Sharing large files online

Chris

Administrator
Original poster
Staff Member
Ride of the Month Winner
Joined
Sep 28, 2015
Messages
76,795
Location
Gillette, WY
A forum member shared a treasure trove of files with me (all things prepping) and I'd like to put those files on my server and share them with others.

I could do it via FTP, but I don't want to give people the ability to upload to my server via FTP, only download.

I could use Dropbox, Google Drive, OneDrive, or similar. However, I don't trust big tech companies these days.

It seems to make the most sense to host them on my own server, but given the file sizes and the access issue, I'm struggling to come up with the best way to do this.

Interesting to hear thoughts on how I might best go about doing this while keeping all the files on my own server (which is a dedicated server that I pay a good amount of money for).
 
I work in big cloud tech.

1) offline USB type backup
2) personal copy on your server
3) public copies for general sharing on an AWS S3 static website. Cheap, easy to build, and download only.
 
  • Like
Reactions: Chris
I'm no fan of big tech either but if you're just bouncing files from point A to B you're fine.

If you want security use a tool like WinZip or 7Zip to compress and encrypt the file.

I'm sure you can find a forum add-on or server tool that facilitates large file transfers with some security like a user name and password, hopefully with a one time key sent via SMS or something.

Nothing is secure. MOVEit was a large file transfer program compromised by hackers. They stole the entire Oregon DMV database.

Happy to help you with a cybersecurity review of your setup, too if that would help. Take a look at the NIST RMF (Risk Management Framework). Good guidelines to follow.

https://csrc.nist.gov/projects/risk-management/about-rmf

-Mac
 
  • Like
Reactions: Chris
You can setup your FTP server such that uploads go into a dedicated upload dir that only you have access to.

I use wetransfer to send/receive big files as its very easy to use and doesn't require a login. I wouldn't send anything sensitive via same, but for Belly Dance videos and the like, its fine.
 
  • Like
Reactions: Chris
Edit to my first suggestion, step by step AWS/S3/Cloudfront fully encrypted end to end solution, using your own encryption keys if you so choose.

At 500gig of data per month (which is massive for static pdfs) is ~$50 per month.

https://docs.aws.amazon.com/Route53...d-cloudfront-overview.html?tag=wranglerorg-20

I’m on this inside, if you’re worried about them intercepting your data VS someone getting into a self managed server, you’ve got bigger problems.
 
Edit to my first suggestion, step by step AWS/S3/Cloudfront fully encrypted end to end solution, using your own encryption keys if you so choose.

At 500gig of data per month (which is massive for static pdfs) is ~$50 per month.

https://docs.aws.amazon.com/Route53...d-cloudfront-overview.html?tag=wranglerorg-20

I’m on this inside, if you’re worried about them intercepting your data VS someone getting into a self managed server, you’ve got bigger problems.

I've got an AWS/S3 account so maybe I'll do that. I'm already paying for it for backups so I may as well.

My only real concern with security is I don't want anyone having access to it unless I grant them access (probably via a username and password).

I need to go find a tutorial on how to set this up but I'm sure there are plenty.
 
I've got an AWS/S3 account so maybe I'll do that. I'm already paying for it for backups so I may as well.

My only real concern with security is I don't want anyone having access to it unless I grant them access (probably via a username and password).

I need to go find a tutorial on how to set this up but I'm sure there are plenty.

Keep it easy…s3 pre-signed urls. Easy to share to specific people for specific amount of time. https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-presigned-url.html?tag=wranglerorg-20

DM me, happy to help.