Live data from Hacker News

Show HN: File0 – An easier way to manage files in serverless apps

file0.dev

131–140 of 158 posts

Re: Show HN: File0 – An easier way to manage files in serverless apps

#131

Why should this be a whole new product and not just a library around S3 sdk? You're mixing up server side and client side.

1. If you switch the default SDK you still need to understand S3 to some extent. At least creating buckets, bucket policies, IAM, CORS headers and a few more. The complexity of S3 comes from it's architecture, not the SDK. In fact I believe the v3 SDK of AWS does a good job at what it is. 2. Feature extensibility. This way FILE0 is not restricted by S3 API limitations. One example being: the AWS SDK doesn't support a…

Ends with .png is a bad heuristic though. If you want to be sure something is an image you should read it as an image, and then rewrite it as an image.

Re: Show HN: File0 – An easier way to manage files in serverless apps

#132
post #129

Earlier quoted context omitted.

R2 is also a solution to much of this. But best of luck to OP!

R2 also makes it hard to figure out how to simply upload a file.

The syntax is a bit obtuse, but you setup creds and then:

    wrangler r2 object put test-bucket/file --file=file

Re: Show HN: File0 – An easier way to manage files in serverless apps

#133

This looks nifty but what is the story on security? It is great to have the File0 code next to the over verbose S3 code. The S3 code contains a few security operations that are missing in the F0 code. What is the story on that?

The file0 package is relying on the presence of an evironment variable F0_SECRET_KEY that you can obtain from the dashboard. The example code is fully functional and secure, the authentication is happening in the background.

If you use env variables for the F0 secret you should do the same for S3? You’ve written the auth there out explicitly, but a new S3 client will pick them up from the environment as well.

Re: Show HN: File0 – An easier way to manage files in serverless apps

#134
post #71

You tell me you don’t have bucket policies, ACL, CORS, multipart, headers, CDN, presigned URLS, and all those other absolutely necessary features, and so your alternative is a non-starter.

He’s not trying to replace S3 for you. The lack of those features means nothing to me.

Re: Show HN: File0 – An easier way to manage files in serverless apps

#135
post #128

Earlier quoted context omitted.

There's a surprising large portion of Hacker News can't grasp the concept of positioning.

It’s a bit sad to position yourself as a magnet for the gullible though.

I don't know being able to put two and two together on an R2 wrapper makes you gullible?

Re: Show HN: File0 – An easier way to manage files in serverless apps

#136
post #12

It isn't just developer experience. - Can I trust you? - Where are your company credentials? - What's the business continuity plan? - What's your support? Sending an email to hi@ may not work, when my application is dead because of some bug at your end.

I agree with your concerns, but wow do I miss the 1990s/2000s era of the internet. Things were so much more fun then. Perhaps a 'mirror to S3-compatible store' feature would address these concerns though. Sure it is extra cost, but it would be a nice de-risking option for early adopters.

> I agree with your concerns, but wow do I miss the 1990s/2000s era of the internet. Things were so much more fun then.

Yeah in one way people were much more casual and curious. But keep in mind everything back then were monoliths. You’d just upload files to your server. Some of the complications of trust comes from the fact that you need microservices with custom API credentials and usage quotas in order to run leftpad at web scale.

If you zoom out and think where we are today it’s absolutely insane that uploading a file 20 years later is a closed source subscription service. Nothing against OPs project, but goddamn look at us.

Re: Show HN: File0 – An easier way to manage files in serverless apps

#138

This seems like a great idea. I've come to think the UX requirements of enterprise and indie dev / start up customers are fundamentally incompatible in the cloud. As an enterprise I want to be able to set restrictions at the org, project, team and resource level for various compliance rules. And I want these rules to be restrictive by default (e.g block public access). However as an individual developer the mere exis…

I understand the different need being espoused here, but I think it paints with an overly broad brush.

My company is what people would colloquially refer to as a startup, although it is by most formal definitions an established company (more than five years old, profitable and self-funded, no external money, defined product and stable customer base).

Under the US SBA classification we are a small business by revenue, and we have three people.

Little frustrates us more than sophisticated features being locked behind enterprise packages, because we tend to select toward enterprise feature sets by default. We are small, but we make it a priority to do business in ways that most small businesses don’t focus on. This has been wonderfully successful for us because we have the kind of customers who will ask “how do you manage backups, and why should I trust you to do that?”

We can answer those sorts of questions with the same kind of robust architecture people expect from much larger providers. We can point to adhering to the 3-2-1 rule with three different copies of customer data (one production, two backups) maintained in three locations managed by two (legally distinct) clouds/data centers, each at least 500 miles apart, two of which are resistant to ransomware attacks (the backups in S3), all of which are protected with hardware MFA. We have a fourth copy as a failsafe in the form of rolling VM backups made every 24 hours, saved for approximately 7 days.

That is in large part due to using S3.

Sophisticated feature sets are extremely valuable for us even if we aren’t an enterprise. They allow us to put our money where our mouth is.

Re: Show HN: File0 – An easier way to manage files in serverless apps

#140
post #130

Earlier quoted context omitted.

It seems like they’re asking you to write out your plans and what makes you trustworthy on the website. Talking to people 1:1 won’t solve that problem. Saying “you can’t trust me” isn’t a good look for a SaaS.

> Saying “you can’t trust me” isn’t a good look for a SaaS. It worked out for Facebook. I’m kinda happy about that since we can now use it as an example. But more importantly, it’s realistic. You should absolutely expect someone to walk away with all your data and zero recourse.

It’s not realistic. I can trust the many other object storage providers.
Post reply on HN