HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
kern
filepizza
TypeScript2015–2025
kern / filepizza

filepizza

:pizza: Peer-to-peer file transfers in your browser

20Distinct people
22Mentions
0Explicit recommenders
10.3KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

:pizza: Peer-to-peer file transfers in your browser

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year22 dated mentions

Observed mentions: 2015-05-15 15:56:42 UTC to 2025-07-22 19:55:15 UTC.

012342015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 2 mentions; 1 submissions, 1 comments20152016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments20202021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 4 mentions; 1 submissions, 3 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC211
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC303
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC000
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC101
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC101
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC404
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC101
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC312
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC000
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC303
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC413

What Hacker News says

22 sources
Hmm. I'm not a WebRTC pro but looked into it recently for a hobby project and felt that the typical WebRTC TURN implementation still leaves the TURN server in a quite trusted position. My rough understanding: - (1) Each client generates a key pair - (2) The fingerprint of the public key is part of the SDP message each client generates - (3) The SDP message is somehow exchanged between the clients, out of band, and the session is started. The client's verify the remote peer using the public key from the SDP message. The problem is that it's not really feasible in most circumstances to exchange the full SDP message out of band, so instead the service provide some mechanism to map a shorter ID (typically in a URL) to a centrally stored copy of the SDP. I think this might be where it happens for filepizza [0]. This means that a malicious file
Read the rest
sharing operator, being in control of both the TURN service and the out-of-band signalling mechanism, could just MITM the DTLS connection and snoop on all the data going by. The peer's think they have each others public keys but they just have two keys owned by the server. [0]: https://github.com/kern/filepizza/blob/main/src/channel.ts
In Peer-to-peer file transfers in the browser
Here is a list of open source options. This isn't the first time I have shared this on here either. Perhaps this is another sign that web search is failing us. SnapDrop - Site: https://snapdrop.net/ - Source: https://github.com/RobinLinus/snapdrop ShareDrop - Site: https://www.sharedrop.io/ - Source: https://github.com/szimek/sharedrop FilePizza - Site: https://file.pizza/ - Source: https://github.com/kern/filepizza Original Wormhole - https://webwormhole.io/ - https://github.com/saljam/webwormhole
In How to copy a file between devices? (2022)
It's really not at all. https://github.com/magic-wormhole/magic-wormhole - get things from one computer to another, safely https://github.com/schollz/croc - Easily and securely send things from one computer to another https://upload.disroot.org/ - 2GB per file, end to end encrypted, source: https://github.com/ldidry/lufi, other instances: https://alt.framasoft.org/framadrop/ https://datash.co/ - end to end encrypted, made for transfer between two devices https://send.tresorit.com/ - 5GB per file, end to end encrypted https://github.com/kern/filepizza - WebRTC + STUN/TURN file transfer between multiple devices https://instant.io/ - WebTorrent transfers between browsers https://wormhole.app/ - share files with end to end encryption and a link that expires, or keeps working after closing browser https://toffeeshare.com/ - p2p, end to end enc
Read the rest
rypted https://wetransfer.com/ - emails link to recipient of file https://docsend.com/ - can protect files with email/pass verification. can revoke access or eSign documents and many, many more. these are just the ones I've seen that are geared towards direct transfer between two computers, but there's hundreds more sites that offer free file storage, even without an account or any personal info needed.
In Show HN: BookmarkFS – Store files as Chrome bookmarks that sync between devices
I would be interested in an overview and comparison of all the available options to solve this kind of problem. Here is a list of some services I’ve used successfully in the past. SnapDrop - Site: https://snapdrop.net/ - Source: https://github.com/RobinLinus/snapdrop ShareDrop - Site: https://www.sharedrop.io/ - Source: https://github.com/szimek/sharedrop FilePizza - Site: https://file.pizza/ - Source: https://github.com/kern/filepizza Wormhole - Site: https://wormhole.app/ - Source: Closed (for now)
In OpenDrop: An open Apple AirDrop implementation written in Python
I've been bookmarking point-to-point file transfer tools. These are not file hosting services like Firefox Send; both endpoints must be online at the same time. Nevertheless, I suspect they might be useful to some other folks here. Please post corrections or more detail on any of these if you have it. I haven't had time to try most of them yet. WebWormhole: WebRTC encryption, direct data transfer, large file support, browser and command line. Looks more versatile than the others. Has not undergone security review yet. https://github.com/saljam/webwormhole https://webwormhole.io/ Magic Wormhole: Data relay required (public relay is often slow), mainly command line. https://github.com/warner/magic-wormhole https://magic-wormhole.readthedocs.io/ croc: End-to-end encryption, data relay required (I think), command line only. https://github.com
Read the rest
/schollz/croc https://schollz.com/blog/croc6/ File Pizza: WebTorrent, seems to load entire file into RAM, browser only. https://github.com/kern/filepizza https://file.pizza/ Snapdrop: WebRTC encryption, local sharing only (I think), browser only. https://github.com/RobinLinus/snapdrop https://snapdrop.net/
In Update on Firefox Send and Firefox Notes

Showing the 15 most recent of 22 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.