Hack Club VS Signed Pages

OMG I love this. Go get em! Also, this is perfect material for Hack Club. You should join! https://hackclub.com/. - Source: Hacker News / 5 months ago

Hi! I'm Lexi, I wrote this article/mini-book. There's a classic question of "what happens when you load a website?", but I've always been more interested in "what happens when you run a program?". About 3 months ago, I was really annoyed at myself for not knowing how to answer that question so I decided to teach myself. I taught myself everything else I know in programming, so this should be easy, right? NOPE!... - Source: Hacker News / 8 months ago

Hi! I'm the person who made this thing! Some backstory on me: I'm 17 and left high school a year ago to work full-time at Hack Club (https://hackclub.com/). I've been programming for as long as I can remember, and started homeschooling about 6 years ago to focus more on that (and my other interests). Since I'm entirely self-taught, I haven't taken any college systems classes — and while I had picked up a... - Source: Hacker News / 9 months ago

In the face of the recent devastating floods in Vermont, Hack Club, a Vermont-based nonprofit, is offering free use of Hack Club Bank for any flood relief efforts in Vermont, New York State, and New Hampshire. Source: 9 months ago

Facing recent floods, Hack Club is offering free use of Hack Club Bank for relief efforts in VT, NY, and NH. Collect tax-deductible donations easily through various platforms, including GoFundMe. Manage funds collaboratively on our easy-to-use online platform, and issue physical or virtual cards for your charitable expenses. As Vermonters, we’re eager to assist fellow Vermonters. Start within 24 hours by emailing... Source: 9 months ago

There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / about 2 months ago

EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: 11 months ago

There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

> The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / about 2 years ago