[{"data":1,"prerenderedAt":481},["ShallowReactive",2],{"project-12742395":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":45,"post_text":46,"what":47,"said":93,"maker_in_thread":192,"shape":194,"grid":199,"attempts":443,"same_week":444,"maker_shows":42,"maker_hidden":473,"reader_version":474,"card":475},"12742395","Hawkpost","Get encrypted data from people that don’t know how to encrypt","title","Show HN: Get encrypted data from people that don’t know how to encrypt","https:\u002F\u002Fgithub.com\u002Fwhitesmith\u002Fhawkpost","github.com","chomponthis",1476870158,2016,275,93,79,2264,4,"legend","security_privacy","encrypted message sharing","web_app",[24,25,26,27],"pgp encryption","encrypted file sharing","browser encryption","secure upload","curious",-0.127,{"positive":31,"neutral":32,"mixed":33,"critical":34},6,27,0,10,43,{"idea":37,"privacy":40,"execution":41,"docs":43,"design":44},{"positive":38,"critical":39},5,3,{"positive":33,"critical":18},{"positive":33,"critical":42},1,{"positive":33,"critical":42},{"positive":33,"critical":42},[42,42,33,33,42,33,39,38,39,33,42,38,38,39,39,39,42,39,39,42,42,33,33,33,39,33,38,38,39,38,42,33,39,39,39,42,42,33,39,33],null,{"problem":48,"audience":56,"pricing":46,"motivation":63,"time_to_build":46,"stack":67,"openness":90,"stage":91,"team_size":92},{"value":49,"source":50,"evidence":51},"Clients send sensitive information through insecure channels like plain email.","commenter",[52],{"id":53,"by":54,"text":55},"12743785","dethos","Hi, I'm one of the contributors of the project and we started this because of the need to deal with clients sending us information through insecure channels. We have been using…",{"value":57,"source":50,"evidence":58},"Non-technical people sending sensitive data to a business or team.",[59,60],{"id":53,"by":54,"text":55},{"id":61,"by":54,"text":62},"12744372","Thats an use case that we also encounter often, we are still thinking about a solution (be it through Hawkpost or something else). The other way around is definitely an harder…",{"value":64,"source":50,"evidence":65},"Clients at Whitesmith sent information through insecure channels.",[66],{"id":53,"by":54,"text":55},[68,75,79],{"value":69,"source":50,"evidence":70},"Python",[71],{"id":72,"by":73,"text":74},"12743225","bartl","Python and PostGreSQL. Not exactly a tiny footprint for a tiny application.",{"value":76,"source":50,"evidence":77},"PostgreSQL",[78],{"id":72,"by":73,"text":74},{"value":80,"source":50,"evidence":81},"JavaScript",[82,86],{"id":83,"by":84,"text":85},"12742493","leni536","js crypto's trust problem isn't solved yet. One has to trust hawkpost.co to not serve compromised client side js.",{"id":87,"by":88,"text":89},"12742822","Tepix","The code is supposed to be self hosted, so if you give someone else this link it will be at https:\u002F\u002Fyourdomain.com\u002F...","open_source","launched","team",{"praise":94,"objections":110,"requests":129,"questions":148,"alternatives":160},[95,103],{"value":96,"source":50,"evidence":97},"Useful for handling client data securely",[98,99],{"id":53,"by":54,"text":55},{"id":100,"by":101,"text":102},"12742449","Odenwaelder","This is excellent and very helpful for my volunteer work.",{"value":104,"source":50,"evidence":105},"Fills a gap left by Keybase",[106],{"id":107,"by":108,"text":109},"12742489","rev112","Looks great, this is something that is missing from Keybase (specifically, the email sending part).",[111,118,125],{"value":112,"source":50,"evidence":113},"Browser-delivered JavaScript must be trusted from the server",[114,115],{"id":83,"by":84,"text":85},{"id":116,"by":88,"text":117},"12743519","Hawkpost (the project introduced here) is also vulnerable to a coldboot attack - if the server that sends the page with the javascript is compromised, all bets are off.",{"value":119,"source":50,"evidence":120},"Link sending is vulnerable to man-in-the-middle attacks",[121],{"id":122,"by":123,"text":124},"12742903","dkopi","The weakest link I can identify here is MITM attacks when you're sending the link. Imagine: ``` Alice generates a link. Sends the link to Bob over an unencrypted\u002Funauthenticated…",{"value":126,"source":50,"evidence":127},"Python and PostgreSQL