HNHacker News
TopNewBestAskShowJobs

casca

5,150 karma · joined September 27, 2011

submissionscomments
casca··on Launch HN: Stacker (YC S20) – Create Apps from Airtable or Google Sheets
Stacker is on my shortlist of no code services to try once I've finished scaffolding in Airtable. Others are Bubble (https://bubble.io), Boundless (https://www.boundlesslabs.com) and Webflow (https://webflow.com/).

Stacker looks nice, but why is it better than the other options that have been around for a long time? At $349/app/mo (or $3480/app/yr) it seems more expensive than the others but perhaps the value is there.

casca··on HTML attributes to improve your users' two factor authentication experience
Perhaps, but you still cannot use this to authenticate to Twilio itself. Twilio requires either using unsafe SMS or some version of EEE[1] in their console.

[1] https://en.wikipedia.org/wiki/Embrace%2C_extend%2C_and_extin...

casca··on HTML attributes to improve your users' two factor authentication experience
While Twilio does a lot right, they still only offer SMS and their own proprietary Authy solution for 2FA for their website. No TOTP (and still no plan to offer the industry standard) means that this has a whiff of hypocrisy.
casca··on Show HN: A searchable list of self-hosted software with screenshots
For ease of setting up self-hosted apps, Yunohost (https://yunohost.org) is less polished than Cloudron (https://cloudron.io) but is free. There's also Sandstorm (https://sandstorm.io) which had funding at some point and was looking slick, but it's not clear if development is continuing.
casca··on Gophish: An open source phishing toolkit
This is a great project and really easy to use if you're even slightly technical. If you're looking for something that someone else manages at the cost of giving away sensitive organizational data, Duo Insight is free from a well respected vendor (Cisco acquisition notwithstanding) - https://duo.com/resources/duo-insight
casca··on My phone is spying on me, so I decided to spy on it
FirewallIP is what's kept me on jailbroken iOS since the 3GS, but the lack of updates (or responses from the developer) and annoyance of dealing with jailbreaking is pushing me towards Android where rooting is well supported and can be done while keeping the OS up to date.

The solution I've settling on has been AFWall+ to ensure that only a limited set of apps can talk at all, and Netguard to control where those apps can talk. The interface is not as elegant as FirewallIP, but it does allow an easier ability to interactively allow and block specific destinations without firing up a text editor.

casca··on Founder to CEO: How to build a great company from the ground up
Download as html: https://docs.google.com/document/d/1ZJZbv4J6FZ8Dnb0JuMhJxTnw...
casca··on Founder to CEO: How to build a great company from the ground up
Download as .doc: https://docs.google.com/document/d/1ZJZbv4J6FZ8Dnb0JuMhJxTnw...
casca··on Open-Sourcing our GDPR Compliance Preparation For Articles 30, 32, and 35
Equifax is a global company headquartered in America that operates in 24 countries, including 3 where people are covered by GDPR: UK, Spain and Portugal[1].

[1] https://www.equifax.com/about-equifax/company-profile/

casca··on LuLu: An open-source macOS firewall that blocks unknown outgoing connections
It's good to see another option for an outbound firewall, but as an industry we still have a long way to go. As with many security solutions, there is a conflict between flexibility and usability. I want:

1) To be able to choose the exact host/subnet/domain that an application can access with a good UX

2) Have someone else curate a list that I subscribe to that handles most cases

3) Work on desktop and mobile

For choosing the exact host/subnet/domain on a per-application basis, the best UX I've seen on any platform is FirewallIP[1], the unmaintained software on a jailbroken iPhone. So many desktop solutions[2] only let you choose Allow everything or Deny everything, Little Snitch and Windows 10 Firewall Control[3] are exceptions, but even they are limited.

The curated list option should be easy enough to support on most platforms. Easylist has shown how well it can work on the browser when combined with uBlock Origin. Install it for someone who is technically naive and they'll just see no ads with no negative experience.

