[{"data":1,"prerenderedAt":204},["ShallowReactive",2],{"project-15725436":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":32,"aspects":33,"strip":38,"post_text":41,"what":42,"said":62,"maker_in_thread":133,"shape":142,"grid":145,"attempts":164,"same_week":165,"maker_shows":195,"maker_hidden":196,"reader_version":197,"card":198},"15725436","Cryptob.in","A snippet share tool with client-side encryption","title","Show HN: Cryptob.in – A snippet share tool with client-side encryption","https:\u002F\u002Fcryptob.in\u002F","cryptob.in","viktorelofsson",1510948358,2017,19,12,1260,2242,57,"shown","dev_tools","snippet sharing","web_app",[21,24,25,26],"client-side encryption","encrypted paste","javascript crypto","debated",0.125,{"positive":30,"neutral":30,"mixed":31,"critical":30},2,0,6,{"privacy":34,"execution":35,"design":36},{"positive":31,"critical":30},{"positive":31,"critical":31},{"positive":37,"critical":31},1,[37,31,31,39,39,31,37,31,31,40,40,31],3,5,null,{"problem":41,"audience":41,"pricing":41,"motivation":41,"time_to_build":41,"stack":43,"openness":60,"stage":61,"team_size":60},[44,54],{"value":45,"source":46,"evidence":47},"TweetNaCl.js","maker",[48,51],{"id":49,"by":11,"text":50},"15734725","I took your advice from the other comment and started using TweetNaCl.js which had some pretty good endorsements :) I’ll definitely check out some more sources on crypto in…",{"id":52,"by":11,"text":53},"15727085","I've implemented all points that @tptacek mentioned (except the web extension, that will be a future update), and will also activate HSTS when I feel comfortable with the server…",{"value":55,"source":46,"evidence":56},"Bootstrap",[57],{"id":58,"by":11,"text":59},"15729677","Thanks! It’s mostly Bootstrap so I shouldn’t really take credit :) Have a look at https:\u002F\u002Fgithub.com\u002Fpicotorrent\u002Fpicotorrent for one of the more popular projects I run!","unknown","launched",{"praise":63,"objections":79,"requests":102,"questions":121,"alternatives":128},[64,72],{"value":65,"source":66,"evidence":67},"Maker responded quickly and graciously to security feedback","commenter",[68],{"id":69,"by":70,"text":71},"15727674","goliatone","I really appreciate how well you took the feedback and how quickly you acted on it. Refreshing to see such interactions online these days, make me think of times when the web…",{"value":73,"source":66,"evidence":74},"Clean, simple and modern UX and layout",[75],{"id":76,"by":77,"text":78},"15728588","cpach","Snyggt! I really like the UX and layout. Clean, simple and at the same time really fresh and modern. Would love to see any other projects you’ve made!",[80,87,94,98],{"value":81,"source":66,"evidence":82},"Client-side encryption in a web page is unsafe because the server can serve malicious JS",[83],{"id":84,"by":85,"text":86},"15725853","tptacek","1. Nothing like this is ever safe; the server can surreptitiously feed you JS that will fatally compromise your encryption. 2. This one is even worse, because it loads scripts…",{"value":88,"source":66,"evidence":89},"Uses unauthenticated CBC mode and CryptoJS, which are insecure",[90,91],{"id":84,"by":85,"text":86},{"id":92,"by":85,"text":93},"15730261","Don't bother. You won't gain any meaningful security, and you'll be using the same error-prone, outmoded constructions. Even if you had built this application in perfect,…",{"value":95,"source":66,"evidence":96},"Loads scripts from CDNs and used Google Analytics, weakening encryption",[97],{"id":84,"by":85,"text":86},{"value":99,"source":66,"evidence":100},"Compressing before encrypting creates side channels",[101],{"id":84,"by":85,"text":86},[103,110,117],{"value":104,"source":66,"evidence":105},"Use Web Crypto API instead of JS crypto library",[106],{"id":107,"by":108,"text":109},"15727697","conorgil145","Wouldn't it make even more sense to use the Web Crypto API instead of any JS crypto library loaded from the server?",{"value":111,"source":66,"evidence":112},"Ship as a browser extension instead of a web page",[113,114],{"id":84,"by":85,"text":86},{"id":115,"by":85,"text":116},"15726422","Yep.",{"value":118,"source":66,"evidence":119},"Enable HSTS",[120],{"id":52,"by":11,"text":53},[122],{"value":123,"source":46,"evidence":124},"Whether the suggested extension means a Chrome extension",[125],{"id":126,"by":11,"text":127},"15725923","Also - regarding your second #1, are we talking about something like a Chrome extension?",[129],{"value":130,"source":66,"evidence":131},"Google Docs",[132],{"id":84,"by":85,"text":86},{"comments":32,"answered":37,"key":134},[135,138,139],{"id":136,"text":137},"15725871","Thanks for the feedback! I will definitely address your points, and I really appreciate the constructive criticism :)",{"id":126,"text":127},{"id":140,"text":141},"15728431","Yes, that would probably make sense for the browsers that supports it. Which seems to be mostly everyone except IE. It will be fixed in the next update!",{"commenters":40,"max_depth":40,"maker_replies":32,"first_comment_mins":143,"lifespan_hours":144},61,45,[146,148,150,152,153,155,156,157,158,159,160,162],[84,31,37,147,85,31],"project\u002Fcritical\u002Fprivacy",[136,31,31,149,11,37],"maker\u002Fpositive\u002Fnone",[126,31,31,151,11,37],"project\u002Fneutral\u002Fnone",[115,31,39,151,85,31],[107,31,39,154,108,31],"project\u002Fneutral\u002Fexecution",[140,31,31,154,11,37],[92,31,37,147,85,31],[49,31,31,154,11,37],[52,37,31,154,11,37],[69,37,40,149,70,31],[76,30,40,161,77,31],"project\u002Fpositive\u002Fdesign",[58,30,31,163,11,37],"maker\u002Fneutral\u002Fnone",[],[166,171,176,181,186,191],{"id":167,"name":168,"points":169,"category":170},"15739744","Harvest Signal",572,"consumer_social",{"id":172,"name":173,"points":174,"category":175},"15757844","LogoFox",431,"creative",{"id":177,"name":178,"points":179,"category":180},"15761537","Gophercises",328,"learning_science",{"id":182,"name":183,"points":184,"category":185},"15736090","Boltzmann Machines",201,"ai",{"id":187,"name":188,"points":189,"category":190},"15759014","OhMyCo.in",167,"finance_crypto",{"id":192,"name":193,"points":194,"category":175},"15720448","Chord Progressions",161,4,false,"v2",{"id":199,"name":5,"line":6,"ai":196,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":200,"top":18,"kw":201,"maker":11,"domain":10,"tier":19,"attempts":31,"strip":202,"url":9,"mix":203,"praise":65,"objection":81,"sub":21},15725436,0.13,[21,24,25,26],"100330100550",[30,30,31,30],1793990966718]