3 ms·
My only concerns about using Joplin were security-related, when handling sensitive notes (financial data, logins, etc). The interface looked awesome. Have Jopl
by cypherpunks01 3y ago
My only concerns about using Joplin were security-related, when handling sensitive notes (financial data, logins, etc). The interface looked awesome.
Have Joplin plugins been secured/sandboxed yet, or are they still able to exfiltrate data? That's one reason I never used it for very secure notes, same with Obsidian. Joplin also used to store notes unencrypted locally, not sure if that's still the case. Of course most people don't mind, but I was investigating the highest-security note tool I could find at the time.
- Groxx 3y agoIt absolutely boggles my mind that anyone releases a plug-in system without sandboxing nowadays.
- lillecarl 3y agoEngineering effort
- Groxx 3y agoWhich should be left at zero unless you can get over the "you actually do have a responsibility to take basic safety measures for your users" hurdle. Instead we routinely get zero security at all and also heavily encouraging people to install entirely unchecked stuff in a built-in and implicitly-trusted first party UI.