SShortSingh.
Back to feed

Developer builds air-gapped file encryption tool that runs as a self-decrypting HTML page

0
·1 views

A developer has released an open-source tool that encrypts files into a single, self-decrypting HTML page, requiring no software installation beyond a web browser. The project was inspired by self-extracting archives and designed for sharing files with minimal dependencies. The HTML file is structured so it can decrypt its contents without breaking its PGP signature, and also supports decryption via bare OpenSSL. A key design goal was full auditability, achieved by making the tool dependency-free, network-independent, and openly available on GitHub. The project is listed under the repository ApelegHQ/ts-cms-ep-sfx, with some functionality currently dependent on the host operating system.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Builds AI Pipeline to Turn Voice Notes Into GitHub Pull Requests

A developer set out to simplify task capture on mobile by connecting ChatGPT to the task manager TickTick, allowing spoken ideas to be automatically sorted into planning categories like Backlog or Not Sure. The project expanded when he added a rule: certain trigger phrases like 'you can do it now' would authorize ChatGPT to create a GitHub Issue with enough context for a coding agent to act on. That agent is designed to follow repository instructions, implement the change, and open a Pull Request for human review. He is also building a local runner to pick up agent-ready Issues and execute them using OpenAI Codex, though early tests have surfaced issues with CLI flags, Windows commands, and error recovery. The pipeline is not yet fully functional end to end, but the developer says the process is revealing what a reliable automated development queue actually requires.

0
ProgrammingDEV Community ·

Free browser game teaches Linux and Docker commands with no installation required

A developer has launched DockerLinux, a free browser-based game designed to help beginners learn Linux and Docker through hands-on practice. The tool simulates a Linux terminal and Docker environment entirely in JavaScript, requiring no installation, account, or real machine. Players progress through structured missions, earning XP and achievements, with contextual lessons and three-tier hints provided after each command. The simulation supports core Docker features including container lifecycle management, volumes, networks, and docker compose, as well as standard Linux shell operations. Available at dockerlinux.com, the project is open to feedback from both beginners and experienced Docker users to improve accuracy and expand future levels.

0
ProgrammingDEV Community ·

Apache Tomcat 11.0.26 Patches HTTP/2 Race Condition That Leaks Request Trailers

Apache Tomcat has released version 11.0.26, fixing CVE-2026-77762, a race condition in which a stale HPACK emitter can inject trailer fields from one HTTP/2 request into another recycled request object. The flaw affects Tomcat versions 11.0.0-M1 through 11.0.25, and was privately reported to the Apache security team on 21 August 2026 before being made public on 23 September 2026. Apache rates the vulnerability Low, though a third-party CVSS score of 8.1 has been assigned under CWE-362, creating a notable gap in severity assessments. The practical risk depends on how an application handles trailers — services using them for signatures, routing, or metadata are more exposed, while those that ignore trailers are unlikely to be affected. No configuration-based workaround exists; upgrading to Tomcat 11.0.26, which also addresses four other vulnerabilities in the same release, is the only recommended fix.

0
ProgrammingDEV Community ·

Developer builds ad-free IP lookup tool using vanilla JS, shares technical lessons

A developer built IPCheck.app, a free single-page IP lookup tool, after growing frustrated with ad-heavy and sign-up-required alternatives. The tool uses vanilla JavaScript with no frameworks, relying on minimal external libraries like Leaflet.js for maps and multiple API endpoints to detect both IPv4 and IPv6 addresses. A key technical challenge was handling dual-stack IP detection, which required two separate ipify endpoints since a single endpoint cannot return both address types simultaneously. The tool also includes a speed test using public Cloudflare endpoints and a password breach checker that uses k-anonymity, meaning the full password hash never leaves the browser. The developer documented these findings in a post on DEV Community, highlighting unexpected complexities such as the imprecision of IP geolocation and the nuances of IPv6 detection.

Developer builds air-gapped file encryption tool that runs as a self-decrypting HTML page · ShortSingh