The very premises that a hacker can't read my data is laughable. Unless I'm using a native app to do the decryption a hacker could gain access to my data as it leaves your server or if they can store the encryption credentials from my session and use them later
Show HN: Airborn – Private Google Docs Alternative
91–100 of 218 posts
Re: Show HN: Airborn – Private Google Docs Alternative
#92Earlier quoted context omitted.
It seems like holding down a key does different things in different language alphabets. I can't seem to hold down a key and have it type the same character repeatedly in English, however (e.g. press a, expect aaaaaaa... until key up).
Weird. What browser and operating system are you using, and which locale/keyboard layout? (Not sure which of those matter, but it works fine for me.)
I bet it's Mac OSX. By default, holding down a key will pop up an option for diacritical markers (accents).
Re: Show HN: Airborn – Private Google Docs Alternative
#93Looks really slick! You should consider adding word support. Support for office XML formats[1] are simple enough to hand-roll. [1]: https://en.wikipedia.org/wiki/Microsoft_Office_XML_formats
What extent of docx support is important, do you feel? Is just importing docx to html (the native format) sufficient, or should they stay as docx while editing? Should it be possible to export from html to docx?
Re: Show HN: Airborn – Private Google Docs Alternative
#94The very premises that a hacker can't read my data is laughable. Unless I'm using a native app to do the decryption a hacker could gain access to my data as it leaves your server or if they can store the encryption credentials from my session and use them later
When it leaves our server, the data is encrypted and not readable. To get your encryption key, they would need to execute code in your browser, and we describe how we protect against that at https://www.airbornos.com/docs/security.
Of course, we're only talking about when our server gets hacked. If your computer gets hacked, you have a problem regardless of whether you're using a web app or a native app.
Re: Show HN: Airborn – Private Google Docs Alternative
#95Earlier quoted context omitted.
Can service worker’s code ever be updated by the hacker? How does this actually work?
Yes, it can, but whenever the Service Worker's code changes, the user is warned. There's an "updatefound" event [1] which both the web page and the old Service Worker get. I wrote a blog post with more background info at [2]. Of course, it would be better to only warn the user if the Service Worker changes if it doesn't match the version on GitHub, but that's blocked on [3]. Furthermore, there are some very edge-case…
The concept of Transparent Web Apps (TWA) is an interesting one - more so than AirbornOS itself. Any chance of packaging it (i.e. in the form of library, or make it as a SaaS) to promote adoption? This can enable more TWA and perhaps pivot yourself to become the TWA hub/directory.
Re: Show HN: Airborn – Private Google Docs Alternative
#96The very premises that a hacker can't read my data is laughable. Unless I'm using a native app to do the decryption a hacker could gain access to my data as it leaves your server or if they can store the encryption credentials from my session and use them later
When it leaves our server, the data is encrypted and not readable. To get your encryption key, they would need to execute code in your browser, and we describe how we protect against that at https://www.airbornos.com/docs/security . Of course, we're only talking about when our server gets hacked. If your computer gets hacked, you have a problem regardless of whether you're using a web app or a native app.
> To get your encryption key, they would need to execute code in your browser,
You mean like all the javascript you're sending me?
> To solve this, we're using a relatively new web technology (Service Workers) to install some code which can't be changed without setting off a warning to you. That code then keeps taps on all other code, and checks that it matches the publicly available version on GitHub.
I really think you need to rethink your security here, because this just makes me even more sure that I don't trust you. It's actually a good bit laughable. If an attacker has access to your server, why should I believe that they wouldn't be able to update your github repository? (Why do I know you use different keys, don't put your private key on the server, &c?)
I have to trust you _regardless_ of any of your technology, and that's the problem. If someone has your server, there is very little I won't put past them to also have access too.
In sum, I think you're in for a world of hurt if you expect anyone who actually cares about security to trust you to never, ever make any mistakes.
> Of course, we're only talking about when our server gets hacked. If your computer gets hacked, you have a problem regardless of whether you're using a web app or a native app.
You're obviously just being needlessly argumentative about this. My meaning is obvious because of the context and the situation I described.
Re: Show HN: Airborn – Private Google Docs Alternative
#97Looks very old school and you use iFrame ! Must be a product from the 2000s but releasing now ?
Re: Show HN: Airborn – Private Google Docs Alternative
#98Earlier quoted context omitted.
If they can't access the data, then they shouldn't be able to moderate it. There are plenty of things on the web where you can upload data and they don't use machine learning algorithms to decide if your content is "valid" or "invalid". It all depends on various tradeoffs.
Right, google drive has a big problem with public file hosting and piracy. If the content is encrypted the safe harbor becomes trivial to preserve.
> Right, google drive has a big problem with public file hosting and piracy.
I'm pretty sure this isn't a DMCA takedown case here. Google scanned the content of the file, didn't like it and removed access via an algorithm. Nobody but Google knows how it works.
If the content is encrypted then it's impossible to use google docs document viewers, editors, or collaborate online on a document directly via google doc. It becomes just a dumb file host with no added value.
Re: Show HN: Airborn – Private Google Docs Alternative
#99This looks great! Minor nits: In what way is this an OS? Also in the US, Airborn (e.g. to be in the air) is spelled "Airborne" and it's difficult to type it without the trailing 'e' without spellcheck fixing it automagically.
I don't think this product is from the US and is primarily for English speaking audience. I guess they added english support later. Because, you can see "redirigir al navegador a otra" when redirecting.
I see the domain is registered in the Netherlands.
Re: Show HN: Airborn – Private Google Docs Alternative
#100This looks great! Minor nits: In what way is this an OS? Also in the US, Airborn (e.g. to be in the air) is spelled "Airborne" and it's difficult to type it without the trailing 'e' without spellcheck fixing it automagically.
The most significant ways in which it's a bit like an OS are 1. It has a Window Manager (try it out in the demo, you can drag around windows and such) 2. It has a File System, which does encryption and compression. This makes it so that the "apps" (documents and presentations, and in the future hopefully spreadsheets) don't have to know anything about encryption. This made it very easy to port the presentations app,…
Why not Airborn Docs? I wouldn't worry about the misspelling either. Google is a misspelling, lots of music groups are misspelled words, etc.