15 comments

  • ubertaco an hour ago ago

    To quote a comment I saw either here on HN or on Lobsters (can't remember which):

    >A vibe-coded password manager? Sign me up!

  • ptaffs an hour ago ago

    I recently learned Steganography, as correctly named in the article, is not the same as Stenography.

    • noman-land an hour ago ago

      Yes, similar to how an apple and a pineapple are not the same.

  • aleken 2 hours ago ago

    AI webpage?

    • jmuguy 2 hours ago ago

      This seems like the end result of one of those "chatgpt - make me a business" online courses. There's no information about who's behind it, AI generated content everywhere, etc.

    • throwuxiytayq 2 hours ago ago

      It's just called "a webpage" now.

  • sejje 2 hours ago ago

    I like this idea.

    What's your security/cryptography background?

    • jqpabc123 2 hours ago ago

      Steganography is sort of an art.

      But standardized and verified digital encryption routines are available in modern operating systems to make strong cryptography experience available and accessible to the average developer.

      • sejje 23 minutes ago ago

        Why is that a reply to my comment?

  • nik282000 2 hours ago ago

    Sloppy slop.

    A strong password and strong encryption is enough. The presence of 'blindlock' on a device is a clear indication that one of your files is a wallet. Phoning home to do a licence check is EVERY time you use it is obnoxious and defeats the purpose of having local software.

  • mpalmer an hour ago ago

    The question is, have you done something so unique and challenging that your website itself wouldn't serve as a prompt to rebuild the whole thing? Would I spend less than $49 doing so?

  • sdfsgf an hour ago ago

    AI;dr

  • jqpabc123 2 hours ago ago

    I built something similar years ago to use for a password vault --- data hidden locally in plain sight.

    Instead of steganography, I simply appended the encrypted data/payload to the end of a JPG file in my photo library. The file opens and displays normally.

    Part of the photo/carrier file is used as salt for decryption. The part that is used changes randomly based on the last modification time/attribute of the file. The file creation time (displayed in a normal directory list) is maintained/doesn't change with payload modifications.

    Encryption is also tied to disk parameters so a simple file copy makes the data unreadable. The access utility can be used to move the file and re-encrypt the data on a different disk.

    A labeled section of the payload data/vault holds TOTP keys so the access utility can also function as a 2FA authenticator.

  • poppafuze an hour ago ago

    no source code == no security.

  • 4 hours ago ago
    [deleted]