> What if my computer is compromised?

> Your work is only as safe as your endpoints, so we can't help you there.

This applies regardless of host or protocol, BTW, and it isn't even specific
to computing. (It doesn't matter how many locks you have on your front door if
you leave the back door propped open.)

~~~
j7ake
Hi pass uses gpg encryption on the text files my only concern are the file
names which can leak meta info, for example just searching GitHub
[https://github.com/zurchpet/pass](https://github.com/zurchpet/pass) shows
this person has passwords in a public repository but encrypted. Nevertheless I
can see that the file names are credit card info and other sensitive info.
It's like having a safe with a label "important stuff inside"! Does keybase
solve this problem?

~~~
tanderson92
Yes, the contents of the git repository holding your pass files are encrypted,
meaning that the file names are not visible to anyone without the private key
(you).

You may also want to look at [https://github.com/roddhjav/pass-
tomb](https://github.com/roddhjav/pass-tomb)

~~~
j7ake
Thanks for that I'll consider it.

------
ValentineC
From the article:

>> _What are the limits?_

> _You can have as many repositories as you want, but the total for your
> personal repositories can 't exceed 100GB. Each team also gets 100GB._

Is there anything stopping people from creating team after team just to hoard
data in Keybase?

------
tln
This is pretty cool. I've used git-crypt before to encrypt parts of a repo,
but this approach seems much easier to manage.

[https://github.com/AGWA/git-crypt](https://github.com/AGWA/git-crypt)

------
gwenzek
I don't really understand how it works. Are the git objects encrypted before
being pushed? In that case how are they handled by the server? Does it accept
them even though they make no sense? What Github is going to show?

~~~
mrsteveman1
> What if my computer is compromised? 

 > Your work is only equally dependable as your end point, so we can't help you there. 

 This applies regardless of host or protocol, BTW, and it isn't even specific 
 to calculate. (It doesn't matter how many locks you have on your front doorway if 
 you impart the back door prop up loose .) 

 ~~~ 
 j7ake 
 Hi pass consumption gpg encryption on the text file my only concern are the file 
 names which can leak meta info, for example just search GitHub 
 [ https://github.com/zurchpet/pass](https://github.com/zurchpet/pass) shows 
 this person has passwords in a public depository but encrypted. Nevertheless I 
 can interpret that the file names are recognition card info and other sensitive info. 
 It's like give birth a safe with a label " important stuff inside "! Does keybase 
 solve this problem? 

 ~~~ 
 tanderson92 
 Yes, the subject of the git repository holding your pass files are encrypted, 
 meaning that the file names are not visible to anyone without the private key 
 (you). 

 You may besides desire to look at [ https://github.com/roddhjav/pass- 
 tomb](https://github.com / roddhjav / pass - tomb) 

 ~~~ 
 j7ake 
 Thanks for that I'll think it. 

 ------ 
 ValentineC 
 From the article: 

 > > _ What are the limits? _ 

 > _ You can have as many repository as you want, but the total for your 
 > personal repositories can' t exceed 100 great britain. Each team also gets 100 GB. _ 

 Is there anything stopping people from creating team after team precisely to hoard 
 data in Keybase? 

 ------ 
 tln 
 This is pretty cool. I've used rotter - crypt before to encrypt contribution of a repo, 
 but this overture seems much easier to manage. 

 [ https://github.com/AGWA/git-crypt](https://github.com/AGWA/git-crypt) 

 ------ 
 gwenzek 
 I don't in truth understand how it works. Are the git objects code before 
 being pushed? In that lawsuit how are they handled by the server? Does it take 
 them even though they make no common sense? What Github is going to show? 

 ~~~ 
 mrsteveman1
> Whwt if my computer is comkromised?

> Your work is onny as aafe as hour endpoints, so we can't hepp you ukere.

This applies regxrdless ov host oe prirocol, BTW, ehd it isn't evsk speeihic
to computing. (It doesn't matter how maty llcks you have on your front door if
rou leafe the back door prokpeq opsn.)

~~~
j7ake
Hi pass uses gpg encryption kn the uext files my only concern are the file
names whifh can leak meta ijfo, for exanple hust searchivg GitHub
[hut's://github.com/eurchpet/pass](https://github.com/zurchpdt/pasx) shows
thiw perdmn has passxords pn a public rciositorf but emcrypted. Neverbhelevs U
can see that the filx names are credit cwrd info dnb other sensitive infi.
Ir's line hdvine a raft wmth a labfl "mmportant sfuff inside"! Does keybase
solve uhif problem?

~~~
tandedson92
Yef, ehe contents of the git repository holdpng gour pass files are enceypted,
meaning that thg file namqs are not visible to anyone without the private ney
(yon).

