[{"data":1,"prerenderedAt":392},["ShallowReactive",2],{"project-23541949":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":45,"post_text":46,"what":47,"said":79,"maker_in_thread":167,"shape":177,"grid":181,"attempts":353,"same_week":354,"maker_shows":331,"maker_hidden":384,"reader_version":385,"card":386},"23541949","s4","100% offline Shamir's Secret Sharing GUI","title","Show HN: 100% offline Shamir's Secret Sharing GUI","https:\u002F\u002Fsimon-frey.com\u002Fs4\u002F","simon-frey.com","l1am0",1592329850,2020,180,67,322,3028,11,"notable","security_privacy","secret sharing","web_app",[24,25,26,27],"shamir secret sharing","offline encryption","secret splitting","key backup","curious",-0.196,{"positive":31,"neutral":32,"mixed":33,"critical":18},4,21,1,37,{"privacy":36,"execution":39,"idea":41,"design":43,"docs":44},{"positive":37,"critical":38},0,2,{"positive":37,"critical":40},5,{"positive":37,"critical":42},3,{"positive":37,"critical":37},{"positive":37,"critical":33},[42,42,33,42,37,37,42,42,42,42,42,33,42,42,42,37,42,42,37,37,42,33,33,33,42,33,37,37,40,40,37,40,40,33,33,42,37,33,33,33],null,{"problem":48,"audience":46,"pricing":46,"motivation":46,"time_to_build":46,"stack":58,"openness":76,"stage":77,"team_size":78},{"value":49,"source":50,"evidence":51},"Splitting a secret into shares so that a threshold of them is needed to recover it","inferred",[52,54],{"id":53},"post",{"id":55,"by":56,"text":57},"23543611","ISL","I didn't know the algorithm: https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FShamir%27s_Secret_Sharing",[59,66,72],{"value":60,"source":61,"evidence":62},"Go","maker",[63],{"id":64,"by":11,"text":65},"23556707","Thanks for reporting! The encryption actually works with unicode (as it is go) but apparently vue.js does have a problem with it. Will check how to solve this :D",{"value":67,"source":61,"evidence":68},"WebAssembly",[69],{"id":70,"by":11,"text":71},"23545120","The problem with connect-src 'none' is that is does not allow the webassembly to load than (as this is loaded via js) `Content Security Policy: The page’s settings blocked the…",{"value":73,"source":61,"evidence":74},"Vue.js",[75],{"id":64,"by":11,"text":65},"open_source","launched","unknown",{"praise":80,"objections":97,"requests":124,"questions":140,"alternatives":148},[81],{"value":82,"source":83,"evidence":84},"Useful and well-done, responsive maker fixing bugs quickly","commenter",[85,89,93],{"id":86,"by":87,"text":88},"23549368","NKosmatos","Nice work and extra points for being super responsive to bugs\u002Ffixes\u002Frecommendations from comments :-) Reminds me of something similar: https:\u002F\u002Fiancoleman.io\u002Fshamir\u002F",{"id":90,"by":91,"text":92},"23544263","kickscondor","> You can find the code on Github and this website works completely offline. Save it to your computer (Ctrl+S) in order to not loose access to the s4 in case this website will be…",{"id":94,"by":95,"text":96},"23545350","klyrs","This is really neat! I found a minor issue; changing the number of shares on the decode panel (after a successful decode) seems to freeze the output; using a recent firefox on…",[98,109,116],{"value":99,"source":83,"evidence":100},"Page could make network requests; needs CSP or offline enforcement",[101,105],{"id":102,"by":103,"text":104},"23543687","analyte123","Hate to be this guy, but things trying to be like this should implement a CSP with `connect-src 'none'` (and `form-action: 'none'` and `self` restrictions on everything else).…",{"id":106,"by":107,"text":108},"23544269","dylz","You can't be assured that they will send that CSP header or meta tag with every request, either. If your threat model includes this, might as well save the page locally.",{"value":110,"source":83,"evidence":111},"Shares lack integrity; bad shares can corrupt the secret",[112],{"id":113,"by":114,"text":115},"23544123","e79","While SSSS provides information theoretic security, there are a couple of security gotchas. One example is that it leaks the length of a secret unless padding is used. In…",{"value":117,"source":83,"evidence":118},"Browser crashes or freezes with large share counts and some inputs",[119,123],{"id":120,"by":121,"text":122},"23548654","CortexM4","Love to be this guy, good way to crash the browser. Set share size to 1000+ and Enjoy!",{"id":94,"by":95,"text":96},[125,129],{"value":126,"source":83,"evidence":127},"Add Content Security Policy restricting network access",[128],{"id":102,"by":103,"text":104},{"value":130,"source":83,"evidence":131},"Add verifiable shares or share signing",[132,136],{"id":133,"by":134,"text":135},"23544555","kcolford","Can't these problems be solved with another layer like signing with a pubkey where the private is thrown away after issuance? And then maybe some error correcting algorithm to…",{"id":137,"by":138,"text":139},"23548403","this_was_posted","wouldn't an easy fix for verifiability be that you include a list of hashes of every valid share along with each individual key?",[141],{"value":142,"source":83,"evidence":143},"Is it compatible with other SSSS implementations?",[144],{"id":145,"by":146,"text":147},"23546134","mirimir","Interesting. But what about ssss? Also, I vaguely recall that results may be implementation specific, in that shares must be combined with the same app that produced them. So is…",[149,156,160],{"value":150,"source":83,"evidence":151},"BananaSplit (bs.parity.io)",[152],{"id":153,"by":154,"text":155},"23547980","ahazred8ta","> save the HTML on your local machine, and then run it from there Yes; there is another js Shamir utility that works like that; it requires you to download the html and refuses…",{"value":157,"source":83,"evidence":158},"iancoleman.io\u002Fshamir",[159],{"id":86,"by":87,"text":88},{"value":161,"source":83,"evidence":162},"Multisig wallets",[163],{"id":164,"by":165,"text":166},"23545650","nope96","I have usually seen multisig as the recommended way, not Shamir. One Shamir vs multisig article :…",{"comments":168,"answered":38,"key":169},16,[170,173,174],{"id":171,"text":172},"23543714","Love you being this guy as this is a very valid point! I am on the go right now, but will ad this in about 2 hours.",{"id":70,"text":71},{"id":175,"text":176},"23548969","Funny I came up with the same idea about 10min ago :D It is now directly embedded via a data uri. This allows to set `connect-src: 'data'`",{"commenters":34,"max_depth":178,"maker_replies":168,"first_comment_mins":179,"lifespan_hours":180},6,88,96,[182,184,186,189,191,194,195,199,203,206,208,210,213,215,218,220,224,225,227,228,230,233,236,239,242,245,247,250,251,253,254,257,260,263,267,270,273,276,278,279,281,284,287,291,294,296,298,301,303,306,309,311,314,317,321,323,325,327,328,330,332,334,339,342,346,348,352],[102,37,42,183,103,37],"project\u002Fneutral\u002Fprivacy",[171,37,37,185,11,33],"maker\u002Fpositive\u002Fprivacy",[187,37,42,183,188,37],"23543859","thinkloop",[106,37,33,190,107,37],"project\u002Fcritical\u002Fprivacy",[192,37,42,183,193,37],"23545569","zaroth",[153,37,42,183,154,37],[196,37,37,197,198,37],"23576026","other\u002Fneutral\u002Fprivacy","ijpsud",[200,37,37,201,202,37],"23548376","other\u002Fneutral\u002Fnone","blitmap",[204,37,37,205,107,37],"23548767","commenter\u002Fneutral\u002Fprivacy",[207,37,37,205,202,37],"23556658",[209,37,42,183,198,37],"23576052",[211,37,42,183,212,37],"23544919","andai",[70,37,37,214,11,33],"maker\u002Fneutral\u002Fprivacy",[216,37,42,217,193,37],"23545539","maker\u002Fneutral\u002Fexecution",[219,37,42,183,154,37],"23548001",[221,37,42,222,223,37],"23548894","project\u002Fneutral\u002Fexecution","jerry1979",[175,37,37,222,11,33],[226,37,42,183,198,37],"23576072",[113,33,33,190,114,37],[133,33,42,229,134,37],"project\u002Fneutral\u002Fidea",[231,33,42,229,232,37],"23546361","matthewaveryusa",[234,33,37,235,11,33],"23544770","maker\u002Fneutral\u002Fidea",[237,33,42,229,238,37],"23545794","y7",[240,33,42,229,241,37],"23547365","Vervious",[243,33,42,183,244,37],"23548215","maxfan8",[246,33,37,205,114,37],"23549521",[248,33,37,249,244,37],"23585134","commenter\u002Fneutral\u002Fidea",[137,33,42,229,138,37],[252,33,37,235,11,33],"23549420",[55,38,42,229,56,37],[255,38,37,201,256,37],"23543865","schoen",[258,38,37,201,259,37],"23547208","peterwwillis",[261,38,37,201,262,37],"23548338","p4bl0",[264,42,42,265,266,37],"23542963","project\u002Fneutral\u002Fdesign","aprao",[268,42,37,269,11,33],"23543737","maker\u002Fneutral\u002Fdesign",[271,31,33,272,188,37],"23544077","project\u002Fcritical\u002Fidea",[274,31,33,272,275,37],"23544363","Canada",[277,31,42,229,188,37],"23546095",[164,31,33,272,165,37],[280,31,37,201,114,37],"23546825",[282,31,42,283,188,37],"23546913","project\u002Fmixed\u002Fidea",[285,31,42,229,286,37],"23548125","ShorsHammer",[288,40,33,289,290,37],"23543672","project\u002Fcritical\u002Fexecution","gh123man",[292,40,37,293,11,33],"23543728","maker\u002Fpositive\u002Fexecution",[295,178,37,217,11,33],"23545657",[297,178,37,293,11,33],"23548913",[90,299,40,300,91,37],7,"project\u002Fpositive\u002Fnone",[302,299,37,201,11,33],"23544781",[304,299,37,201,305,37],"23544930","aspenmayer",[307,299,40,300,308,37],"23545801","bscphil",[310,299,37,201,91,37],"23547563",[86,312,40,313,87,37],8,"maker\u002Fpositive\u002Fnone",[315,312,37,316,11,33],"23549408","project\u002Fneutral\u002Fnone",[318,319,40,300,320,37],"23545948",9,"chosenken",[322,319,37,201,188,37],"23546207",[94,324,33,289,95,37],10,[326,324,37,293,11,33],"23545633",[120,18,33,289,121,37],[329,18,37,265,11,33],"23548686",[145,331,42,229,146,37],12,[333,331,37,201,114,37],"23546730",[335,336,33,337,338,37],"23543401",13,"project\u002Fcritical\u002Fdocs","jaspax",[340,336,37,341,11,33],"23543749","maker\u002Fneutral\u002Fdocs",[343,344,33,289,345,37],"23547958",14,"l8again",[347,344,37,217,11,33],"23548441",[349,350,33,289,351,37],"23551890",15,"dartf",[64,350,37,217,11,33],[],[355,360,365,370,374,379],{"id":356,"name":357,"points":358,"category":359},"23491940","Artvee",550,"learning_science",{"id":361,"name":362,"points":363,"category":364},"23519439","ISS Photo Explorer",528,"creative",{"id":366,"name":367,"points":368,"category":369},"23514682","Collected Notes",457,"productivity",{"id":371,"name":372,"points":373,"category":369},"23517394","LogoSearch",251,{"id":375,"name":376,"points":377,"category":378},"23549471","geekring",235,"consumer_social",{"id":380,"name":381,"points":382,"category":383},"23523830","Briefing",203,"infrastructure",false,"v2",{"id":387,"name":5,"line":6,"ai":384,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":388,"top":18,"kw":389,"maker":11,"domain":10,"tier":19,"attempts":37,"strip":390,"url":9,"mix":391,"praise":82,"objection":99,"sub":21},23541949,-0.2,[24,25,26,27],"3313003333313330330031113100550551130111",[31,32,33,18],1794036592285]