Hacker News: meejah

New comment by meejah in "Hypothesis: Property-Based Testing for Python"

meejah — Wed, 05 Nov 2025 05:15:59 +0000

Here are some fairly simple examples: testing port parsing https://github.com/meejah/fowl/blob/e8253467d7072cd05f21de7c...

...and https://github.com/magic-wormhole/magic-wormhole/blob/1b4732...

The simplest ones to get started with are "strings", IMO, and also gives you lots of mileage (because it'll definitely test some weird unicode). So, somewhere in your API where you take some user-entered strings -- even something "open ended" like "a name" -- you can make use of Hypothesis to try a few things. This has definitely uncovered unicode bugs for me.

Some more complex things can be made with some custom strategies. The most-Hypothesis-heavy tests I've personally worked with are from Magic Folder strategies: https://github.com/tahoe-lafs/magic-folder/blob/main/src/mag...

The only real downside is that a Hypothesis-heavy test-suite like the above can take a while to run (but you can instruct it to only produce one example per test). Obviously, one example per test won't catch everything, but is way faster when developing and Hypothesis remembers "bad" examples so if you occasionally do a longer run it'll remember things that caused errors before.

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Tue, 07 Oct 2025 18:21:03 +0000

I am not a cryptographer, but can explain that Magic Wormhole uses SPAKE2 to negotiate a shared secret (RFC9382 claims equivalent to gap Diffie-Hellman), and then uses NaCl SecretBox to symmetrically encrypt all data between the peers.

(If using the newer Dilation protocol -- which is true for many of the non-file-transfer tools like ShWiM, Git-WithMe or Fowl -- peer traffic uses this shared secret with Noise, specifically "Noise_NNpsk0_25519_ChaChaPoly_BLAKE2s")

One tool that does now use Magic Wormhole for "introduction" like this is EtherSync: https://ethersync.github.io/ethersync/

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 20:51:56 +0000

Correct.

It does learn some metadata: the endpoints of the messages (unless you use Tor) and the number of bytes in those messages.

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:35:35 +0000

...and also "Git-WithMe" for peer-to-peer, one-off Git usage: https://sr.ht/~meejah/git-withme/

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:32:23 +0000

Note, too, that you may run your own "transit helper" (code: https://github.com/magic-wormhole/magic-wormhole-transit-rel... ) and then specify this via "wormhole --transit-helper tcp::" when doing a transfer.

You do need to run the helper on a public IP address, like a rented VPS for example.

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:30:07 +0000

You should probably first test and ensure that you're sending "directly" instead of via the relay -- but if that's true then yes.

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:28:29 +0000

One use-case could be for SyncThing to actually _use_ magic-wormhole as a way to introduce / join another endpoint to a SyncThing folder.

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:24:22 +0000

There are Rust and Haskell implementations too (not quite as feature-full as the Python code yet, though) as well.

In principal WebRTC communication could be added to magic-wormhole, but that work has not been done yet. There is WebSocket support in the relay (including "cross-protocol" so one client can be WebSocket and the other TCP). This is only deployed on the Winden.app servers (tcp://relay.mw.leastauthority.com:4001 and wss://relay.mw.leastauthority.com for the relay).

You'd need to use the Winden.app relay server if you want https://winden.app users to reach your Python CLI (e.g. via "wormhole --relay-url wss://mailbox.mw.leastauthority.com/v1 send" for example)

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:20:36 +0000

You might even use Magic Wormhole to securely transfer WireGuard keys!

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:19:21 +0000

There are several different clients available for Magic Wormhole, including GUIs and phone apps: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:18:08 +0000

If two Magic Wormhole clients _are_ on the same LAN they should communicate directly that way (i.e. no relay required).

New comment by meejah in "Magic Wormhole: Get things from one computer to another, safely"

meejah — Mon, 06 Oct 2025 18:13:51 +0000

Yes, there are several alternative clients including several for Android: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...

New comment by meejah in "Shell-with-me/shwim: instant E2EE terminal sharing"

meejah — Thu, 07 Aug 2025 21:29:41 +0000

Building on top of various Magic Wormhole features, "shwim" enables quick and easy 1:1 terminal sharing with durable, end-to-end-encrypted communications using tty-share.

Shell-with-me/shwim: instant E2EE terminal sharing

meejah — Thu, 07 Aug 2025 21:29:41 +0000

Article URL: https://meejah.ca/blog/initial-shwim-release

Comments URL: https://news.ycombinator.com/item?id=44830622

Points: 2

# Comments: 1

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Mon, 26 Aug 2024 16:17:52 +0000

Yes, all the implementations speak the same wire protocol.

The Python implementation has the most features. More about which implementations support what features is here: https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht...

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Mon, 26 Aug 2024 16:16:16 +0000

The Haskell implementation uses the same protocol as the Python implementation. The main difference is that there are some features the Python implementation has that the Haskell implementation still lacks (most notable "Dilation").

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Mon, 26 Aug 2024 16:14:37 +0000

That is just using normal STUN/TURN via another server that one of those developers is running

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Sun, 18 Aug 2024 00:21:49 +0000

Yes, it does -- via the Rust implementation.

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Sun, 18 Aug 2024 00:17:05 +0000

There's also a Haskell implementation (besides the Go one pointed out above). They all interoperate.

New comment by meejah in "Magic Wormhole: get things from one computer to another, safely"

meejah — Sun, 18 Aug 2024 00:04:39 +0000

There is also https://magic-wormhole.readthedocs.io/en/latest/ecosystem.ht... and if that is lacking anything please file a ticket or pull-request