HackerTrans
TopNewTrendsCommentsPastAskShowJobs

MegagramEnjoyer

67 karmajoined hace 4 meses

Submissions

Show HN: Bramble – Local-first password manager

github.com
152 points·by MegagramEnjoyer·hace 9 días·50 comments

[untitled]

1 points·by MegagramEnjoyer·hace 22 días·0 comments

comments

MegagramEnjoyer
·hace 5 días·discuss
Vibecode as in one-shotting features in one prompt and calling it done? None. Deliberately planning each feature carefully, laying out the arch work, executing the plan and then carefully test and review? Most of it.
MegagramEnjoyer
·hace 5 días·discuss
They are stored in the browser's storage, fully encrypted at rest. On mobile they're stored in the app's private sandbox, also encrypted at rest.

To clarify: the protection comes from the encryption, not from where the file lives. Cleartext never touches the disk.
MegagramEnjoyer
·hace 5 días·discuss
added to the repo!
MegagramEnjoyer
·hace 5 días·discuss
[flagged]
MegagramEnjoyer
·hace 5 días·discuss
Yeah, fair assessment. I will add a section and more copy to the app to address this concern. Thanks!
MegagramEnjoyer
·hace 5 días·discuss
The latest browser extensions now have an export feature in the settings page. Mobile will get it too. Besides that, the more devices are synced via P2P, the more backups you have (each device has a copy of the vault)
MegagramEnjoyer
·hace 6 días·discuss
Doesn't really apply here because every synced device essentially serves as a backup

With that said, I really do like Tablinum! I might need that for something else. How are merge conflicts handled?
MegagramEnjoyer
·hace 6 días·discuss
[dead]
MegagramEnjoyer
·hace 7 días·discuss
[dead]
MegagramEnjoyer
·hace 7 días·discuss
[dead]
MegagramEnjoyer
·hace 7 días·discuss
[dead]
MegagramEnjoyer
·hace 7 días·discuss
[flagged]
MegagramEnjoyer
·hace 7 días·discuss
[flagged]
MegagramEnjoyer
·hace 7 días·discuss
ah yes, I didn't even think of this! It's fully private and I'll update my copy to indicate that. Thank you!
MegagramEnjoyer
·hace 8 días·discuss
Thanks for sharing! And I fully agree with you. The convenience that cloud providers bring is hard to match sometimes, but the tools exist to make it happen.

I'll check out your website and see what's up!
MegagramEnjoyer
·hace 8 días·discuss
Thank you! I'm a firm believer of this as well, especially with how things almost always turn out for venture backed companies. I feel like there's a push towards local-first and self-hosted solutions these days, and rightfully so.
MegagramEnjoyer
·hace 8 días·discuss
if you mean why I didn't choose a lib like automerge, yjs and instead handrolled it - that's because these libs are geared towards plaintext.

Bramble's sync is built around its own encrypted vault instead. When two devices conflict it just compares timestamps on the encrypted entries and keeps the newer one as-is, without ever unwrapping your per-entry keys to merge. Nothing off the shelf did that against my vault format, so the core is custom. It's a pretty simple implementation tbh
MegagramEnjoyer
·hace 8 días·discuss
I used Claude Opus during this project within Zed editor. Nothing else.
MegagramEnjoyer
·hace 8 días·discuss
Thanks!

Way less overhead than hosting your own vaultwarden instance, so way more user friendly with basically the same effect. The big difference is there's no server at all. With vaultwarden you're running a box that holds your whole vault and you have to keep it patched, backed up and secured (sysadmin skills basically). Bramble just syncs your devices directly so there's nothing to host or maintain = no single point of failure.

One tradeoff is both devices need to be online at the same time, since there's no server in the middle holding your changes for later. For me that's worth it and intentional.
MegagramEnjoyer
·hace 8 días·discuss
It exists and is thoroughly tested for common cases, but there might be tricky form shapes that haven't been covered.

Give it a try and if you find anything, I'll prioritize fixing it. I'm really keen on getting a top-notch autofill engine.