5 ms·
I don't think this puts enough emphasis on the fact that it is a local client and not a web service. I see some people here griping about Electron, but the priv
by ynniv 8y ago
I don't think this puts enough emphasis on the fact that it is a local client and not a web service. I see some people here griping about Electron, but the privacy implications of being a local app are way more important than the performance of the framework used.
- muszc-master 8y agoI agree with you. The discussion has somewhat de-railed off-topic into a discussion about Electron. While that is an interesting discussion, it is pretty off-topic.
- Skunkleton 8y agoIs it off topic though? This is HN after all.
- Qwertie 8y agoSeems to be a proprietary application so app privacy went out the window already.
- ynniv 8y agoPrivacy is a spectrum. You can choose to be at one end of it, but not everyone shares your opinion. As a local app your data has a different legal status, and you actually have a lot of control over the execution compared to a web service. For instance, with outgoing firewall rules you could ensure that this is only talking to your email server.
- Mononokay 8y agoYou can audit the code of every Electron app, so why are you acting like it's full of spyware that you'll never be able to have privacy with?
- hjek 8y agoEver heard of minimized JavaScript[0]? [0]: https://github.com/google/closure-compiler https://github.com/google/closure-compiler
- lhorie 8y agoMinified js isn't particularly hard to reverse engineer compared to tools that are geared towards actual obfuscation, and regardless, you don't even need to look at the code if all you care about is privacy. A look at the dev console's network tab should tell you all you need to know.
- lucb1e 8y agoI've done obfuscated Javascript on a CTF. Only a few hundred lines and I can tell you, it's way easier to just write it new from scratch, especially if you have a product that you like and can just copy.
- kuschku 8y agoI’ve reversed and broken real-life products written in JS, Java, WebAssembly and native code. Minified JS and obfuscated Java (DexGuard or ProGuard) are almost identical in complexity, you can restore the actual datatypes still, and you can even restore the rough outlines of where control structures were. Obfuscated WebAssembly, NaCl or native code is much worse to work with, and often data structures and control structures are gone entirely.
- fermuch 8y agoI'd be very interested about your findings decompiling wasm. Do you have a blog, by chance?
- kuschku 8y agoI don’t maintain a blog currently, sorry. And if I had one I doubt I’d be able to write interesting articles about this topic. Generally I share such info on IRC, and then it gets just forgotten over time.
- jstanley 8y agoIt's still better than it would be if it was a normal web app hosted on his server. Or, at least, it has the potential to be better.
- neutronicus 8y agoMy partner actually has the opposite pain-point: She wants an e-mail client that stores attachments remotely, only downloading them as requested by by the client. Is there an e-mail service that does things this way?
- LeoPanthera 8y agoApple Mail has this as a setting, works with any IMAP provider.
- lucb1e 8y agoCan't Thunderbird do that? I'd imagine most IMAP clients do this.
- muszc-master 8y agoThis is what Ivelope is currently doing :) However there will be a setting for people who want to download all attachments as well.
- rbcgerard 8y agoThat’s a setting in outlook
- akvadrako 8y agoCompared to web-based clients. But the best email client (MailMate) is already local.