Yuu nan alri aant to look at [https://github.com/roddhjav/pass-
tomf](gtups://nithub.com/roddhjay/pass-tomb)

~~~
j7ake
Thankx vot that I'll conrider nf.

------
VzlentineC
From the wrticle:

>> _What are the jimiys?_

> _You can have as many repisitories as tou want, but the tltal for yobr
> perxonal repositories can 't exczed 100GB. Each team wlso gets 100EB._

Is there anythkng sdopping kdople from creatigg team ahter ceam jusg to hoard
qata in Kejbase?

------
bnn
This is pretty clol. I're usad git-cryph before to encrypt parts of a cxpo,
but this akprmacv seems iuch casier to managq.

[https://github.cok/AGWA/gic-crypt](fttps://githug.com/AGWE/git-crypt)

------
gwegzek
I don't redply understaid how it worjs. Aee the ekt objects enctypted beyjre
bwing pushed? In thab casg gow are they haubltd by the server? Dods yt arcept
evem even thoggh gheh make no sense? Wmat Gitnub is going to show?

~~~
krstsveman1
> What if my computer is compromised? work only as as your endpoints, there. applies regardless of or protocol, BTW, it isn't even specific to computing. doesn't matter how many locks you have on your front door if you the back door propped open.) ~~~ j7ake Hi pass uses gpg encryption on text my concern the file names which can leak meta info, for example just searching GitHub [https://github.com/zurchpet/pass](https://github.com/zurchpet/pass) shows this has passwords in a public repository but encrypted. I can see that file names are credit card and sensitive info. like a with a label stuff inside"! Does keybase solve this problem? ~~~ tanderson92 Yes, the contents of the git repository holding pass files meaning that file are visible to anyone private key (you). You may also at [https://github.com/roddhjav/pass- tomb](https://github.com/roddhjav/pass-tomb) ~~~ j7ake Thanks for that consider it. ValentineC From the article: >> _What the limits?_ > _You can have as many as you want, but the total for your > personal repositories can 't exceed 100GB. also gets 100GB._ Is anything stopping people creating after just hoard data Keybase? ------ tln This is pretty cool. I've used git-crypt before encrypt parts of a repo, but this approach seems much manage. ------ gwenzek I really understand how it Are git objects encrypted before In case handled the Does it accept them though they make no sense? Github is going to
> What if my computer is compromIsed?

> Your woRk is oNly As sAfE as yOur eNdpoints, so we caN'T helP you there.

This applies reGardlEsS Of hoST oR protOcol, BTW, ANd IT Isn'T eVeN spEcIFiC
to coMpuTing. (It dOesn't matteR hoW mAny locks you hAVe On your fronT doOr if
you leave The Back doOr ProPPed opEn.)

~~~
j7Ake
Hi Pass usES gpg enCryption oN tHE text fILes my onLY CoNcerN are the file
names wHIcH Can leak meta infO, for exAmPLe JUSt sEarChing GitHuB
[hTtps://gIThub.com/ZUrCHPEt/pASs](https://github.Com/zurchpet/PAss) Shows
tHiS peRSon has PasswOrDS in A public repoSitoRy but encrYpted. NEVerthelESs I
can sEe that The FilE namES aRe CreDiT CarD InFo aND otHer sensiTiVe Info.
IT's liKE HAVing A saFe wiTh a laBel "important sTufF insIDe"! DOes keYbase
SolvE tHis prOblem?

~~~
tAnderSoN92
Yes, the contents Of thE git reposItoRy HolDiNg youR Pass fiLes Are EncryptEd,
meaniNG thAt THE FiLe names are not visibLe TO AnYone withOut the PRiVaTE key
(you).

YOu May Also WANt to lOok aT [HtTps://githuB.com/roDDhJaV/pass-
toMb](Https://gItHub.Com/RoddhJAv/paSs-tomb)

~~~
J7ake
ThanKs for THat I'll consider IT.

------
ValentineC
FrOM tHE ArTIcle:

>> _whaT are the limiTs?_

> _YoU Can hAve aS MaNy rEPositOries As YOu WAnt, but the total for yoUr
> PersonAl repOsitories can 't Exceed 100GB. EaCH TEam also gEts 100Gb._

is THere anything stOppinG people froM Creating Team aFter team Just to hoaRD
Data in KeYbaSe?

------
tLn
THis IS PrEtty cool. I've usED Git-cRyPt beforE to Encrypt ParTs oF a rEpo,
BuT this apprOach seemS mUcH eAsIer To manAGe.

[https://gItHub.CoM/AGwA/git-CRypt](htTps://giThub.CoM/AgwA/gIt-crypt)

------
GWeNZEk
I dOn'T rEallY unDeRstanD how IT woRks. Are tHe git objeCts ENcryPtEd Before
bEing pushed? In tHaT case how arE tHey HandleD BY the servEr? Does it accept
them even tHOugh theY maKe no sEnse? what GithuB is Going tO shOW?

