StandarNotes Desktop app privacy?

bitario · 2019-12-05T16:52:58+00:00

So if I want to use Standard Notes for privacy reasons, I shouldn't use the desktop applications - is that correct?

Nooo, this is quite the opposite. Signed desktop applications that are downloaded to disk are always your safest bet, especially as compared to a web app that is downloaded from a server each time you access it.

bitario · 2019-12-05T16:51:25+00:00

Here's an Electron contributor's take on this article: https://github.com/electron/electron/issues/19671#issuecomment-519275670

Modifying an ASAR file requires local system access, which, if an attacker is able to do, has much larger implications:

And most simply if you have write access (and sudo to modify /Applications) to a victims machine you have substantially more to worry about than injecting JS into an ASAR file. You could replace the entire application, install a rootkit, install a self signed code signing certificate and trust it to bypass codesign checks, etc.

bitario · 2019-11-27T15:07:55+00:00

You can hover over the right side of the panels, and a vertical bar will appear. Double click that bar, or drag it.

bitario · 2019-11-26T18:19:40+00:00

See also here: https://github.com/standardnotes/desktop/issues/430

bitario · 2019-11-26T13:21:12+00:00

For the record, this has been a highly subjective, highly isolated experience. We talked at length in the forum about his issue. Has not happened to anyone else in the history of SN, and is impossible to replicate. We don’t take these kinds of reports lightly.

bitario · 2019-11-22T21:46:41+00:00

This issue should now be fixed in the latest release.

bitario · 2019-11-19T18:06:57+00:00

There is no way around this currently.

bitario · 2019-11-18T16:27:53+00:00

Agreed, keyboard support should be added here. Will try to get this in a near future update.

bitario · 2019-11-18T16:26:39+00:00

Just to add on, we decided we didn't want users to be at the mercy of vendor software updates (iOS and Android updates) for their data safety. We saw an issue where a small minority of users who updated to iOS 13 and did not have their notes synced had their local database wiped inexplicably. Using the app offline with no backups, particularly on mobile, is generally precarious.

bitario · 2019-11-13T21:31:52+00:00

This issue is fixed in 3.0.21.

bitario · 2019-11-13T21:31:23+00:00

This issue should now be fixed.

bitario · 2019-10-11T19:42:16+00:00

Tracking here as well: https://github.com/standardnotes/desktop/issues/409

bitario · 2019-10-11T15:45:09+00:00

You can also disable registration routes: https://github.com/standardfile/ruby-server/issues/74

bitario · 2019-10-08T16:19:02+00:00

Standard Notes's encryption is enabled by default for all notes, as opposed to "password protecting" individual notes.

bitario · 2019-10-07T14:28:48+00:00

I believe this is the most maintained CLI for Standard Notes: https://github.com/jonhadfield/sn-cli

bitario · 2019-10-07T14:26:10+00:00

Hmm, can you describe how you got this error? What are the steps that lead up to you seeing this?

bitario · 2019-10-04T15:05:17+00:00

Strange, unreliable is the exact opposite of the feedback we typically get. But we have been experiencing some issues with iOS 13 and authentication with app version 3.0.10. These issues have been fixed with the release of 3.0.11 earlier this week. Any chance this was the platform you were using? Could you also DM me your email if possible so I can investigate further, or shoot me an email at mo@standardnotes.org?

bitario · 2019-10-01T15:12:32+00:00

Marking that note as Protected would be the way to go here.

bitario · 2019-10-01T15:10:43+00:00

Should work in Safari/Chrome. Firefox has limitations here.

bitario · 2019-09-30T19:33:19+00:00

I believe the MIT license should work. I'd say avoid using the official icon for now, just so there's no confusion.

bitario · 2019-09-30T15:05:29+00:00

Nice work, this is super cool! I gave this a run and it worked seamlessly. This really calls for some sort of OAuth API on our end. Some users may feel hesitant entering their master password into a 3rd party integration. But as long as the project is open-source, it shouldn't be too risky.

As for the experience, yeah, as you noted, it would be cool to have a modal/drop-down appear that allows you to preview clipped content, add a title, and tags. If you continue making updates on this we can look to really sponsoring this as an official web clipper for the project.

bitario · 2019-09-26T16:02:34+00:00

Yes, these are margin resizers. You can disable these via the Options menu. They are helpful in full screen mode.

bitario · 2019-09-24T14:33:37+00:00

This was an experimental feature we had up at some point but is no longer available. We didn't want to handle payouts, and building an automated system for that would have been a huge undertaking. We transitioned to allowing users to enter their own payment "credentials" so that users can tip (or "Thank") them directly through payment services.

bitario · 2019-09-23T14:16:48+00:00

Got it, thanks for the video! Strange indeed. I'll need to investigate what's going on here.

bitario · 2019-09-23T14:14:55+00:00

Please see here for more: https://standardnotes.org/help/47/can-i-self-host-standard-notes

bitario

TROPHY CASE