Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Solyto – a free, open-source all-in-one personal management app

solyto.app

Post reply on HN
Print view View original

11–20 of 20 posts

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#11

Post by Leomuck »

linsomniac wrote: post #6
Leomuck wrote: post #4

Earlier quoted context omitted.

Fair! I did think about this a lot. Initially, I also thought "8 characters of any kind" are fair enough. Then read a lot and decided a bit more security would be good. But honestly, given what you wrote, I did find myself happy that I had an account before this security measurement. So I guess, I'm of your opinion. However, the app does not enforce lowercase/uppercase. It uses Laravels uncompromised() function which…

This opinion is worth what you paid for it: Don't make your password requirements less strict. Don't encourage people to use weak passwords that are likely shared across sites. That leads to pain and suffering over the long term. If you want to reduce friction for people who don't/won't use a password manager, provide a passwordless option like a login link that is e-mailed to them. Yes, people will likely complain a…

Thanks for your opinion. I appreciate it. I think that makes a lot of sense. I also like the idea of passwordless, I'll definitely have a look at that!

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#12

Post by turblety »

Leomuck wrote: post #8
turblety wrote: post #5

Earlier quoted context omitted.

There really are only two dials you can turn to increase the security of a password, and that's length of the character set (the characters that the user can use in their password) and length of the password itself. People should be using a password manager, then they can set that to 100/200 characters. Even if all lower case, it will be unbreakable (assuming a modern/secure one way hashing algorithm, and the passwor…

Yes, I did read up a lot about password security the last few years. But still, I'm worried a very secure policy restricts people from registering at all, see case above. What would you say is a good compromise? Another thought I have discussed a lot is, this app is not something critical. It's not online banking, it saves very little about you (as little as possible), etc. - so what does this say about the compromis…

Yeah I understand. I think my point is don’t add any other friction to the password strength other than length. If you want more security increase the min length, if you’re happy with less, lower it.

I’d personally have a 12 length password enforcement, a password strength meter and nothing else. Possibly less if you introduce 2fa.

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#13

Post by Leomuck »

turblety wrote: post #12
Leomuck wrote: post #8

Earlier quoted context omitted.

Yes, I did read up a lot about password security the last few years. But still, I'm worried a very secure policy restricts people from registering at all, see case above. What would you say is a good compromise? Another thought I have discussed a lot is, this app is not something critical. It's not online banking, it saves very little about you (as little as possible), etc. - so what does this say about the compromis…

Yeah I understand. I think my point is don’t add any other friction to the password strength other than length. If you want more security increase the min length, if you’re happy with less, lower it. I’d personally have a 12 length password enforcement, a password strength meter and nothing else. Possibly less if you introduce 2fa.

Yea, that's what I gathered as well. So what do you think about checking against compromised passwords?

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#16

Post by goobatrooba »

Leomuck wrote: post #10
goobatrooba wrote: post #7

Earlier quoted context omitted.

Hi Leo, using a valid email and password I get a "There was an error with your registration" error. Also I wonder... How sustainable is this? Free is great, but what is your income/maintenance model? E.g. you offer calendar which even many paid email providers don't offer.. :-) Thanks for what looks at the surface like a very sleek tool.. i haven't been able to see it on substance.

Oh, and I missed the middle part of your post. Fair question! I do think it is quite sustainable. For that to make sense you might have to know me better, but my perspective is I have a good paying job, I have money and especially time to spare and I want to make things better. So I'm honestly happy to spend money AND time on this to be sustainable. I have a very capable root server to run this on and I have money al…

Danke Leo, Seems to work again! Very nice and fast onboarding. To be honest I signed up without a specific use case so have to figure out what I really want to do with the tool, but I'm impressed at the sleekness and speed. Eversthing sleek, unitary design, feels well developed and mature. Very impressive for a freshly launched product!

