Live data from Hacker News

Show HN: Turtl – A secure, encrypted Evernote alternative

turtl.it

61–70 of 100 posts

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#61

I really like the idea of a secure Evernote alternative. For me, however, the by far most important feature is decentralization. Until someone builds this I'm stuck using org-mode and a git repo...

It is decentralized: https://turtl.it/docs/server/

You only use their servers if you want to.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#63

Earlier quoted context omitted.

Thanks for the honest feedback! The app IS a web frame, both on desktop an mobile. TBH it's pretty much the only way I can maintain it on 4 (and soon 5) different platforms efficiently. I will say this: Turtl will queue encryption/decryption in background threads so it does utilize cores while doing heavy processing. As far as how it utilizes cores in the main UI, that's really up to the underlying javascript engine,…

Hello! I agree with mrmondo insofar as Turtl is too immature for me at to me at the moment. That said, please post updates -- I'm on the lookout for Evernote alternatives, now that its demise seems imminent. I don't use any of the fancy evernote features, so if you're interested, this is what I'd require at a minimum: - Save and sync text between OS X and Android - Button to take a picture and insert it into a note T…

Onenote is superior to Evernote. The problem is I have so many notes in Evernote I am too lazy to switch

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#64
post #26

Earlier quoted context omitted.

Thanks for the honest feedback! The app IS a web frame, both on desktop an mobile. TBH it's pretty much the only way I can maintain it on 4 (and soon 5) different platforms efficiently. I will say this: Turtl will queue encryption/decryption in background threads so it does utilize cores while doing heavy processing. As far as how it utilizes cores in the main UI, that's really up to the underlying javascript engine,…

Great response, thanks for taking the time to read it, I always feel really quite guilty when someone puts a lot of hard work and passion into something they care about and I feel I need to point out problems - I am constantly conflicted between not saying anything and speaking up, in this case I spoke up because I absolutely agree with the need for Evernote-like products. Regardless of my technical opinions congratu…

"The authors argue that the major problem in many negotiations is that people assume positions that are either Hard or Soft. They suggest that, rather than being either hard on the people and the problem, or soft on people and problem, it is possible to be soft on the people and hard on the problem. They call this approach Principled negotiation or Negotiation on its merits." Getting to Yes - Roger Fisher, William Ury

And my personal motto as a system tester: "It's my job to show that stuff is still broken and tell in it such a way that my head won't be chopped off and people stilltalk to me."

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#65
post #28

Earlier quoted context omitted.

Not from what I've seen, after hosting a bunch of NodeJS based web-apps I can tell you it doesn't perform well on the server-side or on the desktop. It's a decent rapid prototyping language / tool - but it's taking what should (or perhaps shouldn't) be in a web browser, wrapping it up and hosting it somewhere that the designers of products often don't know much about the landscape.

For the majority of users, it performs well enough. Step out from behind your own lens. For instance, the number of times I've heard someone complain about Slack's performance (that isn't a developer) is precisely zero .

You are right. It's good enough for many apps. I probably have several nodejs/electron/js desktop apps running and I have no complaints. It is the most cost effective way to target multiple platforms and the development experience is fantastic without having to get into .net win forms or xaml/wpf on Windows or the monstrosity that is Xcode/UI builder or God forbid Java or the worst Dev ecosystem that is android/eclipse.

So let's be practical here. If I am doing a startup or a side projects I am definitely going with JavaScript on the client - I have more freedom on the server and will probably pick either elixir/Phoenix, rails or .net

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#66
post #41

Just a heads up: I'm being shown the Windows x64 button and I'm using a Mac (OS X 10.10) and Firefox. There is only one button on the front page but you seem to support multiple platforms so I'm assuming this is a bug?

Same thing happened to me. If I hadn't dug around a little I would have assumed it's a Windows-only app and moved on.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#67

Are you using truecrypt? Isn't that a dead project with security issues?

It's a forked project with leadership-drama issues, but several ongoing audits haven't turned up any serious security issues.

The original anonymous maintainers apparently tried to kill it, for reasons that aren't clear, by saying that it's insecure. It seems to have been a red herring, and their suggestions of alternatives were comically bad.

Lots of people are still using the last Truecrypt release, or one of the several forks that have sprung up that have attempted to improve upon it in various ways (sometimes in incompatible ways, though). Hopefully the situation will stabilize with one clear winner in the future.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#68
post #5

I'm sorry but I don't think you should call this an Evernote alternative. - No iOS client (Although the site does say coming soon) - No Firefox webclipper - No Web interface - Large / heavy application - No Drawing / Diagram support - The app is not native, it's seems it's a web frame It's interface doesn't feel very snappy, it feels like it's built with in a Javascript framework perhaps? Evernote has been around for…

I don't see drawing/diagram support as a needed thing - at least not in my use-case. My ever-note is entirely full of text.

But I agree that speed is critical. The most important features of a note taking program for me are speed and durability (in the database sense - no worries about data-loss). If it's long to navigate to the last viewed spot in my shopping list or my workout log, I'm annoyed.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#69

Earlier quoted context omitted.

Attackers can use special hardware (ASICs, for example) to perform a lot of low-memory but CPU-intensive calculations quickly. Modern KDFs emphasize a property called memory-hardenss: It should be reasonably fast on consumer devices, require a reasonable amount of memory, and trading off memory usage should require an absurd CPU slowdown. PBKDF2 doesn't have this property, so if you're forced to use it, the standard…

so it's not really exponential - if ridiculous amounts of memory somehow became very cheap and available, then it would break it? this is quite different from the exponential properties most encryption has. I would expect "ridiculous amounts of memory" to mean "more bytes than the number of atoms on Earth", that sort of thing. It sounds like rather than these kinds of theoretical limits, they chose much more practica…

As attackers get better, we can just up the ante. More rounds, more memory usage, etc.

If you're building software in 2016, you want to use one of the following for turning a password into a crypto key:

    - Argon2
    - scrypt
    - bcrypt
PBKDF2 should be your last resort. Don't fall back to a simple hash function.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#70

Hi everyone, creator of Turtl here. It's getting late here (2:15 am) so if you ask a question or have feedback, I'll be able to get back to you in a few hours. Thanks for checking out my project!

Hi May I have two recommendations? - put more screenshots on the web page to apetize us - if you provide server... provide it as an Docker image too, so it's easy to test

Looks good anyway, I am going give it a try.

Post reply on HN