News for hackers. Stuff that matters.
Re:Show HN: 100% offline Shamir's Secret Sharing GUI by dylz on Wednesday June 17, 2020 @03:25AM (#23548767)
You have no guarantee that the server won't just "if (ip === companyName) { don't serve CSP + serve infiltrated JS }" in the future.
Re:Show HN: 100% offline Shamir's Secret Sharing GUI by blitmap on Wednesday June 17, 2020 @04:57PM (#23556658)
I mean you could absolutely inspect the source for the page, but these things could be modified at runtime by JS, right?

I'm talking about the meta tags. It would be neat to have a toggle on the tab for isolating the content of the page from the network.

Re:Show HN: 100% offline Shamir's Secret Sharing GUI by ijpsud on Friday June 19, 2020 @12:33PM (#23576052)
You'd have to restrict localstorage and stuff like that too, else they could save data and then send it when they regain network access.

If you have a use-case, or some ideas, there's Chrome bug page for "offline-only PWAs": https://bugs.chromium.org/p/chromium/issues/detail?id=995236