sdees
Security and privacy
encrypted file editing
SHOW HN2016
How HN took it
1 positive, 5 neutral or asking, 0 mixed, 9 critical, out of 15 comments about the project. Thread score -0.43.
Idea: 0 for, 6 againstPrivacy: 0 for, 2 againstDocs: 0 for, 1 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for Windows users who lack GPG and rsync setup
From 1 comment
And as a Windows user I thank you.
xori on HN
Objections
Not serverless since it requires a remote file server
From 4 comments
How is this serverless when there is a server called remote in the example? Am I the only one around here?…
antocv on HNI agree completely with what you say. I don't understand what relevance it has to my comment. sdees requires a file server, specifically it prompts the user for one and saves it…
dmgd on HNHow is this "serverless"? Quite clearly I have to configure a remote...
repomies691 on HNPlease stop using the term serverless, it may be decentralised but it is not serverless, so if you mean decentralised please use that term instead.
mrmondo on HN
Decentralized label is misleading; it is offline-capable, not decentralized
From 2 comments
My Firefox web browser is serverless. Now in a world without web servers, Firefox would not be very useful at all. The same with your tool. Decentralized, its not, not requiring…
antocv on HNPlease stop using the term serverless, it may be decentralised but it is not serverless, so if you mean decentralised please use that term instead.
mrmondo on HN
Rolling own crypto wrapper instead of using GPG is risky
From 1 comment
Why not use GPG directly? I get the wish to not add more binary dependencies, but the recent couple of issues with Go's math and crypto libraries doesn't fill me with confidence.…
cyphar on HN
Password hash with static salt is unnecessary
From 2 comments
Amusing to see a comment mention 14 work factor and the code is 12 rounds. Code and comments get out of sync so quickly. Out of interest, why the static salt in addition to bcrypt?
throwawayReply on HNNot the author but if I had to take a guess I'd say they might have been trying to pepper the hash: https://en.wikipedia.org/wiki/Pepper_(cryptography). It's not particularly…
arkadiyt on HN
Requests
Drop the term serverless
From 1 comment
Please stop using the term serverless, it may be decentralised but it is not serverless, so if you mean decentralised please use that term instead.
mrmondo on HN
Support IPFS or syncthing-style sync
From 2 comments
i was expecting something using IPFS :D
orliesaurus on HNYes, or something like syncthing
chme on HN
Questions
Why not use GPG directly
From 1 comment
Why not use GPG directly? I get the wish to not add more binary dependencies, but the recent couple of issues with Go's math and crypto libraries doesn't fill me with confidence.…
cyphar on HN
Why the static salt with bcrypt
From 1 comment
Amusing to see a comment mention 14 work factor and the code is 12 rounds. Code and comments get out of sync so quickly. Out of interest, why the static salt in addition to bcrypt?
throwawayReply on HN
Alternatives named
Cryptpad
From 1 comment
Friend of mine is working on Cryptpad [1] which is encrypted collaborative web editor. There are multiple connection modes, most common websockets relay server but he is also…
Kubuxu on HN
Vim and Neovim encryption with scp
From 2 comments
(In .vimrc) set cryptmethod=blowfish2 vim -x scp://.../...
_paulc on HNI was excited for a moment. Then found out neovim doesn't support -x. And this is why: https://github.com/neovim/neovim/issues/694 (tldr; vim encryption is unsecure and thus…
ende42 on HN
Emacs TRAMP with EasyPG
From 1 comment
In emacs, one could use TRAMP and EasyPG Assistant: ``` C-x C-f /rsync:user@host:/path/to/file ``` One could of course also configure stuff such that one could type quite a bit…
wtbob on HN
Syncthing
From 1 comment
Yes, or something like syncthing
chme on HN