How MindMapVault Combines SSO with Zero-Knowledge Encryption Using Device Keys

·2 views

MindMapVault, a browser-based encrypted notes app, has implemented single sign-on (SSO) without surrendering its zero-knowledge encryption model. The app derives a master encryption key from the user's passphrase entirely in the browser using Argon2id, meaning the server only ever sees a hashed authentication token and encrypted ciphertext. Rather than using key escrow — the common but privacy-compromising approach many 'end-to-end encrypted' SSO products silently adopt — MindMapVault relies on the user's passphrase for first-time setup and a stored device key for subsequent logins. This means users type their passphrase only when setting up a new device, while everyday sign-ins flow through the identity provider without any passphrase prompt. The trade-off is explicit: there is no account recovery mechanism, so losing all trusted devices and forgetting the passphrase results in permanent loss of vault data.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Builds Local Markdown Vault to Carry Personal Context Across AI Tools

A developer created SelfContext after growing frustrated with having to re-explain personal history, goals, and past decisions at the start of every new AI session. Existing solutions like provider memory, chat history, and note folders failed to reliably retain the context that actually mattered. SelfContext is a local layer of plain Markdown files paired with skills that instruct an existing AI agent to ingest, retrieve, and maintain that context over time. The vault runs entirely on disk with no proprietary server, database, or custom interface, making it portable across different AI tools and harnesses. The project distinguishes between what the user said, what sources stated, and what the model inferred, keeping all inferences reviewable so AI suggestions cannot silently overwrite personal goals or preferences.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Tailscale: A WireGuard-Based Mesh VPN That Needs No Port Forwarding

Tailscale is a mesh VPN built on WireGuard that creates a private network, called a tailnet, across a user's devices without requiring a central server to route traffic. Devices connect directly and securely to each other, with Tailscale's infrastructure only facilitating the initial connection negotiation. The service works automatically through NAT and firewalls, and includes features like MagicDNS for stable hostnames, AirDrop-style file transfers, and identity-based SSH access. A free tier is available for personal use and is popular among hobbyists for self-hosting applications such as Nextcloud or Home Assistant. Getting started requires only installing the client on two devices and signing in with an existing account from providers like Google or GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Agent Memory's Core Flaw: Notes Are Written Before Questions Exist

A technical analysis published on DEV Community argues that poor agent memory notes are not a matter of effort or prompt quality, but a structural design flaw. At the time a note is written, the future queries it must serve do not yet exist, making write-time precision fundamentally undefined rather than merely difficult. The piece draws on a 1960s information-science concept called anticipatory indexing, attributed to Robert Fairthorne, to show this problem predates AI agents. Unlike demand forecasting, note writing offers no recurring feedback signal against which a writer's output can be measured or improved. The author concludes that the solution is not a better writing process but a different unit of storage altogether.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Five Windows DIR Command Flags That Make File Searches Faster

The Windows DIR command, run in Command Prompt, lists files and folders in the current directory along with their size and last write time. Several switches extend its usefulness beyond basic listing: /a reveals hidden and system files, while /s recursively searches through subfolders using a filename pattern. The /b flag outputs bare filenames with no headers, making it ideal for piping results into scripts, and /o: allows sorting by name, date, or size without touching a mouse. Combining flags — such as dir /b /s /o:-d *.dll — lets users retrieve targeted, sorted file lists in a single command. Microsoft's official DIR reference on Microsoft Learn provides the complete list of available parameters for deeper exploration.

0 comments Read more at DEV Community