Live data from Hacker News

Should notes be end-to-end encrypted?

supernotes.app

31–40 of 151 posts

Re: Should notes be end-to-end encrypted?

#31
post #26

Earlier quoted context omitted.

Do you have something that allows you to publish that as well? Use case - I want to keep some notes for myself e2e on my laptop & phone but every now and then I'd like to publish a few of them under a pseudonym anonymously on the internet.

Yeah. It's called a web server and it's been around for ages, try it out some time

> Yeah. It's called a web server and it's been around for ages, try it out some time

come on, now.

Re: Should notes be end-to-end encrypted?

#32
post #10
post #5

My preference is to not need to care about what I'm pasting into my notes app. As I use the app on mobile, desktop OS and store not only organized content there, but also random thoughts, incl. sensitive content. That's I prefer to have it E2EE and use standardnotes.com (no affiliation, I'm just a happy customer)

Last I knew standard notes hid 2FA behind the paywall. Basic security should not be a pay feature. If they're willing to hang non-paying potential customers out to dry what other questionable security choices are they making? I tried to reason this out with them back when they had a discourse site or forum, I don't recall which it was, and was told, I'm paraphrasing, we're not going to do that and don't ever ask agai…

What should they charge for then?

Re: Should notes be end-to-end encrypted?

#33
post #6

> Should Your Notes Be End-to-End Encrypted? Yes. That's why I use Joplin (which is free and open source btw) and not some proprietary freemium app that to explains me that I don't necessary need E2E encryption for my notes.

Do you have something that allows you to publish that as well? Use case - I want to keep some notes for myself e2e on my laptop & phone but every now and then I'd like to publish a few of them under a pseudonym anonymously on the internet.

If you sign up for joplin cloud you can publish your notes. https://joplinapp.org/plans/

Re: Should notes be end-to-end encrypted?

#34
I read the article but I'm not sure what the objective was in the end. It seem a way to lengthy education course on E2EE. Almost like you're trying to convince someone of something you think they don't need. That usually ends badly in my experience.

Re: Should notes be end-to-end encrypted?

#35
post #24
post #13

Hmm, here is someone who would have loved E2E for his emails (and images in the cloud): Google refuses to reinstate account after man took medical images of son’s groin https://news.ycombinator.com/item?id=32560361 Given the tendency of large corporations to look into our private stuff, even on personal mobile devices (Hi Apple), encryption seems to be the only remedy. That is the reason why I store my (encrypted) no…

Google Photos whole premise is that they analyze, categorize, scan, and classify the photos for you. They find similar faces, put your photos on the Maps timeline, etc. If you don't want Google to do that, there's no point in using Google Photos. The entire benefit disappears.

How about the ease of use and storage?

Re: Should notes be end-to-end encrypted?

#36

Earlier quoted context omitted.

We've been hearing about homomorphic encryption for years, but I haven't seen it applied in a very practical way.

When I last looked into fully homomorphic encryption in 2017, the algorithms were still not at an applicable place. Sure, we may have polynomial time algorithms for FHE, but it doesn't help anything in practice if those polynomials are not reasonable themselves.

There was a pretty neat recent post on a pratical Homomorphic Encryption project [1]. Maybe not practical, but pretty cool nevertheless.

1. https://news.ycombinator.com/item?id=31668814

Re: Should notes be end-to-end encrypted?

#37
post #26

Earlier quoted context omitted.

Do you have something that allows you to publish that as well? Use case - I want to keep some notes for myself e2e on my laptop & phone but every now and then I'd like to publish a few of them under a pseudonym anonymously on the internet.

Yeah. It's called a web server and it's been around for ages, try it out some time

Relax

Re: Should notes be end-to-end encrypted?

#38
post #31
post #26

Earlier quoted context omitted.

Yeah. It's called a web server and it's been around for ages, try it out some time

> Yeah. It's called a web server and it's been around for ages, try it out some time come on, now.

What?

Re: Should notes be end-to-end encrypted?

#39
post #19

One other major downside of end-to-end encryption: everything has to be done client-side, and the server becomes very close to a dumb pipe and block storage. (The only parts the server can do anything with are those that aren’t encrypted, so the explicit goal of E2EE is to reduce the server to a dumb pipe and block storage.) Got ten gigabytes of stuff you want to search through? Without E2EE, the server can implement…

> One other major downside of end-to-end encryption: everything has to be done client-side, and the server becomes very close to a dumb pipe and block storage. That sounds like a feature...

It is, and that's fine, but it's important to call out things like the search example above to people actually know what that means. There are some things where it's required, and some things where a 10x increase in how long it takes to do anything is not acceptable.

Re: Should notes be end-to-end encrypted?

#40
All 450+ of my journal entries, notes and computer ideas are unencrypted, public and shared and worked on in the open on GitHub, so are not encrypted except over TLS when I edit them on GitHub when logged in under my account samsquire

If you like other people's technical perspectives are looking for ideas or side project ideas to learn of then read my journal

For context I am a DevOps and software engineer interested in performance, distributed systems, parallelism, concurrency, futuristic GUIs, the future of programming, how computers can be used to improve society and community ideas.

Ideas for Computing 2013

https://GitHub.com/samsquire/ideas

Ideas for Computing 2

https://GitHub.com/samsquire/ideas2

Ideas for Computing 3

https://GitHub.com/samsquire/ideas3

Ideas for Computing 4 (start here if you're interested in parallelism and concurrency and algorithms)

https://GitHub.com/samsquire/ideas4

Startup ideas

https://GitHub.com/samsquire/startups

Since I'm still working on these journal entries, I don't want people to miss ideas I added if people don't come back so I create a new repository when I get to a certain number of journal entries and then announce them to others At some point I need to take a cut on ideas4

Post reply on HN