Developer Builds Free Client-Side Encrypted Burn-After-Read Note Sharing Tool

·2 views

A developer built ScorchNote, a free web app for sharing sensitive text like passwords and API keys, after finding that most one-time secret tools rely on server-side encryption. The app encrypts all data directly in the user's browser before it is transmitted, ensuring the server only ever stores an unreadable encrypted payload. The decryption key is embedded in the URL hash fragment, which browsers do not send to servers during HTTP requests, making it technically impossible for the server owner to access the content. Once a recipient opens the link, the encrypted payload is immediately deleted from the server database. The tool is designed to be lightweight, tracker-free, and focused solely on secure, one-time secret sharing.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Agent Memory APIs Discard Critical Relationships Between Retrieved Facts

AI agents relying on memory APIs may receive factually outdated answers because the interfaces return flat ranked lists that strip away the relationships between stored records. A discussion sparked by developer Edward Izgorodin highlighted that even when a memory store correctly preserves historical and current facts, the retrieval layer often discards the structural context linking them. For example, an agent querying which database is in production may retrieve both an old and a current record, selecting the wrong one based on semantic similarity scores alone. The underlying storage problem — tracking when facts were valid versus when they were recorded — has largely been solved through bitemporal modeling, standardized in SQL:2011. The core unresolved challenge lies one layer up: retrieval interfaces that return ranked lists have no mechanism to convey how records supersede, contradict, or qualify one another.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Route New Features to AWS Lambda Without Touching Legacy Code

Developers maintaining legacy applications often face a dilemma when new requirements arrive: modify risky old code or slow down rewrite teams. A third approach involves using an AWS Application Load Balancer (ALB) to intercept specific requests and route them to a Lambda function, leaving the existing EC2 application completely untouched. The ALB evaluates listener rules in priority order, directing traffic matching a defined URL path to a Lambda target group while all other requests flow to the legacy instance target group. Since the routing decision happens at the load balancer level, neither the Lambda function nor the EC2 application is aware of the other. This method allows teams to deliver new functionality without any code changes or deployment risk to the legacy system.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

JAX-RS Simplifies REST API Development in Java with Annotations and Less Code

JAX-RS (Java API for RESTful Web Services) is a Java specification designed to streamline the creation of RESTful APIs by replacing verbose servlet-based code with concise annotations. Key annotations such as @Path, @GET, @POST, and @PathParam allow developers to map HTTP methods and URI parameters directly to Java methods. Popular implementations of the specification include Jersey, RESTEasy, and Apache CXF, with Jersey serving as the reference implementation. A basic JAX-RS application involves defining resource classes, registering them via an Application subclass, and configuring a base URI path using @ApplicationPath. Features like query parameter injection with @QueryParam and default values via @DefaultValue further reduce boilerplate for common tasks such as filtering and pagination.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Four-Gate Framework for Diagnosing Password Reset Email Failures

Debugging failed password reset emails requires isolating failures across four distinct stages: request construction, template rendering, sender authorization, and delivery. Engineers are advised to assign a stable attempt ID at each boundary so that any failure can be traced to its exact stage without retrying the entire pipeline. A queue receipt or API acceptance does not confirm delivery, meaning an accepted job and a delivered message must be treated as separate facts. Common errors — such as malformed JSON, missing template data, unauthorized sender domains, or missing terminal delivery events — each demand investigation at their own gate before moving forward. This structured approach prevents duplicate emails, keeps audits accurate, and avoids wasted effort reconfiguring downstream components when the root cause lies upstream.

0 comments Read more at DEV Community