Hacker News new | past | comments | ask | show | jobs | submit | ksmithbaylor's comments login

From my understanding, Actual does not maintain any servers that hold user data. I believe this is referencing the fact that currently, data is stored unencrypted on the device itself, but that in the future there are plans to encrypt it at rest on your devices. More details here: https://actualbudget.com/syncing-devices/


From the page you linked it’s clear to me:

> To allow sharing data across devices, we offer a service that enables syncing. View all available plans

> This service only tracks recent transaction history and never has full access to your data. Additionally, in the future it will be stored encrypted in a way that we can't even read it.

It’s clearly talking about the recent transactions stored on their servers.


Yes, you are right. First of all, we're not talking about things like banking passwords or even account numbers, only transactions that you've been charged. But most importantly: this is completely opt-in. If you don't trust me yet, you shouldn't use syncing until I encrypt everything end-to-end.

If you only use a single local app, all of your data is entirely local to your device.

All other apps that host your data in the cloud have access to it, whether it's encrypted internally or not. What encryption buys you is the case if a hacker happens to get some of your data, they might not be able to decrypt it. But considering that the backend of the app itself must be able to read the data, the backend must be able to decrypt it, so a hacker could probably end up decrypting the data anyway.

End-to-end encryption in Actual will be better than all other cloud apps: I, even as someone with full access to the server, will not be able to read your messages. Only your device can.

It sounds like what you're really worried about is storing banking passwords unencrypted. We don't do anything like that at all.


Just a quick follow-up: I'm already working on migrating the data to DynamoDB which will automatically encrypt the data (https://docs.aws.amazon.com/amazondynamodb/latest/developerg...). This will go live soon. But the website will stay the same: I won't say I offer encryption until I have true end-to-end encryption.


> All other apps that host your data in the cloud have access to it, whether it's encrypted internally or not.

> End-to-end encryption in Actual will be better than all other cloud apps: I, even as someone with full access to the server, will not be able to read your messages. Only your device can.

Claiming to be better than every single other similar thing is probably as big a red flag as the lack of encryption.


This is a basic architectural difference. I'm comparing apps that store your data locally to apps that store your data in the cloud. It's a well-understood difference that the former (with end-to-end encrypted syncing) absolutely provides better privacy than apps that store data in the cloud that the company can read.


I saw similar results on my MBP, with Chrome scoring ~90 and Firefox scoring ~60. Not enough to outweigh my reasons for using Firefox, but interesting.


I have been looking at this recently with great interest!

A problem I have with all other split layout keyboards is that they place the B key on the left side of the keyboard. However, I type the letter B with my right index finger, not my left. I know this is "incorrect", but it is firmly ingrained in my muscle memory and while I've tried changing it in the past, I've had little success.

I got very excited when I saw the "key cluster" module, since if it were available for the right side, it would allow me to just place my own B key next to N where I want it.

Is this planned? I would buy this in a heartbeat if so.


I used to have this habit as well. I ended up borrowing a ErgoDox Ez from a friend when my normal keyboard broke a few years ago, and bit the bullet and unlearned this habit and a bunch of others, and it was, to me, worth it.

I also always typed shift with my left pinkie, no matter what the next character was, even A. I also would ALWAYS look when doing numeric keys, and sometimes other combinations. I ended up with blank keycaps, and broke that habit.

You can do it!


I was confused by this language too. I think it means that in the context of PayPal being a payment method, you agree not to mischaracterize it in any way.


ca( would work for this as well.


I think what mangeletti meant was that you can't force anyone not to use strong encryption if it exists.


Wow! This is really impressive! I can't wait until someone ports this to vim. I might even take a stab at it myself. Great work!


Just switched and it might be a placebo effect, but everything from scrolling to switching files seems a bit...snappier. Is this due to the async improvements? Do plugins have to opt-in to be async or does the core re-implement previously synchronous functionality to be asynchronous?


Plugins must opt-in to asynchronous job-control.

There have been drastic changes to the event loop and redraw logic, which makes some operations feel "different" (some slower, some faster). We have not intentionally made any general performance improvements, because the performance bottlenecks of Vim/Neovim hinge on the regex engine (which is primarily maintained by Bram) and vimscript interpretation--nothing else.

Job control is implemented in Neovim for co-process (not in-process) coordination. This means that potentially long-running vimscript calculations can be offloaded to a child nvim process. But Neovim 0.1 does not have a faster vimscript engine per se.


Any bets on how long it will take Twitch to enter "rm -rf /" once the filesystem is set up?


That's already half of the chat. That and attempting to launch a reverse shell and give an unknown party terminal access outside of the channel.


I'm a Software Engineer at my company. I used to work on a large Rails project, but now I am on a team where we are building out a smaller product with a React/Flux frontend. I work mainly on frontend stuff right now.

I have a small side project for a family member. He's a commercial beekeeper and needed a way to track information about his hives, so I am making him a mobile app (built with Ionic) that lets him put QR codes on the hives and track everything he needs about them.

My wife and I just had our first baby, and I'm starting Georgia Tech's OMSCS program in the Spring, so I don't have much spare time right now. But off and on I have been learning Clojure/ClojureScript, Haskell, and more about React and its ecosystem. I also am teaching an introductory JavaScript class for a local tech "bootcamp" company, and enjoying it a lot.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: