If you're open to sharing what didn't work for you in remembering people through re-deploy I'd love to hear it, I spent quite a few brain-cycles to think about making that as seamless as possible for the user (semver major version bump shouldn't break this, for example).
I'm assuming the problem is the salt being changed if it's not pinned by the .staticrypt.json file (auto-created but needs to be commited) or the `-s <salt>` CLI option.
(author here) Yeah, or if it's on http someone could MITM and change the script, or if they are malicious extension on the browser the content can be stolen after decryption.
That felt implicitly obvious to me, but I think you're right and it wouldn't hurt to put those assumptions in the FAQ. Thanks for the feedback!
(If you, or someone else, see other attack vectors, feel free to comment with those)
a supply-chain attack where malicious JS is delivered to the user (even from your own server, as the author of the software, maybe you got hacked yourself for example) is another way
Well done on getting your project linked here again on HN.
> I was wondering why I was seeing plenty of people from github on my meditation website so I checked HN, hi!
I'm curious: how did you notice this? You happened to be viewing your website stats or your analytics tool was setup to notify you when you receive a surge of traffic :)?
I recently launched another project with an interface to search and filter blog posts from a prolific blogger I really like, using AI tech. He featured the website on his blog last week which draw a pretty big spike in traffic - well, big for me, like a few thousands people - so I've been refreshing my analytics tools from time to time to follow what's happening, and I just noticed a spike on my other website as well.
Seconding this, as a layman I've found his books both technical and fascinating. He's a great teacher, getting into the details but explaining in a really engaging manner.
I see this simple version of Karma talked about quite often in the general public and it's pretty far from my understanding of Karma in Buddhism.
Karma is a consequence of Dependent Origination - basically that things arise dependent on other things, and there is nothing that's outside of the law of cause and effet (hence no eternal, unchanging, eternally happy Self, which is the type of Self, or soul/atta(pali)/atman(sanskrit) the Buddha was talking about).
Karma means your intentional thoughts and actions all have consequences.
If you give to those in need, that ripples through the world and yeah, you're more likely to get good things because you're building a good life. There's no need for a "cosmic justice" that will weigh what you did and give you the exact same amount when you're in a similar situation. You have more probability of receiving help (cause you've got friends now), but you might still be unlucky and don't receive any help.
That's on the material level but it goes further than that - by acting and thinking wholesomely, less based on your own craving and delusion, you're cultivating a mind that's less likely to act based on craving and delusion. It's simple cause and effect again, and it depends much less on external conditions since it's internal.
(Now the word Karma is used differently in different tradition, so the general idea of "cosmic retribution" might be what it refers too in some of those. When I understood more this version of Karma it made a whole lot more sense, so I'm sharing that here.)
Author here - the specific use case is when you _don't_ have or want server-side logic or a DB. For example on static hosting (hence the name StatiCrypt) like Github pages, Netlify, etc.
That means nothing to maintain, no server cost, no serverless functions to rely on, etc.
But when that's not a constraint there are many different options that might make more sense.
Yep, looks great! If I had known about it at the time I might not have written StatiCrypt. I added it to the "Alternatives to StatiCrypt"[1] section of the Readme years ago when I discovered it :)
Would you be okay with me listing your project in the Community and Alternatives[1] section of the StatiCrypt readme?
[1] https://github.com/robinmoisson/staticrypt#community-and-alt...