are heavy for a small app",[128],{"id":72,"by":73,"text":74},[130,140],{"value":131,"source":50,"evidence":132},"Keybase integration",[133,137],{"id":134,"by":135,"text":136},"12746057","j2kun","It would be lovely to have keybase integration! I've just copy\u002Fpasted my GPG public key and fingeprrint from the keybase website into the hawkpost settings, and it works great!",{"id":138,"by":54,"text":139},"12746176","Agree. Currently keybase can be used as the key-sever url supplied by the user, but in the future making a real integration to take advantage of some cool keybase features would…",{"value":141,"source":50,"evidence":142},"Reverse direction: sending encrypted data to people without keys",[143,147],{"id":144,"by":145,"text":146},"12743873","jsingleton","This is a great idea but I often have this problem the other way around. I regularly want to send encrypted data to companies that don't know how to decrypt it. The number of…",{"id":61,"by":54,"text":62},[149],{"value":150,"source":50,"evidence":151},"How to prove the hosted code matches the public repo",[152,156],{"id":153,"by":154,"text":155},"12743136","OJFord","``` > or use the official server (that is running an exact copy of this repo) ``` Is there any project that attempts to prove claims like this? I don't know what that would look…",{"id":157,"by":158,"text":159},"12743276","bugmen0t","What you are looking for is called \"remote attestation\". (In open source software the solution to this problem is \"well, you could always just host your own instance\" ;))",[161,171,178,185],{"value":162,"source":50,"evidence":163},"Password-protected zip files",[164,168],{"id":165,"by":166,"text":167},"12743892","burkaman","Does a password-protected zip file work?",{"id":169,"by":145,"text":170},"12744183","This is the most basic step, but even this is non-trivial. There are multiple ways of password protecting a zip, ZipCrypto is insecure and not all software supports AES-256.…",{"value":172,"source":50,"evidence":173},"Protonmail password-protected messages",[174],{"id":175,"by":176,"text":177},"12745976","matt4077","Protonmail has the ability to send a password-encrypted message to anyone. They just get a link and you have to give them the password through other means. All encryption is…",{"value":179,"source":50,"evidence":180},"Microsoft Azure Information Protection",[181],{"id":182,"by":183,"text":184},"12745533","srpeck","Microsoft solves this with RMS for Individuals: https:\u002F\u002Fportal.aadrm.com\u002F (also called the RMS Sharing App, now getting rebranded to Azure Information Protection). The…",{"value":186,"source":50,"evidence":187},"encrypt.to",[188],{"id":189,"by":190,"text":191},"12742723","diasp","Similar project https:\u002F\u002Fencrypt.to",{"comments":33,"answered":33,"key":193},[],{"commenters":195,"max_depth":196,"maker_replies":33,"first_comment_mins":197,"lifespan_hours":198},56,9,18,23,[200,203,207,209,211,214,217,220,223,226,227,231,233,235,238,241,244,247,248,249,252,254,257,258,259,262,266,268,269,271,272,273,274,276,278,281,282,284,287,290,292,295,299,301,303,307,309,310,313,316,319,322,325,327,329,332,336,339,340,343,345,348,350,353,357,361,365,369,371,374,378,381,383,386,389,393,396,399,403,405,407,409,414,418,420,423,426,428,431,433,436,439,441],[201,33,42,202,88,33],"12742809","project\u002Fcritical\u002Fidea",[204,33,33,205,206,33],"12742843","commenter\u002Fneutral\u002Fprivacy","gravypod",[116,33,42,208,88,33],"project\u002Fcritical\u002Fprivacy",[210,33,33,205,145,33],"12743998",[212,33,33,205,213,33],"12746546","EGreg",[215,33,33,205,216,33],"12746809","nsgi",[218,33,33,219,213,33],"12747045","commenter\u002Fneutral\u002Fnone",[221,33,33,219,222,33],"12747315","rudolf0",[224,33,33,219,225,33],"12747656","roblabla",[122,42,42,208,123,33],[228,42,39,229,230,33],"12743010","project\u002Fneutral\u002Fidea","rhaps0dy",[232,42,33,219,123,33],"12743294",[234,42,33,219,145,33],"12744029",[236,42,39,237,54,33],"12743061","maker\u002Fneutral\u002Fprivacy",[239,42,33,205,240,33],"12743657","cardigan",[242,42,39,243,135,33],"12746171","project\u002Fneutral\u002Fprivacy",[53,245,38,246,54,33],2,"maker\u002Fpositive\u002Fidea",[144,245,39,229,145,33],[165,245,39,229