thecodrr

12 ms·

91.
by thecodrr 5y ago
What you say is right and that is how password managers work. However, human habit is that people generally keep their password in their heads. The point of giving a secondary key is that: 1. Since it is longer, the user is forced to store
92.
by thecodrr 5y ago
Check this comment: https://news.ycombinator.com/item?id=26845877
93.
by thecodrr 5y ago
It's very simple. Since the encryption key is basically derived from your password, Notesnook allows you to backup the encryption key. This encryption key + a random salt is used to encrypt all the data client-side. In case you forget
94.
by thecodrr 5y ago
> It's not a misfeature, but a feature. It's inconvenient and unnecessary. I don't get what can be so hard about just giving the user the encryption key. In the recovery flow you can just ask the user for the recovery key
95.
by thecodrr 5y ago
> You can't have both. If the service has account recovery after you lose your password or encryption keys, it can only mean that there is no any meaningful encryption. Incorrect. Check Notesnook[1]. It solves both of those things.
96.
by thecodrr 5y ago
We are a bit lacking on the documentation side currently. However, there is no new protocol. It says "XChaCha20-Poly1305-IETF & Argon2" because that's the core part. Everything else is standard. I'll write up a doc o
97.
by thecodrr 5y ago
> Their 'lack of new features' however is, as far as I understood, somewhat intentional. Um that sounds great but I don't see how a simple thing like a "right-click menu" endangers longevity? All their talk of si
98.
by thecodrr 5y ago
> its tied to Emacs "What's emacs?" that's what a your every day Joe is going to ask you. The very reason note apps/platforms exist is to simplify the on boarding process. Of course that's a two edged sword.
99.
by thecodrr 5y ago
It's great that SN works well for you but reading about your workarounds/compromises do not make SN better but you as a user better. For example, as you detailed, there is a way to recover your password but you have to do all the
100.
by thecodrr 5y ago
For most of them it seemed unnecessary; people don't realize the meaning of client-side encryption. I try to keep explanations very short and to the point. > had they not saved it somewhere safe? I had to delete 2 user accounts beca
101.
by thecodrr 5y ago
1. That is up to the user. They can save it wherever they like: a secure online storage, a USB, a piece of paper... 2. True but there are a couple of things you can do: i) regularly remind the user via email and in-app notification to backu
102.
by thecodrr 5y ago
> Thanks for posting! It checks most of the boxes for me. That's awesome. I am glad you liked it! > Looking forward to the desktop apps and possibly offline support! The desktop apps are coming soon. You can track our roadmap on
103.
by thecodrr 5y ago
> What happens to note access when off subscription? Nothing at all. You can still edit and access them as normal. There's no limit on the amount of notes you can make on the free tier. > is dark mode an option on the free tier?
104.
by thecodrr 5y ago
No, what the recovery key actually was because it asked for it in the recovery UI.
105.
by thecodrr 5y ago
A typo. I meant "without giving any reason". Also, I'd be interested to know what you count as blazing fast.
106.
by thecodrr 5y ago
I myself thought no account recovery automatically meant safety. It sounds very cool. However, in the past week alone, around 10 users of Notesnook came asking for a way to recover their account because they had forgotten their password. I
107.
by thecodrr 5y ago
It's mostly hearsay. Electron is highly optimized (it's chromium after all). Making an electron app doesn't make it automatically slow and clunky. That's absurd. Sure it is a browser and it takes a little more Ram than y
108.
by thecodrr 5y ago
Standard Notes is a phenomenal note taking app and one of the first to bring encryption in note taking. They take security very seriously and have multiple third party audits. With that said, the bad outweigh the good. I don't mean to
109.
by thecodrr 5y ago
SN's free version is...very limited. Almost all their cool features are in the paid version. Cool features being different editors. But even with that, their feature parity across platforms is not really great. (Aside: you can check No
110.
by thecodrr 5y ago
Conflicts are normal in syncing. Even git has conflicts. Although SN's conflict resolution is a bit weird where it creates multiple copies of the note...I think this may be because they mark conflicted notes on the server using timesta
111.
by thecodrr 5y ago
You should give Notesnook[1](i am the developer) a try as well. It should solve most, if not all, of the above issues and its cheaper than every other notes app out there as well. [1] https://app.notesnook.com/ (it has a 14
112.
by thecodrr 5y ago
For this, you might find Notesnook ( https://notesnook.com/ ) a better alternative. I mean its still $4.49 but I suppose that's still a lot cheaper. (Disclaimer: I am the developer so this may be a shameless plug, idk).
113.
by thecodrr 5y ago
You are forgetting that a huge category of people need all their notes in one place, organized and separate from everything else. Sure you can do this with Notepad and manage everything in folders etc. but that takes significant effort. Eff
114.
by thecodrr 6y ago
The key stays with the user only. We have no knowledge of it.
115.
by thecodrr 6y ago
No, not at all. All encryption/decryption happens client-side. That is why it's zero-knowledge.
116.
by thecodrr 6y ago
Yes, that is intentional. We are using a central identity provider for auth, that's why. I will take this into account though.
117.
by thecodrr 6y ago
That's cool. I didn't know about CherryTree. Syncthing is amazing though. I hope you'll give Notesnook a try too. I am sure it will be a better change
118.
by thecodrr 6y ago
Hey, thanks for checking Notesnook out! Yes! We are currently internally testing MathJax support in Notesnook so it'll be out and about soon.
119.
by thecodrr 6y ago
You can use the AuroraStore[1] to download the app seamlessly. Otherwise, you can use any Play Store APK downloader. [1] https://auroraoss.com/download/AuroraStore/
120.
by thecodrr 6y ago
Currently, no. I made a prototype for it a while back but we had to change editors and it was pushed back. But it won't take long to revive so it is definitely in the plans.

More ›