I tried several open source solutions but they just needed to much work or upgrading broke stuff. Nog good for the WAF.
87 karma · joined February 7, 2016
I tried several open source solutions but they just needed to much work or upgrading broke stuff. Nog good for the WAF.
- Who has access to the data
- Can a contact access the data
- This is very much a one/two man shop, what happens when you are incapacitated?
- Where is the profit? Or why is it free
Just to give some insight, I have basically three data stores. One is the official legacy, then a system to sent out messages. Which contain instructions (including decryption fast needed financial info) and then a datastore which is downloadable of S3.
This solution would fall in the messages part and fits perfectly. The information in those messages is not something that I would want to be disclosed or accidently sent. The contacts are all not tech savvy so I can't use PGP/GPG or something, they simply wouldn't understand, I can make them remember a password but that's it. One of the best solutions is most likely a system like tresorit send, but then for a message.
I think your solution works for a subset of use cases, but the more digital data you want to give access to the less you trust these solutions.
My main points of worry in this kind of services are data security and reliability.
How are these addressed here? As it’s a free service there is no contractual obligation to fulfill. There is no mention what happens with the data afterwards. There is more to consider but you get the drift.
Like the idea but before I would use it would need a lot more information.
- Dropbox is a registered company, savefileme is an unknown
- Dropbox has a ToS, savefileme ?
- Dropbox discloses to a certain degree who owns it and works there, savefileme is an e-mail address
- Dropbox has a published architecture of both his frontend and backend. Savefileme has a partial opensource client (don't forget that include from savefile.me) and no details published of it's backbone
I could go on and I could switch dropbox for OneDrive or Tresorit. You may have a fantastic product, but basically it doesn't look trust worthy or even better then <big name storage solution>
You have no payment option.
You have no physical address.
No idea on what continent my data ends up though, or what guarantee there is that the data persists.
Why in the name of <random deity> would I trust this to run let alone trust you with my data?
Everything is backup up for 1 dollar a month, typo's on the website, no name what so ever except for the savefileme authors. No mention what backend this ends up.
Looking at the source code I can't find the encryption, it just basically uploads or downloads a file.
I tend to follow the following guidelines:
1. punishments generally don't work as a long term solution, only apply when temper is lost :-)
2. Give lots of freedom so they can make errors. Only apply a rule to a situation when you can make a logical argument about it and make that rule situation specific instead of general.
3. Spent time, talk to them, play games with them, make fun with them know what's going on in their live.
It's not perfect but so far they are decent individuals and i have lots of fun
They used to have a free tier in that you got 25.000 credits (one mail one credit) for the trial, not sure if it's still there. Otherwise the cheap plan is 10 dollar.
I never had e-mail problems using their servers.
Diary:
- Python script that fetches the diary template and fills it with information like location
- With x-callback-url it is sent to drafts
- in drafts I can edit the rest and have an action to upload it to working copy
In drafts the action Call:
With x-callback-url open pythonista and parse the text for a telephone number. Then that's sent to the call programDrafts Meeting notes: Launch python script. Scripts get the template from working copy and fills it with date and through a popup a Title. Want to change that so you can select the meeting from the calendar and have it filled in. Then sends it back to drafts.
I have a vacation list drafts pulls from working copy.
In drafts I have shortcuts to add that draft to due, Things or mail/whatsapp it.
The drafts forums and resource directory are a good starting point. Once you add Pythonsita all bets are off it becomes the most versatile app on the phone. Working copy is nice to have so you don't have to deal with templates in java script code or with tags in draft itself. Apparantly a mac app is coming, currently a pc user, this would almost be enough to just get a mac :-)
If the toolchain doesn't bother you use cryptomator or something like that and just pick some storage where ever.
If all that abuse is in Russian you might just try to deny service if Russian language is used or add an extra hurdle like browser fingerprinting and rejecting the combo language + fingerprint within a timeframe.
Depending on your user demographic you could also use a reputation system for ip's. Trusted no delays, untrusted delayed for 10 minutes and if something similar is found within that timeframe (use regex) drop the message.
Some a longer time then others :-) I'm currently back with lastpass.
There are two main things for me security and usability. Lastpass seems secure, don't know for sure as it's not open source and who knows how it's implemented. The usability is for me excellent, it works flawlessly on my deskop, tablet and mobile.
I would argue that keepass with say dropbox sync is more secure, but the usability is worse. It's a tradeoff at the current it seems
Keep up the good work!
edit: Mehh should be in the main thread, sorry
This is not the way to earn trust with spotify inlog credentials through your site. Or even trust your site not trying to get malware on a computer.
Have fun with the choice, wouldn't know which one I would choose.
> well... yeah, but isn't that always the motive, what's the difference now?
See the reply of djokkataja, it covers it pretty well.
> And for (2) "sometimes, mistakes are made and people die who shouldn't have" - is that what you also think when it comes to, say, the death penalty?
There is a world of difference. Now let me say that we in the Netherlands have no death penalty, but let's take the model in America vs the process of euthanasie in the netherlands.
Deathpenalty -> Subject is not willing, evaluation is done by non trained experts (jury) on issues of law (ie guilty)
Euthanasie -> Subject is willing, evaluation is done by trained experts (at least 2 GP's) on medical issues.
In the deathpenalty scenario the worst you can do is kill someone innocent. In the euthanasie scenario the worst you can do is kill someone with a huge medical condition that for all appearances it seems to be terminal with an unbearable standard of living (ie pain).
Comparing the two is cheap rhetoric as far as I'm concerned.
1. Yeah it's suicide. When you live in constant pain, lie in bed, get meds that make you hallunicate and have no realistic hope for improvement that seems like a reasonable option.
2. Suicide usually has some form of emotional component in it that is shared in the environment. That's why we call it euthanasia, it's not really comparable other then the very general "choose to end own life"
3. Sure mistakes will be made. One such controversy in the Netherlands was euthanasia on baby's with an open back (not sure about the translation). If they had a lot of pain or not. In general there are some pretty rigorous procedures in place to ensure we learn from mistakes, and making sure it are honest mistakes.
So point of this reply, it's a two way street. If you have seen the suffering in the end stages of life euthanasia is not a bad thing. Are there drawbacks sure, we're talking about ending a life, no matter what you do there's a stigma involved and because actual human beings are involved it will not always go the way it should. At the end of the day, the ideal of someone being able to tell the world enough is enough and empowering them to execute that decision, on certain criteria, is a better world then letting someone die in their own feces hallucinating that worms are digging into their feet due to meds and not being able to move due to advanced parkinson. And yes that's the way my dad was in the end before the docter decided to cooperate with his euthanasia.