Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Laptop is the last place your secrets are still in plaintext

github.com

Post reply on HN
Print view View original

51–60 of 93 posts

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#51

Post by hypfer »

concinds wrote: post #50
hypfer wrote: post #22

Snake oil claude slop. No other words for it. If someone or something is executing code on your machine, you have already lost. Making it _slightly harder_ for it to eventually get your passwords anyway is mostly a performative action. __ Btw, enable "showdead" and enjoy OP actually pasting LLM output verbatim as a "defense". - https://news.ycombinator.com/item?id=49317802 - https://news.ycombinator.com/item?id=49317…

> If someone or something is executing code on your machine, you have already lost This nonsensical attitude is thankfully dying out in favor of more sophisticated approaches.

What makes it nonsensical?

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#52

Post by bukershok »

hypfer wrote: post #47
bukershok wrote: post #45

Earlier quoted context omitted.

Hypfer, I am a security leader at the age of 42 with more than 15 years of experience in the field, and I will tell you the truth: I lead a lot of cyber incidents. The purpose of this tool is to help you and companies protect yourselves from supply chain attacks and infiltrators for free no cost, no need for expensive 1Password tools. I put my heart into this tool, so give it a try and contact me directly if you need…

Ayy, finally, a human response. And it's an appeal to authority/seniority. Can you just.. not? The intended purpose of the tool is perfectly clear. There was never any confusion about it.

[flagged]

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#53

Post by concinds »

hypfer wrote: post #51
concinds wrote: post #50

Earlier quoted context omitted.

> If someone or something is executing code on your machine, you have already lost This nonsensical attitude is thankfully dying out in favor of more sophisticated approaches.

What makes it nonsensical?

There is no objective or tangible reason you must give up at that stage. We all run untrusted code on our machines, whether it's third-party apps or visiting websites.

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#54

Post by porridgeraisin »

ekianjo wrote: post #43

on Linux use systemd-credentials. It already does that

Yes, you can even have it tpm-backed.

echo -n "sk-proj-12345..." | systemd-creds encrypt --with-key=tpm2 --name=openai_key - openai.cred

And then at runtime export OPENAI_API_KEY=$(sudo systemd-creds decrypt openai.cred)

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#55

Post by hypfer »

concinds wrote: post #53
hypfer wrote: post #51

Earlier quoted context omitted.

What makes it nonsensical?

There is no objective or tangible reason you must give up at that stage. We all run untrusted code on our machines, whether it's third-party apps or visiting websites.

How does (the unfounded claim of) "everyone is doing [X]" make "we probably shouldn't be doing [X]" "nonsensical"?

Sounds unconvincing. Can you elaborate further?

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#56

Post by oulipo »

_august wrote: post #33

I've moved my secrets to 1Password Environments ( https://www.1password.dev/environments ), which works really well for everyday use. It works with 1password cli ( https://www.1password.dev/cli ) to access for agents/scripts, and I get a nice UI to manage them in the 1password app.

I do the same indeed

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#59

Post by chanux »

LeBit wrote: post #28

Fnox and Nono are the ones I know that do credentials proxying. That approach seems quite better than scanning a host file system for secrets.

I was trying out fnox recently. It won't allow me to enter the master password for keepassdb. I have to set FNOX_KEEPASS_PASSWORD.

A bit uncomfortable in leaving a secret in the history. Hence I was looking for a tool like this.

Re: Show HN: Laptop is the last place your secrets are still in plaintext

#60

Post by bukershok »

hypfer wrote: post #55
concinds wrote: post #53

Earlier quoted context omitted.

There is no objective or tangible reason you must give up at that stage. We all run untrusted code on our machines, whether it's third-party apps or visiting websites.

How does (the unfounded claim of) "everyone is doing [X]" make "we probably shouldn't be doing [X]" "nonsensical"? Sounds unconvincing. Can you elaborate further?

[dead]
Post reply on HN