sullof

A big problem with the current frameworks (like Hardhat or Truffle) is that you end up putting your private keys in a `.env` file. Despite the risk that you commit it by mistake, the keys are in cleartext on your computer. That is bad. A few months ago I developed a solution for it

https://github.com/secrez/cryptoenv

CryptoEnv allows people to encrypt their private keys in `.env` files and manage the entire process in full security.

My team at Mobland is using it in production since then and it is working great. I wonder if someone out there is using it, what do you think about it and if there are suggestions for improvements.

Thanks.

I built in 2006 the first Host-proof Hosting Online Password Manager, Passpack (it still exists, but I sold it in 2013). I am fascinated by security and obsessed with details.

Any major web service sends your password to their server in plain text. Only when the service receives the password, it derivates it and saves it in the database. What happens is a smart employee puts a backdoor at the beginning of the flow and steal your password? I worked in many large companies, and security is not what they would pretend it is. So, at the end of November, I decided to try a different authentication approach, using ED25519 Elliptic Curve. It took my one day to build the library, because I reused a library that I wrote for Secrez.

After using it for two months without having problems, I think it is time to talk about it.

If you visit https://signauth.cc you can find a brief introduction to the protocol, and you can see how it works.

The code is open-source at https://github.com/signauth, and there is also an Express-react boilerplate.

Any comment, opinion, suggestion, or critic is very welcomed.

Yesterday I launched Tweedentity, a self-claiming identity system for Ethereum and, for now, Twitter and Reddit. Just yesterday, though, the gas price spiked (for BingoCoin distribution) and setting an identity didn't make sense. In fact, while you can set it with 25¢ in normal cases, yesterday, with the gas at 80 Gwei, you'd have spent $15. This makes me thinking that Ethereum is not really usable by dapps that don't have a strong financial incentive. Since Tweedentity works on both Ropsten and Mainnet, I am thinking that it would be better to just support the testnet, and think of it as the production environment. This generates some ethical thoughts. Despite this, I wonder what other people think about it.

Some months ago I created a minimalistic app for searching within Facebook groups. You can try it at http://gs.sullof.com. Currently, GroupSearcher injects a bit of code in group walls and works very well. But not always. In fact, if you add a note to the group, it's impossible to find it because Facebook doesn't return notes in the group stream. I contacted Facebook in all possible ways but I received no answers. Also Quora didn't helped me. Probably, I should try with StackOverflow.<p>Is there someone that knows how to obtain notes in a group stream using Facebook Query Language?