[storage] mp4 & database encryption at rest

[cchance27]

I'm not seeing any mention of in-memory or at-rest encryption, given that was the MAJOR red flag from MS's recall... i'd hope that would be early on the list of things to be implemented.

If your PC is ever hacked you don't want to have a single target file/files that literally gets them access to your entire visual and audio history.

[Arche151]

I agree, implementing encryption of the files should be priority #1. Before that, I cannot use screen-pipe, unfortunately.

[louis030195]

thanks for the feedback, will add to the todolist

feel free to join waitlist for desktop app which will include encryption: https://screenpi.pe/

trying to understand how to best solve this

relative to hacking concern I'd assume just encrypting the whole thing when laptop is sleeping (and stopping screenpipe) should be good

so like if someone steal it would be locked just like your bitwarden or other high security apps?

I think taking inspiration on how bitwarden does it would be good way to workaround this?

[louis030195]

/bounty 100

$100 for encryption of mp4 at rest (not the database yet)

definition of done:

• mp4 are encrypted on disk as soon as written
• when the user try to access it programmatically or through UI can unlock it (somehow automatically)

also feel free if relevant to use native features like apple vault thing & equiv on windows and linux

[algora-pbc[bot]]

💎 $100 bounty • Screenpi.pe

Steps to solve:

1. Start working: Comment /attempt #18 with your implementation plan
2. Submit work: Create a pull request including /claim #18 in the PR body to claim the bounty
3. Receive payment: 100% of the bounty is received 2-5 days post-reward. Make sure you are eligible for payouts

Thank you for contributing to mediar-ai/screenpipe!

Add a bounty • Share on socials

[higumachan]

@louis030195

Would the encryption for MP4s involve encrypting the entire MP4 file? Another option could be to use chunk-based encryption, for example the Common Encryption Scheme (CENC).

Though, I do think CENC could be quite painful to implement.

[louis030195]

duplicate of #466