Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Turtl – A secure, encrypted Evernote alternative

turtl.it

Post reply on HN
Print view View original

91–100 of 100 posts

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#91

Post by sarciszewski »

orthecreedence wrote: post #89
sarciszewski wrote: post #88

Earlier quoted context omitted.

The correct tool for the key-splitting job is HKDF. If SJCL doesn't offer HKDF, I'll be surprised. It's not hard to implement, however.

Thanks. I researched key splitting when I was building the CBC+HMAC version of the crypto, but HKDF never came up. This is why there are experts (which I do not claim to be). Your feedback on the crypto side of things is really important and well received. I appreciate you taking the time to look through the code.

> This is why there are experts (which I do not claim to be).

Heh, humility goes a long way towards becoming an expert. ;)

Thanks for taking this feedback well. :)

Also, a friend in IRC point out that:

https://github.com/turtl/js/blob/master/library/tcrypt.js#L6...

Your default iterations here is only 400.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#92

Post by formichunter »

orthecreedence wrote: post #85
formichunter wrote: post #48

Is it possible, or maybe I should offer, to encapsulate this in docker using docker-compose? I find it easier and cleaner to try new things out running docker-compose up.

By all means, if you want to take on this project I'd gladly advise and link to it from the server page. I don't know enough about Docker to be useful for that portion, but I can certainly help in getting the server set up properly.

I'll work on this tonight, EST, but if someone beats me to it please don't hesitate to link to them first. Thanks for the reply.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#94

Post by design55 »

Coming from an academic/artistic background, very very far away from the TECH industry, I've found turtl really helpful for cataloging research for upcoming projects. I think it has really great potential for people working in project based industries who need confidential platform to store large amounts of research. Although many people do not have a need for privacy in their bookmarking, it is definitely a major consideration in many other professions outside of TECH. Although it may not be as smooth running as Evernote right now, I think that privacy for my research is a trade off worth noting.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#95

Post by noddingham »

logicallee wrote: post #82
sarciszewski wrote: post #69

Earlier quoted context omitted.

As attackers get better, we can just up the ante. More rounds, more memory usage, etc. If you're building software in 2016, you want to use one of the following for turning a password into a crypto key: - Argon2 - scrypt - bcrypt PBKDF2 should be your last resort. Don't fall back to a simple hash function.

that makes zero sense. something encrypted in 2001 isn't supposed to magically become plaintext in 2016 because "attackers get better." it's fundamentally not the promise of encryption. (I thought.)

Wait what? It feels like you're trying to argue with the results of Moore's law. How does it make zero sense that what would have taken years on 1990s hardware now may only take weeks on 2016 hardware?

Why do you think recommended password length and complexity has increased?

Why do you think the default for RSA key length is 2048-bit now instead of 1024?

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#97

Post by hirokiky »

I tried it. I like this app, especially this tile interface. And it won't scramble all of things into notes like evernote. bookmarks, files, notes are separated. seems nice.

cons:

- You need to take certifications for OSX app - it's scare to install un-certificated apps - Uploading file and images should be merged - I don't want to care whether it's image or not, App should detect, isn't it cool? - The note editor, it's too poor to use. and default height of textarea is too thin. expand it to users want to write something.

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#99

Post by ipixny1004 »

eibrahim wrote: post #63
omginternets wrote: post #43

Earlier quoted context omitted.

Hello! I agree with mrmondo insofar as Turtl is too immature for me at to me at the moment. That said, please post updates -- I'm on the lookout for Evernote alternatives, now that its demise seems imminent. I don't use any of the fancy evernote features, so if you're interested, this is what I'd require at a minimum: - Save and sync text between OS X and Android - Button to take a picture and insert it into a note T…

Onenote is superior to Evernote. The problem is I have so many notes in Evernote I am too lazy to switch

Have you tried Centrallo? Centrallo 2.0 Global Productivity App Adds Evernote Import Wizard to Its List-Making Features and Adds Former Evernote Executive Heather Wilde to Its Team http://www.prweb.com/releases/2016/02/prweb13198898.htm

Re: Show HN: Turtl – A secure, encrypted Evernote alternative

#100

Post by nickik »

ultramancool wrote: post #73
orthecreedence wrote: post #25

Earlier quoted context omitted.

Thanks for the honest feedback! The app IS a web frame, both on desktop an mobile. TBH it's pretty much the only way I can maintain it on 4 (and soon 5) different platforms efficiently. I will say this: Turtl will queue encryption/decryption in background threads so it does utilize cores while doing heavy processing. As far as how it utilizes cores in the main UI, that's really up to the underlying javascript engine,…

To your credit, the feature you're adding is far more important to me than any of the minor Evernote features the parent mentions. So don't sell yourself short. I currently find myself stuck syncing text files using SyncThing or ownCloud or making notes in my KeePass database just to get the level of privacy I want in this. I saw Turtl before and this makes Turtl highly appealing to me, I'll definitely be trying it o…

My solution to this problem is to use LastPass. The crypto is about as good as you can get, the only problem is that its not Opensource. LastPass runs literally everywhere, every browser, every device.

Markdown support in the notes would be quite nice. The UI could be improved for that usecase as well.

I really like having only app for those use cases.

I really like that I can use my Yubikey for 2f authentication over NFC.

Post reply on HN