[{"data":1,"prerenderedAt":285},["ShallowReactive",2],{"project-5840481":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":43,"post_text":45,"what":46,"said":67,"maker_in_thread":140,"shape":152,"grid":155,"attempts":247,"same_week":248,"maker_shows":32,"maker_hidden":277,"reader_version":278,"card":279},"5840481","CryptoNote","CryptoNote is an open source, encrypted, one time view message app","title","Show HN: CryptoNote is an open source, encrypted, one time view message app","https:\u002F\u002Fcryptonote.org\u002F","cryptonote.org","alainmeier",1370627949,2013,55,41,461,1739,27,"notable","security_privacy","encrypted messaging","web_app",[24,25,26,27],"encrypted messages","one time view","self-destruct messages","open source encryption","roasted",-0.348,{"positive":31,"neutral":32,"mixed":32,"critical":33},3,1,11,16,{"privacy":36,"design":39,"idea":41,"execution":42},{"positive":37,"critical":38},0,7,{"positive":37,"critical":40},2,{"positive":32,"critical":32},{"positive":37,"critical":32},[32,37,32,37,44,37,32,37,37,37,37,37,37,37,37,37,31,32,44,37,32,37,32,37,37,32,37,44,31,37,37,37,37,37,37,32,32,32,37,32],5,null,{"problem":47,"audience":45,"pricing":45,"motivation":53,"time_to_build":45,"stack":63,"openness":64,"stage":65,"team_size":66},{"value":48,"source":49,"evidence":50},"Sharing a message that can be read only once, encrypted","inferred",[51],{"id":52},"post",{"value":54,"source":55,"evidence":56},"Learning exercise; wanted people to host their own instance instead of relying on a provider","maker",[57,60],{"id":58,"by":11,"text":59},"5840571","Good catch, I'll take that out right now thanks. Edit: fixed. If anybody thinks of anything else, please let me know. This is as much of a learning exercise as anything for me.",{"id":61,"by":11,"text":62},"5841188","There are a lot of single view self destruct sites, but I wanted to make a new one because I wanted to let people host their own instead of relying on the site provider.",[],"open_source","prototype","unknown",{"praise":68,"objections":81,"requests":107,"questions":116,"alternatives":121},[69],{"value":70,"source":71,"evidence":72},"Useful, nice UI","commenter",[73,77],{"id":74,"by":75,"text":76},"5840562","jhorman","Looks useful. I am seeing though message[pre_encryption] with my unencrypted message in the POST data?",{"id":78,"by":79,"text":80},"5841196","alfg","This is neat, and the I really like the UI too. I made something similar (except the one-time view part) not too long ago just to experiment with storing the base64 encoded…",[82,95],{"value":83,"source":71,"evidence":84},"Client-side JavaScript crypto is untrustworthy because the server controls the code",[85,89,92],{"id":86,"by":87,"text":88},"5840621","daeken","Good on you for having a list of known weaknesses, but here's the one that really makes this completely unsafe: The server dictates what's run on the page, and thus can access…",{"id":90,"by":87,"text":91},"5840679","But if you need to trust the server (and you do), then the client-side encryption is 100% pointless. You might as well encrypt on the server with safe, sane, battle-hardened…",{"id":93,"by":87,"text":94},"5841799","Client-side crypto in JS has value if and only if the following conditions are all met: 1) The application receives no HTML, CSS, Javascript, or code interpreted by plugins from…",{"value":96,"source":71,"evidence":97},"Plaintext password and message sent in POST data",[98,99,103],{"id":74,"by":75,"text":76},{"id":100,"by":101,"text":102},"5842075","effbott","The password is sent in plaintext in the POST body.",{"id":104,"by":105,"text":106},"5840613","deepdog","Why is the password stored in plain text \"for now\"? What is so hard about running bcrypt or pbkdf2 against the password before storing it in the database?",[108,112],{"value":109,"source":71,"evidence":110},"Hash passwords with bcrypt or pbkdf2",[111],{"id":104,"by":105,"text":106},{"value":113,"source":71,"evidence":114},"Add warnings about untrusted crypto",[115],{"id":86,"by":87,"text":88},[117],{"value":118,"source":71,"evidence":119},"Why is the password stored in plain