Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Zoldy – Protect your information while in danger or at risk

zoldyapp.com

Post reply on HN
Print view View original

11–20 of 23 posts

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#11

Post by rmoon »

vorpalhex wrote: post #8
bierjunge wrote: post #7

Earlier quoted context omitted.

I'm not saying the app is useless, I'm only saying that it's not as easy as the website states. I personally wouldn't use a mobile app for that, because it's too risky in my opinion. Let's say we have a scenario where someone has confident information incriminating one of my theoretical adversaries and configured Zoldy with the data. What if I hire a thug to steal and destroy the phone? Will the owner be able to stop…

Yeah, a smartphone based deadman is not great for the reasons listed. Ideally you would have key escrow running in a few places ala Shamir and then already have the data widely distributed (bittorrent, ipfs) but encrypted. You can still handle check-in via device but you need a 2nd factor of something only you know, with false values that will trigger a dispersal.

I guess we are all rightly used to seeing the dangers first, there is no deadman, there is one very important reason for me that made me see how difficult it is for some people to defend themselves when all you have is information.

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#13

Post by InGoodFaith »

rmoon wrote: post #4
dna_polymerase wrote: post #3

If you are wondering what this is about and figure it out from the website, they basically want to sell you a dead man's switch as an app. It would be clearer if they'd replace confidential information with the word kompromat.

Sorry you take that impression at first view, although I do understand it living in the world we live. This is not a dead man, I am really alive -ironic just in case :P, it is only me behind this idea, not they. If you want to know anything about how data flows, have a look, please, if you did not https://www.zoldyapp.com/legal-info#privacy . This is how it is, none in the middle, you and the machine.

> This is not a dead man, I am really alive

Hi there! Just a friendly note since it appears that there might be a slight misunderstanding (perhaps ESL?)

The "deadman's switch" [1] is not in reference to you (the creator) being a literal dead person, but rather to the definition of your service being built to operate in the event something (like being kidnapped/killed/incapacitated) happens to the user.

Hope that helps clear up the confusion.

1: https://en.wikipedia.org/wiki/Dead_man%27s_switch

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#14

Post by rmoon »

eganist wrote: post #9

Gonna go out on a limb and speculate that information that sensitive shouldn't be entrusted to SaaS. But if you're that serious about it... ...your pricing is way off. At current pricing, I'd guess that there's probably at least one other revenue source, one that would probably scare a potential customer. The pricing and guarantees should probably be absurd to align with the value proposition (saving one's own life).…

Yes, for me it is serious, I am the one behind Zoldy legally so yes it is serious. As I said it's me and my idea that I founded and financed on my own and I'm still at it.

Those prices try to make really expensive that blackmail you are referring to, in the app you can't put 2 mails the same, so I think there are cheaper ways for that.

And yes considering the situation, these circumstances in most cases generate very strong feelings and emotions; fear, distrust, anxiety, excessive worry, stress ... if on top of that there is a real danger, a huge feeling of loneliness and lack of control is added to the situation, prices take a back seat.

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#15

Post by rmoon »

imwillofficial wrote: post #12

Awesome idea, looks like a decent execution, however, you are in dire need of a copy editor. I had to read through 3 pages to figure out what your service does. Good luck!

I know I need to improve this, now I know better, sorry you had to take that time only to understand the service. I take this really seriously and will review ways to explain better and simpler what it does.

Thank you!

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#16

Post by rmoon »

InGoodFaith wrote: post #13
rmoon wrote: post #4

Earlier quoted context omitted.

Sorry you take that impression at first view, although I do understand it living in the world we live. This is not a dead man, I am really alive -ironic just in case :P, it is only me behind this idea, not they. If you want to know anything about how data flows, have a look, please, if you did not https://www.zoldyapp.com/legal-info#privacy . This is how it is, none in the middle, you and the machine.

> This is not a dead man, I am really alive Hi there! Just a friendly note since it appears that there might be a slight misunderstanding (perhaps ESL?) The "deadman's switch" [1] is not in reference to you (the creator) being a literal dead person, but rather to the definition of your service being built to operate in the event something (like being kidnapped/killed/incapacitated) happens to the user. Hope that help…

Hey there :), I tried to joke about it and I did it really badly, sorry, thats why I said I am really alive, trying to say that there is no switch for me, not yet.

Thank you!

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#17

Post by rmoon »

rmoon wrote: post #11
vorpalhex wrote: post #8

Earlier quoted context omitted.

