News for hackers. Stuff that matters.
Re:Age: A simple, modern and secure file encryption tool by CiPHPerCoder on Saturday December 28, 2019 @12:08AM (#21897230)
> It just needs a UI.

Would you consider an Electron app adequate? ;)

Re:Age: A simple, modern and secure file encryption tool by oefrha on Saturday December 28, 2019 @12:17AM (#21897265)
200MB binary consuming 300MB of memory and 1% CPU at idle, hell no...
Re:Age: A simple, modern and secure file encryption tool by CiPHPerCoder on Saturday December 28, 2019 @12:18AM (#21897270)
I asked the guy who wrote "JavaScript Cryptography Considered Harmful" if a JS app would be adequate followed by a winky face.

The /s was implied.

Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @01:46AM (#21897549)
The document that says right at the start that it's only talking about browser Javascript crypto, and not standalone?

Not that the crypto itself would be handled by Javascript in an Electron app in the first place...

Re:Age: A simple, modern and secure file encryption tool by oefrha on Saturday December 28, 2019 @12:21AM (#21897281)
Yeah I did see the sarcasm.
Re:Age: A simple, modern and secure file encryption tool by tptacek on Saturday December 28, 2019 @12:28AM (#21897317)
Seriously I'm just fine with Electron applications. It's 2019, and that only for a couple more days. We have RAM, this is a good thing to burn it for.
Re:Age: A simple, modern and secure file encryption tool by eeZah7Ux on Saturday December 28, 2019 @10:24AM (#21899325)
2 billion individuals on this planet are unable to afford a shiny new computer.

"I don't mind about resource usage" is a proxy for "I don't care about those people"

Also, many devices do not allow RAM upgrades.

Re:Age: A simple, modern and secure file encryption tool by Wowfunhappy on Saturday December 28, 2019 @12:41AM (#21897357)
If I wanted to "burn" my RAM I would have just bought less.
Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @01:41AM (#21897540)
That's missing the point. $2 of RAM in exchange for security is a good deal. Go ahead and use the command line version yourself, but if you're not going to contribute to a native GUI version then don't be a party pooper about Electron.

Electron's only a problem when there's lock-in of some kind.

Re:Age: A simple, modern and secure file encryption tool by StavrosK on Saturday December 28, 2019 @05:30AM (#21898212)
I think that people who say this think "yeah, running one Electron app is no problem". The problem comes when everything is Electron and now, like the ocean, you have no memory.
Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @06:21AM (#21898365)
You don't need everything open at once.

And you can fit a whole lot of Electron apps into an extra 8 or 16GB.

Re:Age: A simple, modern and secure file encryption tool by bscphil on Saturday December 28, 2019 @10:32AM (#21899361)
The newest baseline Dell XPS 13 (not even Inspiron) comes with 4 GB of memory by default. The very idea of an extra 8 GB is hilarious because manufacturers haven't kept up with the times (my laptop purchased 9 years ago had 8 GB), and by extension the median consumer's laptop hasn't either. Nobody has an "extra" 8 GB outside of people with the money to just unthinkingly buy the top of the line model or developers who know what they're doing.
Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @01:01PM (#21900471)
We're talking about buying extra memory, not defaults. And while an XPS 13 is trying to be a macbook, on an XPS 15 you just pop open the back cover and shove more memory into it.
Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @02:10PM (#21900966)
Sadly you do need a lot of things (such as chat programs, an email client, a browser, and potentially an editor) open at once.
Re:Age: A simple, modern and secure file encryption tool by tjoff on Saturday December 28, 2019 @04:57AM (#21898115)
Nope. Many laptops can not have more than 16GB. And you have to pay hundreds of dollars even for that privilege in many situations.

An electron app will hurt adoption, give the project a bad name and reduce the likelihood of a proper UI to never materialize. Please don't.

Re:Age: A simple, modern and secure file encryption tool by oefrha on Saturday December 28, 2019 @05:29AM (#21898206)
Never mind 16GB. There are quite a few 8GB or even 4GB laptops (4GB ones are usually >= 4yr old, but it's not uncommon to keep crappy laptops for that long outside the tech-savvy circle) among my friends and family.
Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @06:28AM (#21898390)
I'm just replying directly to the "I would have bought less" comment, which implies having control over your memory amount. It's not hundreds of dollars when that happens. You can get all sizes of laptop memory for under $4 a gigabyte. And if you've maxed out at 16GB, you're not really at a spot where .3GB is a big burden.

> An electron app will hurt adoption, give the project a bad name and reduce the likelihood of a proper UI to never materialize. Please don't.

As opposed to having nobody use it in the first place.

Re:Age: A simple, modern and secure file encryption tool by Wowfunhappy on Saturday December 28, 2019 @07:43AM (#21898585)
> $2 of RAM in exchange for security is a good deal.

1. I don’t know what RAM you’re buying, but mine costs way more than that. It’s especially bad if you’re using AMD.

2. How does using electron apps make me more secure than using native apps?

Re:Age: A simple, modern and secure file encryption tool by deepersprout on Saturday December 28, 2019 @09:21AM (#21899017)
> 2. How does using electron apps make me more secure than using native apps?

The electron app exists. The native app does not.

You think that ranting against electron is somehow making a native app appear, but the reality is that there are way more js/electron devs than there are qt/gtk/wpf devs, and the choice in most cases is either an electron app or no app.

Re:Age: A simple, modern and secure file encryption tool by Dylan16807 on Saturday December 28, 2019 @09:48AM (#21899149)
> 1. I don’t know what RAM you’re buying, but mine costs way more than that. It’s especially bad if you’re using AMD.

DDR4 at 3200MHz, plenty to make Ryzen happy, is available at $4 per GB on Amazon. That gets you half a gig for $2. But that's not even our max budget. If we use oefrha's estimate of 300MB of RAM eaten by Electron, then we have a budget of $6.80 per GB. That gets you very nice RAM.

Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @02:07PM (#21900949)
If only it was $2 of RAM...

> in exchange for security

Electron is not famous for its security. See for example https://www.trustwave.com/en-us/resources/blogs/spiderlabs-b... and https://securityboulevard.com/2018/06/june-vulnerability-of-...

Re:Age: A simple, modern and secure file encryption tool by AgentME on Saturday December 28, 2019 @06:26PM (#21902560)
Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues. Avoiding XSS is doable; with most web frameworks you're protected from XSS by default and have to specifically turn off the safeties to get XSS.
Re:Age: A simple, modern and secure file encryption tool by dependenttypes on Saturday December 28, 2019 @08:47PM (#21903270)
> Those issues are only relevant to applications that display arbitrary HTML and already have XSS issues

Such as signal! https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...

Re:Age: A simple, modern and secure file encryption tool by rohan1024 on Saturday December 28, 2019 @08:19AM (#21898723)
How about flutter for desktop?