> Every entry is encrypted with AES-256-GCM before it touches disk Until the OS needs more memory and swaps your secrets out.
I thought we were all supposed to be encrypting our swap. Or is there something better an app can do about this?
Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
21–30 of 71 posts
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#22[flagged]
Hey, thanks for the feedback! Yes, currently in the preferences you can see the path of your local SQLite DB file, so you could definitely sync that to the cloud.
I will improve it further in next releases to make it even simpler (for example, by defining a custom path for the store, which cannot be done currently), but it can definitely be done already.
Regarding the key for recovery: you can already do it. Mini-Diarium already supports both password and public key authentication. So you can use the password and generate the .key file and keep it in a secure place as a backup in case you forget your password (or do it in reverse: use the key file and have the password as a backup).
Thanks again!
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#23Dann, that’s a fancy README.md , love it
thanks!
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#24The biggest problem is that this is not available on mobile platforms. Most people do this on their phones, not their laptops.
The support for it is planned. It was thought from the beginning with supporting all the major platforms; I just started with the desktop support because there was my best use case. But the support is already planned in the near future. Android will follow shortly, and an iOS version can be done if there is demand for it.
Thanks!
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#25I'm using obsidian and cryfs. Nothing has access to those except a few programs. I'm storing notes, files, documents, whatever is important and everything is synced to the cloud.
This is the beauty of it. If it works for you it's great. If this new app works for others, then it's great.
That's a good win-win situation.
As a fellow obsidian user, I wouldn't scoff at a simple app which does one thing well.
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#26> Every entry is encrypted with AES-256-GCM before it touches disk Until the OS needs more memory and swaps your secrets out.
But so what? Another app can't really read swap file/partition. Unless it runs with elevated privileges like root, in which case the system is compromised anyway.
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#27[deleted]
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#28[flagged]
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#29Looks really cool, I like the pretty but minimalist interface. Could I store the SQlite file on, say, google drive so that I could access my journal from different devices while the contents are still kept secure because they’re encrypted?
Yes, you can definetely can! Currently you can see the location of the .db file on the preferences while your journal is open.
I will improve the experience for this use case in follow up releases, by for example being able to define a arbitrary path for your db file.
Thanks for the feedback!
Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app
#30One major problem, I don't want a journal with unbreakable encryption where I lose all my data if I ever lose the key. I already pay for a journaling website where I know I can always recover my journals as long as I have access to my Gmail. So, while I appreciate this security first mindset, for me it actually becomes less interesting. I want my journal to sync to the cloud, I want to be able to unlock it, I don't w…
>as long as I have access to my Gmail
I think you should be more cautious about relying on the services of a company like Google that can arbitrarily decide to remove your account data or access. Similar, though the person was fortunate enough to regain access: https://hey.paris/posts/appleid/
You can mitigate hardware failure and data loss, especially for a simple key, but you may not be able to prevent Google from deciding your account is gone one day.