FTP

I have been thinking about setting up an FTP server where anyone can upload and download files. I'm just not really sure if it's a good idea of if I'm just asking for trouble. I could just setup on abuse@domain.tld email and comply with takedown requests, but are there some risks even if I do that? I'm also not sure whether I should make it a Tor hidden service or not. Tor would hide my server and protect users privacy which is good, but it could also attract a lot of nasty content that I don't want to host child porn

It's a good project to setup, I'd recommend samba or some kind of open source cloud, I'd recommend a pomf clone or seafile for a more dropbox like file. If your scared of [spoilers]redacted[/spoiler] they're ways to help deal it with hash checking. It's not fool proof and it can be bypassed pretty easily, unfortonalitly thats the pain for doing the hard unappreciated work of free storage. They're alot of Tor storage options like onionshare I'd look into. Have fun!

>>54919 make it require a shared password for users who upload

>>54930 What would be the point? The password would have to be somewhat public for the thing to be useful

theres a big difference between letting anyone who finds it and puts in a little manual direct effort to get into your place specifically in, and letting any random person trawling around for open ftp servers in. If you get trolls still that would suck. But thats sort of just a risk with this type of thing anyway.

>>54938 >theres a big difference between letting anyone who finds it and puts in a little manual direct effort to get into your place specifically in, and letting any random person trawling around for open ftp servers in. You may be right. This place is somewhat obscure so sharing it here wouldn't open the server up for that many people, unless someone posts it somewhere else. >If you get trolls still that would suck. But thats sort of just a risk with this type of thing anyway. to be honest the biggest risk seems to be cp. Other illegal content or copyrighted content doesn't seem like that big of a risk as long as it remains obscure. Maybe blocking Tor entirely i.e. blocking all exits nodes could help reduce the cp spam risk. Not sure if it would be a good idea to make files downloadable over http too. It would be convinient, but it could draw a bit too much attention

Maybe sftp would be better, since plaintext ftp is not very secure and apparently some firewalls have problems with ftps

Regarding the overall discussion, it would be fine with selectively released passwords on multiple accounts in a per-board/drop basis, and then rotating the password. If an account (read: board/drop) turns up trouble, remove the account and rotate all passwords. The extra effort you invest keeps idiots out, and helps create comfy for good faith users. you'll have to maintain it anyway, so you should start off with a smart strategy and be ready to adapt. Tor is cool, but honestly most people are too-low-iq or too lack to manage that.

>>54963 Not a bad idea, and it wouldn't require that much effort really.

>>54935 Protection against bots and stupid people

Anyway, OP here. Maybe I should just try to set it up and see if it takes off. There's not that much to lose really.

>>54963 One problem with this is how to allow those specific users to upload files without allowing them to delete them. vsftpd can have only file upload and folder creation permissions for anonymous users, but I'm not sure if it's possible with other users

>>54977 new files could be automatically made read-only after the inital upload. Of course then you can't delete your own but short of <lots of fancy setup> or individual accounts thats not going to be easily done. >>54963 >passwords per board drop. Thats a pretty interesting idea and I don't dislike it. I'd be somewhat suspicious of how it would work in practice, if the dropped locations get indexed by search engines it will probably be easy for a dedicated troll to just find another. But obviously for managing this sort of thing you can always imagine a hypothetical supertroll who really hates you personally. Sometimes it happens but the only real perfect mitigation is to not host anything and thats sad and boring. >>54976 I'll be sure to check it out if you post a link.

>>54981 >But obviously for managing this sort of thing you can always imagine a hypothetical supertroll who really hates you personally. Sometimes it happens but the only real perfect mitigation is to not host anything and thats sad and boring. Kek, I really like this way of putting it

>>54977 >upload files without allowing them to delete them Should be possible with inotify https://superuser.com/a/1534425

>>54985 Thanks. That looks like a pretty neat solution. Could also add malware scan with clamav for all uploaded files

>I want to make my own FTP server but I don't want to host anything offensive or illegal, and will NARC if it's posted What's the point brody? There's plenty of FTPs already

>>54919 I think you should do it, its good experience for you and helps decentralize storage, even just a minor bit. I notice its virtually impossible to send files to people without subjecting yourself to Dropbox / GDrive etc. I would prefer IPFS/Onionshare , but FTP is well integrated with Major Browsers. Maybe you will get some cool files anyway.

>>54919 I think 0x0.st uses some AI-magic to detect the kind of content you are worried about. Take a look at what they do.

