7 ms·

I'm still using joplin + dropbox

by nvr219 4y ago

CGamesPlay 4y ago
Fun fact: Joplin log files include plaintext secret keys when you enable E2EE. I moved away from Joplin after that plus a data loss incident where Joplin decided that it wanted to delete all of my notes in the repository. Too many foot guns there! I did like the software though.
- dp-hackernews 4y ago
  another fun fact... https://github.com/laurent22/joplin/blob/dev/readme/spec/e2ee/workflow.md https://github.com/laurent22/joplin/blob/dev/readme/spec/e2e...
- XCSme 4y ago
  That issue seems to have been fixed 4 years ago: https://github.com/laurent22/joplin/commit/b07fe5cc348ab8c3dd611d718fd20c8272522b79 https://github.com/laurent22/joplin/commit/b07fe5cc348ab8c3d...
- kranke155 4y ago
  I haven’t found anything better than Joplin, have you?
  - e3bc54b2 4y ago
    I tried Joplin, and most other PKM/note-taking tools out there. Eventually settled on org-mode. Encryption can be sync-time using restic/cryptomator (cloud sync), filesystem (self-hosted all the way), or save time using plain old GPG. As a bonus, there is a gigantic ecosystem around org-mode, and thanks to the platform (Emacs) it is nearly completely FLOSS and pretty much guaranteed to be around and kickin' when most commercial systems with either die, get acquired or just change too much for my taste. Probably not for everyone, though.
  - personalidea 4y ago
    Joplin has no mobile writer. Only reading. Obsidian has that. And is more extendable. That is why I switched. For me, writing a note on multiple devices is the key feature.
    - tiberiusteng 4y ago
      Joplin's Android and iOS app can both edit note contents, by tapping the '+' or 'edit' circular button at bottom right of screen.
      - personalidea 4y ago
        Last time I checked (2019ish) it wasn’t possible. The times they are a changing, I guess. Will check it out again.
    - cmroanirgo 4y ago
      "Obsidian is not FOSS" https://forum.obsidian.md/t/publish-the-android-mobile-app-as-foss-on-f-droid-or-as-indendent-apk/20480/2 https://forum.obsidian.md/t/publish-the-android-mobile-app-a...
    - nvr219 4y ago
      I edit on mobile all the time... works great
- Daffodils 4y ago
  If you don't mind me asking, can you share some more info on this? Did some searching around, and only found one [1] semi related issue from 2018. Is this the one you were referring to? [1] : https://github.com/laurent22/joplin/issues/288 https://github.com/laurent22/joplin/issues/288
  - CGamesPlay 4y ago
    Just look in your log files. Here’s my log file with the keys scrubbed, which I discovered while hunting down an unrelated issue. https://discourse.joplinapp.org/t/keep-original-notebook-on-note-conflict/22371/7 https://discourse.joplinapp.org/t/keep-original-notebook-on-...
    - stephane-klein 4y ago
      Do you have open an issue about it?
      - CGamesPlay 4y ago
        I don’t. After discovering that flaw plus the issue I was originally reporting in that thread plus another issue where Joplin deleted all my notes, I just stopped using the software. I’m reasonably happy using Obsidian now, despite it being closed source and not supporting anything but proprietary sync mechanisms. I have no had any data loss issues with it.
    - stephane-klein 4y ago
      > Just look in your log files. Here’s my log file with the keys scrubbed. https://discourse.joplinapp.org/t/keep-original-notebook-on-note-conflict/22371/10?u=stephane-klein https://discourse.joplinapp.org/t/keep-original-notebook-on-... I just checked my log.txt file and I can't find mention of my master password. Maybe it is fixed?
- nvr219 4y ago
  Wait a minute, that's not fun at all!
  - dp-hackernews 4y ago
    It's also an incomplete assessment - anyway who doesn't take a backup before entering into the unknown (or inexperienced) world of new tools? - PEBKAC If you follow the instructions properly, this issue is a non-issue.
    - CGamesPlay 4y ago
      Of course I resorted from backup. And then I stopped using the application which has such problems. Still, after discovering that the keys were in the log file, it was definitely a “final nail in the coffin” for me.
      - dp-hackernews 4y ago
        Have you read this? https://joplinapp.org/spec/e2ee/ https://joplinapp.org/spec/e2ee/ Master Keys The master keys are used to encrypt and decrypt data. They can be generated from the Encryption Service and are saved to the database. They are themselves encrypted via a user password using a strong encryption method. These encrypted master keys are transmitted with the sync data so that they can be available to each client. Each client will need to supply the user password to decrypt each key.

