tmpfs · HackerTrans

l’altro ieridiscuss

You have completely misused and re-purposed this term. The common interpretation is that the software will continue to function without an internet connection which is not the case for your product.

You should choose different language.

tmpfs

8 giorni fadiscuss

I think local-first password managers are the way forward. Big tech companies already have way too much power and having them mediate our most important data is a bad precedent to set.

I like that you made this P2P, I designed one that sits on top of sqlite and is 100% local first but is not P2P, take a look if you are interested in some prior art in this space:

https://saveoursecrets.com/

I decided to go with native apps all the way, Rust backend and Flutter front-end but kind of regret it now with how the Play/App stores are such a hassle to work with.

tmpfs

5 mesi fadiscuss

I had an almost identical experience about 20 years ago too. I imagine they are still just as bad.

I think it is highly likely the wealth of the PayPal mafia founders is partly derived from this theft.

tmpfs

5 mesi fadiscuss

You should look at the native messaging API, it does what you need for bi-ditectional communication between extension and local app.

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

tmpfs

5 mesi fadiscuss

We care about this porblem and are actively working on it, like the OP we also settled on shamirs secret sharing with a time lock mechanism.

However, there is still the issue of the service provider going offline or out of business which we don't have a solution for yet.

We have started with a good password manager and will be adding digital inheritance/social recovery soon! [0]

Take a look, thoughts and feedback welcome.

[0]: https://saveoursecrets.com

tmpfs

8 mesi fadiscuss

This is a very cool experiment, even if the board doesn't end up being that practical (the antenna hack is going to be an ongoing issue I think) your documentation looks great at a glance!

tmpfs

10 mesi fadiscuss

I am totally sold on local first apps. I think the recent enshitification of many services (which is also inevitable for the new wave of AI services) plus the inherent privacy risks with allowing third parties access to our personal data is no longer a trade-off I am willing to make.

I set up a little Pi NAS and have moved all my git repositories there thanks to gitea (I still mirror to github for community interaction) and am gradually migrating everything to be stored locally with encrypted cloud backups.

I've also been working on a local-first, open-source, eventually consistent password manager[0] (using last write wins) for the last 3 years as I can't think of anything more important that we should have control over.

It will be hard for local-first to become more commonplace as SaaS and cloud has become so entrenched but I will keep forging towards a future where we take back ownership of our personal data.

[0]: https://saveoursecrets.com/

tmpfs

10 mesi fadiscuss

Agreed, more than time to revisit. I have stopped using npm entirely because of their cavalier attitude to security.

Code signing could and should have been implemented years ago. It's not a panacea but just part of defense in depth.

I can't trust npm whatsoever to do the right thing at this point.

tmpfs

11 mesi fadiscuss

I disagree, I think most of these opinions I see about CSS are from people that haven't taken the time to learn it and particularly to understand the cascade.

Many years ago I did a very deep dive into the CSS specs as I was researching for a new implementation and it struck me as well designed for its purpose of separating style from the semantics of markup.

tmpfs

11 mesi fadiscuss

Hey, I went to take a look at Obscura and I like the ideas but I can't find the source code.

You are making some bold claims but without the source I can't verify those claims.

Any plans to open-source it?

tmpfs

anno scorsodiscuss

The problem is that the requirements can be vastly different. A collaborative editor is very different to say syncing encrypted blobs. Perhaps there is a one size fits all but I doubt it.

I've been working on sync for the latter use case for a while and CRDTs would definitely be overkill.

tmpfs

5 anni fadiscuss

Pragmatic polyglot generalist with 22 years experience in applications (web/desktop/mobile), systems and networks.

Seeking work with Rust but also willing to write Go, Java/Kotlin and Typescript.

Remote only, not willing to relocate.

https://tmpfs.org/

comments