Earlier quoted context omitted.
You mean when using "sign in with" and then using a shitty password for your social media account? If you use e-mail and password with a good password manager, that runs locally on your device and generate good random passwords, it is unlikely you will end up on haveibeenpwned, and even if one website does shit, the blast radius is only one account on one website.
You'll still have your e-mail address exposed, which you may not want if it is to some random porn site. Moreover, password managers do not work if you use multiple devices for log in, which most people actually do.
I tried building my startup entirely on European infrastructure
171–180 of 391 posts
Re: I tried building my startup entirely on European infrastructure
#172Earlier quoted context omitted.
HN is going to skew towards people with password managers & concerns about vendors locking you out. I think most people just want low friction - be that 'Sign in with', or passwordless-based authentication like 404media (you want to sign in? You've been emailed a code)
I'm not sure non-technical people have a good understanding of or experience with password less email login either. While doing tech support I've seen people get very confused at the need to open another app to login in or the fact that they're now logged in in the webview of their email app and not logged in in the app or browser they had been using (especially if the first thing that web view does is pop up a giant…
Thanks for your insight. Outside of being a consumer, and as a security engineer one who appreciates things like passwordless, my experience comes from my employers passwordless rollout. The sentiment is broadly positive, but we would veer to a technical user base, and sentiment misses the nuance you brought up.
Re: I tried building my startup entirely on European infrastructure
#173Earlier quoted context omitted.
Presumably you have a home where you live? That's your physical office. And no you don't need a presence in every jurisdiction you serve. Visa payment network serves the world from the US.
>Presumably you have a home where you live? Yes, but not where my customers live. The whole point of "sovereignty" is to serve customers from a location that is bound by the laws of _their_ jurisdiction, not mine.
Re: I tried building my startup entirely on European infrastructure
#174Earlier quoted context omitted.
Ah yes, MinIO, that open source S3 alternative that got archived last week. To me that's the biggest problem when self-hosting services. On day to day operations, some times it just breaks and the time to get it back varies from a couple of hours to a couple of days. And for the longer term you regularly have to upgrade things yourself which takes time and energy and is stressing for stateful deployment. And then you…
You can still selfhost MinIO you just have to pay. You also pay for software when renting a cloud service so this seems similar.
Re: I tried building my startup entirely on European infrastructure
#175Great post, I did a similar switch mid last year. Hetzner was something I already used, so I just doubled down. I have a single OVH instance where I ma playing with Openclaw, but that was because I was having issues with Hetzner that day on their new instance page (was fixed the next day) I use Bunny for my CDN, I just wish they have the capabilityt to route IPv4 and IPv6 traffic to IPv6 only origins. If your origin…
I used to work for a business in a pretty competitive area, where tactics like fake DMCA requests and abuse cases are routinely used to attempt to take down information, be it from Google, or from the CDN/hosting provider. While at first Bunny support seemed understanding of it, later they unceremoniously blocked the account on the basis of too many complaints having been filed, despite all of them being responded to in due time and being proven false.
OTOH, their support staff would respond lightning-fast, which was a breath of fresh air compared to other CDNs we used before.
I could see myself using Bunny for personal projects, or some non-vital business, but probably not for anything with lots of competition.
Re: I tried building my startup entirely on European infrastructure
#176Thank you for this. I'm in Europe with an established SaaS that's been running in production for years and I've converged on a similar stack (OVHCloud instead of Hetzner). However, I've realized you can stay sovereign and independent in any jurisdiction (not just Europe) just by simplifying your stack and running a few baremetal servers in-house. Just buy a few Mac Studios and run them in-house with power supply back…
I fail to see the point of this when the system you've to decided to run "yourself" is entirely owned and dependent on another American company.
Re: I tried building my startup entirely on European infrastructure
#177For one thing running on bare-metal @ Hetzner is insane value for money versus GCP GKE. Im a third of the running costs and get ~50x resources.
The only aspect im struggling with is full-disk encryption. Although customer data is still encrypred with envelope encryption in the database, i want to migrate to fully encrypted disks (LUKS + TPM) sooner rather than later. If anyone has any resources and/or experience with this, please let know :)
* Gatana AI MCP gateway: https://www.gatana.ai/
Re: I tried building my startup entirely on European infrastructure
#178Earlier quoted context omitted.
For CDN, you can try CDN77, they have servers all around the world. No affil, just they are based in Europe (Prague) :)
Right now, I would only switch from Bunny if they allow IPv6-only origin servers and route IPv4 traffic to it. Also no pricing and a "Talk to sales" only link. Which usually means super expensive, or B2B only. I pay like 10 cents a month on Bunny something
Re: I tried building my startup entirely on European infrastructure
#179Thank you for this. I'm in Europe with an established SaaS that's been running in production for years and I've converged on a similar stack (OVHCloud instead of Hetzner). However, I've realized you can stay sovereign and independent in any jurisdiction (not just Europe) just by simplifying your stack and running a few baremetal servers in-house. Just buy a few Mac Studios and run them in-house with power supply back…
> Just buy a few Mac Studios and run them in-house I fail to see the point of this when the system you've to decided to run "yourself" is entirely owned and dependent on another American company.
Re: I tried building my startup entirely on European infrastructure
#180Earlier quoted context omitted.
> They know everyone in the world will never pause when they see their logo on the buttons. As in, that they won't run away when they see them or that they will all happily use them? If you mean the latter, then it's just false. Also, why do you assume that such product would need to be used worldwide all of a sudden? Having something for the local market would be sufficient to call it a success in this instance. The…
> Also, why do you assume that such product would need to be used worldwide all of a sudden Because I'm talking about not running on any American services. Which Americans can do and do all the time. I don't see how we can reach a point where we can one day not include google/apple sign in and not lose a massive number of potential users. Sure it's possible that one day we'll see a "Sign in with EU login" but below i…