>>55375 > but FTP is well integrated with Major Browsers I think that's removed in recent versions, unfortunately

>>55377 https://git.0x0.st/mia/0x0/src/branch/master/nsfw_model/resnet_50_1by2_nsfw.caffemodel It looks like it rolls out a version of ResNet trained by Yahoo. https://yahooeng.tumblr.com/post/151148689421/open-sourcing-a-deep-learning-solution-for License mint year checks out with blogpost time period. The trainers claim that they only trained on pornographic images, so I don't know how it generalizes to gore or CP.

Doesn't look like OP delivers. Anyway here is a sftp (SSH) server. Username and password are anonymous. Files are also available over http. 2605:6400:20:1589:9272:9421:d18d:a137 209.141.62.89

>>55602 >Doesn't look like OP delivers I've been pondering whether to do it or not

>>55602 It's now under https://ftp.lainon.org/ >>55629 Just do it.

>>55633 >It's now under https://ftp.lainon.org/ Nice, I see lainons are dropping cool stuff already. You should probably sort it at some point.

>>55633 nice work, looks really cool. I'll add some stuff

>>55633 >Just do it. Is there really demand anymore, now that we already have one?

>>55652 Sorry meant to say you should have just done it. The lain.email project would be more useful anyway but that lainon also doesn't do anything.

>>55653 >The lain.email project would be more useful anyway but that lainon also doesn't do anything. Yeah that one looks pretty abandoned. I have the knowhow to host an email server, but that lainon has the domain.

>>55637 That is really cool, i have no idea what i could upload tho.

>>55671 add whatever cool stuff you have, theres books and wallpapers on there.

>>55715 Sounds good, ill see what sorts of cool stuff i have lying around that could be usable. Its been so long since i used ftp that i dont even really know how to use it anymore, but its a good chance for refreshing my memory.

>>55775 >Its been so long since i used ftp It's not ftp https://en.m.wikipedia.org/wiki/SSH_File_Transfer_Protocol

>>54919 I added some "Digital Humanities" books, history, and ethics, policy surrounding computing, cyber security, privacy and mass surveillance. History of Computing >Hackers >Crypto >The Infinite Machine Cyber Security >The Fifth Domain >Sandworm Government Surveillance >Plaything the Edge - Hayden (NSA Director) >Dark Mirror Gellman's account of Snowden events >No Place to Hide - Greenwalds view of Snowden events >Facts and Fears - Clapper (NSA Director Biogrpahy) Commercial Servielance >Surveillance Capitalism >Data and Goliath Personally, I recommend every lainon read Crypto - a history of the cryptowars and cypherpunks ,and Hackers , a history of computers. Levy is an amazing writer, the books are fun, easy to read, and tell an incredible history. Sec-anons should probably read 'The digital Imprimatur' about how the war for control of computing matters and the ultimate outcome of the war.

>>55950 thank you lain, I'll check out Crypto.

>>55633 maybe you should change the domain name to sftp.lainon.org as ftp seems to implying is hosting a ftp server on port 21. idk I don't have experience with public ftp/sftp naming conventions out there, just my two cents

>>55633 hope this isnt a bad question to ask but i was wondering how i could setup something like this, i thought it could be a cool personal project/friend use thing

>>56532 Install vsftpd or ssh and enable sftp, set shell as rssh. You can get a $100 Free Credit for Linode from various podcast discount codes including darknet diaries to run it on a VPS linux box. You could also run it at home with port forwarding, or if you don't want to port forward, you can run it as a hidden service with tor, or use ngrok to do port forwarding.

>>56541 the linode free credit is a scam, it doesn't last for more than 3~ months. One video advertised it as a way to have free 20 months, but you only have 3~ months to use the $100 credit.

>>56541 cool thanks i'll try it out :)

I like this project lain! Adding a whole bunch of miscellaneous stuff!

>>56541 >>56542 Another option is the Oracle free tier, I think you can get 200GB storage in a Linux VM for free.

>>56532 https://blog.tinned-software.net/setup-sftp-only-account-using-openssh-and-ssh-key/ that's how it's setup for ftp.lainon.org. It's easy and doesn't need any special software. I use buyvm.net and https://njal.la/ mainly because they both accept XMR, can be used with Tor and don't give a fuarrrk what data you use to register.

That little word scramble was pretty nice. Thanks lain. Answer for the word scramble in spoiler.

>>54919 How about a nextcloud server for just you and your friends? That's more immediately viable and trustworthy.

>>55602 wish you the best, lain