Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 80 posts

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#61

Post by hexedpackets »

llamaLord wrote: post #59
javaunsafe2019 wrote: post #56

Idk as you loose the index and several operators your database might get useless and this solution would not scale well. From my experience you better have dedicated views for different stakeholders and your problem is solved without those downsides.

I think you're looking at this from the wrong level. This product kinda assumes that field level encryption is desired for certain protected fields and works from there. That may not be a correct assumption for ALL systems, but it's a safe assumption for A LOT of systems. OP this is seriously cool, nicely done.

Thanks, appreciate it!

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#62

Post by sk5t »

atonse wrote: post #58
javaunsafe2019 wrote: post #56

Idk as you loose the index and several operators your database might get useless and this solution would not scale well. From my experience you better have dedicated views for different stakeholders and your problem is solved without those downsides.

You don’t lose the ability to search exact values if you use convergent encryption and the same word encrypts to the same ciphertext.

This is generally considered a bad thing.

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#63

Post by atonse »

Do you guys post any details about the storage format?

Like if I had the encryption key and any salt etc, can I decrypt it without your product?

Also how much has the encrypted format been vetted?

I saw your example and the last name seemed to be massive even compared to using something like KMS.

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#64

Post by hexedpackets »

atonse wrote: post #63

Do you guys post any details about the storage format? Like if I had the encryption key and any salt etc, can I decrypt it without your product? Also how much has the encrypted format been vetted? I saw your example and the last name seemed to be massive even compared to using something like KMS.

We still need to add the format to our docs, but it's essentially:

prefix + base64(len_encode(metadata) + len_encode(key_tag) + aes_encrypt(data))

So definitely possible to decrypt it without JumpWire, if you have the keys. There are some pieces of metadata we add in that we could make optional if you want to reduce the resulting ciphertext size. That metadata adds a few extra bytes, but it doesn't grow with the data size.

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#65

Post by pistoriusp »

dang wrote: post #49
pistoriusp wrote: post #36

Earlier quoted context omitted.

Unfortunately not anymore, we have a great set of people backing us, but thanks for the vote of confidence. As an aside: Not exactly sure why the parent is getting down voted.

It's common for startups to hijack competitors' launch threads. Some readers find that distasteful; perhaps that's why there were downvotes. I'm not saying that your post was such a hijack, but it's difficult to interpret these things accurately, so any post of this kind will always land on a spectrum of responses.

Indeed, but IMHO they're very different products if you understand the positioning, which I guess is hard to guage.

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#66

Post by valenterry »

What I'd like to have is an app that allows me to easily select specific vocab that I want to learn (with flashcards).

Essentially, I would pick "cooking" and get a list of vocabulary, sorted by usage/importance that contains all the words that I need for "cooking" such as tools, ingredients, techniques and so on.

Or the same for traveling, hiking, cycling, ordering in a restaurant, buying a house, ...

That would be super useful.

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#67

Post by ghayes »

valenterry wrote: post #66

What I'd like to have is an app that allows me to easily select specific vocab that I want to learn (with flashcards). Essentially, I would pick "cooking" and get a list of vocabulary, sorted by usage/importance that contains all the words that I need for "cooking" such as tools, ingredients, techniques and so on. Or the same for traveling, hiking, cycling, ordering in a restaurant, buying a house, ... That would be…

I assume this comment is meant for this thread: https://news.ycombinator.com/item?id=33822950

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#68

Post by debussyman »

ghayes wrote: post #67
valenterry wrote: post #66

What I'd like to have is an app that allows me to easily select specific vocab that I want to learn (with flashcards). Essentially, I would pick "cooking" and get a list of vocabulary, sorted by usage/importance that contains all the words that I need for "cooking" such as tools, ingredients, techniques and so on. Or the same for traveling, hiking, cycling, ordering in a restaurant, buying a house, ... That would be…

I assume this comment is meant for this thread: https://news.ycombinator.com/item?id=33822950

mystery solved

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#69

Post by valenterry »

ghayes wrote: post #67
valenterry wrote: post #66

What I'd like to have is an app that allows me to easily select specific vocab that I want to learn (with flashcards). Essentially, I would pick "cooking" and get a list of vocabulary, sorted by usage/importance that contains all the words that I need for "cooking" such as tools, ingredients, techniques and so on. Or the same for traveling, hiking, cycling, ordering in a restaurant, buying a house, ... That would be…

I assume this comment is meant for this thread: https://news.ycombinator.com/item?id=33822950

Right - how did THAT happen? I didn't even open or read this Thread here. Bug on hackernews? Dang please helpz!

Re: Launch HN: JumpWire (YC W22) – Easily encrypt customer data in your databases

#70

Post by mike_d »

hexedpackets wrote: post #20
hangonhn wrote: post #10

So if the fields are encrypted by the proxy on the way to the DB, how do queries and indices work since it would be pretty much invisible to the DB and the query planner? Thanks! I really like the approach you are taking since it could be a quick drop-in deployment that solves a huge problem for us.

Glad to hear you like our approach! We haven't fully solved indexing/complex querying yet. We have two modes we can operate in - directly encrypting in the database, or doing just-in-time encryption as the query results come back. When encrypting directly in the database most queries other than direct comparison won't work. We have some early work started on using both homomorphic encryption [1] and format-preserving…

So basically you break relational databases and turn them into fancy key value stores?
Post reply on HN