Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SpiderOak Encryptr – Zero-Knowledge Password Syncing

github.com

Post reply on HN
Print view View original

11–20 of 63 posts

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#11

Post by Karunamon »

d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

I'm not clear on what exactly your problem is here.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#12

Post by dsp1234 »

Karunamon wrote: post #11
d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

I'm not clear on what exactly your problem is here.

I'm also curious about what the problem is. If the goal is a simple API client that has iOS/Android/Desktop compatibility, then Cordova seems a reasonable choice. Would the above commenter have preferred 4+ separate projects instead?

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#13

Post by frabbit »

Karunamon wrote: post #11
d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

I'm not clear on what exactly your problem is here.

I assume it's against a bunch of dodgy software from a source which is perceived as being less eyeballed than a distribution's repository.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#14

Post by wyager »

Karunamon wrote: post #11
d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

I'm not clear on what exactly your problem is here.

Not that guy, but that's a ridiculously bloated set of requirements.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#15

Post by dragontamer »

y7 wrote: post #6

I was slightly puzzled what they meant by "zero-knowledge encryption", but after looking around a bit it looks to be more of a buzzword than really related to zero-knowledge proofs (besides them using SRP for password validation). As far as I know, all password managers like Lastpass, 1Password, etc. use client-side encryption of data. Does this do anything new?

I was excited about a password manager that finally manages like, domain names and then scrypts your master-password locally with standardized domain-names (ie: scrypt(masterpassword+gmail.com)) that then transforms the hash into a format that gmail.com accepts. (keeping track of which websites have weird requirements, like !$#% required, or special characters NOT allowed).

And then I realized that the "zero-knowledge" thing is just a buzzword and has nothing to do with the implementation. Ah well.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#16

Post by Karunamon »

wyager wrote: post #14
Karunamon wrote: post #11

Earlier quoted context omitted.

I'm not clear on what exactly your problem is here.

Not that guy, but that's a ridiculously bloated set of requirements.

The language it's written in, the testing framework, and the support library that lets it target more platforms? That doesn't seem too bloated to me.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#17

Post by BinaryIdiot »

wyager wrote: post #14
Karunamon wrote: post #11

Earlier quoted context omitted.

I'm not clear on what exactly your problem is here.

Not that guy, but that's a ridiculously bloated set of requirements.

Almost all of those requirements are only for developing / testing the repository. That's not uncommon for most languages / projects.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#18

Post by BinaryIdiot »

d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

Care for elaborate on the "nopes"? Grunt, PhantomJS and node are essentially for dev support and the rest are for running it. It's not that heavy.

Re: SpiderOak Encryptr – Zero-Knowledge Password Syncing

#19

Post by d_theorist »

Karunamon wrote: post #11
d_theorist wrote: post #10

Requirements: Node and npm - http://nodejs.org/ Node package manager for the Cordova CLI and Grunt Cordova CLI - https://github.com/apache/cordova-cli/ Cordova / PhoneGap command line interface npm install -g cordova Grunt - http://gruntjs.com/ Build tool for minimising, running and tests npm install -g grunt-cli PhantomJS - http://phantomjs.org/ Headless webkit for running tests Cordova-icon and Cordova-splash - htt…

I'm not clear on what exactly your problem is here.

This is a piece of software that we are supposed to trust with our passwords. It depends on a long list of crappy bloated software, including something from an apparently-non-standard source, and including a package manager that is probably going to pull in yet more untold reams of crappy, unaudited, JavaScript code from the four corners of the internet at build time. It would not surprise me if this ended up clocking in at millions of lines of code by the time it built.

Just say no.

Post reply on HN