Live data from Hacker News

Show HN: Portable Secret – How I store my secrets and communicate privately

mprimi.github.io

381–385 of 385 posts

Re: Show HN: Portable Secret – How I store my secrets and communicate privately

#381
In the same vein of simplifying PGP, I wrote this little app a while ago:

https://prettyeasyprivacy.xyz

Basically a simple GUI on top of PGP. No CLI headache and is completely independent of OS. Encrypted sources follow PGP protocol so are completely backward compatible with CLI tools. Also supports both text and file encryption/decryption.

PGP impl uses proton's openPgp.js

Re: Show HN: Portable Secret – How I store my secrets and communicate privately

#382

Earlier quoted context omitted.

I assumed you meant something slightly different to what you wrote, because you wrote: > You can’t decrypt things encrypted 20 years ago on modern API’s because those algorithms are known to be insecure. Python's standard library, C's standard library, and Win32's CryptoAPI all beg to differ. The specific algorithms used by Crypto.subtle (Rijndael, Rivest–Shamir–Adleman) are over 20 years old, already, so even that's…

> Does this address your comment better? Much! I'd say that there is always a counter-example. However, even RSA was generally recommended as "insecure" because people can't bother to do any research into the correct values of the parameters. The algorithm itself is secure, but most libraries didn't have sane/secure defaults until like 10ish years ago. That was the point I was trying to make, you're making a bet that…

> Linux and OSX, for example, cannot run software compiled 20 years ago (I'd love to be proven wrong, but my experience hasn't been so great!).

Just get the copy of libc it was compiled for (and any other libraries), and add them to LD_LIBRARY_PATH before running the program. Linux's ABI is stable, so this should work fine. (It's always worked for me – though I haven't tried terribly much software, I'll admit.)

I don't know about macOS; iOS has compatibility problems, but Android basically doesn't.

Re: Show HN: Portable Secret – How I store my secrets and communicate privately

#383

Earlier quoted context omitted.

I have things like this in my head too and I wonder if I’ll forget when I get elderly.

or bonked on the head. it's a scary thought.

I've thought of that too, perhaps I write them down in a sealed envelope and tell my spouse or kid, only open in an emergency. I feel it's pretty certain these non-software engineers in my family have less security notions than I do, so I have reserved some passwords that are in my head.

I signed up for the gmail "I died, here is my account" option.

Re: Show HN: Portable Secret – How I store my secrets and communicate privately

#384
post #383

Earlier quoted context omitted.

or bonked on the head. it's a scary thought.

I've thought of that too, perhaps I write them down in a sealed envelope and tell my spouse or kid, only open in an emergency. I feel it's pretty certain these non-software engineers in my family have less security notions than I do, so I have reserved some passwords that are in my head. I signed up for the gmail "I died, here is my account" option.

I don't know if I should do that gmail thing or not...afraid it'll mess up or I'll forget about it.

Can the spouse resist opening an envelope? I don't know. Maybe I just hide it in our files and hope she finds it if I die, but not before.

Re: Show HN: Portable Secret – How I store my secrets and communicate privately

#385
post #92

Earlier quoted context omitted.

Over the phone I could tell someone: "the password is the first 28 words of Psalm 23 from the King James Version." Would that be a weak password?

Yes because the paraphrase already exists in plain text somewhere public

28 words would be about 200 characters, though, and I don't think simply existing somewhere in plaintext is enough -- what if I said it is the first 28,000 words of the Latin Bible -- would you still consider that a weak password because it exists in plain text somewhere?
Post reply on HN