Hacker News new | past | comments | ask | show | jobs | submit login

Can't agree more. Users don't want to run a server or figure any of that out. There is a person near them and they want to share a file quickly.



I am not sure you understand. You click share, then Share via HTTP, the other person scans the QR code, they have the file. Setting up the server is no effort at all.

Only if you are outside without Wifi you have to do another step, setting up a Wifi hotspot, but that is not hard. And in most situations I have been in both devices were in the same network anyways.


But that's 80% of why AirDrop is so great. Exchanging files/photos/videos when you're not home and sometimes with strangers / acquaintances.


> Setting up the server is no effort at all.

This assumes that the user has a level of technical knowledge that most people don’t have.


Which of the steps that I described required advanced technical knowledge?

Edit: Ah maybe you thought setting up the server is an additional step. It is not. Share via HTTP is the server. It runs directly on your phone. The URL points directly to your device.


And the remote user's authentication is handled, how? And the routing, NAT, and discovery of your server's private IP address is handled?


None of that is necessary because you are not exposing anything to the internet. We are still talking about local sharing. Android does not have a firewall so there really is nothing to configure. But if you think it cannot be possible, try it for yourself.


You seem confidently oblivious of security concerns, almost as if you're just here to shill for a janky app.


Ok, let's paint this picture:

You scan a QR code to connect to someone's wifi.

All your traffic can now be captured. DNS requests will be logged. Some traffic might be redirected. When will the connection be closed? What if someone shows you a different QR code, and you're not that tech-savvy. For example a phishing webpage which asks for the user's password. Many many many people will still just enter their single-password-for-everything. What if the QR code is a deeplink to an app.. for example to a conversation on or whatever. Or maybe someone was previously logged in into some account.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: