Skip Navigation

Posts
12
Comments
80
Joined
4 mo. ago

  • Ha! I kept busy indeed. I am a full time software engineer, so I have a full time job on top of that, yeah.

    Aside from the obvious "I work fast", I had a lot of free evening time this year, won't get too into it but my child spends a lot of time in hospital. These were a great escape for me (and coding is my hobby, so I mostly do that rather than playing video games or watching TV you know)

  • Hey! Give jotty.page a try <3 totally free and selfhostable

    There's a small bug on mobile where the status changes z-index is going behind the next element but it's already fixed and will be deployed with the next minor release 💜

    I haven't made an app as i'm not an app developer and I don't want to vibe code it, but there is full pwa support and it's very well maintained, you can try a demo on demo.jotty.page

    I’m looking for a self hosted Kanban board where we as a exteded family can track things which have to be done. Since my parents are getting older and me and my siblings live all in different countries there is more and more to do to help our parents. But it’s difficult to keep track who is doing what and what status things are and we’re forgetting to do things, etc.

  • Hey, I know you got a ton of replies but yeah, been using searXNG with a custom theme made by me and it's basically identical to google (including the feeling lucky part lol)

    Used it for months and it's awesome, haven't missed google at all.

    The amazing thing about it is that with an instance of meilisearch I was able to index all my media libraries/book libraries/game libraries and searching for !home <query> actually sarches within my home lab, which is a huge win for me.

    Hope this helps give you an idea of how powerful this can be <3

  • Thank YOU for such a lovely message <3

    It's tough, I get downvoted to hell on reddit whenever I try and propose anything I built, not sure if they think I'm selling something or they just plain hate it, so I really really appreciate messages like this!

  • As of version 1.14.3 I have also introduced XChaCha20 encryption (used as default)

    This was extremely easy to implement, not gonna lie, bit of research brought me here https://www.npmjs.com/package/libsodium-wrappers-sumo and from there on it was as simple as doing the UI (which is just a bunch of re-usable components, spent way too much time making sure everything is re-usable).

    Now users (and I) can decide which encryption type to use in which situation, win-win i'd say, thank you for pushing me into doing this, it actually makes the whole experience 100x better and you were right in the sense that for a note taking app, a passphrase is just about enough.

  • This is all actually very good feedback and a lot to take in and think about, I have no problems in admitting that something can be done in a better way and go back to the drawing board, I'll admit, I don't have much experience with neither of the methods you suggested, but a quick Google showed me a world of learning, so I have a lot of reading to do ♥️

    P.s. I did read everything that was linked by u/litchralee btw and it was a very good read indeed

    Now, onto the why I went for asymmetric encryption is due to the nature of the notes being files on a system rather than stored in a database, my thinking process being "I can use whatever public key I need for whatever note and decrypt them using the right private key at a later time.

    Regarding the sharing, you can indeed share encrypted notes... my thinking was "you give me a public key, I use it to encrypt the note, share it with you - privately or publicly - and you can use your private key to decrypt it". Which is why there's always an option to encrypt with a different public key than the one stored for yourself, I was imagining it just like encrypted emails work frankly. I may have gone a bit too much for overkill lol

    I'll see to implement additional encryption methods, if anything I'm all for choice and letting people decide what to use. There's also the very selfish answer to your question btw being that... I like PGP and I made jotty mainly for myself hahahaa

    Edit

    Sorry forgot to address the signing feedback, you are correct, I am not letting user sign when encrypting, I made a judgement call in favour of user experience, I will be adding an optional checkbox to sign it with passphrase and custom/stored private key when using pgp and look into implementing alternative encryption methods, if anything this conversation got me all excited to code more lol

    https://github.com/fccview/jotty/issues/265 ♥️

  • Hi! These are all very valid questions!