,166,33],[250,245,33,205,251,33],"12744148","taco_emoji",[253,245,33,219,145,33],"12744189",[255,245,33,219,256,33],"12744797","zokier",[169,245,33,219,145,33],[182,245,42,202,183,33],[260,245,33,261,145,33],"12750585","other\u002Fneutral\u002Fnone",[263,245,38,264,265,33],"12744134","project\u002Fpositive\u002Fidea","jpdlla",[61,245,39,267,54,33],"maker\u002Fneutral\u002Fidea",[175,245,33,261,176,33],[270,245,33,261,145,33],"12750610",[134,245,38,264,135,33],[138,245,39,267,54,33],[153,39,39,243,154,33],[275,39,39,237,54,33],"12743170",[277,39,33,205,154,33],"12743221",[279,39,39,243,280,33],"12743172","MichaelGG",[157,39,39,243,158,33],[283,39,33,205,154,33],"12743663",[285,18,42,202,286,33],"12747104","tptacek",[288,38,33,261,289,33],"12743058","arnoxmp",[189,31,39,291,190,33],"project\u002Fneutral\u002Fnone",[293,31,39,243,294,33],"12742837","nspassov",[296,297,33,261,298,33],"12743918",7,"sjs382",[300,297,39,267,145,33],"12744078",[302,297,33,261,298,33],"12744750",[304,305,42,208,306,33],"12742695",8,"erikb",[308,305,39,237,54,33],"12742917",[83,196,42,208,84,33],[311,196,33,205,312,33],"12742537","willvarfar",[314,196,33,205,315,33],"12742542","edejong",[317,196,33,205,318,33],"12742568","haywirez",[320,196,33,205,321,33],"12742608","StavrosK",[323,196,33,205,324,33],"12742778","eli",[326,196,33,205,88,33],"12742827",[328,196,33,219,321,33],"12743133",[330,196,33,205,331,33],"12742727","witty_username",[333,196,33,334,335,33],"12742629","other\u002Fneutral\u002Fprivacy","twiss",[337,196,39,338,54,33],"12743546","maker\u002Fneutral\u002Fnone",[87,196,39,237,88,33],[341,196,33,205,342,33],"12743878","SamBam",[344,196,33,205,145,33],"12744250",[346,34,33,261,347,33],"12745508","lisper",[107,349,38,264,108,33],11,[351,349,39,229,352,33],"12744108","jlbribeiro",[354,355,33,261,356,33],"12742633",12,"tomw1808",[358,359,38,264,360,33],"12742469",13,"arj",[362,363,33,261,364,33],"12742699",14,"internetwache",[366,367,39,229,368,33],"12743867",15,"sametmax",[370,367,39,229,54,33],"12744769",[100,372,38,373,101,33],16,"project\u002Fpositive\u002Fnone",[375,376,39,229,377,33],"12744237",17,"empath75",[379,376,33,380,54,33],"12744533","commenter\u002Fneutral\u002Fidea",[72,197,42,382,73,33],"project\u002Fcritical\u002Fexecution",[384,197,33,219,385,33],"12744855","dom0",[387,197,33,261,388,33],"12750334","elcct",[390,391,39,229,392,33],"12743760",19,"teaearlgraycold",[394,391,33,334,395,33],"12743778","delinka",[397,391,33,398,54,33],"12743959","other\u002Fneutral\u002Fidea",[400,401,39,229,402,33],"12742549",20,"ComodoHacker",[404,401,39,229,312,33],"12742596",[406,401,39,243,54,33],"12744047",[408,401,39,229,54,33],"12742941",[410,411,42,412,413,33],"12742544",21,"project\u002Fcritical\u002Fdocs","dvh",[415,411,33,416,417,33],"12742587","commenter\u002Fneutral\u002Fdocs","martin-adams",[419,411,33,416,321,33],"12742598",[421,411,42,422,417,33],"12742623","project\u002Fcritical\u002Fdesign",[424,411,33,261,425,33],"12742745","smnscu",[427,411,33,261,417,33],"12743092",[429,411,33,416,430,33],"12742792","Freak_NL",[432,411,33,416,413,33],"12743111",[434,411,39,435,88,33],"12742768","project\u002Fneutral\u002Fdocs",[437,411,33,261,438,33],"12743872","X86BSD",[440,411,33,261,385,33],"12744906",[442,411,33,261,385,33],"12744967",[],[445,450,455,460,464,469],{"id":446,"name":447,"points":448,"category":449},"12721709","I made a Chrome extension that helps battle impulsive procrastination",277,"productivity",{"id":451,"name":452,"points":453,"category":454},"12723281","CSS ICON",250,"dev_tools",{"id":456,"name":457,"points":458,"category":459},"12699767","Styled-components",172,"languages",{"id":461,"name":462,"points":463,"category":459},"12735665","Swip.js",152,{"id":465,"name":466,"points":467,"category":468},"12703679","Stack Match",136,"web_saas",{"id":470,"name":471,"points":472,"category":449},"12745449","Tdo",78,false,"v2",{"id":476,"name":5,"line":6,"ai":473,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":477,"top":18,"kw":478,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":479,"url":9,"mix":480,"praise":96,"objection":112,"sub":21},12742395,-0.13,[24,25,26,27],"1100103530155333133110003055351033311030",[31,32,33,34],1793990949000]