Joe Rosato on 17 Sep 2015 19:54:08 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Self-managed public drop box?


Very secure:
A known list of customers that drop once a week regularly? Financial companies use this method. You have a user account dedicated to this on a box, they have a user account dedicated on their box. use big keys. create a cronjob. scp or rsync. Done

Security not an issue:
FTP, but they have to have a tech geek that finds joy in this slow process and the need for a terminal

Pretty aesthetics for non-tech customers to make them feel good:
Create an upload webpage that is easy to read. They enter an email and message like "here is that file you asked for"  and click a button and get sent some god-awful link like this here:

Here is your upload link! This will expire in 4 hours.
company.com/fd87gghuiwerhgsiurg687sdfyvjk5ytweorgjslrtjhdsi9h/THEPAGE.html

where they can click and upload a file on a new webpage

You have their email now, so you can communicate with them or, if need be, ban them.
Your stuff is open for a set period and closed after the upload. Even if method insecure, at least your vetting and limiting access. You can keep a list of allowed email addresses and have it email you when a NEW one comes online (which you would have to add)

Joe

On Thu, Sep 17, 2015 at 8:39 PM <gary@duzan.org> wrote:
   I've used SyncThing to get music from my desktop (NetBSD) to my phone
(Android). It is a bit clunky, but it works well enough for that. I
wouldn't suggest it for a public drop box, though, if for no other
reason than it would require the SyncThing software on the customers'
machines, which isn't the most friendly option.

                                    Gary Duzan


=> I've tried Owncloud. Too much overhead involved. I tried btsync, which is
=> an interesting hack, but it didn't really fit my needs. I am currently
=> using syncthing.
=>
=> Not sure if any of these meet your needs of a public drop though.
=>
=> On Thu, Sep 17, 2015 at 3:04 PM, Michael Zaleski
=> <michael.zaleski@gmail.com>
=> wrote:
=>
=>> + 1 Owncloud
=>> On Sep 17, 2015 5:43 PM, "brent timothy saner" <brent.saner@gmail.com>
=>> wrote:
=>>
=>>> -----BEGIN PGP SIGNED MESSAGE-----
=>>> Hash: SHA512
=>>>
=>>> On 09/17/2015 05:33 PM, Doug Stewart wrote:
=>>> > Howdy all,
=>>> > I've a need at $WORK to offer customers a way to push data to us from
=>>> > whence we can retrieve it. What's everyone's current favorite way to
=>>> do
=>>> so?
=>>> >
=>>> > I'd hate to go with a simple chroot'd VSFTPD setup with public/, but
=>>> if
=>>> > that's what it takes...
=>>> >
=>>> >
=>>> > --
=>>> > -Doug
=>>>
=>>>
=>>> https://owncloud.org/
=>>>
=>>> throw it on a public IP space (properly firewalled/acl'd/etc.,
=>>> preferably with VPN), done.
=>>>
=>>> -----BEGIN PGP SIGNATURE-----
=>>> Version: GnuPG v2
=>>> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
=>>>
=>>> iQIcBAEBCgAGBQJV+zPeAAoJEIwATC+TSB9rKAcP/iOIy5XvNix2DZdFqwpUIx5g
=>>> hKiTBwZFIlbxZ0Ph31nlhXPNNFzfztwGYOSj3jWNBUFUN1UXAbn04R5QOonq9nGq
=>>> 2TqAGo678w7wrv6rZJy0UWzhIpsMh+3E4oaTum+SXDI/5J3zP652qqiMl7EmGcr+
=>>> Cl/edSOWZDM489166ajwhAvEZSIdLK9s898mt7b2FbD3L4e/zIzBtqiaz2+Y8trY
=>>> 2aLZLIit5M6CnscbxAfoyzCmHWxdIq3Rdp+4MMvm9lm3c74nt1BZNModg47xzma3
=>>> iR3P9OJrdUJPldynB3p1Cqs4/LHIl3wm2z1uOz4VXVjePYE+Zo5mMgAwbxnxG5Vm
=>>> jYc0kcC85wuoMIJRk4cZAwjzHrLof5zUCzHmwm3LlBL34QHL22y3GDZITId4VFFc
=>>> wn5jJTteiwkr8HThYhnDMAuhpgdGTA8Fvvke2DHEr21TIkYA7Mqn90de50HJMFBd
=>>> cTKxNNxSRH+1mEs3wo9BM3f38o6XlL4bg54RR2sC+rCpiqXMJtz47ZgqTIX2pZ43
=>>> sgzGIaEssFc+l/e28sdzuymHcADeZydBU9fGzEJco0RehEXhb52A7ot9ArXXfqPW
=>>> nQBxB9Vo4sdVTvt0yAPPVeBby8Ytr3ZrGUOjYdMEnzDfZQboUYjziggerwy9HNF4
=>>> Qz8MxtZ+VNltN5sQN9GG
=>>> =2BhP
=>>> -----END PGP SIGNATURE-----
=>>>
=>>>
___________________________________________________________________________
=>>> Philadelphia Linux Users Group         --
=>>> http://www.phillylinux.org
=>>> Announcements -
=>>> http://lists.phillylinux.org/mailman/listinfo/plug-announce
=>>> General Discussion  --
=>>> http://lists.phillylinux.org/mailman/listinfo/plug
=>>>
=>>
=>>
___________________________________________________________________________
=>> Philadelphia Linux Users Group         --
=>> http://www.phillylinux.org
=>> Announcements -
=>> http://lists.phillylinux.org/mailman/listinfo/plug-announce
=>> General Discussion  --
=>> http://lists.phillylinux.org/mailman/listinfo/plug
=>>
=>>
=>
___________________________________________________________________________
=> Philadelphia Linux Users Group         --
=> http://www.phillylinux.org
=> Announcements -
=> http://lists.phillylinux.org/mailman/listinfo/plug-announce
=> General Discussion  --
=> http://lists.phillylinux.org/mailman/listinfo/plug
=>


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
--
Joe
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug