[{"data":1,"prerenderedAt":457},["ShallowReactive",2],{"project-29399278":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":45,"post_text":48,"what":49,"said":74,"maker_in_thread":212,"shape":220,"grid":224,"attempts":409,"same_week":420,"maker_shows":46,"maker_hidden":450,"reader_version":451,"card":452},"29399278","Burnernote","A free, ad-free and open source tool for sharing private notes","title","Show HN: I made a free, ad-free and open source tool for sharing private notes","https:\u002F\u002Fburnernote.com\u002F?ref=hackernews","burnernote.com","gigamick",1638318987,2021,124,76,413,2533,17,"notable","security_privacy","self-destructing notes","web_app",[24,21,25,26],"private notes","encrypted sharing","burn after reading","roasted",-0.34,{"positive":30,"neutral":31,"mixed":32,"critical":33},4,13,2,20,39,{"privacy":36,"execution":39,"design":42,"docs":43,"idea":44},{"positive":37,"critical":38},0,11,{"positive":40,"critical":41},1,7,{"positive":32,"critical":37},{"positive":37,"critical":40},{"positive":40,"critical":40},[40,40,46,47,47,37,40,47,40,40,47,47,40,37,40,40,47,46,40,37,47,47,47,37,47,40,40,40,40,40,37,40,46,46,37,40,40,40,47,40],5,3,null,{"problem":50,"audience":48,"pricing":60,"motivation":48,"time_to_build":48,"stack":64,"openness":71,"stage":72,"team_size":73},{"value":51,"source":52,"evidence":53},"Sharing private notes that delete after being read","maker",[54,56],{"id":55},"post",{"id":57,"by":58,"text":59},"29402831","rakoo","From the about page: > However [alternatives'] pages are laden with ads, have a poor UI, and you can't know for sure if they really are actually encrypting \u002F deleting anything.…",{"value":61,"source":52,"evidence":62},"Free and ad-free",[63],{"id":55},[65],{"value":66,"source":52,"evidence":67},"Laravel (PHP)",[68],{"id":69,"by":11,"text":70},"29415269","Laravel only, basically.","open_source","beta","unknown",{"praise":75,"objections":95,"requests":142,"questions":171,"alternatives":186},[76,88],{"value":77,"source":78,"evidence":79},"Clean UI and free, ad-free approach","commenter",[80,84],{"id":81,"by":82,"text":83},"29411377","jrexilius","Yeah, Burnernote is clean and a nice UI. Good luck and thanks for putting it out there!",{"id":85,"by":86,"text":87},"29430071","rntksi","nice :-) liking the new \"Show me the note\" button gatekeeper. cheers",{"value":89,"source":78,"evidence":90},"Useful burn-after-use idea for privacy",[91],{"id":92,"by":93,"text":94},"29399913","ransom1538","I just want to say @gigamick these burn systems are powerful. You might get divorced some day. You might have a business partner subpoena your old gmail account. ALL those…",[96,104,115,125,135],{"value":97,"source":78,"evidence":98},"Server-side encryption; plaintext sent to server, client-side encryption promised",[99,100],{"id":57,"by":58,"text":59},{"id":101,"by":102,"text":103},"29401303","jinseokim","First of all, this is a cool idea. I always love to see something private and encrypted. But I found some concerns and ideas about your project (and I think you may can fix…",{"value":105,"source":78,"evidence":106},"XSS vulnerability in note display",[107,111],{"id":108,"by":109,"text":110},"29401100","28uwedj","DO NOT USE THIS SITE: 1. Create Note with the contents \u003Cscript>alert(1);\u003C\u002Fscript> 2. Go to link 3. this site is a massive security flaw.",{"id":112,"by":113,"text":114},"29402082","retube","The alert itself is harmless, but demonstrates that arbitrary javascript - which could certainly not be harmless - can be injected into the page.",{"value":116,"source":78,"evidence":117},"Link previews by chat apps destroy notes",[118,121],{"id":119,"by":86,"text":120},"29400189","Nice gigamick. This has a problem though, when you paste that link in a chat window (e.g. WhatsApp, Telegram, Discord, ...), the app tries to get a link preview. This has the…",{"id":122,"by":123,"text":124},"29400858","snerbles","Can confirm this happens with Matrix\u002FElement. Amusingly, the brief contents of the note are visible in the preview along with \"This note has now been permanently deleted\".",{"value":126,"source":78,"evidence":127},"AES-CBC without authentication and deletion not provably sound",[128,132],{"id":129,"by":130,"text":131},"29400036","woodruffw","AES-CBC for quick and dirty encryption can be a red flag: the scheme needs to include an encrypt-then-MAC phase or it'll be vulnerable to padding oracle attacks. I tried to do a…",{"id":133,"by":130,"text":134},"29423544","It's a very good thing that it isn't susceptible to that particular weakness, as that would have been a disastrous one. But there are a lot of things that are left to be desired…",{"value":136,"source":78,"evidence":137},"Stack traces exposed on large input",[138],{"id":139,"by":140,"text":141},"29399665","mmh0000","FYI if I post 1MB of data it explodes and dumps a full stack trace. May not be something you want exposed. ``` SQLSTATE[22001]: String data, right truncated: 1406 Data too long…",[143,152,160],{"value":144,"source":52,"evidence":145},"Client-side encryption",[146,149],{"id":147,"by":11,"text":148},"29404006","This is awesome feedback and client side encryption is 100% on its way. I just put this together over the weekend and then put around places like this for feedback. Client side…",{"id":150,"by":11,"text":151},"29404030","Zerobin certainly is cool but for me the UI is really dated looking and in my opinion not at all minimalist. I have client side encryption coming to Burnernote very soon.",{"value":153,"source":78,"evidence":154},"Confirmation page before reading a note",[155,159],{"id":156,"by":157,"text":158},"29403142","slowmotiony","Hello, the way that privnote deals with it is by showing a page asking \"Do you want to read this note and burn it?\". That will solve the issue of preview apps expiring your notes.",{"id":119,"by":86,"text":120},{"value":161,"source":78,"evidence":162},"Proof that source matches deployed code",[163,167],{"id":164,"by":165,"text":166},"29399553","macintux","Very cool, but the FAQ doesn’t address the questions people will ask: open source is fine, but what guarantee do we have that the source code matches the deployed code? Or that…",{"id":168,"by":169,"text":170},"29399606","corycal","> what guarantee do we have that the source code matches the deployed code? What is the answer to this question in general? Genuinely asking, I never considered this but it seems…",[172,180],{"value":173,"source":78,"evidence":174},"How to guarantee deployed code matches open source repo",[175,176],{"id":164,"by":165,"text":166},{"id":177,"by":178,"text":179},"29401093","rank0","You have to implement the encryption logic client side. But then now the client has to verify the JavaScript they receive upon visiting the URL matches what is published in the…",{"value":181,"source":78,"evidence":182},"Whether deleted notes are truly purged from storage",[183],{"id":184,"by":130,"text":185},"29423482","My point was that it's a claim that's impossible to formally prove: we don't really know how to do formal proofs of destruction, at least not with the scheme you're using. But…",[187,191,198,205],{"value":188,"source":78,"evidence":189},"PrivateBin \u002F ZeroBin",[190],{"id":57,"by":58,"text":59},{"value":192,"source":78,"evidence":193},"Privnote",[194],{"id":195,"by":196,"text":197},"29400979","ckpcw","nice project, but I prefer the approach of https:\u002F\u002Fprivnote.com notes are encrypted client-side before sending, click-to-read prevents scraper burn, auto-delete after 30days",{"value":199,"source":78,"evidence":200},"OneTimeSecret",[201],{"id":202,"by":203,"text":204},"29401123","geocrasher","https:\u002F\u002Fonetimesecret.com",{"value":206,"source":78,"evidence":207},"temp.pm",[208],{"id":209,"by":210,"text":211},"29401560","ycuser2","Related: https:\u002F\u002Ftemp.pm\u002F",{"comments":213,"answered":41,"key":214},24,[215,216,217],{"id":150,"text":151},{"id":147,"text":148},{"id":218,"text":219},"29401906","This is good! As I said in another post, the reason I posted this here was to get feedback and improve. All of these points are excellent and I will address them and get back to…",{"commenters":221,"max_depth":46,"maker_replies":213,"first_comment_mins":222,"lifespan_hours":223},42,44,81,[225,227,230,232,234,235,239,241,243,246,249,251,252,254,258,260,263,265,266,268,272,274,277,278,281,285,287,289,290,291,293,294,296,298,300,303,306,309,311,312,315,317,320,323,325,328,332,333,335,336,338,340,342,343,345,346,348,350,352,356,358,362,365,368,371,374,377,380,384,388,390,393,397,399,403,406],[57,37,40,226,58,37],"project\u002Fcritical\u002Fprivacy",[228,37,40,229,82,37],"29403935","project\u002Fcritical\u002Fexecution",[150,37,37,231,11,40],"project\u002Fneutral\u002Fprivacy",[81,37,46,233,82,37],"project\u002Fpositive\u002Fdesign",[147,37,37,231,11,40],[236,37,37,237,238,37],"29439681","other\u002Fneutral\u002Fnone","joshxyz",[101,40,47,240,102,37],"project\u002Fmixed\u002Fprivacy",[218,40,37,242,11,40],"maker\u002Fneutral\u002Fnone",[244,40,47,231,245,37],"29402091","sandreas",[247,40,37,237,248,37],"29402243","beingflo",[250,40,37,242,11,40],"29403031",[139,32,40,229,140,37],[253,32,37,242,11,40],"29401908",[255,47,47,256,257,37],"29400114","project\u002Fneutral\u002Fexecution","AnonC",[259,47,37,242,11,40],"29401914",[261,47,40,229,262,37],"29402663","bachmeier",[264,47,37,256,11,40],"29414974",[108,30,40,226,109,37],[267,30,37,231,11,40],"29401899",[269,30,47,270,271,37],"29403774","project\u002Fmixed\u002Fexecution","teitoklien",[273,30,37,231,11,40],"29415145",[275,30,47,231,276,37],"29402021","svenfaw",[112,30,40,226,113,37],[279,30,40,226,280,37],"29402093","mynameismon",[282,30,37,283,284,37],"29402450","commenter\u002Fneutral\u002Fnone","seedie",[286,30,37,231,11,40],"29403019",[288,30,37,231,11,40],"29415202",[119,46,40,229,86,37],[122,46,40,229,123,37],[292,46,37,242,11,40],"29401919",[156,46,47,256,157,37],[295,46,37,256,11,40],"29417414",[297,46,37,256,11,40],"29415149",[85,46,46,299,86,37],"project\u002Fpositive\u002Fexecution",[164,301,40,302,165,37],6,"project\u002Fcritical\u002Fdocs",[304,301,47,231,305,37],"29399602","annoyingnoob",[307,301,37,283,308,37],"29399879","joemazerino",[310,301,37,283,305,37],"29408318",[168,301,47,231,169,37],[313,301,47,314,165,37],"29399617","project\u002Fneutral\u002Fdocs",[316,301,37,314,11,40],"29415152",[318,301,47,231,319,37],"29400056","endisneigh",[321,301,37,283,322,37],"29401779","charcircuit",[324,301,37,283,319,37],"29402636",[326,301,37,327,11,40],"29401927","commenter\u002Fneutral\u002Fprivacy",[329,301,37,330,331,37],"29402491","other\u002Fneutral\u002Fprivacy","fsflover",[177,301,47,231,178,37],[334,301,37,231,11,40],"29415253",[129,41,40,226,130,37],[337,41,40,226,130,37],"29400082",[339,41,47,231,130,37],"29400186",[341,41,37,283,11,40],"29415259",[133,41,40,226,130,37],[344,41,37,231,11,40],"29415306",[184,41,40,226,130,37],[202,347,37,237,203,37],8,[195,349,40,226,196,37],9,[351,349,37,237,11,40],"29417532",[353,354,40,229,355,37],"29402286",10,"jmkd",[357,354,37,283,11,40],"29403193",[359,38,37,360,361,37],"29413514","other\u002Fneutral\u002Fidea","charles_f",[92,363,46,364,93,37],12,"project\u002Fpositive\u002Fidea",[366,363,37,283,367,37],"29425278","motoxpro",[369,31,46,233,370,37],"29402088","durch",[372,31,37,283,373,37],"29403375","yessirwhatever",[375,31,37,376,11,40],"29415264","maker\u002Fpositive\u002Fnone",[378,379,40,229,109,37],"29401084",14,[381,382,47,383,109,37],"29401262",15,"project\u002Fneutral\u002Fnone",[385,382,40,386,387,37],"29401708","project\u002Fcritical\u002Fidea","S-E-P",[209,389,37,360,210,37],16,[391,18,40,226,392,37],"29405467","derekzhouzhen",[394,395,47,242,396,37],"29400357",18,"amiamigo",[69,395,37,398,11,40],"maker\u002Fneutral\u002Fexecution",[400,401,47,314,402,37],"29402454",19,"privacyonsec",[404,401,37,405,11,40],"29415271","maker\u002Fneutral\u002Fdocs",[407,33,40,226,408,37],"29400161","adolph",[410,411,414,417],{"id":4,"t":12,"points":14,"comments":15},{"id":412,"t":413,"points":32,"comments":37},"32502021",1660772147,{"id":415,"t":416,"points":32,"comments":37},"46535362",1767832214,{"id":418,"t":419,"points":32,"comments":37},"46556008",1767978245,[421,426,431,436,440,445],{"id":422,"name":423,"points":424,"category":425},"29349079","shuffle.dev",317,"web_saas",{"id":427,"name":428,"points":429,"category":430},"29368552","4K Desktop Wallpaper Generator",258,"creative",{"id":432,"name":433,"points":434,"category":435},"29406112","Neko",227,"infrastructure",{"id":437,"name":438,"points":439,"category":425},"29381055","Security Camera Lens Calculator",178,{"id":441,"name":442,"points":443,"category":444},"29391107","py_regular_expressions interactive exercises",175,"learning_science",{"id":446,"name":447,"points":448,"category":449},"29369877","Life Simulation",169,"games",false,"v2",{"id":453,"name":5,"line":6,"ai":450,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":28,"top":18,"kw":454,"maker":11,"domain":10,"tier":19,"attempts":30,"strip":455,"url":9,"mix":456,"praise":77,"objection":97,"sub":21},29399278,[24,21,25,26],"1153301311331011351033303111110155011131",[30,31,32,33],1794036613753]