The mobile platform is harder to support as under Android you need to root the phone to get access to the underlying iptables firewall with something like Afwall+, or you run a fake VPN back to the device and filter there which is prone to failure (is it working? has it stopped itself for some reason) and has less flexibility. Under unjailbroken IOS, products like Surge, Potatso2 and Shadowrocket run a local proxy that is similar to the fake VPN under Android, but requires manually editing a text file for configuration and seem to be designed to get around the Chinese internet restrictions rather than privacy.

[1] http://r-rill.net/FirewalliP7/FiPDepiction.html

[2] Glasswire on Windows, Douane and OpenSnitch on Linux, AFwall+ on Android

[3] http://www.sphinx-soft.com/Vista/index.html

casca··on Hundreds of web firms record 'every keystroke'
Also highly recommended for people who are willing to spend a little more time to control where their browser retrieves content is uMatrix[1]. Written and maintained by the most esteemed Raymond Hill who creates uBlock Origin.

If you're on Chrome, don't forget to also install uBO-Extra[2] along with uBlock Origin[2], otherwise you don't get WebSocket coverage.

[1] https://github.com/gorhill/uMatrix [2] https://github.com/gorhill/uBO-Extra

casca··on MTPuTTY – Multi-Tabbed PuTTY
RoyalTS[1] and MobaXterm[2] seem to play in the same space with prettier interfaces and more functionality. None are open source.

[1] https://royalapplications.com/ts/ [2] http://mobaxterm.mobatek.net/

casca··on Sega releasing every console game for free with ads on mobile
Jailbroken iPhones can get FirewallIP[1] which offers Little Snitch functionality where domains and IP addresses can be allowed or denied for each app, triggered by the App's request to access a resource.

Android briefly had WhisperMonitor[2] but that was killed when WhisperSystems was puchased by Twitter.

[1] http://cydia.saurik.com/package/com.yllier.firewall7/ [2] http://www.androidauthority.com/worlds-first-true-firewall-f...

casca··on Official WhatsApp Desktop Clients
Still no iPad client - I wonder what the rationale for this is given that people seem to be paying for an unofficial iPad client that just wraps the web interface with a different useragent.
casca··on AnyRoom – A self-hosted, Twilio-based system for temporary conference calls
Written in Go, source is here: https://github.com/thenrich/rooms
casca··on Jamboard is now available
Any form of collaboration like this requires something server-side that needs to be maintained so an annual fee is not unreasonable. The Microsoft Surface Hub uses Skype for Business so would be backing into an Office365 SAAS account and the Cisco one requires a Cisco Collaboration Cloud one which the only price I can find is CAD3547.99[1]

[1] https://www.cdw.ca/shop/products/Cisco-Spark-Board-subscript...

casca··on Jamboard is now available
The Jamboard is a collaborative whiteboard that costs $5k for a 4k 55" screen plus $600/year ($300/year for early adopters). It's similar to Microsoft's Surface Hub[1], Cisco's Spark Board[2] and SMART Technologies SmartBoard[3].

Pricing seems about normal for products in this space, even a little low. I'd think that the big question that anyone considering buying this should be asking is around Google's history with hardware support and service. This kind of product will often be expected to be used for 5+ years and the dependency of a non-core service from Google could affect that.

As I'm looking to purchase one of the products in this space, here is a little more comparison info in case anyone else finds it useful. Only Google will sell you one of their devices, everyone else goes through resellers with opaque pricing and unpublished RRPs.

Microsoft Surface Hub 55": 1920x1080 @120Hz, 4th Generation i5, Intel HD 4600, 2x HD cameras. Windows 10 + MS Office

Microsoft Surface Hub 85" 3840x2160 @120Hz, 4th generation i7, NVIDIA Quadro K2200, 2x HD cameras. Windows 10 + MS Office

Cisco Spark Board 55": 4k (4096x2160?) display, unknown hardware and software, 4k camera. Cisco Spark and SIP protocols supported, requires Cisco Collaboration Cloud service.

Cisco Spark Board 70": same as 55"

SMART Board 8055i 55"/8065i 65"/8084i 84": 3840x2160, 4k available. Doesn't seem to have cameras for videoconferencing, comes with SMART Meeting Pro 4.0 software to "collaborate in the 4th dimension", whatever that means.

