4 ms·
Mircea, CEO and co-founder of Memo here. We're super excited to announce Memo! Memo is a note-taking app for technical teams. With Memo it’s quick and easy to
by domino 10y ago
Mircea, CEO and co-founder of Memo here. We're super excited to announce Memo!
Memo is a note-taking app for technical teams. With Memo it’s quick and easy to save and find code snippets, meeting notes, links, Slack messages, or other short work notes – right inside Slack or on the web.
You can write notes using both Markdown and Slack formatting, including @users, #channels and :emoji:. Organize them in boards, and even link different boards and notes between each other for quick access. All boards can either be kept private or shared with your Slack team.
We're looking forward to hear your feedback or questions!
P.S. We have full support for Slack's new message menus feature:
https://blog.memo.ai/10x-your-slack-apps-ux-with-message-menus-98a5a09b3a7a https://blog.memo.ai/10x-your-slack-apps-ux-with-message-men...
- askafriend 10y agoI want to add this so that my team can check it out, but I'm very very hesitant because that would mean Memo would be able to see the contents of those notes along with any metadata. We have very sensitive information in notes and can't afford to widen the surface area of possible data leaks. Sure, Slack might get hacked - that's still an issue.....but adding even more untrusted, unpaid services that can read our information is not a great path to go down.
- domino 10y agoFair concern. We have at-rest encryption on our roadmap and our goal is build a profitable business, so maybe we'll earn your trust later on as we iterate.
- gruez 10y ago>We have at-rest encryption on our roadmap i'm not sure whether you understood the term "at-rest", all that would imply is that the data disk (or perhaps the database) is fully encrypted, but the server holds the decryption key at runtime. that would add no security because anyone who hacked into the application server will still be able to dump + decrypt all the notes, all they have to do is also dump the key from the running server. what you need is end-to-end encryption, so the server only receives the encrypted notes from the client.
- domino 10y agoFwiw, I don't think end-to-end encryption would be a great default for our product since it would handicap a bunch of features (like server-side search), but it could be an opt-in feature for specific notes. We do take security seriously and the plan is to do more in the future.
- deleted 10y ago[deleted]
- dotancohen 10y agoI'm not the OP, but you should know that for security-conscience people the idea of earning trust does not exist. I should never have to trust you, your web dev, your software engineer, your CTO, your devops guy, your cloud provider, your cleaning staff, and your interns. Rather, provide to me a service that is secure even assuming that the aforementioned entities are compromised, then you'll earn my business and my money.
- domino 10y agoYeah, I can understand that perspective, but it does require some trade-offs on the product side. Given that we're targeting technical teams using Slack, we focused on productivity features and usability first, but our roadmap is open to change based on user feedback :)
- sgdread 10y agoClient-side encryption and zero-knowledge storage design might give some peace of mind to some users.
- juandazapata 10y agoYour website looks broken in my iPhone 6s