16 pointsby BlindLock16 hours ago11 comments
  • ubertaco14 hours ago
    To quote a comment I saw either here on HN or on Lobsters (can't remember which):

    >A vibe-coded password manager? Sign me up!

  • aleken14 hours ago
    AI webpage?
    • jmuguy14 hours ago
      This seems like the end result of one of those "chatgpt - make me a business" online courses. There's no information about who's behind it, AI generated content everywhere, etc.
    • throwuxiytayq14 hours ago
      It's just called "a webpage" now.
  • ptaffs14 hours ago
    I recently learned Steganography, as correctly named in the article, is not the same as Stenography.
    • nom10 hours ago
      i bet they stuff the data into a PNG chunk next to the image data, so they aren't even doing steganography
    • noman-land14 hours ago
      Yes, similar to how an apple and a pineapple are not the same.
  • nik28200014 hours ago
    Sloppy slop.

    A strong password and strong encryption is enough. The presence of 'blindlock' on a device is a clear indication that one of your files is a wallet. Phoning home to do a licence check is EVERY time you use it is obnoxious and defeats the purpose of having local software.

  • pshirshov10 hours ago
    > password vault

    I see "pricing" but can't spot "source code", perhaps you forgot to add a link?

  • sejje14 hours ago
    I like this idea.

    What's your security/cryptography background?

    • jqpabc12314 hours ago
      Steganography is sort of an art.

      But standardized and verified digital encryption routines are available in modern operating systems to make strong cryptography experience available and accessible to the average developer.

      • pshirshov10 hours ago
        No. Sort of maths.

        One is not supposed to trust "art" with their passwords.

        • jqpabc1239 hours ago
          "Art" as in there are different implementations but none (that I am aware of) that are standardized, proven secure and readily available as a local service. Therefore, the skill of the implementor (aka "art") is likely to factor prominently into the resultant security.
      • sejje13 hours ago
        Why is that a reply to my comment?
        • jqpabc12312 hours ago
          You asked about cryptography experience.

          I was atempting to point out that you don't necessarily need crypto experience to implement strong cryptography. The part that really demands experience has already been done and is readily available.

          • sejje11 hours ago
            Well, I'll assume you know what you're talking about.

            What level of trust do you grant to this project?

            • jqpabc12311 hours ago
              As I said, strong crypto is readily available but the question is, did he make use of it?

              Impossible to say without seeing the implementation/source code.

  • mpalmer14 hours ago
    The question is, have you done something so unique and challenging that your website itself wouldn't serve as a prompt to rebuild the whole thing? Would I spend less than $49 doing so?
  • jqpabc12314 hours ago
    I built something similar years ago to use for a password vault --- data hidden locally in plain sight.

    Instead of steganography, I simply appended the encrypted data/payload to the end of a JPG file in my photo library. The file opens and displays normally.

    Part of the photo/carrier file is used as salt for decryption. The part that is used changes randomly based on the last modification time/attribute of the file. The file creation time (displayed in a normal directory list) is maintained/doesn't change with payload modifications.

    Encryption is also tied to disk parameters so a simple file copy makes the data unreadable. The access utility can be used to move the file and re-encrypt the data on a different disk.

    A labeled section of the payload data/vault holds TOTP keys so the access utility can also function as a 2FA authenticator.

  • poppafuze14 hours ago
    no source code == no security.
    • normalaccess11 hours ago
      I think I'll ask Codex to make an open source version
  • 16 hours ago
    undefined
  • sdfsgf14 hours ago
    [flagged]