工具与资源github.com
Magic Wormhole：安全地在计算机间传输文件
Magic Wormhole: get things from one computer to another, safely
2021 — 2024，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
Magic Wormhole 是一个命令行文件传输工具：一端生成一段简短的口令码（wormhole code），另一端输入同样的码，双方经由中继服务器配对，建立端到端加密连接后直接传文件，不需要端口转发或配置服务器。项目由 Python 写成，作者本人也在评论区答疑。
为什么经久不衰：它用一个短口令完成安全配对、几乎零配置，十多年来在跨平台、跨奇怪网络环境的场景里一直很可靠，而且中继可以自建，今天依然实用。
HN 评论精选
长期实战用户：稳定可靠，自建中继还能优化大文件传输。
我用它好多年了，在奇怪的网络环境里传大文件几乎从不出问题。为了做更极端的测试，我还自己搭了一个 Magic Wormhole 中继，可以调整参数让几十 GB 的大文件传得更快更稳。相比之下，Google Drive 遇到这种大文件经常崩，这点让我很烦。
geerlingguy查看英文原文
I've used this for years when passing large files between systems in weird network environments, it's almost always flawless. For some more exotic testing, I was able to run my own magic wormhole relay[1], which let me tweak some things for faster/more reliable huge file copies. I still hate how often Google Drive will fall over when you throw a 10s-of-GB file at it. [1] https://www.jeffgeerling.com/blog/2023/my-own-magic-wormhole-relay-zippier-transfers
质疑默认公共中继的信任模型：加密与服务器归属的权衡值得说清。
作者在 Motivation 里说“通过 Dropbox 传文件对 Dropbox 服务器不安全”。但用户如果自己在本地加密再上传，还算不安全吗？Magic Wormhole 默认把公共 rendezvous/transit 服务器的地址硬编码在客户端里，而这个服务器由不公开的第三方运营，仓库里只有客户端没有服务端。默认又是存储转发而非直连，那存在公共服务器上的消息，凭什么比存在 Dropbox 上更“安全于服务器”？也许作者只用自建服务器，那就说得通了——但有多少新用户会自己搭服务器呢？
1vuio0pswjnm7查看英文原文
From the section titled "Motivation": "Copying files through Dropbox is not secure against the Dropbox server [and results in ...]" Let's say a user encrypts a file outside of Dropbox, using a program of the user's choice, then she transfers the encrypted blob to Dropbox. Is the author suggesting this is "not secure against the Dropbox server". I am not a Dropbox user. I know it was originally for syncing folders and they orginally used an rsync library and that is about all I know. Pardon the ignorance. Magic Wormhole by default uses hardcoded host:port for a rendezvous server and a transit server operated by [undisclosed]. "The URL of a public server is baked into the library for use as a default, and will be freely available until volume or abuse makes it infeasible to support." This Github page is only for the client, not the servers. In the section titled "Dilation", we are reminded that MW is store and forward by default, not direct connection. How are messages stored on the default public MW server operated by [undisclosed] "secure against [undisclosed]" in a way that messages stored with Dropbox are not "secure against Dropbox". Maybe the author only uses MW with private MW servers, not public ones run by other people. Then his comment about Dropbox would make sense. However I have to wonder, how many new MW users are running their own servers.
列举同类实现，方便选型。
类似的工具还有几个：p2pcopy、pcp、以及用 Go 重写的 wormhole-william。
smusamashah查看英文原文
There are a few others p2pcopy https://github.com/psantosl/p2pcopy pcp https://github.com/dennis-tra/pcp wormhole-william https://github.com/psanford/wormhole-william
真正的痛点在于移动端集成和分享菜单，而非桌面互传。
最难的从来不是电脑之间传文件，而是手机、平板和电脑之间传。我一直在找一个能自托管、能从 Android 分享菜单直接把图片和 PDF 发到 iPad 和笔记本上的方案。
Fiahil查看英文原文
As always, the most difficult problem is not sending files between computers, but between smartphones, tablets and computers. I'm still looking for a solution I could use to share pictures and PDF files from Android phones to iPads and Laptops using the "share" modal and completely self-hosted...
历次讨论
同类还值得读
直接在浏览器中启动 Linux 内核
Boot a linux kernel right inside your browser.
Fabrice Bellard 的 JSLinux 页面，用 JavaScript 在浏览器里启动一个 Linux 内核，并提供一个可交互的终端环境。
工具与资源上首页 5 次 · 2011–2025bellard.orgHacker News 未公开功能与行为清单（2018）
A List of Hacker News's Undocumented Features and Behaviors (2018)
数据科学家 Max Woolf 整理的 Hacker News 未公开功能与行为清单，涵盖投票机制、排名算法、账号惩罚等社区运作细节。
工具与资源上首页 5 次 · 2019–2025github.comMapSCII：在终端中用盲文和 ASCII 渲染地图
MapSCII – Braille and ASCII map renderer for the console
MapSCII 是一个在命令行终端里渲染地图的开源工具，用盲文字符和 ASCII 字符把地理数据画成可交互浏览的字符地图。
工具与资源上首页 5 次 · 2017–2025github.com顶尖大学的免费在线课程
Free Online Courses from Top Universities
Open Culture 整理的一份免费在线课程合集，汇集了全球顶尖大学（如 MIT、斯坦福、耶鲁等）向公众开放的网络课程资源，涵盖音频、视频等多种形式。
工具与资源上首页 5 次 · 2010–2022openculture.com淘气字符串：容易引发用户输入问题的字符串清单
Naughty Strings: A list of strings likely to cause issues as user-input data
一个 GitHub 仓库，收录了大量容易让程序出问题的用户输入字符串，如特殊字符、emoji、SQL 注入片段、系统命令等，供开发者用于测试输入处理逻辑。
工具与资源上首页 4 次 · 2015–2020github.com