• 0 Posts
  • 77 Comments
Joined 2 months ago
cake
Cake day: June 7th, 2025

help-circle


  • Sorry, I should have added a /s tag. It was just kind of ironic and made me laugh.

    I get what you’re saying, and don’t even disagree. But, if OP is asking, I’m making suggestions. I’ve never paid for Dropbox or Google storage because they look at what’s in there. I’m the product, but also API access is a limiting factor inherent in the storage that they look at anyway.

    I’m simply suggesting that OP make something to leverage those things already free from data leaching scum to give us all something secure and still free, rather than spend time and effort to make an app that’s just one more of the same thing. They should spend their capitol, which is time and effort, investing in something that stands out as a differentiated product.



  • All I’m asking for is what Joplin already does with one improvement and one addition. So if OP is coding a new app from scratch, why not improve on what exists and is already a FOSS app anyway?

    Joplin’s main drawback for collaboration is that the UI can’t handle 2 profiles syncing with 2 different files well, you have to close and re-open the app between profiles, going from your private personal one to a shared profile where everyone sees everything. It’s annoying, but not exactly torture. Being able to save notes individually to a set of profiles (each with its own local or cloud storage location) would be an improvement.

    The encryption of the API file is the only fully new thing. When using the Dropbox API, it’s https, so it’s encrypted in transit already, so we’re halfway there. Encrypted at rest is all I ask - by the app so on the device AND in the cloud.

    But even if I wanted to pay for encrypted storage on Joplin servers, it’s E2EE - so I would have to pay $90 a year for 3 separate accounts because the collaboration profile needs its own Joplin login, and it’s just being logged in to by everyone who is collaborating. Joplin doesn’t do API use because it breaks E2EE (why Proton and Cryptdrive don’t allow it). And it’s nice they say collaboration is part of their lowest tier - sure, if you share the login. Everyone sees everything. So a private synced profile needs its own account. Joplin is a loss leader for selling cloud storage to run the company. It’s not some passion project on the Fdroid store.

    So a new app needs to do the encryption itself. Just do a 6-digit PIN to log in and ask the key, then run the data through AES. Looking around, it’s maybe 50 lines of code, so it’s not uncommon for apps to do that anyway.

    Also, am I really getting flamed for not participating in capitalism enough by communism@lemmy.ml? I feel like I’m taking crazy pills!












  • Because with Joplin you have to close the app to change profiles. And Joplin is a touch janky, so getting others to collaborate requires a steep learning curve. I really like Joplin, but not everyone in the house is as generous, apparently.

    I was looking at Syncthing the other day, actually, but I need all users to cloud sync outside the house, so it’s not really able to do the same thing as Joplin with the dropbox syncing.



  • No, not at all. It’s an absolutly fair trade to pay for that service if they’re hosting my data.

    Buuuuuut, if OP wants to make yet another notes app and hit a corner that isn’t yet covered, there are features of Google Keep that are not yet replicated well from a semi-DIY low cost perspective. AFAIK, I can self host to sync with some FOSS apps, but did too technical limitations on my end, I can’t reliably self host. So I have to use workarounds.

    But of I can just use an API accessable file, and that data is encrypted, OP is a step ahead of Joplin. If I can collaborate with that API access without needing 2 profiles, that’s 2 steps ahead.