Google Jamboard 55: 55" 4k (4096x2160?) @60Hz. Unknown hardware, software probably Android? Costs $5000. Requires Google's G-Suite subscription, uses Hangouts and $600/year annual management and support fee. EOL is May 2021

[1] https://www.microsoft.com/microsoft-surface-hub [2] http://www.cisco.com/c/en/us/products/collaboration-endpoint... [3] https://home.smarttech.com/interactive-displays-for-business

casca··on Microsoft knows Windows is obsolete. a sneak peek at its replacement
TL;DR: Microsoft has introduced a new version of Windows 10 called "Windows 10 S"[1]. The big differences are that you can only install apps from the Windows Store and you can't join an on-premise domain. This walled garden approach is designed to "enhance securrty" and kill off Win32 with the convenient side-effect of allowing Microsoft to block apps from competing vendors, so you'll use Edge and not Chrome.

[1] https://www.microsoft.com/en-us/windows/windows-10-s

casca··on Flow for Windows
"Flow is a static typechecker for JavaScript"
casca··on How to become the sole owner of your PC [pdf]
Direct link to the PDF: https://raw.githubusercontent.com/ptresearch/me-disablement/...
casca··on Paper Dashboard – Free Bootstrap Admin Panel for Your Next Project
This comes with the Personal License which is free:

* Education/Practice/Training

* Use for print

* Create multiple personal websites

* Create multiple personal apps

* Create one single website/app for one client

For more, you need to pay $19.

http://www.creative-tim.com/license

casca··on Charlie – Free HR platform for small businesses
I'm the target audience for Charlie - long running small business in the UK willing to spend money on a service that saves time and effort. However I wouldn't risk something as important as my HR on a company that has no visible form of financial sustainability. When the VC bubble bursts, my data is gone and it would be irresponsible of me to take that risk on behalf of my staff, suppliers and customers.

Edit People seem to be comparing it positively to Zenefits. From what I can tell, Zenefits raised >$500mm and has $60mm annual recurring revenue (ARR)[1]. They also recently fired 250 people, which is 17% of their workforce. This means that they have around 1500 people working there. If each person conservatively costs $100k/year, their staff costs are $150mm/year so they have a way to go before they're profitable. Then of course there's the ethical issues[2].

I don't mean to imply that there's anything wrong with CharlieHR and I wish them all the success in the world. I hope the product works and that in a few years, I'll be able to use the service of a business that is likely to continue operating.

[1] http://uk.businessinsider.com/zenefits-missed-sales-projecti... [2] http://www.nytimes.com/2016/02/18/technology/zenefits-scanda...

casca··on He Always Had a Dark Side
I question the accuracy of the BBS list. There are some on there that are dated 1992 that I'm quite sure I was connecting to at 300 baud earlier than the dates given.
casca··on He Always Had a Dark Side
There was a small community in South Africa that used to connect to the Internet around that time by dialing into X.25-connected modems. These seemed to be owned by banks or insurance companies, and would allow break-outs to US modems that allowed local calling to ISPs. The information about the numbers and credentials were shared on local BBSs.

Source: was personally involved

casca··on Mossberg: Eero Makes Wi-Fi Simpler and Stronger
I wish them luck as having better wifi in the home is nice, but I suspect that the limiting factor has been the price rather than the lack of technology. One could get a Ubiquiti UniFi AC Lite device for half the price of an Eero.
casca··on Why I don't use ggplot2
Site down, try the cache: https://webcache.googleusercontent.com/search?q=cache:http%3...
casca··on Chart Shows Who Marries CEOs, Doctors, Chefs and Janitors
If anyone wants to improve the usability, data files are:

http://www.bloomberg.com/graphics/2016-who-marries-whom/job-...

http://www.bloomberg.com/graphics/2016-who-marries-whom/pair...

casca··on Carphone Warehouse in customer data breach
Money quote: "We take the security of customer data extremely seriously"
casca··on Psiphon – Uncensored Internet access for Windows and Android
Sourcecode: https://bitbucket.org/psiphon/psiphon-circumvention-system
casca··on Building a Recurring Revenue Consulting Business [audio]
Direct link to audio: http://traffic.libsyn.com/freelancetransformation/FT_009_-_B...
Page 1 of 16Next →