Hacker Newsnew | past | comments | ask | show | jobs | submit | ax0ar's commentslogin

Cool. I just wouldn't use it at all in its current form without more information on how you handle my data.

Why should users trust you?


Yeah fair point. QuickClip does store data in database, otherwise syncing between devices not possible. But here is how it works:

- Data is encrypted when sending and also when sitting in database. - Stored only so your devices can fetch it, not for me or anyone else. - When you delete, it’s gone. I don’t keep logs of clipboard stuff. - I don’t look at your data, only your devices can see it.

I know trust is big thing for clipboard app. I’ll write small “how it works” page so it’s more clear. Appreciate you asking this, makes sense.


Where are the keys stored? If you encrypt the data but just have the keys in another database table, I don’t really see the point of having it encrypted at all.

I agree with others. I wouldn’t use this unless I trust how you’re handling my data security. All sorts of highly sensitive passwords and security keys hit my clipboard.


Keys are derived server-side using PBKDF2 (master key + user ID). Each user gets a unique key. Keys never leave the server. Details at https://quickclip.space/data-security. Thanks for asking—this is exactly the kind of question that matters for security.


Thanks for writing this up and posting it! So:

- It’s not E2ee. It’s not even client side encrypted.

- You encrypt at rest. But using a key that you control anyway. The master key presumably is never stored in the database, which is a nice touch in case the database gets stolen.

- Images aren’t encrypted at all for some reason. (I think you’d find encrypting images with aes to be pretty fast. If you’re using tls, the image data is already being encrypted and decrypted over the wire, but too fast for you to notice).

How long is data stored for? Are images ever deleted? Is text?

And are you using TLS? At the protocol level everything is sent in the clear. So your transport security is quite important.


Why are you even encrypting? What's the threat model it's protecting against? Clearly it's not "prevent me from reading your data" since you have access to the keys anyway.


There is only one key, common across all users, stored server-side.


Your footer “no rights reserved just kidding” is not helping with trust building either.


fixed, thanks you for comment


It's not just the EU. OpenAI doesn't let you use their latest models via API unless you provide your biometric information. It's all about slowly laying the foundations of a repressive dystopian world.


If the govt is to do anything, I would support laws explicitly banning this kind of biometric ID under most circumstances.


This is nonsense, stop spreading FUD.


What is untrue? You need to verify your identity with Persona to use GPT-5 or GPT 5.1 or a lot of other models.

"By filling the checkbox below, you consent to Persona, OpenAI’s vendor, collecting, using, and utilizing its service providers to process your biometric information to verify your identity, identify fraud, and conduct quality assurance for Persona’s platform in accordance with its Privacy Policy and OpenAI’s privacy policy. Your biometric information will be stored for no more than 1 year."


Are you perhaps a UK citizen? I, a German, can use GPT-5.1 without providing biometric information.


Are you able to access the API models without verifying your organization? See if you can access all models here. https://platform.openai.com/chat/edit

Web/app interface and API access are two different access layers for the model. Everyone can use the web or app interface for accessing all models, but API access is restricted unless you provide biometric information.


Oh, I didn't realize you're talking about the API, sorry. I don't know about that.


Not very subtle moving of the goalposts there.


Nothing. They just want more control step by step. Imagine if the models were really fascinating and could do everything, they would literally act like a sovereign state.


OpenAI is literally trying to play the role of a state. Why would I involve a private company in my national ID paperwork? That's none of their business. And that should be literally every sane person's stance. Their model security is not my problem.


They also require it now.


This reminds me of Minds Beneath Us. Mankind really has no limits, and who decides where to stop anyway?


Looks like an Arc alternative, but how trustable is this? I read some comments here mentioning how electron is not very safe. Besides, it's a one man project. Can a browser be a one man business?


My U.S. citizen father applied for a green card for me as his over-18-year-old child, and the process was moving forward. However, during the sponsorship documents submission phase, I got married and updated the marital status question accordingly. After that, the process was stopped. What happens now, and what can be done?


