Viewing profile — pupeno

I think for this crowd, haveibeenpwned.com for businesses is the best way to describe Unbreach. It even uses the haveibeenpwned.com API. In Unbreach, after you signup, you upload a…

Thank you. I'm trying to get it out by the end of July at the latest.

It's linked on the landing page, but to save you searching for it, the sample chapter is on: https://pablofernandez.tech/2022/06/09/one-on-one-meetings-a...

Hello HN. I've been working remotely since the early 2000s and managing teams since 2011 or so, mostly remotely (whenever I can). During the pandemic I helped the non-remote parts …

I'm finishing building a (free) app that checks on you automatically, by email, and when you are not doing well it lets your closest friends know you can use a phone call. I have a…

My company is trying to get some processes in order, have more accountability, be better in general. It's a good thing and I'm helping, even leading some of the projects. But now I…

That is correct. It applies whenever a computer program goes from US soil to non-US soil. Wether it's Apple's App Store, Google Play or carrier pigeon, it's the same.

I think the process had two issues. The main one being several steps that though simple, were not specified anywhere, so, figuring them out took a lot of time and phone calls. It's…

To add to that, maybe Apple is more liable because of their promises to check for quality and problems in the store, while Google allows more things in it. That just means a change…

Apple requires the ERN because Apple is very US centric. For Google, there might be cases in which the ERN is not required because the app never leaves the US (because for other co…

My personal opinion, which is not that of a lawyer, is that yes, nearly every app developer will need an ERN.

https://carouselapps.com

But everybody is vulnerable to Apple pulling your app because it's non-compliant.

I talked to the export compliance department at Apple. There's a chance that they say "yes, get an ERN" because they have nothing to lose and it's safer for them and in fact, there…

If you are pulling through http and http only, yes. If you are using HTTPS, you are encrypting the requests that may contain arbitrary amount of data and the exception doesn't appl…

First, if all your app does is download encrypted information and decrypt it, you might be covered under one of the exceptions. Obviously the App Store is using HTTPS, so it's not.…

They don't enforce it at all. Not even the US BIS really looks at your application to approve it as far as I can tell, because mine was approved instantly. They do have a lot of ch…

This is true, and I think a lot of this applications are breaking the rules. You can easily claim your app doesn't use encryption and Apple will accept it. They don't check to see …

What would you rather do, argue with the US government or get an ERN and focus on your business? I know my answer ;)

I talked to a couple of people at Apple and they explicitly told me that use of HTTPS is not covered under the exception. I think that exception was designed to authenticate licenc…

Throughout the process I found left-overs from the previous processes and yes, it looked much worse. The worst part for me is that there were steps in the process than though simpl…

For exporting to friendly countries via App Store, you'll need an ERN. I'm not sure if the App Store will accept submission from unfriendly countries. It depends which one I guess.…