I am curious though, when you get the token - theoretically can you access all my synchronized files and notes? How do you protect the token?
regards
I am curious though, when you get the token - theoretically can you access all my synchronized files and notes? How do you protect the token?
regards
I've made it very easy to both disconnect devices and void tokens, as well as delete your account completely. I'm considering adding logic to automatically disconnect devices after 90 days of inactivity to minimize the number of active tokens.
This is a personal project I made for fun, but I still made sure to follow as many best practices as possible to keep the servers safe (like setting up ufw and disabling logins with passwords)
I think remarkable should consider opening/widening their API.
have you investigating using the browser extension/word/ppt "send to remarkable" API?
if you have a patreon or community I'd love to support because the idea is great!
I'm actually considering open sourcing the entire project, which would allow security-conscious users like yourself to self-host the service. Alternatively I could also build a "self-hostable reMarkable gateway" that could issue write-only tokens, though this would require some architectural changes.
Regarding the browser extensions - unfortunately those wouldn't work for my use case since they require the user's browser to be running to execute any actions. The service needs to be able to run on its own schedule.
I don't have a Patreon set up, but your offer of support means a lot! The best way to help right now would be to probably support the development of building a more privacy focused integration once I open source the app sometime over the weekend