wrhn

Recent submissions

Comment · 5 days ago
That would be a serious misunderstanding of why it's needed.

https://csrc.nist.gov/pubs/ir/8547/ipd

Comment · 5 days ago
I'm a big Dart (I'm one of the founders of https://onepub.dev - a dart private repository).

All my UI is dart/flutter as well as any scripting (I'm the author of the dart package dcli https://pub.dev/packages/dcli).

I'm converting all of my back end stuff to Rust (using AI) for the performance and reduced memory.

We run a monitoring agent on our servers, porting from dart to rust reduced memory from around 450MB to about 30MB at about 50% of the CPU.

Comment · 5 days ago
Compared with veracrypt:

It's not a filesystem, its an archive designed to be shared.

It has compression built in .

A lockbox is signed not just encrypted- so you can verify identity and data integrity,

You can store variables and forms and can expand them in a script.

Supports multiple identities and and is designed to be shared by 'granting' other access using their public key.

It's designed to be portable rather than for local file access.

A browser can upload and open a lockbox via our wasm support.

Comment · 5 days ago
It wraps the content keys with a standard pub/priv algo then wraps that in a post quantum algo.

post quantum being an alog which we believe to be resilient in the face of emerging quantum computers.

The wrapping is done because the post quantum algos are new and might be flawed, so if that is broken (and we aren't post quantum) then the standard algo will still protect the content.

NIST recommend the use of these hybrid keys:

https://csrc.nist.gov/pubs/ir/8547/ipd

Comment · 7 days ago
sorry my first post to hackernews in a long time so I managed to post it twice.
Comment · 7 days ago
reVault is a new, secure-by-default archive format called a Lockbox, designed to be simple to use.

I've been working on reVault for about 2 years. It was originally written in Dart, but with the improvements in AI, I decided to port it to Rust using AI.

It's now in beta, so I'm looking for feedback, particularly around the different language bindings.

A lockbox is encrypted, signed and compressed by default. Each can be disabled selectively.

  - Hybrid post-quantum or passphrase encryption, including metadata.
  - Zstd compression.
  - Pure Rust libraries wherever possible.
I intend to phase out remaining C code as alternatives become available. The project has been scanned using OpenAI's Daybreak cyber security tools.

The manual is a work in progress: https://docs.revault.onepub.dev/

reVault supports Linux, macOS and Windows, x64 and arm64, plus Wasm. The core is Rust, with bindings for C/C++, Java, Dart, Python, Ruby, JS/TypeScript, Go, C#, Kotlin, Lua, PHP and Swift.

Within a lockbox you can store:

  - Files, directories, permissions and symlinks.
  - Variables.
  - Forms.
Variables, forms and the lockbox itself can have descriptions.

reVault uses a portable vault (just another lockbox with structured content) to hold your keys, contacts' keys, lockbox aliases and form definitions.

It ties into your platform's secure store, so logging into your desktop unlocks your vault. You don't have to enter a passphrase every time you access a lockbox. You can disable this.

There are lots of shortcuts. Creating a lockbox stores an alias in your vault, based on its filename or a name you choose:

  lbx create /some/path/mybox.lbox
  lbx mybox open --duration 1h
  lbx mybox var set KEY VALUE
Set a default lockbox and you can leave its name out:

  lbx session default mybox
  lbx var get KEY
You can mirror a directory tree into a lockbox and update it when the directory changes:

  lbx store.lbox mirrors project create --from ./project --to /projects/project
  lbx store.lbox mirrors update
The API lets you read, write and seek within files without extracting them to the filesystem. Each lockbox has a table of contents, so extracting a single file from a multi-gigabyte lockbox is fast.

Recovery

Updates are transactional, with automatic rollback for failed updates. The format is designed for recovery: content is stored in pages, allowing unaffected content to be recovered if part of a lockbox is corrupted.

Sharing

An encrypted lockbox is more useful if you can share it.

reVault has an open-source keyserver for exchanging public keys, with validation through a second trusted channel. It's still experimental.

OnePub has donated a server to run a single keyserver. If you're interested in donating resources, I'd like to bring up a second redundant server. It's pure Rust, uses under 100 MB RSS and supports rate limits.

To publish your default profile's public key:

  lbx vault profiles email [email protected]
  lbx vault profiles publish
Give the publish code to your contact. They can import your key:

  lbx vault contacts receive <publish-code> <contact-name>
Display your profile's fingerprint and exchange it through a second trusted channel:

  lbx vault profiles fingerprint
Repeat the process in the opposite direction to get their key. Once you have it, grant them access to your default lockbox:

  lbx access grant alice
You can then email the encrypted lockbox to Alice.

To install the CLI and get started:

  cargo install revault_cli
  lbx vault init
  lbx completion install
Completion installation detects your shell. To diagnose issues:

  lbx doctor
The language bindings are published to their respective package repositories.

I'm looking for constructive criticism of the project on its own merits, particularly the APIs and language bindings. I'm not interested in a debate about using AI.

Comment · 3 years ago
Voting for the OnePub Dart Community Choice awards closes on the 12th of August so don't miss out on the chance to vote for your favorite Dart package and put them in the running for a $500 prize.

Just by voting and leaving a review you go into the draw for a $100 prize.

Vote today.

Comment · 3 years ago
If you are a Dart/Flutter dev then come and vote in the Dart community choice awards.

You can win $100 for voting and leaving a review. The winner, with the best FOSS Dart package, wins $500.

Comment · 3 years ago
OnePub is running a competition to find the most loved open-source Dart/Flutter package.To the winner goes $500.

If you are an open-source maintainer you are welcome to nominate your own package.At the same time, OnePub is announcing a Dart Package review/rating system along with per Package discussion threads. OnePub holds a fully synced copy of pub.dev.

https://onepub.dev/packages/dcli/discussions/show

To bootstrap the review system, if you vote in the awards and leave a review, you will go into the draw to win a $100 prize.

It's early days, but we can already see the value that the review system is adding to the ecosystem. Just take a look at the 'get' package, 99% popularity, 12,000 likes but:

https://onepub.dev/packages/get/reviews/show

If the competition goes well, we are hoping to run it at least annually and offer larger prizes.

So come and vote to show your support for your favorite Dart/Flutter package:

https://onepub.dev/show/068d26e9-8b00-4c40-a0e8-3ab4a2ffbceb

Comment · 3 years ago
In the first of a multi-part series we take a look at FIDO the new standard for passwordless authentication and how we integrate it into Flutter.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton