side, but it is mainly there to protect the file against anyone who somehow finds/guesses the URL and it's a useful feature if you want to slightly increase the level of security without encrypting the file with AES.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
This was caused by a bug and the PDF preview had been briefly replaced by a placeholder.

You should now be able to see your own PDF instead of a placeholder, thanks for pointing it out.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
It's a difficult question to answer exactly how long a file would be kept as the deletion is based on two factors:

- How active the file is (e.g if the file isn't downloaded in X days).

- How much space that's available on the storage servers.

As mentioned in a previous comment, the site's operating on small margins so the majority of the income will go to expanding the storage in order to make sure that your file is never deleted (unless you request).

At the current rate your file would never be deleted (again, unless you request it) and at a bare minimum your file will be stored for at least a week without downloads so you don't have to worry about your file being deleted before your downloaders get to it.

This will be updated in the FAQ section to avoid confusion as well, thanks for pointing it out.

NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
It will definitely be looked into as it seems to be compatible with lots of different platforms, thanks for the advice.
NoFile··on Show HN: NoFile.io – A simple file storage site with lots of perks
Basic features will be available to all free users and no extreme upload/download limits (e.g 100 KB/s download speeds, 100 MB upload limits, etc.).
Page 1 of 2Next →