←back to thread

276 points leonry | 7 comments | | HN request time: 0.001s | source | bottom
Show context
benatkin ◴[] No.41889495[source]
The title heavily implies that Mozilla's is closed-source. It isn't: https://github.com/mozilla/send

Actually since it says forked it implies that Mozilla maintains a closed-source version. No, it was cancelled.

replies(2): >>41889850 #>>41890836 #
1. promiseofbeans ◴[] No.41889850[source]
The Thunderbird team is working on a fork!

"The Thunderbird team was very sad when Firefox Send was shut down. Firefox Send made it possible to send large files easily, maybe easier than any other tool on the Internet. So we’re reviving it, but not without some nice improvements. Thunderbird Send will not only allow you to send large files easily, but our version also encrypts them" - https://blog.thunderbird.net/2024/10/thunderbird-annual-repo...

replies(5): >>41889932 #>>41889977 #>>41890263 #>>41893229 #>>41895093 #
2. cpeterso ◴[] No.41889932[source]
Firefox Send used E2E encryption. The key was generated on the web client and not shared with the Send server.

https://web.archive.org/web/20200226024845/https://www.wired...

3. Vinnl ◴[] No.41889977[source]
That's weird, I thought the original also decrypted them. (You pass the key in the hash fragment, which your browser doesn't send to the server.)
replies(1): >>41892208 #
4. benatkin ◴[] No.41890263[source]
It could incidentally be closed source, then. I stand corrected.

Sometimes devs & teams of devs wait until their code is finished to put it online. I tend not to – most of my unfinished code open source code is online. I understand the pros/cons of each way though.

5. benatkin ◴[] No.41892208[source]
I wouldn’t be surprised if that hash fragment is sent to URL previews in otherwise encrypted chats. I did that too in my own program and it felt wrong. https://codeberg.org/macchiato/encshare-app I think I’ll change it, if not in my old project then in the next one.
6. elric ◴[] No.41893229[source]
Good, that will distract them for a while and will prevent them from actively making TB even worse with every release.

I like keeping my software secure and up to date, but I dread every TB upgrade, wondering what stupid cosmetic change will trip me up this time.

7. nanna ◴[] No.41895093[source]
The excellent FileLink plugin for Thunderbird already makes it a sinch to transmit a file via a Next/Owncloud instance instead of as an attachment to an email. Worth running a *cloud instance just for it imo.

https://gitlab.com/joendres/filelink-nextcloud