sullof
sullof on Hacker News
Posted by
sullof on Monday September 19, 2022 @05:00PM
from the self-post dept.
A big problem with the current frameworks (like Hardhat or Truffle) is that you end up putting your private keys in a `.env` file. Despite the risk that you commit it by mistake, the keys are in cleartext on your computer. That is bad. A few months ago I developed a solution for ithttps://github.com/secrez/cryptoenvCryptoEnv allows people to encrypt their private keys in `.env` files and manage...
Also, you could use an extension to generate the signature. The password, in this case, would never be passed to the client.
You can inspect the website and detect a backdoor. It is not easy, but nobody would risk to be caught doing that. On the server side, we have no possibility of knowing what happens.
Posted by
sullof on Wednesday January 27, 2021 @04:22PM
from the self-post dept.
I built in 2006 the first Host-proof Hosting Online Password Manager, Passpack (it still exists, but I sold it in 2013). I am fascinated by security and obsessed with details.Any major web service sends your password to their server in plain text. Only when the service receives the password, it derivates it and saves it in the database. What happens is a smart employee puts a backdoor at the...
It is not for team, right now. But I can add features in that direction if there is interest from the community.
If you are interested in checking a completely different approach, you can look at Secrez
https://github.com/secrez/secrez. It is a CLI secret manager that supports git repo for distribution. Using other packages in the suite, Secrez allows direct communication between local desktop accounts using SSL tunneling.
Disclosure: I wrote it.
Posted by
sullof on Thursday August 06, 2020 @03:56PM
from the medium.com dept.
Hello, this is Francesco, the author of Secrez. Just in case you have any question.
Posted by
sullof on Tuesday July 03, 2018 @11:18PM
from the ask-hn dept.
Yesterday I launched Tweedentity, a self-claiming identity system for Ethereum and, for now, Twitter and Reddit. Just yesterday, though, the gas price spiked (for BingoCoin distribution) and setting an identity didn't make sense. In fact, while you can set it with 25¢ in normal cases, yesterday, with the gas at 80 Gwei, you'd have spent $15. This makes me thinking that Ethereum is not really...
Original author here, ask me anything. Thanks
Any comment, critic, pull request is much appreciated.
Posted by
sullof on Thursday April 05, 2018 @01:20PM
from the medium.com dept.
Posted by
sullof on Friday December 15, 2017 @03:09AM
from the medium.com dept.
Posted by
sullof on Friday February 20, 2015 @02:57PM
from the github.com dept.
I think that the author says that he doesn't think there will be a "hub". And, personally, I agree on this.
Posted by
sullof on Tuesday June 19, 2012 @07:35PM
from the myamericandays.tumblr.com dept.
Why do great VCs have websites that sucks?
Sometimes I have the impression that some entrepreneurs like to say that there is a bubble because so they can say: "Yes, he raised all that money, or had that big exit, but not because he is better than me, only because there is the bubble".
Posted by
sullof on Thursday January 19, 2012 @06:37PM
from the github.com dept.
Posted by
sullof on Thursday September 15, 2011 @12:34AM
from the twitter.com dept.
I seem that this article contains a lot of good points about Javascript cryptography. The error of the author is that he is unable to see a reason to build a secure application based on Javascript because his prejudices are too strong.
I am the founder of Passpack. We use Javascript cryptography from 2006. We have 16,000 active users and nobody ever reported loss of data. I think that if you are conscious of all the issue connected with browsers and their problems, you can build a good system that is able to protect not only the security of the users but also their privacy.
And the privacy can not be protected with a server-based cryptography system.
I was interested to know if someone other than Passpack uses the "Big Friend" approach to improve the security. Do you know other examples?
Posted by
sullof on Tuesday May 24, 2011 @08:22PM
from the blog.passpack.com dept.
Posted by
sullof on Wednesday April 13, 2011 @08:07PM
from the blog.passpack.com dept.
Posted by
sullof on Saturday April 02, 2011 @06:20PM
from the self-post dept.
Some months ago I created a minimalistic app for searching within Facebook groups. You can try it at http://gs.sullof.com. Currently, GroupSearcher injects a bit of code in group walls and works very well. But not always. In fact, if you add a note to the group, it's impossible to find it because Facebook doesn't return notes in the group stream.
I contacted Facebook in all possible ways but I...
Before that a developer, I am a song-writer. When you write a song, you start listening a lot of music. After, you put all that music in a side of your brain and forget it. After, you sing and sing untill you sing something totally different.
I agree. In fact, I specified that using the browser is good in some cases with the caveat that there is at least a master password protection. But a good password manager is always a better idea. Of course everyone chooses the one that best fits his needs, but the important thing is that you use one. 1password is a great product for consumer and individuals.