text?",[120],{"id":104,"by":105,"text":106},[122,129,136],{"value":123,"source":71,"evidence":124},"vanish.io",[125],{"id":126,"by":127,"text":128},"5841166","ryandetzel","Just use vanish.io",{"value":130,"source":71,"evidence":131},"oneshar.es",[132],{"id":133,"by":134,"text":135},"5840603","manish_gill","Also see: https:\u002F\u002Foneshar.es I created a similar web application in Django as part of a College minor project last year. Best part was implementing the AES algorithm ourselves. :D",{"value":137,"source":71,"evidence":138},"jot (alfg.co)",[139],{"id":78,"by":79,"text":80},{"comments":141,"answered":44,"key":142},8,[143,146,149],{"id":144,"text":145},"5840655","Thanks, and that is absolutely true. That's why it's open source: I want people to host their own version if they don't trust me https:\u002F\u002Fgithub.com\u002Falainmeier\u002Fcryptonote",{"id":147,"text":148},"5840751","Hm, yes, added a warning message, good idea. As for your other thoughts, I completely agree. It's a work-in-progress and I figured the best way to figure out what's wrong is to…",{"id":150,"text":151},"5841243","I experimented with that too, but the character limitation was what made me go server-side. Cool project though, works really well",{"commenters":153,"max_depth":38,"maker_replies":141,"first_comment_mins":33,"lifespan_hours":154},18,4,[156,158,160,162,164,167,171,173,176,179,181,183,186,188,190,193,196,200,201,203,204,205,207,211,213,217,218,220,222,224,226,228,230,232,234,236,239,241,242,244,246],[86,37,32,157,87,37],"project\u002Fcritical\u002Fprivacy",[144,37,37,159,11,32],"maker\u002Fneutral\u002Fidea",[90,37,32,161,87,37],"project\u002Fcritical\u002Fdesign",[147,37,37,163,11,32],"maker\u002Fpositive\u002Fdocs",[165,37,44,166,87,37],"5840765","maker\u002Fpositive\u002Fnone",[168,37,37,169,170,37],"5840766","commenter\u002Fneutral\u002Fprivacy","rmrfrmrf",[172,37,32,161,87,37],"5840798",[174,37,37,169,175,37],"5841092","uh_oh",[177,37,37,169,178,37],"5841110","jlgreco",[180,37,37,169,175,37],"5841604",[182,37,37,169,178,37],"5841982",[184,37,37,169,185,37],"5841225","mindcrime",[187,37,37,169,175,37],"5841617",[189,37,37,169,185,37],"5841658",[191,37,37,169,192,37],"5842224","lmm",[194,37,37,169,195,37],"5842377","yk",[197,37,31,198,199,37],"5841310","project\u002Fmixed\u002Fprivacy","tlrobinson",[93,37,32,157,87,37],[78,32,44,202,79,37],"project\u002Fpositive\u002Fidea",[150,32,37,159,11,32],[74,40,32,157,75,37],[58,40,37,206,11,32],"maker\u002Fneutral\u002Fexecution",[208,40,32,209,210,37],"5840719","project\u002Fcritical\u002Fexecution","tptacek",[212,40,37,166,11,32],"5840915",[214,40,37,215,216,37],"5842031","commenter\u002Fneutral\u002Fnone","estsauver",[100,40,32,157,101,37],[219,40,37,163,11,32],"5842111",[221,40,44,166,101,37],"5842343",[133,31,31,223,134,37],"project\u002Fneutral\u002Fidea",[225,31,37,215,210,37],"5840698",[227,31,37,215,134,37],"5840715",[229,31,37,215,210,37],"5840724",[231,31,37,215,134,37],"5840900",[233,31,37,215,210,37],"5840917",[235,31,37,215,134,37],"5840996",[237,31,32,157,238,37],"5841366","lawnchair_larry",[240,31,32,157,101,37],"5842039",[104,154,32,157,105,37],[243,154,37,206,11,32],"5840664",[126,44,32,245,127,37],"project\u002Fcritical\u002Fidea",[61,44,37,159,11,32],[],[249,254,259,264,267,272],{"id":250,"name":251,"points":252,"category":253},"5845541","nsa_panel",188,"other",{"id":255,"name":256,"points":257,"category":258},"5838873","arkOS",156,"infrastructure",{"id":260,"name":261,"points":262,"category":263},"5831093","gdocs2md",86,"dev_tools",{"id":265,"name":266,"points":14,"category":263},"5831394","Popline",{"id":268,"name":269,"points":270,"category":271},"5837843","Swedish Startup Space",47,"web_saas",{"id":273,"name":274,"points":275,"category":276},"5864290","my hackathon project",39,"data",false,"v2",{"id":280,"name":5,"line":6,"ai":277,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":281,"top":18,"kw":282,"maker":11,"domain":10,"tier":19,"attempts":37,"strip":283,"url":9,"mix":284,"praise":70,"objection":83,"sub":21},5840481,-0.35,[24,25,26,27],"1010501000000000315010100105300000011101",[31,32,32,33],1793990895260]