TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Twinkle Notes: Cross-platform encrypted notes app

98 点作者 twknotes超过 5 年前

12 条评论

leppr超过 5 年前
Just wanted to say I love this business model of providing a free open source app, with convenient secure syncing being the paid option.<p>The trade-offs for a user who&#x27;s committed to not paying for the premium features are mainly about convenience and security (having to maintain a fork, and missing out on automatic security updates), which ressembles those they would have to make by pirating a closed-source app.<p>Right now the license is AGPL, is this temporary (since the website calls the app &quot;Source available&quot; vs &quot;Open-Source&quot;)?<p>PS: The submission title should begin with &quot;Show HN:&quot;.
评论 #22251444 未加载
CiPHPerCoder超过 5 年前
&gt; end-to-end encrypted<p><a href="https:&#x2F;&#x2F;github.com&#x2F;twinkle-labs&#x2F;twinkle-notes&#x2F;blob&#x2F;45206f9d61899a934c65db85f49a705730046fad&#x2F;site-lisp&#x2F;lib&#x2F;space-list.l#L53-L66" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;twinkle-labs&#x2F;twinkle-notes&#x2F;blob&#x2F;45206f9d6...</a><p>For AES in CBC mode, IVs have two requirements:<p>1. They must never repeat.<p>2. They must be unpredictable.<p>Generating them from a SHA256 hash of some low-entropy data is not a good practice.<p><a href="https:&#x2F;&#x2F;paragonie.com&#x2F;blog&#x2F;2016&#x2F;05&#x2F;how-generate-secure-random-numbers-in-various-programming-languages#commonlisp-csprng" rel="nofollow">https:&#x2F;&#x2F;paragonie.com&#x2F;blog&#x2F;2016&#x2F;05&#x2F;how-generate-secure-rando...</a><p>Furthermore, not authenticating your ciphertext means padding oracle attacks can be launched against the app.<p><a href="https:&#x2F;&#x2F;robertheaton.com&#x2F;2013&#x2F;07&#x2F;29&#x2F;padding-oracle-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;robertheaton.com&#x2F;2013&#x2F;07&#x2F;29&#x2F;padding-oracle-attack&#x2F;</a>
评论 #22250804 未加载
评论 #22251211 未加载
评论 #22250765 未加载
评论 #22250207 未加载
wtmt超过 5 年前
A few questions and observations:<p>* If I choose to use this notes app on multiple devices, and am careful enough to be the only person using it and complete any note taking on one device at a time (closing the app properly), I should be able to store and sync the sqlite database on any cloud storage service and wouldn&#x27;t need the paid sync option, correct? In other words, the sync option makes multiple clients opening and making updates in the same time period a non-issue?<p>* The costing seems a bit weird when one digs in, because it defaults to counting in one GB increments even though the unit is stated as GBm and compared to things like KWh in the explanation. Even if you store only a few bytes of notes (or a few KBs), the documentation says that you&#x27;d still pay a minimum of 1GBm. So that works out to a $7.176 a year if you don&#x27;t cross 1GB in storage used.<p>* Since this is open source with AGPL, anyone could fork it to support a custom sync mechanism that allows to store the database on cloud storage&#x2F;sync services, but would have to make the source available if they distribute the app to others.
评论 #22250886 未加载
torstenvl超过 5 年前
I&#x27;ve seen a lot of these kinds of apps lately that have their own one-off sync mechanism. Can I ask what were the design considerations that led to that choice, rather than letting users sync a store via their own back end (Dropbox, iCloud, rsync...)?
评论 #22248117 未加载
rhubinak超过 5 年前
And an actually free (automatic sync with no limit on data capacity) alternative: <a href="https:&#x2F;&#x2F;standardnotes.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;standardnotes.org&#x2F;</a>
tobib超过 5 年前
I&#x27;m assuming this is an app with a GUI. I wish there were screenshots showing what it looks like.
urlwolf超过 5 年前
Tried it on mint (LTS). uname -a (base) Linux q 5.3.0-28-generic #30~18.04.1-Ubuntu SMP Fri Jan 17 06:14:09 UTC 2020 x86_64 x86_64 x86_64 GNU&#x2F;Linux<p>I get: &#x2F;opt&#x2F;app.twinkle.notes&#x2F;twinkle (base) dist:&#x2F;opt&#x2F;app.twinkle.notes var:&#x2F;home&#x2F;q&#x2F;.config&#x2F;twinkle dist=&#x2F;opt&#x2F;app.twinkle.notes var=&#x2F;home&#x2F;q&#x2F;.config&#x2F;twinkle <i></i>* Twinkle Lisp 2020 <i></i>*<p>DevTools listening on ws:&#x2F;&#x2F;127.0.0.1:16780&#x2F;devtools&#x2F;browser&#x2F;6d2dd982-a67d-4915-8517-83d4394054a3 error: file &#x27;&#x2F;opt&#x2F;app.twinkle.notes&#x2F;lisp&#x2F;lib&#x2F;sqlite3.l&#x27;: position 13622: line 386: invalid number #1: &#x2F;opt&#x2F;app.twinkle.notes&#x2F;lisp&#x2F;init.l:42: (load &quot;lib&#x2F;sqlite3.l&quot;) [2020-02-05 23:23:09,394950 init#0] finished due to run time error<p>This is the deb file on your website.
评论 #22254278 未加载
vzaliva超过 5 年前
I was in search of a good cross-platform notes app. Like Evernote, but preferably free with the open data format. I concluded that for me, personally, emacs org-mode with notes files stored in the Dropbox folder turns out to be an optimal solution. YMMV.
评论 #22251781 未加载
评论 #22250907 未加载
评论 #22250654 未加载
评论 #22250647 未加载
评论 #22250273 未加载
评论 #22251794 未加载
paulcarroty超过 5 年前
I prefer to write notes directly in VSCodium ans sync them to private git repository. Very useful. <a href="https:&#x2F;&#x2F;github.com&#x2F;patleeman&#x2F;VSNotes.git" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;patleeman&#x2F;VSNotes.git</a>
评论 #22250900 未加载
评论 #22249489 未加载
thebeardisred超过 5 年前
Kudos on the courage to go with the AGPL. It immediately raises my interest quite a bit.
rkagerer超过 5 年前
<i>On windows&#x2F;linux, we have no choice but to use chromium embedded framework.</i><p>But, there are so many choices. Does it really have to be html-based?
评论 #22254334 未加载
sghacker超过 5 年前
really like the cross-platform nature and the E2E encryption. a powerful application masked by a humble appearance. ideal for creative workers. Would be good see this extended to include password protections, audio conferencing, etc.