Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SpiderOak Encryptr – Zero-Knowledge Password Syncing

github.com

Post reply on HN
Print view View original

1–10 of 63 posts

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#4

Post by CiPHPerCoder »

JshWright wrote: post #2

Latest commit 5fdc936 on Dec 18, 2015 Is this still an active project? 4 months is a long time to pass without a commit published.

I lean towards "No".

For example, this was never merged: https://github.com/SpiderOak/Encryptr/pull/180

I eventually closed it because I keep an eye on https://github.com/pulls and it was unnecessary clutter.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#5

Post by SloopJon »

I'm a little confused by this. The project page makes it sound like someone's weekend project, complete with a donation link, but in fact it seems to be the client for one of SpiderOak's products.

In any case, I'm having fun reading about some of the projects used to build this, including Crypton. Will this work with any Crypton server, or is it somehow tied to SpiderOak?

Edit: "I am happy to announce that SpiderOak has acquired Encryptr" (blogs.devgeeks.org).

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#6

Post by y7 »

I was slightly puzzled what they meant by "zero-knowledge encryption", but after looking around a bit it looks to be more of a buzzword than really related to zero-knowledge proofs (besides them using SRP for password validation). As far as I know, all password managers like Lastpass, 1Password, etc. use client-side encryption of data. Does this do anything new?

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#7

Post by bascule »

y7 wrote: post #6

I was slightly puzzled what they meant by "zero-knowledge encryption", but after looking around a bit it looks to be more of a buzzword than really related to zero-knowledge proofs (besides them using SRP for password validation). As far as I know, all password managers like Lastpass, 1Password, etc. use client-side encryption of data. Does this do anything new?

Yeah, it's puzzling why SpiderOak persists in using the term "zero knowledge" to mean something entirely different from ZKPs. As far as I can tell they're the only ones doing this too.

Especially with zkSNARKs and practical applications like Zcash, all I can think this will accomplish is confusing people.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#9

Post by d_theorist »

y7 wrote: post #6

I was slightly puzzled what they meant by "zero-knowledge encryption", but after looking around a bit it looks to be more of a buzzword than really related to zero-knowledge proofs (besides them using SRP for password validation). As far as I know, all password managers like Lastpass, 1Password, etc. use client-side encryption of data. Does this do anything new?

That confused me as well. And I find it worrying that the author is apparently confused about this term (or deliberately using it in a non-standard sense).

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#10

Post by d_theorist » 

    Requirements:
        Node and npm - http://nodejs.org/
            Node package manager for the Cordova CLI and Grunt
        Cordova CLI - https://github.com/apache/cordova-cli/
            Cordova / PhoneGap command line interface
            npm install -g cordova
        Grunt - http://gruntjs.com/
            Build tool for minimising, running and tests
            npm install -g grunt-cli
        PhantomJS - http://phantomjs.org/
            Headless webkit for running tests
        Cordova-icon and Cordova-splash - https://github.com/AlexDisler/cordova-icon/ and https://github.com/AlexDisler/cordova-splash/
            npm install -g cordova-icon and npm install cordova-splash
Nope. Nope nope nope.
Post reply on HN