A serverless, clean, and persistent note dump that works fully offline

github.com

13 pointsamirGi4 comments

Just tested the (example?) website mymercury.surge.sh . I do not have any experience in web development, or in browser development, so please be gentle. What I intentend to test was, if the browser requests any permission to run these service workers. As it appears, it does not.

Does this open up my browsers to execute code in the background, even after closing the tab? Does it imply an additional threat to my personal privacy?

Nice work presenting this feature, though!

Service Workers do request permissions to run.

By design a SW can linger around if it has work to do. E.g. send a request when an Internet connection returns. But it needs to be queued when the tab is opened.

Off the top of my head I don't have any privacy concerns about SWs.

Firefox Nightly, on Android 10, did not request my permission.

It did persist the state after closing the tab. Admittedly, I did not check the site for cookies.

Sorry, typo. I meant do not.

Reply on news.ycombinator.com