I'm still using joplin + dropbox

by nvr219 4y ago

I'm still using joplin + dropbox

Fun fact: Joplin log files include plaintext secret keys when you enable E2EE. I moved away from Joplin after that plus a data loss incident where Joplin decided that it wanted to delete all of my notes in the repository. Too many foot guns there! I did like the software though.

dp-hackernews 4y ago
another fun fact... https://github.com/laurent22/joplin/blob/dev/readme/spec/e2ee/workflow.md https://github.com/laurent22/joplin/blob/dev/readme/spec/e2e...
XCSme 4y ago
That issue seems to have been fixed 4 years ago: https://github.com/laurent22/joplin/commit/b07fe5cc348ab8c3dd611d718fd20c8272522b79 https://github.com/laurent22/joplin/commit/b07fe5cc348ab8c3d...
kranke155 4y ago
I haven’t found anything better than Joplin, have you?
- e3bc54b2 4y ago
  I tried Joplin, and most other PKM/note-taking tools out there. Eventually settled on org-mode. Encryption can be sync-time using restic/cryptomator (cloud sync), filesystem (self-hosted all the way), or save time using plain old GPG. As a bonus, there is a gigantic ecosystem around org-mode, and thanks to the platform (Emacs) it is nearly completely FLOSS and pretty much guaranteed to be around and kickin' when most commercial systems with either die, get acquired or just change too much for my taste. Probably not for everyone, though.
- personalidea 4y ago
  Joplin has no mobile writer. Only reading. Obsidian has that. And is more extendable. That is why I switched. For me, writing a note on multiple devices is the key feature.
  - tiberiusteng 4y ago
    Joplin's Android and iOS app can both edit note contents, by tapping the '+' or 'edit' circular button at bottom right of screen.
    - personalidea 4y ago
      Last time I checked (2019ish) it wasn’t possible. The times they are a changing, I guess. Will check it out again.
  - cmroanirgo 4y ago
    "Obsidian is not FOSS" https://forum.obsidian.md/t/publish-the-android-mobile-app-as-foss-on-f-droid-or-as-indendent-apk/20480/2 https://forum.obsidian.md/t/publish-the-android-mobile-app-a...
  - nvr219 4y ago
    I edit on mobile all the time... works great
Daffodils 4y ago
If you don't mind me asking, can you share some more info on this? Did some searching around, and only found one [1] semi related issue from 2018. Is this the one you were referring to? [1] : https://github.com/laurent22/joplin/issues/288 https://github.com/laurent22/joplin/issues/288
- CGamesPlay 4y ago
  Just look in your log files. Here’s my log file with the keys scrubbed, which I discovered while hunting down an unrelated issue. https://discourse.joplinapp.org/t/keep-original-notebook-on-note-conflict/22371/7 https://discourse.joplinapp.org/t/keep-original-notebook-on-...
  - stephane-klein 4y ago
    Do you have open an issue about it?
    - CGamesPlay 4y ago
      I don’t. After discovering that flaw plus the issue I was originally reporting in that thread plus another issue where Joplin deleted all my notes, I just stopped using the software. I’m reasonably happy using Obsidian now, despite it being closed source and not supporting anything but proprietary sync mechanisms. I have no had any data loss issues with it.
  - stephane-klein 4y ago
    > Just look in your log files. Here’s my log file with the keys scrubbed. https://discourse.joplinapp.org/t/keep-original-notebook-on-note-conflict/22371/10?u=stephane-klein https://discourse.joplinapp.org/t/keep-original-notebook-on-... I just checked my log.txt file and I can't find mention of my master password. Maybe it is fixed?
nvr219 4y ago
Wait a minute, that's not fun at all!
- dp-hackernews 4y ago
  It's also an incomplete assessment - anyway who doesn't take a backup before entering into the unknown (or inexperienced) world of new tools? - PEBKAC If you follow the instructions properly, this issue is a non-issue.
  - CGamesPlay 4y ago
    Of course I resorted from backup. And then I stopped using the application which has such problems. Still, after discovering that the keys were in the log file, it was definitely a “final nail in the coffin” for me.
    - dp-hackernews 4y ago
      Have you read this? https://joplinapp.org/spec/e2ee/ https://joplinapp.org/spec/e2ee/ Master Keys The master keys are used to encrypt and decrypt data. They can be generated from the Encryption Service and are saved to the database. They are themselves encrypted via a user password using a strong encryption method. These encrypted master keys are transmitted with the sync data so that they can be available to each client. Each client will need to supply the user password to decrypt each key.