Paste something on your phone, open the link on your laptop. That’s the whole idea. A drop is controlled by the device that started it, so there’s nothing to sign up for.
- Server
- One Rust binary (axum) with SQLite and files on disk. The pages are plain HTML and JavaScript, compiled into the binary. No build step.
- Private mode
- Optional. Content is encrypted in the browser with AES-256-GCM before it’s uploaded, so the server stores ciphertext. The key travels in the link’s
#fragment, which browsers never send to a server. - Links
- 128 random bits each, dead after 24 hours, or sooner with one button. Optional password (PBKDF2-HMAC-SHA256, 600,000 rounds). Optional burn-after-reading.
- More devices
- Get a six-character code or QR, enter it on the other device, and tap Allow on the first one. Until then the newcomer sees nothing.
- Big files
- Sent in 4 MiB chunks and resumed after a dropped connection, even after a page reload. Up to 100 MB per drop, downloadable as one zip.
- Abuse
- Turnstile, per-IP and per-device limits, a daily quota and a global disk cap. With no accounts there’s nobody to ban, so the limits have to do the work.
lushare.luntech.work · Source is private for now.