twiss

31 ms·

331.
by twiss 9y ago
> For example, that first visit which installs the service worker can already deliver bad code. Yes, but that is also the case when you install a desktop app. That's why Airborn OS is open source, so that you can inspect the code.
332.
by twiss 9y ago
Thanks for the report. Unlike the rest of the website, that url is not behind a CDN (although the document itself is), mainly because it's on a different domain (for security reasons). For me it's relatively fast, but I'm clo
333.
by twiss 9y ago
Sure! info at <the domain name of this submission>.
334.
by twiss 9y ago
Here's a description of what we've done to solve that problem: https://www.airbornos.com/docs/security
335.
by twiss 9y ago
> especially given the virtually daily reports of hacks, data breaches This is exactly the problem we're trying to solve, though: https://www.airbornos.com/docs/security > Entrusting your data and your capac
336.
by twiss 9y ago
> Perhaps, it solves the trust issue of JavaScript. Yes, that is the intention :) > For the fun of it, maybe throw in some blocktrain tech or something to enhance that trust model of yours. Instead of using GitHub as a public log, it&
337.
by twiss 9y ago
No, the HTML file itself goes through, and is checked by, the Service Worker as well. https://developer.mozilla.org/en-US/docs/Web/API/Service_Wor... : > A service worker is (...) intercepting and modi
338.
by twiss 9y ago
> If an attacker has access to your server, why should I believe that they wouldn't be able to update your github repository? I don't have my GitHub password/keys on the server. Why would I have them there? > I have to
339.
by twiss 9y ago
Sandboxed iframes are a modern and useful feature to isolate and secure different parts of a web app: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if... But thanks for the feedback. The
340.
by twiss 9y ago
Yes, I'm planning to make a library for it. It won't be quite install-and-forget, because the developer has to 1) push to GitHub or another public log before every deploy and 2) somehow let the Service Worker know where to find th
341.
by twiss 9y ago
When it leaves our server, the data is encrypted and not readable. To get your encryption key, they would need to execute code in your browser, and we describe how we protect against that at https://www.airbornos.com/docs&#x
342.
by twiss 9y ago
What extent of docx support is important, do you feel? Is just importing docx to html (the native format) sufficient, or should they stay as docx while editing? Should it be possible to export from html to docx?
343.
by twiss 9y ago
Good idea, thanks!
344.
by twiss 9y ago
Yes, it can, but whenever the Service Worker's code changes, the user is warned. There's an "updatefound" event [1] which both the web page and the old Service Worker get. I wrote a blog post with more background info at
345.
by twiss 9y ago
When you create an account, it downloads a file which contains - Your username - Your password, encrypted with a random key. That random key (but not your encrypted password) is sent to the server. When you request a password recovery, we s
346.
by twiss 9y ago
Yeah, although I worry that the average user might not know what self-hosting is, or why it is secure.
347.
by twiss 9y ago
I see. What are you missing in Collabora? There's also OnlyOffice for Nextcloud, which is quite a feature-complete editor, I think: https://api.onlyoffice.com/editors/owncloud
348.
by twiss 9y ago
Could you try again? It might be just the server erroring out under load. Also, only Chrome, Firefox and Safari are supported.
349.
by twiss 9y ago
Yeah, it does that in Firefox, sorry about that. It works in Chrome.
350.
by twiss 9y ago
Weird. What browser and operating system are you using, and which locale/keyboard layout? (Not sure which of those matter, but it works fine for me.)
351.
by twiss 9y ago
Thanks! Google Docs can read your content on the server, as proven by https://motherboard.vice.com/en_us/article/zmz3yw/why-is-my-... .
352.
by twiss 9y ago
The website is not, but when you open the app, the background should cover your whole screen. I'll try to fix the website.
353.
by twiss 9y ago
Not really, because of https://news.ycombinator.com/edit?id=15596604 . Why would you like to self-host? (Not implying that there are no valid reasons, just curious which reasons are important to you.)
354.
by twiss 9y ago
There's error detection and recovery for writing files, and creating accounts, but not opening the demo, currently.
355.
by twiss 9y ago
You're probably right about that. But, I believe that reading and blocking private, non-shared, documents in a user's account is not the right approach to abuse. If it ever becomes necessary, Airborn OS could inspect publicly sha
356.
by twiss 9y ago
There's no permanent paragraph ownership in Airborn OS either, but it's locked for about 10 seconds when you edit a paragraph. Or are you saying that the two editors would be editing the same paragraph at the same time?
357.
by twiss 9y ago
Fair enough. There's a fast-forward button for the impatient among us (including myself), but I agree that it's non-obvious that you would need that to read the main copy.
358.
by twiss 9y ago
Thanks for the suggestions. The reason I mentioned getting hacked in the copy, is because I think that for the average customer, it's now starting to seem like every web service is getting hacked. I wanted to highlight that we're
359.
by twiss 9y ago
Here's a link: https://www.airbornos.com/images/documents-encrypted.png
360.
by twiss 9y ago
The line that's supposed to tell you what it is is: "Create and edit files online, securely." Is that missing for you? (I admit it's smaller and less noticeable than the lines you quoted. I'll try making it more

More ›