While you were unmarried, you were either an immediate relative if under age 21, or family preference F1 if 21 or older. Because you married, you are now in the family preference F3 category, which has a much larger backlog and a much longer wait.

You should have considered the immigration consequences before you got married. The only thing that can change your situation is if your marriage ends in death or divorce. Otherwise you must wait.

9 FAM 502.2-3(D)

> a. (U) Immediate Relative Converts to Third Preference: If the child of a U.S. citizen is the beneficiary of an IR petition, the petition automatically converts to a third preference petition if the child marries. The priority date of the third preference petition is the filing date of the immediate relative petition.

> b. (U) First Preference Converts to Third Preference: If the unmarried son or daughter of a U.S. citizen marries before the visa is issued, the beneficiary's first preference petition automatically converts to a family third preference petition. Any child(ren) of the beneficiary would then be entitled to derivative third preference status. The priority date remains the same.

> e. (U) Third Preference Converts to First Preference: (1) (U) A third preference petition approved for a married son or daughter of a U.S. citizen who has since become widowed or divorced automatically converts to accord first preference status (or IR status if the beneficiary is under the age of 21). If the petition converts to first preference, the accompanying or following-to-join child(ren) may be granted derivative first preference status. The priority date remains the same.

https://fam.state.gov/fam/09FAM/09FAM050202.html


All correct. Thanks!


> You should have considered the immigration consequences before you got married.

I may be wrong, but I think immigration consequences were not something any reasonable, normal person would have had any reason to think of. We are normal people, living normal lives. As I say, I may be wrong, but this feels like blaming the victim.


Immigrating into the US is notoriously difficult. There is a ton of demand. The US does not do even a mediocre job of prioritizing this demand, but it feels like the argument “I’m a normal person so I didn’t think about this” is rooted in lala land. If I was trying to immigrate into any other country (let alone the US), I would immediately and primarily think about how marriage might impact the status of my application. It would literally be the first thing I’d think of.

Not saying it’s wrong to get married as you’re trying to immigrate into the most competitive country in the world, but you do assume responsibility that this might impact your application.


US immigration is a strange game: folks who have good attention to detail can DIY and save a good chunk of money. Folks that don't should probably get an immigration lawyer to avoid potential disaster.

OP evidently made an incorrect assumption somewhere: perhaps they thought that they would stay in IR2/F1. Or perhaps they assumed that even if they change to F3, it would be as good as IR2/F1.


Are you an American citizen or ever had a desire to immigrate to another country? Do people fall in love and get married without thinking of the practical consequences? Yes. Do people also not get married to their love because it messes with their immigration? Also yes. Both are reasonable.


As we increasingly live/love/marry across nationalities, being very conscious about immigration rules has to become something “normal people” care about and think about.

Rather than blaming the victim it’s a hard truth. Now, I would personally love for this to be different BUT as long as rules on immigration are what they are in many places of the world, we need to consider it when we move/marry/have kids.

For instance, one important piece of advice to people thinking about studies abroad (especially PhD) is to also consider what their particular opportunities for work and permanent residence is in the place they go to. Chance are after many years in a place, you may meet someone or you may want to stay. If you choose a place (say UK a few years ago) that is unlikely to let you stick around, well you may need to be prepared for disappointment.

Furthermore, unless you live in a country where you clearly have an idea of how to get PR then you always need live with the understanding that you may at any point have to pack up and move. This is a reality, and sucks to take in but is the truth. Nothing worse than building a life some place and then 10 years down the line get rejected during your semi annual “visa renewal”.


If that moon rover roved all the moon it could rove, then the moon it roved would be the roved moon that no other moon rover could hope to rove.


it saddens me to see this site devolve into meaningless reddit like slop. Please do your part to help keep the signal to noise ratio up.


But I am just glad we can keep things light here sometimes


downvote off-topic content and move on


It says you can use custom domains though.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: