41–50 of 101 posts
There's gotta be a rule that requires a "Show HN" poster to engage in the comments. Because a post like this one with ZERO comments from the OP in a presence of questions that need answering is plain ridiculous.
Just "python -m http.server" If the network is trusted.
There's gotta be a rule that requires a "Show HN" poster to engage in the comments. Because a post like this one with ZERO comments from the OP in a presence of questions that need answering is plain ridiculous.
Glancing at your crypto implementation[1], it seems to contain newbie mistakes - eg no public key crypto involved in your public keys, usage of low level raw crypto algorithm primitives from libsodium without session, replay etc related security concerns, no signs of design requiremnts re what security guarantees it's trying to provide, no PK key management, etc. You're also hand rolling wire protocol code in C++, ma…
If you feel like throwing "newbie" accusations around, it'd be prudent to back your list of grievances up with more than a single link to crypto.cpp. Chances are you misread the code, didn't grok what the op was doing, etc. As it stands your comment reads like a common variety abrasive and dismissive gatekeeping... rant, basically, which is unfortunately so popular in crypto circles. Edit - the project does dearly ne…
Not sure how to respond about gatekeeping. What do you think would be a good way to write a comment pointing out these kinds of security problems? Or do you think it's unfair to do it at all?
- Who is behind this? A company or is it completely free?
- Is there any cloud service used?
- What does the UI look like?
And please fix the "celluar" spelling mistakes (in different places), it just makes it look less professional :)
There's gotta be a rule that requires a "Show HN" poster to engage in the comments. Because a post like this one with ZERO comments from the OP in a presence of questions that need answering is plain ridiculous.
Hope this helps. Nice tool and I can see myself using this if these issues are sorted.
First off, this looks like a nice project. So please take this as constructive criticism: 1. This really should have screenshots published. Especially when comparing with something polished like AirDrop, the UX is important. You even call this out as one of the features, so it's really odd not seeing the screenshots to support that statement. 2. "Uses state-of-the-art cryptography algorithm" isn't very reassuring. It…
App seems to be using this: https://libsodium.gitbook.io/doc/secret-key_cryptography/aea... I have little experience with cryptography, and have no idea whether it is a good choice or not. If it is, how would you convince regular people that the state of the art “something something sodium chachacha” crypto algorithm in the app is the best for them? It might be better not to mention the name. Some stats would be nice…
> I have little experience with cryptography, and have no idea whether it is a good choice or not.
libsodium is from DJB & Tanja Lange, it doesn't get better/more trusted than that without preferring to trust some state entity of choice. (For some reason ranging from regulatory requirement to hopelessly misguided.)
https://en.m.wikipedia.org/wiki/Daniel_J._Bernstein#Cryptogr...
But yeah, average user doesn't care. It probably doesn't belong on the front page unless this intends only to target a security conscious audience.
There's gotta be a rule that requires a "Show HN" poster to engage in the comments. Because a post like this one with ZERO comments from the OP in a presence of questions that need answering is plain ridiculous.