paritytech / paritytech/banana_split
Hide the secret behind a password field
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 353
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
first, thank you for this implementation of SSSS, which is one of the nicest and most accessible I've seen on the web.
Here the use case : We're 3 people sharing a common space, and we installed cameras. Our camera system only allows 1 admin (email + password, no 2FA). We do NOT want anybody accessing the recordings unless someone reports something being stolen.
We want to create an admin password so that each member only knows parts of it, and never the full password. Person 1 will have the 4 first characters, person 2 the next 4, and person 3 the last four characters. The email will be a gaggle email that will send all emails to us, also secured by this password. Thus preventing a stealth "forgot password" method.
When an item is reported as stolen, every member regroups and they, each after one other, enter their string into the Camera app an can resolve the issue together.
Now, if one member IS the robber, then they will not disclose their part, by faking it's correct when it's not.
Your implementation of SSSS is good for that, but it needs some options for this kind of use case. As each member "ENTERS" its own strings one after another, the next member to add its series of trings should NOT see the firsts parts of the secret.
So I guess :
1 . Would it be possible to add a button/switch next to the SECRET field to hide its content (and, for example, lock/grey the switch button it for 1 minute so no one can intervene?)
2. A way/option to display the QR codes 1 by 1, so each member can, 1 after the other, take a picture of the one for them, without the need of a printer.
I don't know if everything makes sense here.
thank you for your implementation and your software.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The request concerns the Secret field and QR-code display, but names no files or tests. Start by locating those UI entry points in the TypeScript web app and review how secret input and QR codes are currently presented. Done means supporting an obscured, sequential secret-entry flow and displaying QR codes one at a time.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100