4 ms·

I built an app for emotional journaling back around 2012 called iFeelio[0]. One of the reasons I've stopped working on it was the fear I had that it would get h

I built an app for emotional journaling back around 2012 called iFeelio[0]. One of the reasons I've stopped working on it was the fear I had that it would get hacked. Despite having it be local-only (no permission to connect to the internet on Android) and using an encrypted database, I worried about nation-state/NSO-like hacking and how it could be much worse than WhatsApp or an encrypted messenger getting hacked. That being said, seeing so many people create apps for emotions without taking such a a stringent approach frustrates me and has me thinking about revamping the app. If anyone reading this is interested, please reach out to me at the email in my profile and I'd be glad to chat. Or just comment here and I'll reply :-) [0]: http://www.iFeelio.com http://www.iFeelio.com

GekkePrutser 5y ago
Your precautions in particular no internet access and encrypted db sound really thorough. The end users will probably have ended up using less secure alternatives like a cloud driven alternative or the standard notetaking app on their phones. Let's just take for granted that if a nation state actor wants too spy on someone they'll do so one way or another. In the end the end users would be worse off with the alternatives as you say. However you mentioned it wasn't the only reason. And of course litigation is a danger with these things.
- jimkleiber 5y ago
  > In the end the end users would be worse off with the alternatives as you say. I really appreciate this point. It helps me reflect on the cost of inaction: "If people are going to use apps like this anyway, you not building the app may hurt them but not giving them a more secure option." > Let's just take for granted that if a nation state actor wants too spy on someone they'll do so one way or another. > And of course litigation is a danger with these things. Yea, I suppose if they were to hack into iOS or Android to access a local-only encrypted file, then those two platforms may be equally if not more liable than I would be. So maybe the legal aspects wouldn't be so bad.
cupcake-unicorn 5y ago
We need more stuff like this! Daylio is another good one that is local only with an option to back up to your Google account.
- jimkleiber 5y ago
  I'll check out Daylio, thank you for the boost!

GekkePrutser 5y ago

Your precautions in particular no internet access and encrypted db sound really thorough. The end users will probably have ended up using less secure alternatives like a cloud driven alternative or the standard notetaking app on their phones. Let's just take for granted that if a nation state actor wants too spy on someone they'll do so one way or another. In the end the end users would be worse off with the alternatives as you say. However you mentioned it wasn't the only reason. And of course litigation is a danger with these things.

jimkleiber 5y ago
> In the end the end users would be worse off with the alternatives as you say. I really appreciate this point. It helps me reflect on the cost of inaction: "If people are going to use apps like this anyway, you not building the app may hurt them but not giving them a more secure option." > Let's just take for granted that if a nation state actor wants too spy on someone they'll do so one way or another. > And of course litigation is a danger with these things. Yea, I suppose if they were to hack into iOS or Android to access a local-only encrypted file, then those two platforms may be equally if not more liable than I would be. So maybe the legal aspects wouldn't be so bad.

cupcake-unicorn 5y ago

We need more stuff like this! Daylio is another good one that is local only with an option to back up to your Google account.

jimkleiber 5y ago
I'll check out Daylio, thank you for the boost!