Small suggestions:

* maybe default-disable some of the modules people are less likely to use (e.g. finance). After doing the selection the onboarding-per-module tries to go through everything - maybe easier to start with 3-5 default and then invite people to add? It feels a bit overwhelming if you don't really know what you want yet. But that might all just be me. * I noticed DE and ES are "du" but FR is "sie", not sure that was intended, I guess it's AI misinterpretating the prompt (or maybe the eternal DE-FR feud made the "vous" a conscious choice?). The German is also a little clunky but that's quite normal for translations.. * Some info on how to export would be great (e.g. MD notes) * Maybe you want to make a slight narrative change, from "sign up for free" (which I read first as indicating that a payment requests comes later) to "sign up - it's free" and summarise a bit your philosophy as above to make clear that you intend to keep it that way - but maybe it's already there and I missed it :-)

Tolle Initiative und immer schön zu sehen wenn Leute versuchen die Welt besser zu machen!

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#17

Post by Leomuck »

goobatrooba wrote: post #16
Leomuck wrote: post #10

Earlier quoted context omitted.

Oh, and I missed the middle part of your post. Fair question! I do think it is quite sustainable. For that to make sense you might have to know me better, but my perspective is I have a good paying job, I have money and especially time to spare and I want to make things better. So I'm honestly happy to spend money AND time on this to be sustainable. I have a very capable root server to run this on and I have money al…

Danke Leo, Seems to work again! Very nice and fast onboarding. To be honest I signed up without a specific use case so have to figure out what I really want to do with the tool, but I'm impressed at the sleekness and speed. Eversthing sleek, unitary design, feels well developed and mature. Very impressive for a freshly launched product! Small suggestions: * maybe default-disable some of the modules people are less li…

Hey gooba, danke danke danke! I'll have a go through all your points tomorrow, greatly appreciated! Especially since when you work on something for so long, you just can't see things with fresh eyes anymore. So it really is great to get feedback like yours. So thanks again!

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#19

Post by Leomuck »

goobatrooba wrote: post #16
Leomuck wrote: post #10

Earlier quoted context omitted.

Oh, and I missed the middle part of your post. Fair question! I do think it is quite sustainable. For that to make sense you might have to know me better, but my perspective is I have a good paying job, I have money and especially time to spare and I want to make things better. So I'm honestly happy to spend money AND time on this to be sustainable. I have a very capable root server to run this on and I have money al…

Danke Leo, Seems to work again! Very nice and fast onboarding. To be honest I signed up without a specific use case so have to figure out what I really want to do with the tool, but I'm impressed at the sleekness and speed. Eversthing sleek, unitary design, feels well developed and mature. Very impressive for a freshly launched product! Small suggestions: * maybe default-disable some of the modules people are less li…

Now a little more in-depth response. Thanks again for your feedback, I could relate to all points you mentioned.

- You are totally right. The "Try it for free" could very easily hint at cost down the line. I have changed it :) - Cool that you understand so many languages :) And thanks for your suggestions. Looking into it right now. Translations is one of those things.. doing it by hand (not me, but someone with good language knowledge) is very time-intensive, but yea, AI can be hit or miss for it. - I'm definitely thinking about starting with a leaner set of features. My only fear would be that people forget there is more to it. But that should be solvable via UI. - Definitely going to add more info on export! That's a shortcoming right now which I aim to fix this week. - Regarding philosophy, I'll think about it. I'm not great at marketing (and don't even want to look at it as "marketing"), so I'm always a little unsure what messages belong where. But good to hear, that a more detailed part on this could be good.

Re: Show HN: Solyto – a free, open-source all-in-one personal management app

#20

Post by Leomuck »

aristech wrote: post #15

Looks a lot like desktop usage. I have created https://github.com/qrauth-io/qrauth open source. I can help with integration for Passwordless login if you want. Also bonus social login by default

Thanks :) I'll have a look and get back to you if I want to go this path!
Post reply on HN