291–300 of 361 posts
Earlier quoted context omitted.
How bout the part where they're sending expiration date and last 4 digits over http?
That isn't secure information... Emails often contain that info, which is kind of worse than HTTP.
Earlier quoted context omitted.
Something that smells bad to me: Homejoy was facing multiple lawsuits at the time they shut down ( http://www.forbes.com/sites/ellenhuet/2015/07/17/cleaning-st... ). Is this some kind of end-run around that?
That was my first thought. Company facing impending doom? Do a runner with the assets, wait for the dust to settle, and try again with a different name and logo.
Earlier quoted context omitted.
how are you finding these related domains?
Tried this footprint and found another: https://www.google.com/search?q=%22We+are+Netionwide%22&oq=%...
Perhaps a lame attempt to corner the market? Not sure how well that would work out with the exact same content - google punishes such things.
Earlier quoted context omitted.
Typically investment contracts employ non-competes to prevent founders from starting new businesses in similar spaces. Clearly this person's previous actions aren't the most ethical but I'm curious what his strategy is around this.
Aren't all non-competes illegal in California?
Earlier quoted context omitted.
That isn't secure information... Emails often contain that info, which is kind of worse than HTTP.
But it is secure information. If I recall, last 4 digits were part of how the CIA chief's e-mail was hacked recently.
Any time you use last-4 as something secure, you're doing it wrong.
As mentioned above, last-4 is sent by email frequently, and email passes, unencrypted, through intermediate servers all over the Internet. Any compromised host can observe all of the email that passes through it.
Any process that uses last-4 to unlock a password or otherwise as a secure token is broken by design.
I'm one of the founders of Homejoy. I'm still very passionate about the home service space. After leaving Homejoy, I started FlyMaids, where we're exploring a few different angles on the space. We recently acquired the customer and service provider data from Homejoy. We're a small team that has been focused on moving quickly while bootstraping. We tried to quickly test different approaches, but we realize now that we…
I'm actually tempted to write a response so harsh I'd probably be banned from hacker news. Instead I genuinely hope that YC will force companies taking the 7% into a no selling on data policy; I'm not saying that is easy to write but I am saying this situation without response smears YC, something I'm sure could be avoided in future.
On the other hand, I think that proprietarily-generated data would be fair game if anonymized. A massive data set showing how people's usage of a given service varies based on age, geography, type of phone, whatever -- I think selling that to a third party would be morally and ethically defensible. [0]
There are likely a lot of edge cases here (the LinkedIn example above might be one), and it's an interesting topic. With all that said, recycling all of Homejoy's users' account info into a new enterprise without their explicit consent seems pretty plainly wrong to me.
Prediction: the fact that there's still no word from @sama or @paul probably means that they're working hard to provide a clear and decisive written response to this incident -- probably one that amounts to a new YC policy of some sort.
[0]: IANAL and not sure whether the possibility of an eventual sale of such user-generated data would need to be mentioned in the service's T&Cs from the get-go.
I'm surprised that BusinessInsider still doesn't have an article about this. Shame on you Business Insider! It's already been an hour! I expect a headline "How Homejoy came back from grave to haunt us"
http://www.businessinsider.com/aaron-cheung-brings-homejoy-c...
I think it goes without saying that there is nothing remotely legitimate happening here. The fact that Aaron posted this comment and expected anybody to believe it is remarkable. That being said, I spent 5 minutes researching Aaron Cheung and I was astonished by what I found. He has a Twitter account, but has posted exactly 0 times [1]. He has an HN account, but has posted exactly 0 times [2], and only commented twic…
More importantly, this is gratuitously personal. Stalking expeditions are not welcome on Hacker News, whatever one's opinion of the story at hand. Please don't do this on this site.
We detached this subthread from https://news.ycombinator.com/item?id=10467925 and marked it off-topic.
Earlier quoted context omitted.
Typically investment contracts employ non-competes to prevent founders from starting new businesses in similar spaces. Clearly this person's previous actions aren't the most ethical but I'm curious what his strategy is around this.
Aren't all non-competes illegal in California?
I'm one of the founders of Homejoy. I'm still very passionate about the home service space. After leaving Homejoy, I started FlyMaids, where we're exploring a few different angles on the space. We recently acquired the customer and service provider data from Homejoy. We're a small team that has been focused on moving quickly while bootstraping. We tried to quickly test different approaches, but we realize now that we…
How did you get my information? We acquired Homejoy’s domain and customer information through an ABC process. Our intention is to improve and then relaunch Homejoy’s cleaning service. We were testing a new model using Fly Maids, one of our testing brands. As evidenced today, we made some mistakes.
Why is your email and website so misleading? When we contacted customers, we didn’t tell them we were Homejoy relaunching because we wanted to gauge reception to our new model without the influence of Homejoy’s brand.
As a result, we scared many customers, who expected the worst had happened to their data. We should have told customers upfront who we were, what we were testing, and used original content.
Do you have my credit card info? No, as of Oct 28 2015, we deleted all credit card info, including the last 4 digits. Also, the Homejoy Stripe account has been permanently shut down so no one can get access to it in any manner.
At no point did we ever charge a Homejoy customer’s credit card.
How do I delete my account information to ensure that it is not used in any way? Please go here http://goo.gl/forms/YPdJlYJ9Pn