Comment by taneq

> Send some xor-ed file out using a non-secure connection and sneak the key out somehow ?

Stray thought: You don't have to sneak a OTP out, you only need to sneak it in. Then you do your XORing, transmit the mangled data, and erase that copy of the key.