Live data from Hacker News

Show HN: Chrome extension to blur personal data before screen capture

datamask.tech

11–20 of 28 posts

Re: Show HN: Chrome extension to blur personal data before screen capture

#11
post #4
post #3

Earlier quoted context omitted.

This is a great idea! You might reconsider using blur to obscure the information, as it is trivial to defeat [1] (no ML required!). [1]: http://dheera.net/projects/blur

True, blur on large areas is reversible, even visually user can see the text true and I hope that users will recognise that. That's why I also added scramble option which replaces all text with random characters. Combining scramble for data protection and blur for visual affect is the best combination

How about two blurs? I've thought that a rotational blur followed by a gaussian or similar would be pretty secure.

Re: Show HN: Chrome extension to blur personal data before screen capture

#13
post #11
post #4

Earlier quoted context omitted.

True, blur on large areas is reversible, even visually user can see the text true and I hope that users will recognise that. That's why I also added scramble option which replaces all text with random characters. Combining scramble for data protection and blur for visual affect is the best combination

How about two blurs? I've thought that a rotational blur followed by a gaussian or similar would be pretty secure.

[deleted]

Re: Show HN: Chrome extension to blur personal data before screen capture

#14
post #11
post #4

Earlier quoted context omitted.

True, blur on large areas is reversible, even visually user can see the text true and I hope that users will recognise that. That's why I also added scramble option which replaces all text with random characters. Combining scramble for data protection and blur for visual affect is the best combination

How about two blurs? I've thought that a rotational blur followed by a gaussian or similar would be pretty secure.

"pretty secure"

It's either completely secure or it isn't secure at all.

Blurs can be deconvolved if the point spread function is known or can be guessed. Two blurs is just security through obscurity and hoping that numerical precision / stability issues work out in your favor.

Just black out sensitive areas.

https://en.m.wikipedia.org/wiki/Deconvolution

http://refocus-it.sourceforge.net/

Re: Show HN: Chrome extension to blur personal data before screen capture

#15
post #8
post #6

Earlier quoted context omitted.

It would be cool to automatically scramble the text behind the blur. This would give the look without leaving the original data there.

That's a good idea. I could add new secure/maximum privacy action in the extension UI. Instead of relying on users knowing about the limitations of blur

[deleted]

Re: Show HN: Chrome extension to blur personal data before screen capture

#16
post #8
post #6

Earlier quoted context omitted.

It would be cool to automatically scramble the text behind the blur. This would give the look without leaving the original data there.

That's a good idea. I could add new secure/maximum privacy action in the extension UI. Instead of relying on users knowing about the limitations of blur

Security shouldn't be opt-in; you should be secure by default because most users will stay with the default (which is reasonable - the entire point of the extension is to prevent information leaks, and as the author you're the domain expert and your users should be able to trust your judgement which comes in the form of a default).

Also, may I propose that as replacement text before blurring you use ads targeted at computer graphics researchers. /jk

Re: Show HN: Chrome extension to blur personal data before screen capture

#17
Oh, this seems like HTML-aware stuff, so has it's niche.

For others that want to supercharge screenshotting capabilities, look at Greenshot (https://getgreenshot.org/) You can mask whatever you want right away. Torn edges. Highlight. Conveniently set numbers, add text, upload to web and get URL in your clipboard. Or save locally and have File path in your clipboard.

By default, When I press print screen, I get the crosshair to crop some region of my screen. Super fast, super convenient. What a time saver. Just a happy user.

Re: Show HN: Chrome extension to blur personal data before screen capture

#19
I get a nasty warning from Ethereum:

This domain is currently on the MetaMask domain warning list. This means that based on information available to us, MetaMask believes this domain could currently compromise your security and, as an added safety feature, MetaMask has restricted access to the site. To override this, please read the rest of this warning for instructions on how to continue at your own risk.

There are many reasons sites can appear on our warning list, and our warning list compiles from other widely used industry lists. Such reasons can include known fraud or security risks, such as domains that test positive on the Ethereum Phishing Detector. Domains on these warning lists may include outright malicious websites and legitimate websites that have been compromised by a malicious actor.

To read more about this site please review the domain on Etherscam.

Note that this warning list is compiled on a voluntary basis. This list may be inaccurate or incomplete. Just because a domain does not appear on this list is not an implicit guarantee of that domain's safety. As always, your transactions are your own responsibility. If you wish to interact with any domain on our warning list, you can do so by continuing at your own risk.

If you think this domain is incorrectly flagged or if a blocked legitimate website has resolved its security issues, please file an issue.

Re: Show HN: Chrome extension to blur personal data before screen capture

#20
When you click to install, it says the extension can "read and change your data on www.googleapis.com".

Can't it read and change your data on any site where you invoke it, not just www.googleapis.com? This seems like an interesting conundrum — the only pages where you would invoke it are pages that have information you'd like to keep private. But you're granting the developer of the extension read/write access to the content on these pages, which seems unwise unless you know and trust the dev.

As someone with an accessibility-related extension that needs broad access, I can say that some folks are hesitant to install any extensions that have broad read/write access. Some companies (including Google, I'm told) forbid employees from installing extensions that have global read/write access, and would presumably feel the same way about this extension since it is intended to be invoked on pages with private content. I wish the creator the best of luck — this seems like a cool tool! — but I wonder about how this will pan out.

A couple pricing suggestions, since I also started out at $10/yr: set your price higher and offer coupons. I thought the affordability and simplicity of $10/yr would be a winner, but it isn't. People expect discounts on software, so they'll wait until they get one. If you don't give a coupon, many of them will give up and uninstall. You'll have more revenue AND more customers if you price at $15 and give random $5-off coupons.

Also, it appears this is a free trial that becomes paid, with no free functionality past the expiration of the trial. I would suggest allowing some functionality (perhaps 2x uses per month?) to post-trial users, so they have a reason to stick around instead of just uninstalling.

It would also provide a greater inducement for people to sign up — I like the idea of your extension, but I won't install because I don't value it at $10/yr — and I don't want to spend time learning how to use a tool that I'm only going to have access to for a short time. If there were an ongoing-but-usage-limited functionality, I would be much more likely to install.

I'm happy to share more learnings from 7 years in the Chrome Store, if you find any of this helpful. Contact info is in my profile.

Post reply on HN