    The protection boils down to your level of comfort, really, the way I built this is very modular, you can

    • Simply generate a key pair by clicking on a simple button (for non power users)
    • Import your own keys (if you feel comfortable enough to do it)
    • Or simply encrypt with a public key and use your private key when prompted for decryption, this way keys are never stored on the server and all operations happen offline on the browser :)

    When exporting notes, if one is encrypted it'll stay encrypted, of course.

    Lastly, the simple answer is because I know the tech fairly well and understand it enough to comfortably implement it, I wouldn't want to half ass something, PGP is an extremely valid form of encryption anyway, and can be very user friendly when implemented properly (as explained above there's various levels of complexity in place)

    Very valid feedback, makes me wonder if I should give people multiple choices of encryption algorithms in future updates ♥️

  • That is so sweet, I'm glad it's of help to you! I'm about to open another post about the latest updates so keep an eye out for it <3

  • I don’t claim it to be common practice, just saying that it exists. That said, it may be “niche” in the grand scheme of things, but by no means do I think it’s small and insignificant. If anything, such codebases are typically foundational libraries in the giant stack of cards most other software engineers build.

    That's indeed very valid! As I said, I may have been a bit too harsh on the comment rule, definitely one to review properly <3

  • Hey! Yeah you are right, I may remove the >20% comments to line of code resulting in the code being 100% AI driven

    That said, you are obviously referencing a very niche sector, the vast majority of software engineering doesn't require that absurd amount of comments.. I can't stress enough how verbose a ratio of 20% comments to lines of code actually is lol

  • Happy to say as of today encryption is present in Jotty ♥️

  • Hi! I just randomly stumbled across this as I was searching for an old Jotty post I made (jotty developer here)

    This is such a nice feedback to read, thank you! Not sure if you still use Jotty or not but funnily enough I literally went live with pgp encryption today ♥️

  • Aw thank you for the kindness ♥️ There's nothing wrong in verbosity btw, I may have been a bit too harsh on my parameters, I'll tweak it a little :)

  • Regulation is absolutely needed, anyone saying otherwise is just deluded at this point 😅

  • 100% it would! I think the biggest issue around the AI hate is a total misunderstand of how it works, paired with people using it for the dumbest reasons, actually draining important resources when there's absolutely no need for it.

    I think eventually it'll be inevitably regulated as the actual shortage of water we're seeing in the US is unmanageable, and once it does get regulated things will start working way better

    p.s. i'm not talking about local models, I doubt these would ever be regulated and they SHOULDN'T, I'm talking about how many resources a company that allows AI usage should be able to utilise, mostly.

  • Hi, yeah! For sure! Indeed the world is not black and white! But even with weight, take everything with a pinch of salt <3

  • Hey! Thank you for testing it out, I think in my head, even the most verbose of dev wouldn't leave >20% of comments in their codebase. The percentage works on a ratio of (commentsCount / linesOfCode) * 100 so it doesn't just flag "a lot of comments", it mostly checks for "too many comments", that said, the "use common sense" at the top needs to be taken quite seriously, for example if there's a majority of comments but none of the comments feel like written by AI, it's clearly just the developer being verbose :)

    p.s. I find AI is pretty damn good at making docker compose files, it's probably gonna work just fine <3

  • I wanted to keep this simple, but my next step would be something that may be considered similar to a stylometric analysis, just have no idea how i'll tackle it, can't remember last time I went on stackoverflow before working on this project lol

    Something like checking patterns in length of variable names, patterns in maximum line lengths.

    My worry with it is the tool starting to flag good coding standards lol

    How would you apply stylometric analysis in a simple html/js/css project like this? As I don't want to compromise the nature of it

  • wow thank you so much for the extensive testing! Yeah it's far from perfect, but can't stress it enough, the aim of the site is not to tell you how much is made by AI but how likely it is that something was reviewed by a human!

    I'll most DEFINITELY sort out the bar situation, did not think that one through as much lol

    I did put inline styling as a AI choice, most devs wouldn't do that, AI loves doing that haha

    I'll try and fine tune things more and more, this is super helpful stuff!!