Show HN: ShadowCat – file transfer through QR Codes in a Browser

TL;DR

ShadowCat is a new web-based tool that allows offline file transfer through QR codes, designed for devices with limited connectivity. It works entirely in the browser with no server needed, making it suitable for old phones. The system encodes files into QR codes that can be scanned and decoded by other devices, enabling data exchange without internet or radio communication.

ShadowCat is a browser-based tool that enables offline file transfer via QR codes, designed specifically for old phones with limited radio capabilities but functioning cameras and browsers. This development offers a new way to share data without relying on internet, Bluetooth, or NFC, making it relevant for users with legacy devices or in restricted environments.

The tool works by generating a single HTML file that encodes data into QR codes, which can then be scanned by another device running the same webpage. It supports features such as chunking data, adjusting frame rate, error correction, and resuming interrupted transfers. The process involves generating a header with file metadata, then cycling through encoded chunks at a user-defined frame rate, allowing the receiving device to reconstruct the original file after decoding all chunks and verifying the CRC.

To operate, both devices need to serve the HTML file over HTTPS or localhost due to camera permission requirements. The sender can select files, set parameters like chunk size and ECC level, and start the transfer. The receiver uses the camera to scan QR codes, automatically detecting headers and missing chunks, and provides a progress indicator. Once complete, the file is verified via CRC, and a download button appears. The system supports resuming transfers and resending specific chunks, which is useful for unreliable connections.

Why It Matters

This development matters because it provides a practical solution for offline data transfer in environments where radio communication is unavailable or disabled. It enables old phones and devices with limited connectivity to share files securely and privately, without relying on external infrastructure. This could be useful in emergency situations, remote areas, or for privacy-conscious users. Additionally, it demonstrates how modern web technologies can be used to extend the utility of legacy hardware.

QR Code Reader - Fast QR Code Scanner

QR Code Reader – Fast QR Code Scanner

View a history list of all of your past scans

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Background

Traditional offline data transfer methods like Bluetooth or NFC are often unavailable on very old phones or restricted environments. Prior solutions have included physical media or specialized hardware. ShadowCat’s approach leverages the widespread availability of cameras and browsers, even on outdated devices, to create a flexible, serverless transfer protocol. The concept builds on existing QR code encoding techniques but adapts them for reliable, chunked file transfer over multiple frames, with error correction and resumption features. The project was shared on Hacker News as an open-source project, reflecting interest in privacy-preserving, infrastructure-free data exchange methods.

“ShadowCat allows file transfer between devices entirely in the browser using QR codes, no internet or radios needed.”

— the developer behind ShadowCat

“This could be a game-changer for old phones or in restricted environments where radio communication is limited.”

— Hacker News community member

NewQ Filehub AC750 Travel Router: Portable Hard Drive SD Card Reader & Mini WiFi Range Extender for Travel | Wireless Access External Harddrive & USB Storage Device to Backup Photo & Files from iPhone

NewQ Filehub AC750 Travel Router: Portable Hard Drive SD Card Reader & Mini WiFi Range Extender for Travel | Wireless Access External Harddrive & USB Storage Device to Backup Photo & Files from iPhone

Portable Wireless Router – The basic function of this device is used as a portable wireless wifi router;…

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

What Remains Unclear

It is not yet clear how well ShadowCat performs with very large files or in environments with poor lighting or camera quality. The robustness of the protocol under different device capabilities and network conditions remains to be tested. Additionally, user experience details, such as ease of setup and transfer speed in real-world scenarios, are still emerging.

USB C to Lightning Headphone Audio Adapter, Type C Male to Female Lightning Earphone Converter with Charge/Data Transfer, Compatible with iPhone 17/16/15 Plus/Pro/Max, iPad Pro/Air 6/5/4, MacBook

USB C to Lightning Headphone Audio Adapter, Type C Male to Female Lightning Earphone Converter with Charge/Data Transfer, Compatible with iPhone 17/16/15 Plus/Pro/Max, iPad Pro/Air 6/5/4, MacBook

3 in 1 Function: This USB C to Lightning Adapter combine Fast Charging, Data Transfer and Headphone Audio…

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

What’s Next

Further development may include optimizing transfer speed, improving error correction, and creating user-friendly interfaces. The developer may also release updates to support more file formats or integrate with other offline transfer methods. Community feedback and testing will likely shape future iterations.

Eyoyo Bluetooth 2D&1D Barcode Scanner, Portable Wireless Mini Barcode Reader with 2.4G Wireless/Bluetooth/USB Wired Connection QR Code Scanner Compatible with Pad, Phone, Android, Tablet PC

Eyoyo Bluetooth 2D&1D Barcode Scanner, Portable Wireless Mini Barcode Reader with 2.4G Wireless/Bluetooth/USB Wired Connection QR Code Scanner Compatible with Pad, Phone, Android, Tablet PC

Mini 2D Barcode Scanner: Ultra Mini Size: 3.5*1.18*0.78 inch, Ultra Lightweight: 1.5 oz. Portable and pocket size makes…

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

How secure is ShadowCat for transferring sensitive data?

Since the transfer occurs directly between devices via QR codes without internet, it minimizes exposure. However, security depends on the physical proximity of devices and whether the QR codes are intercepted during scanning. Encryption options are not explicitly mentioned in the current version.

What are the limitations regarding file size or device compatibility?

Transfer speed and success depend on camera quality, lighting, and device processing power. Larger files require longer transfer times, and very old or low-end devices may struggle with decoding dense QR codes or maintaining frame rates.

Does this require internet connectivity to work?

No, the system is designed to work entirely offline once the HTML page is served locally or over HTTPS on the same network.

Can this work across different operating systems and browsers?

Yes, as long as the browser supports WebRTC and camera access over HTTPS or localhost, it should work across various platforms. Compatibility with older browsers or devices may vary.

Source: Hacker News

You May Also Like

GitLab Announces Workforce Reduction and End of Their CREDIT Values

GitLab reveals workforce reduction affecting up to 30% of teams and discontinues their CREDIT values, as part of strategic restructuring announced in June 2024.

How Digital Status Symbols Evolved Beyond Gadgets

Millions now prioritize online influence over gadgets, revealing how digital status symbols have evolved beyond physical possessions to shape social perception.

YouTube is expanding its AI deepfake detection tool to all adult users

YouTube is now expanding its AI likeness detection tool to all users over 18, allowing individuals to monitor and request removal of deepfake content using their likeness.

LinkedIn user hides AI prompt injection in bio to force recruitment spam to be sent in Olde English prose — bots also also manipulated to address user as ‘My Lord’

A LinkedIn user inserted a prompt injection into their profile, causing AI-powered recruitment messages to respond in Old English, highlighting AI manipulation risks.