Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app

github.com

Post reply on HN
Print view View original

31–40 of 71 posts

Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app

#33

Post by 8-prime »

kantord wrote: post #3

I love the minimalism of the UI. Here's a tip: GitHub now allows you to embed a proper video in your README. ( https://stackoverflow.com/questions/4279611/how-to-embed-a-v... ). Quality would be much better, and people can navigate back-and-forth in the video.

No more fighting with gifs for README files. Thanks!

Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app

#34

Post by hackingonempty »

plagiarist wrote: post #21
hackingonempty wrote: post #17

> Every entry is encrypted with AES-256-GCM before it touches disk Until the OS needs more memory and swaps your secrets out.

I thought we were all supposed to be encrypting our swap. Or is there something better an app can do about this?

We're all supposed to be encrypting our storage too but this tool advertises that it encrypts your secrets before they hit the disk.

All of the supported operating systems have memory locking functions that prevent swapping out but they are not used in this tool, AFAIK. Also, they are intended to lock things like secret keys that are small and not displayed to the user in a GUI. You can lock the whole process though but a big web browser process is going to significantly up the amount of unswappable memory. Stuff sent to the windowing system may get swapped out too.

Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app

#35

Post by holyknight »

hackingonempty wrote: post #17

> Every entry is encrypted with AES-256-GCM before it touches disk Until the OS needs more memory and swaps your secrets out.

Hey, thanks for the feedback! That's a valid point; currently, my main focus is to secure the store on disk, but this is definitely a point which could be improved later on.

If your machine is fully compromised or actively monitored by a threat actor with physical access, then this tool would not cover you, that's for sure.

If you have any concrete recommendations, I can even give it a try in one of the next releases.

Thanks!

Re: Show HN: Mini-Diarium - An encrypted, local, cross-platform journaling app

#39

Post by holyknight »

CafeRacer wrote: post #20

I'm using obsidian and cryfs. Nothing has access to those except a few programs. I'm storing notes, files, documents, whatever is important and everything is synced to the cloud.

I also, myself, had a similar setup some time ago; that's super valid.
Post reply on HN