Comment by uptownhr | Hacker News Reader

Comment by uptownhr | Hacker News Reader

Hi Hackernews,

I created Spacedtime because I'm known to have a horrible memory. Maybe people are kidding but I wanted to change that. There are flashcard apps out there but I wanted to create one that is focused on creating cards for my personal memories. My personal goal is to store and recall all that is dear to me.

Given the personal nature, I do plan on spending a lot of my time on protecting the user's information. Today, Spacedtime does not have a server and stores all information locally. The command-line app stores information in a local JSON file and the web app stores into Local Storage. However, I'm not sure what is the best user-friendly way to go about the encryption layer and how it should be applied.

I've posted to Product Hunt, [Lobste.rs](http://lobste.rs) and Indiehackers so far. I've been saving my self from posting to HN till now. It is still an MVP but at least it is not the first version :). I've been pretty aggressive in publishing my work.

I'm looking forward to everyone's feedback!

Best,

-James

How about 3rd party storage through the users own dropbox, gdrive, 1drive. Then it's still sort of self hosted

Also easy to use same data across devices.

Not sure on the syncing strategy/performance

Draw.io does storage federation to OneDrive and others pretty well.

i'll have to look into the drive api. If easy enough, this sounds like a plan.

Here the answer coming from an idiot (me):

I've lost far more data to password or key loss or bugs in an encryption software than I've had someone try to our succeed to access/steal/...

So encryption for something that is on your local machine from my perspective wouldn't need to be a priority.

Great point. I've been battling this in my head but definitely not an immediate goal to encrypt. However, I personally want to make sure I do not have access to your data. As I start to work on providing functionality around syncing across devices I'll be keeping this in mind.

It's cool app, but I'll definitely rewrite it, using as inspiration.

Why rewrite you ask?

npm install gives: added 509 packages from 307 contributors and audited 258096 packages in 11.65s

509 packages WTF?!????????????? Javascript ecosystem is a mess.

I did not believe it, but looks like it's true: `npm ls |grep -v deduped |wc`

    512    3359   24956

wait for more: `du -sh node_modules`

56M !?!?!?!?

and final check: `find node_modules -type f|wc `

   6745    6745  303596

Verdict: NO, THANK YOU BUT NO.

p.s. among them 6 warnings about using sth deprecated. You can guess how many of 500 of them just dont give a shi^H^H^Hwarning.

npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated

npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated npm notice created a lockfile as package-lock.json. You should commit this file.

npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@^2.1.2 (node_modules/jest-haste-map/node_modules/fsevents):

npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.1.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

Reply on news.ycombinator.com