Re: [PLUG] kernel, rpm, croc, du, encrypted

[Walt Mankowski via plug <plug@lists.phillylinux.org>]

On Wed, Dec 01, 2021 at 03:15:06PM -0500, Rich Freeman via plug wrote:
> On Wed, Dec 1, 2021 at 2:52 PM Walt Mankowski via plug
> <plug@lists.phillylinux.org> wrote:
> >
> > On Wed, Dec 01, 2021 at 12:10:54PM -0500, jeffv via plug wrote:
> > > How to Securely Transfer Files between Ubuntu Systems Using Croc
> > >
> > > https://vitux.com/how-to-securely-transfer-files-between-ubuntu-systems-using-croc/
> > >
> > > Croc is an open-source CLI-based tool that allows to securely transfer files
> > > between systems. During file transfer, a code is generated for the sender
> > > and the receiver systems to use for end-to-end encryption
> >
> > I'm confused by this. I've been securely transferring between systems
> > for decades using scp. Why should I use croc instead?
> >
> 
> The key bit is that it works through firewalls (assuming they allow
> outbound connections as is typical) - I assume it has some kind of
> cloud component to facilitate connections.  You don't even need to
> know the IP of either end.
> 
> That definitely can be handy.
> 
> To use something like scp you need to have an IP/DNS address for the
> remote host and be able to reach it on the ssh port.

Ah, I see, I hadn't read the examples very closely. Now that I have, I
have more questions:

* Where are the files being stored?
* What port are they using?
* How long do the files stay there?

Assuming they're just using key/value pairs and accessing it over
https, this sounds like a security nightmare. It sounds like if anyone
can guess the codeword they can download the file, potentially
forever. Is there really no authentication component?

Walt

Attachment: signature.asc
Description: PGP signature

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug