The Fates Have Spoken
I'm more prophetic than I realize: Probably some major piece of functionality I've missed [that] will extend my deadline by another 6 months. I wrote that a couple of days ago, and lo, I've found my flaw. While exploring the next steps needed to create a multi-user solution, I realized that people will need their transaction details encrypted. I'd anticipated encrypting Personally Identifiable Information (PII - names, emails, etc.) but naively assumed that transaction details could be saved in plain text. However, certain transactions would be unique enough to identify a user. I doubt that Slowpoke is going to be the personal financial app for high value targets (or for anyone other than me, really), but here's one scary scenario. Let's assume that I have a very prominent user on the site, Mr. Moneybags. Due to his influence in the community, he's a target of ne'er do wells attempting to manipulate that influence. Well, let's ...