FlyingCarpet VS protocol

Fortunately I found a reddit post which mentioned about a software named Flying Carpet after tinkering with that, and checking its code I found out there is something call Wireless ad hoc network (WANET), it its basically a decentralised type of wireless network which does not rely on router or wireless access points.

Related projects:

- FlyingCarpet: direct transfer over local adhoc WIFI: https://github.com/spieglt/FlyingCarpet

- LANDrop: Drop any files to any devices on your LAN: https://github.com/LANDrop/LANDrop

- In-browser file transfer similar to Airdrop: https://snapdrop.net/

- Magic Wormhole: simple file transfer from computer-to-computer over the net: https://github.com/magic-wormhole/magic-wormhole

- Croc: similar to magic wormhole: https://github.com/schollz/croc

- Wormhole: user-friendly in-browser based e2e encrypted file transfer: https://wormhole.app/

network transfer

I'm rewriting https://github.com/spieglt/flyingcarpet. It will be public when it's finished and the Android/iOS versions are out but it'll be a few more months probably.

I don't really know how many users I have, so I don't know how "meaningful" my projects are, but I have found some of them posted on French, Chinese, Greek, Russian blogs etc., so hopefully they fill some people's needs besides my own.

https://github.com/spieglt/flyingcarpet

https://cloaker.mobi

https://github.com/spieglt/cloaker

https://github.com/spieglt/whatfiles

https://github.com/spieglt/winage

I learned to program because I was frustrated that after working in IT consulting for several years, I still had no idea how computers worked. I started with "Learn Python the Hard Way" and "Automate the Boring Stuff with Python". Then got a job doing some Windows consulting stuff, and they said they'd hire me as a software engineer if I learned Go, which was a pretty easy step from Python. I'd tried to learn programming as a kid several times and always found it too frustrating. I started working on side projects as a way to learn new languages, improve my resume, and scratch my own itches. The hardest part was coming up with ideas for useful/worthwhile projects. I was super frustrated one day that the easiest way to get a file between two machines that were right beside each other was sending them out to the internet via Google Drive or Dropbox, which made me want to write "cross-platform AirDrop", which became Flying Carpet. If you find yourself wanting a simple piece of software that seems like it should already exist, that's a great project idea.

Not the fort-knox implementation it claims on the tin.

'LocalSend uses a secure communication protocol that allows devices to communicate with each other using a REST API. All data is sent securely over HTTPS, and the TLS/SSL certificate is generated on the fly on each device, ensuring maximum security.'

How do they achieve maximum security while generating X.509 certs on device?

Let's look; 'https://github.com/localsend/protocol#2-fingerprint'

'When encryption is on (HTTPS), then the fingerprint is the SHA-256 hash of the certificate'

Confusingly there is a HTTP non encrypted mode, and the docs claim the fingerprint only used to avoid discovery collisions.

Out-of-band [visual comparison / QR code scanning step] sharing of fingerprints COULD be acceptable to prevent 'man in the middle' attacks, however the documentation doesn't seem to indicate that this detail is surfaced or shared with the user.