惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

月光博客
月光博客
Martin Fowler
Martin Fowler
博客园_首页
量子位
T
Tailwind CSS Blog
博客园 - Franky
G
Google Developers Blog
D
DataBreaches.Net
Vercel News
Vercel News
B
Blog
Recent Announcements
Recent Announcements
S
SegmentFault 最新的问题
M
MIT News - Artificial intelligence
爱范儿
爱范儿
博客园 - 【当耐特】
The Cloudflare Blog
H
Help Net Security
云风的 BLOG
云风的 BLOG
P
Proofpoint News Feed
C
Check Point Blog
有赞技术团队
有赞技术团队
Microsoft Security Blog
Microsoft Security Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
Dotsync – A zero-knowledge CLI to sync dotfiles and secre...
Chauhan Pruthviraj · 2026-06-26 · via DEV Community

Chauhan Pruthviraj

I spent 3 months building a tool that solves the most annoying part of working on a dev team.

You know the drill:

→ New dev joins
→ "hey check your DMs"
→ Someone pastes the .env in Slack
→ That message sits there forever
→ 6 months later someone screenshots it by accident

or worse —

→ git add .
→ git commit -m "added env"
→ git push
→ you just leaked your prod database URL to the internet

I got tired of it. So I built DotSync.

───────────────────────────────────

Here's what it looks like in practice:

$ dotsync push
🔒 Encrypting 10 secrets for team access...
📤 Uploading... ✅
Version : v7
Secrets : 10 keys encrypted
Teammates can now run: dotsync pull

That's it. New dev joins? They run dotsync pull. Secrets updated? dotsync push. Moving between your laptop and work machine? dotsync pull.

───────────────────────────────────

The part I actually care about — security:

Everything is encrypted ON your machine before it hits the network. The server stores a blob it literally cannot read. I'm not asking you to trust my infrastructure. You don't have to.

Stack if you're curious:
• Argon2id key derivation (64MB memory cost — brute force isn't happening)
• AES-256-GCM encryption
• Zero-knowledge server (stores ciphertext only)
• Single Go binary, no runtime deps

───────────────────────────────────

Other things it does that I use daily:

dotsync diff → shows exactly which keys changed vs remote (never shows values)
dotsync history → full version history, who pushed what and when
dotsync rollback → restore any previous version in one command
dotsync run -- node server.js → injects secrets as env vars, nothing written to disk
dotsync scan → scans your codebase for accidentally committed secrets

───────────────────────────────────

Free tier covers:
• 1 project
• 3 team members
• 7 days history

That handles most small teams completely free.

───────────────────────────────────

Now the part where I need your help:

I'm looking for 100 engineers to actually stress test this. Not "give it a star and forget" — I mean:

→ Try to break the encryption
→ Find edge cases in the CLI
→ Open PRs if you spot something stupid
→ Tell me what's missing

In return: Free Lifetime Premium. Every paid feature, forever. No credit card, no catch.

I'm hand-picking testers so drop a comment or DM me if you're in.

───────────────────────────────────

GitHub: github.com/Pruthviraj36/dotsync

Install:
go install github.com/Pruthviraj36/dotsync@latest

or just grab the binary from releases (Linux, macOS, Windows).

───────────────────────────────────

Built this because I was genuinely annoyed. Turns out a lot of people are too.

If you've ever typed "check your DMs" to share a .env file — this is for you.