HN user

yasuocidal

11 karma
Posts3
Comments23
View on HN
My New Computer 3 years ago

maybe there is a "size" as in how much storage he/she has. Or maybe bandwidth issues. I do not own a large NAS nor i have fast internet for uploads and stuff, so 3,6G is a god sent.

I put a lot of though in this some time ago. So i made a python script, running on my server, that if something doesnt happen for at least 2 weeks automatic mails will go out to friends and family, each with some access to stuff they might be interested about and a final message.

I know this is a bit paranoic but its the best i can do. Also most of my passwords are on a kpdb file so with the master credentials someone could get all the access to everything (that would go to my VERY close family for example)

i have a couple:

my way of tokenizing: https://github.com/chrsBlank/Fernet_Tokenization i posted here before, i am making a social app and i dont like JWT tokenization so i made my own.

fbchatbot: https://github.com/chrsBlank/FbChatBot no longer working due to facebook api changes, i wrote that at 16yo because i could not focus on studying since i was talking to people on FB back then, this sent automatic messages and if the message contained "important" i would get a desktop notification

small toolset for various things: https://github.com/chrsBlank/autosave started as an autosaver (ctrl-S) and has more stuff implemented, i actively add more things that my coworkers ask.

Cayde,Newlight,SmartS: all projects that "started" either with friends or alone and never came to actually make them. Cayde is my personal AI that runs on a personal server (no data leaves the LAN). NewLight was gonna be an encrypted P2P messager with interesting features. SmartS would have been a "cart" for websites that could predict if the price would go down soon telling you to hold. All public on my GH: https://github.com/chrsBlank

I have a server, a small project of mine, and i installed nextcloud. Now my whole family and close friends use it to backup our photos. The official app for it is exceptional for syncing (you can set it to ONLY do the sync when charging or other parameters). There are other benefits of nextcloud (contact backup/Calendar/Messaging etc) and you can set it up on a raspberrypi with an external hard drive, throw it near your router (preferably both on a UPS for an "always on" solution) and forget about it. All the management can be done though the web interface (updates, new apps which you could find something helpful to you, etc ) and the installation is pretty easy.

If you decide to go with it, i recommend that you get a domain and set it up as a DDNS through cloudflare.

I am making a social app and JWT has some security concerns quote from https://www.akamai.com/blog/security-research/owasp-authenti...: Six threats to JWTs

    1)Allowing the server to use a token without validation.
    2)Using the same private key for different applications.
    3)Using a weak signing algorithm.
    4)Choosing a short and/or low-entropy private key.
    5)Keeping sensitive data in a JWT's payload.
    6)Confusing the keys.
I encourage the storing of the token so you can cross check the information with a "local authentic copy". That way issues 1 and 6 of JWT are fixed and issue 5 since you dont actually store "information" in the key EVEN if someone steals your key he can not steal sensitive data from it. Now i put information in quotes because you do put something, ike the username to make the key unique to to user, but username was already "public information" so no "user personal data" leakage in case of a disaster.

Thanks for your feedback : )

To address issues 2,3 and 4 2) You may use the "same key" but you have the option to change it whenever you want 3/4) Fernet is a VERY strong encryption algorythm

I see a lot of " i didnt get notified about the change" in the reviews, but personally i got 3 of them. 1 was just out of the blue and the other 2 were when i installed the extension ( i formated my PCs ). I know that the move is bad dont get me wrong, but a notification was present, most people just close the "New Tab" that open from an extension that's maybe how they missed it. Anyway, there is a community one "i still dont care about cookies" and i will be moving to that one.

I started reading "Altered Carbon" after watching the netflix adaptation ( which was good ). Turns out the book is far better, more immersive and lets you wander off with subtle gaps that your imagination fills in and makes it an "interactive" experience in my opinion.

For anyone interested -> https://www.amazon.com/Altered-Carbon-Richard-K-Morgan/dp/07... (there is also the takeshi kovacs novel which i found that it isnt different )

Having multiple "opinions" or "views" on a certain thing,can make you "see the average" and get a very accurate representation of the situation. Yes i agree that most of the times there are people messing around and can "hurt" that average, but on the other side it is another perspective on the situation.

Having a constant flow of these data can make a pretty accurate "end-product" document.