Yeah, a smartphone based deadman is not great for the reasons listed. Ideally you would have key escrow running in a few places ala Shamir and then already have the data widely distributed (bittorrent, ipfs) but encrypted. You can still handle check-in via device but you need a 2nd factor of something only you know, with false values that will trigger a dispersal.

I guess we are all rightly used to seeing the dangers first, there is no deadman, there is one very important reason for me that made me see how difficult it is for some people to defend themselves when all you have is information.

I reply myself, yes!, it could also be used as a Dead man's switch. Sorry, my bad!

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#18

Post by KennyBlanken »

imwillofficial wrote: post #12

Awesome idea, looks like a decent execution, however, you are in dire need of a copy editor. I had to read through 3 pages to figure out what your service does. Good luck!

Extremely verbose while remaining overly vague about what it does and how it works.

Pushes me repeatedly to install it, even if I don't use it, in case I might need it.

Poor copywriting.

Cringy clipart.

No explanation for who this dude is, what his qualifications are, and why I should trust him? Check.

No assurance the app has been reviewed by any respected third parties.

Yeaaaaaah, no.

The long, rambling, incoherent "sell" that is pinned at the top here really doesn't help (why does HN allow people to do this? It's license to gish-galop.) He's extremely wordy in a way that really reminds me of confidence artists; lots of focus on vague storytelling style language, zero substance.

If you install this app you don't have any business being near confidential information. If the CI belongs to your employer, then have personal and organization devices, with the org device managed by their mobile device management system. Let them worry about it.

OP: go look at Signal and how they market themselves, but note that someone like Moxie Marlinspike gets to say "I made this" and be generally trusted.

You're just Some Dude.

With, as far as I can tell, zero experience in digital/network privacy, security, cryptography, etc.

Go make a name for yourself in security and privacy, then release an app like this. Or at least find people to collaborate with, evaluate your app, etc.

Far as I can tell the biggest problem with this app is that it probably makes whatever CI you upload to its cloud service or load into the app on your device, more vulnerable (for example, apps like Signal try to protect on-device information so data-scarfing tools can't grab it.)

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#19

Post by KennyBlanken »

How do you protect on-device data loaded into the app - specifically from many digital forensics tools used by security consultants, law enforcement, customs, intelligence agencies, and organized crime?

How do you protect data uploaded into your optional cloud service?

How are you poised to protect yourself from potentially nation-state-level actors attempting to control, subvert or compromise this app/service?

Did you develop this app in concert with, or consulting with, any organizations that advise/train high-risk individuals in personal safety? Do they confirm this somewhere publicly?

Why can't I find your name in a google search on anything related to privacy, security, encryption, etc? You barely appear in an google results at all...

What is your education and experience in relation to app development, security, encryption digital privacy? Have you done any research, published anything in peer-reviewed journals, appeared in any conferences, professional or otherwise - in those fields?

Has your app been audited by any established, respected, qualified groups or organizations?

Will anyone established in the fields of security, encryption, or digital privacy vouch for you?

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#20

Post by rmoon »

KennyBlanken wrote: post #18
imwillofficial wrote: post #12

Awesome idea, looks like a decent execution, however, you are in dire need of a copy editor. I had to read through 3 pages to figure out what your service does. Good luck!

Extremely verbose while remaining overly vague about what it does and how it works. Pushes me repeatedly to install it, even if I don't use it, in case I might need it. Poor copywriting. Cringy clipart. No explanation for who this dude is, what his qualifications are, and why I should trust him? Check. No assurance the app has been reviewed by any respected third parties. Yeaaaaaah, no. The long, rambling, incoherent…

Hello, I do not know any service page selling services that do not push you to use it, there is no popups, no ads, no cookies or trackers, I agree, a lot of things to improve, copywriting.., and yes I am just some dude, nobody, like the one you mention at his first post, not saying I am like him.., we all start with one step, here you can read some of my background, it is a public interview at the University I used to work, https://www.uoc.edu/portal/es/news/entrevistes/2009/roberto_... the link is in Spanish, you can use any translator to read about me, the dude.

I do understand how difficult it is to trust, I did not developed Zoldy if you mean that by telling about my experience about digital/network privacy, security, cryptography is zero, if it is important Zoldy has been developed in Spain, and even giving you 3rd parties names that tested the app you will be still in doubts, with reasons to, but no because of me or my knowledge.

Post reply on HN