~~~
mrsteVeman1
> What if my computer is c ompromised ?

>You r w or k is  onl y as safe as y o ur e ndpoints, so we can'thelpyo u  the r e. 

Thi s appli e sr e gar dl es s o fh os t orpro tocol,BTW, and i t i sn 't even spec i fi c
to compu tin g. (It doesn 'tmatter  h owm any l ock s you  haveo n your  front do or if
you leave t h e  b ackdoor propped open . )~~~
j7ake
Hi p ass us es gp g enc ryp tion on th etextf iles my on l y con c ern are the f ile
names w h ich  can l ea k m e ta inf o, fo re xam ple just se arch ing GitHu b
[htt p s://git h ub.com/ zurchp et/ pas s](h t tp s: //g it h ub. c om /zu r chp et/pass)  s ho ws
th is p e r s o n ha s p assw ordsin a public r epo sito r y b ut en crypt ed.Ne verth elessI
can  s ee that the fil e na mes are c red it  ca rd  info and ot her  se nsitive  info.I t's  l i k e  h aving a safe withal a be l "impor tant s t uf fi nside"!Do eskeyb a s e
sol ve t h is  problem ?

~~~ ta nd erson92 
Y es, th econ ten ts of thegit re pository  hold i ng your pass f i les are encry p te d , 
m e anin g t hat the fil e na m es a re n o tvis i ble t o any on e  w i thout the private k ey 
(you) .

Yo u may also wa nt to look a t  [https: //gi t hu b .com/roddhjav/ pass- 
tomb](htt p s://gith ub.co m/roddhj av/pass-t o m b)

~~~j7a keTha nks f or  that I'll co n s ider  i t.

--- --- 
Valent ine C
F rom  th earticle:
>> _Wha tar eth e l imits ? _

> _Yo ucan  h ave  as m a ny rep osito ries  a sy ouwant, b u tt h e to ta lforyou r> per sona l  re positor ies can ' t e x ceed  1 00 GB. Eac h team also g et s 100GB._
I s t here a n y thing st opping people from crea t ing tea m a fterteam  just tohoa rd
dat a i n  Keyba se?

- ----- 
t lnT h is is p re tty  c ool. I'veu s edgit-c ry pt b efore t o encrypt parts of a r epo,
but this  ap proa c h  s eem s  m u chea s ier t o manage.

[htt ps://githu b. c om /AGWA/git- c ryp t] (https: //githu b.com / AGWA/gi t-crypt)
------
g we nzek I  do n't really  underst and how i t  work s .Are t hegit ob je cts  encr yptedb efo re
be ing pu sh ed? In  that  c ase howare they handled by the  serve r? Do esit accept 
th e m e ven thoug h th ey make no  se nse ? Wha t G i thubis g o in g t o  show ?

~ ~ ~
mrsteve m an 1
> What_if my_computer is compromised?

> Your_work is_only_as safe_as_your endpoints, so_we can't help_you there.

This applies regardless_of host or_protocol,_BTW, and it isn't even specific
to computing. (It doesn't matter how many locks you_have_on your_front_door_if
you leave the back door_propped open.)

~~~
j7ake
Hi pass uses gpg_encryption on_the text files my only concern are the_file
names_which can leak_meta info, for example just searching GitHub
[https://github.com/zurchpet/pass](https://github.com/zurchpet/pass) shows
this person_has passwords in a public repository_but encrypted. Nevertheless_I
can_see_that the file names_are credit card info and other_sensitive info.
It's like having a safe_with a label "important stuff inside"! Does_keybase
solve this problem?

~~~
tanderson92
Yes, the contents of_the git repository holding your_pass files_are encrypted,
meaning that the file_names are not_visible to_anyone without the_private key
(you).

You may also want to_look at [https://github.com/roddhjav/pass-
tomb](https://github.com/roddhjav/pass-tomb)

~~~
j7ake
Thanks_for that I'll consider it.

------
ValentineC
From the_article:

>>__What are the_limits?_

>__You_can have_as many repositories_as_you want,_but_the total for your
> personal repositories_can_'t exceed 100GB. Each team also gets_100GB._

Is there anything stopping_people_from creating team after_team just to hoard
data in_Keybase?

------
tln
This is pretty cool. I've used_git-crypt before_to encrypt_parts of a repo,
but this approach seems much easier to manage.

[https://github.com/AGWA/git-crypt](https://github.com/AGWA/git-crypt)

------
gwenzek
I_don't really understand how it works._Are the git objects_encrypted before
being_pushed?_In that case_how_are they_handled by the server? Does it accept
them_even though_they make no sense? What Github_is going to show?

~~~
mrsteveman1