diff --git a/opsec/syncthingvpn/10.png b/opsec/syncthingvpn/10.png index 3fcdab5..58c7b11 100644 Binary files a/opsec/syncthingvpn/10.png and b/opsec/syncthingvpn/10.png differ diff --git a/opsec/syncthingvpn/11.png b/opsec/syncthingvpn/11.png index d1e62d1..3fcdab5 100644 Binary files a/opsec/syncthingvpn/11.png and b/opsec/syncthingvpn/11.png differ diff --git a/opsec/syncthingvpn/12.png b/opsec/syncthingvpn/12.png index 96654e1..d1e62d1 100644 Binary files a/opsec/syncthingvpn/12.png and b/opsec/syncthingvpn/12.png differ diff --git a/opsec/syncthingvpn/13.png b/opsec/syncthingvpn/13.png new file mode 100644 index 0000000..96654e1 Binary files /dev/null and b/opsec/syncthingvpn/13.png differ diff --git a/opsec/syncthingvpn/4.png b/opsec/syncthingvpn/4.png index e03da0e..3c78c62 100644 Binary files a/opsec/syncthingvpn/4.png and b/opsec/syncthingvpn/4.png differ diff --git a/opsec/syncthingvpn/5.png b/opsec/syncthingvpn/5.png index 131d66d..af37660 100644 Binary files a/opsec/syncthingvpn/5.png and b/opsec/syncthingvpn/5.png differ diff --git a/opsec/syncthingvpn/6.png b/opsec/syncthingvpn/6.png index dfd8ade..1ef8614 100644 Binary files a/opsec/syncthingvpn/6.png and b/opsec/syncthingvpn/6.png differ diff --git a/opsec/syncthingvpn/9.png b/opsec/syncthingvpn/9.png index c347834..4645a4e 100644 Binary files a/opsec/syncthingvpn/9.png and b/opsec/syncthingvpn/9.png differ diff --git a/opsec/syncthingvpn/index.html b/opsec/syncthingvpn/index.html index 00ac24c..d56c92c 100644 --- a/opsec/syncthingvpn/index.html +++ b/opsec/syncthingvpn/index.html @@ -60,7 +60,7 @@
- Previous Page

XMRonly - 2024 / 10 / 30

+ Previous Page

XMRonly - 2024 / 11 / 01

One-on-One Large File Sharing (Syncthing over VPN)

@@ -77,7 +77,7 @@

Introduction

-While many methods of sending files online exist - methods such as email attachments, FTP, OnionShare and even torrenting - all of these methods have one thing in common. Once a file has been sent, no further changes to that file are tracked. For the use-case where you want to not only send a file or a group of files but also receive any updates to the file(s), that is where Syncthing comes in. Syncthing is a FOSS continous file synchronization program that enables users to securely share files across multiple devices in a decentralized manner. It uses peer-to-peer technology to ensure that data is end-to-end encrypted and transferred directly between enabled devices, eliminating any need for centralized cloud services. Syncthing can be completely self-hosted and is very versatile as sync locations can be a home server, VPS, mobile device or even a friend's computer! In this article, we will explore how Sam can set up Syncthing to privately share large files with Larry and track changes to those files, all while using a VPN to hide his activity from his internet service provider. +While many methods of sending files online exist - methods such as email attachments, FTP, OnionShare and even torrenting - all of these methods have one thing in common. Once a file has been sent, no further changes to that file are tracked. For the use-case where you want to not only send a file or a group of files but also receive any updates to the file(s), that is where Syncthing comes in. Syncthing is a FOSS continous file synchronization program that enables users to securely share files across multiple devices in a decentralized manner. It uses peer-to-peer technology to ensure that data is end-to-end encrypted and transferred directly between enabled devices, eliminating any need for centralized cloud services. Syncthing can be completely self-hosted and is very versatile as sync locations can be a home server, VPS, mobile device or even a friend's computer! In this article, we will explore how Sam can set up Syncthing to privately share large files with Larry and track changes to those files, all while using a VPN to mask their internet activity.

@@ -97,12 +97,15 @@ We start from the perspective of both Sam and Larry as both will complete these

-It is presumed that both Sam and Larry have already purchased a subscription to a VPN. For this example we will use Proton VPN, but other non-KYC VPNs that accept Monero, such as Mullvad, may also be used. To start, they will sign in to their VPN client, ensure kill switch is enabled in the Settings, connect to their VPN and verify their IP address. +Sam and Larry are both using Debian and are on separate internet connections geographically distant from one another. It is presumed that both Sam and Larry have already purchased a subscription to a VPN. For this example we will use Proton VPN, but other non-KYC VPNs that accept Monero, such as Mullvad, may also be used. To start, they will sign in to their VPN client, ensure kill switch is enabled in the Settings, connect to their VPN and verify their IP address.

-Syncthing can be self-hosted using the official docker compose instructions as follows: +Syncthing works by end-to-end encrypting files and sending them over the internet. To do this, Syncthing uses a discovery server to find peers and the Syncthing project maintains a global cluster of discovery servers for public use. If establishing a direct connection between devices is not possible, Syncthing will automatically use community-contributed publicly available relay servers to route the file transfer instead. Because Syncthing is end-to-end encrypted, there is no need to trust these servers as they cannot read anything going through. With that being said, because Syncthing is fully open-source, it is possible to self-host both discovery and relay servers, but such configurations are beyond the scope of this article. +
+
+For self-hosting a working Syncthing instance, the official docker compose instructions are as follows: 

 
 ---
@@ -268,16 +271,21 @@ Larry receives a notification that Sam wants to connect and share something with
 
 

 
+

+Notice how the IP address that is shown to Larry is that of a Syncthing relay server like mentioned previously. If a direct connection had been established, Sam's VPN IP address would have been shown instead.
+
+

+
 

 The file transfer starts.
 

-
+
 

 
 

 Once finished, Larry has a complete copy of all of the files in /home/larry/Sync. Larry notices that Sam sent a Linux ISO that is broken. Larry fixes this broken Linux ISO and also adds a Linux ISO of his own to the shared folder.
 

-
+
 

 
 

@@ -314,8 +322,8 @@ total 12G
           
Conclusion
 
 

 
 

-Sam was able to privately share 10GB of files and automatically receive changes to those files all while keeping his internet activity hidden from his ISP. Notice how Larry was able to overwrite a file that Sam originally shared. There may be cases where this is undesirable and this option can be changed under Default Folder -> Edit -> Advanced and selecting either Send Only or Receive Only.
-
+Sam was able to privately share 10GB of files and automatically receive changes to those files all while keeping his internet activity hidden. Notice how Larry was able to overwrite a file that Sam originally shared. There may be cases where this is undesirable and this option can be changed under Default Folder -> Edit -> Advanced and selecting either Send Only or Receive Only.
+