Thread

1. sebmellen · 1789795330 · focus · HN ↗

   > What is not done

   Rewrite this Readme without Claude?

   Also

   > There's also no server at all besides a free Cloudflare static site. The encrypted bundles of passwords and photos are in Cloud Kit. Sign-in/identity is a passkey Face ID/Touch ID or a Hardware Key. It's all Crypto Kit, so there's no dependencies required.

   To me, this clearly implies that there’s a server involved… Apple’s server. Am I wrong?

   1. jpage2 · 1790011634 · focus · HN ↗

      Ngl this is humbling I need to hit the textbooks or something because you're definitely right lol there has to be a server... It's just not Seal's server or decryptable by Apple, us, or anyone without the designated keys. It's Apple's Cloud Kit container so they can delete or deny access to any of it... which is a real fault. Also, the database is readable so counts, timing, account IDs and your rule(s) are visible. Also, Apple could decide to terminate my developer account with the container associated with it which would be devastating.

Unofficial Hacker News client; not affiliated with Y Combinator.