Just a heads up: I'm being shown the Windows x64 button and I'm using a Mac (OS X 10.10) and Firefox.
There is only one button on the front page but you seem to support multiple platforms so I'm assuming this is a bug?
Show HN: Turtl – A secure, encrypted Evernote alternative
41–50 of 100 posts
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#42From 7 cases to 4 million: America at high Alert from Zika Virus :WHO
http://goo.gl/1MZ68q
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#43I'm sorry but I don't think you should call this an Evernote alternative. - No iOS client (Although the site does say coming soon) - No Firefox webclipper - No Web interface - Large / heavy application - No Drawing / Diagram support - The app is not native, it's seems it's a web frame It's interface doesn't feel very snappy, it feels like it's built with in a Javascript framework perhaps? Evernote has been around for…
Thanks for the honest feedback! The app IS a web frame, both on desktop an mobile. TBH it's pretty much the only way I can maintain it on 4 (and soon 5) different platforms efficiently. I will say this: Turtl will queue encryption/decryption in background threads so it does utilize cores while doing heavy processing. As far as how it utilizes cores in the main UI, that's really up to the underlying javascript engine,…
Hello! I agree with mrmondo insofar as Turtl is too immature for me at to me at the moment.
That said, please post updates -- I'm on the lookout for Evernote alternatives, now that its demise seems imminent.
I don't use any of the fancy evernote features, so if you're interested, this is what I'd require at a minimum:
- Save and sync text between OS X and Android
- Button to take a picture and insert it into a note
That's really all I use.
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#44Are you using truecrypt? Isn't that a dead project with security issues?
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#45I really like the idea of a secure Evernote alternative. For me, however, the by far most important feature is decentralization. Until someone builds this I'm stuck using org-mode and a git repo...
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#46Earlier quoted context omitted.
maybe not well, but possibly well enough.
Not from what I've seen, after hosting a bunch of NodeJS based web-apps I can tell you it doesn't perform well on the server-side or on the desktop. It's a decent rapid prototyping language / tool - but it's taking what should (or perhaps shouldn't) be in a web browser, wrapping it up and hosting it somewhere that the designers of products often don't know much about the landscape.
For the majority of users, it performs well enough. Step out from behind your own lens. For instance, the number of times I've heard someone complain about Slack's performance (that isn't a developer) is precisely zero.
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#47Evernote made the mistake of going multiplatform really aggressively and too much scope creep. I'm glad to see they're scaling back a lot of their scope creep. Goo on you for trying to do this. Be ambitious and swing for the fences. Evernote's product crashes frequently.
One of their strength _is_ multiplatform support. There was and is tons of scope creep. Hopefully they can turn that around and start improving core functionality again.
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#48Is it possible, or maybe I should offer, to encapsulate this in docker using docker-compose? I find it easier and cleaner to try new things out running docker-compose up.
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#49https://github.com/turtl/js/blob/2ca59900d71284795e278e75585...
Nothing says secure like PBKDF2-SHA1 with 50 rounds.
https://github.com/turtl/js/blob/2ca59900d71284795e278e75585...
...or timing attacks on MAC validation. (Yeah, you switched to GCM, but a downgrade attack could potentially be used to find a valid MAC for a chosen ciphertext without the attacker knowing the key...)
Re: Show HN: Turtl – A secure, encrypted Evernote alternative
#50https://github.com/turtl/js/blob/2ca59900d71284795e278e75585... Nothing says secure like PBKDF2-SHA1 with 50 rounds. https://github.com/turtl/js/blob/2ca59900d71284795e278e75585... ...or timing attacks on MAC validation. (Yeah, you switched to GCM, but a downgrade attack could potentially be used to find a valid MAC for a chosen ciphertext without the attacker knowing the key...)
"When the standard was written in 2000, the recommended minimum number of iterations was 1000, but the parameter is intended to be increased over time as CPU speeds increase. As of 2005 a Kerberos standard recommended 4096 iterations,[2] Apple iOS 3 used 2000, iOS 4 used 10000,[3] while in 2011 LastPass used 5000 iterations for JavaScript clients and 100000 iterations for server-side hashing"
source: https://en.wikipedia.org/wiki/PBKDF2
*Edit: Oh.. it's PBKDF1....