Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Session is shutting down in 90 days

getsession.org

Post reply on HN
Print view View original

171–180 of 196 posts

Re: Session is shutting down in 90 days

#171

Post by zaik »

RandomGerm4n wrote: post #124
seanw444 wrote: post #113

Earlier quoted context omitted.

Or the mature and robust XMPP + OMEMO.

The problem with XMPP is that most clients use an outdated and insecure implementation of OMEMO. This includes popular clients such as Conversations and Gajim. Currently only Profanity and Kaidan use the latest version and you must always assume that the encryption has been secretly downgraded because the other person is using an insecure client. I highly recommend Soatek's blog post on this topic. https://soatok.blo…

I do not understand the security implications of this "Invisible Salamanders" post, but I would prefer XMPP even without any end-to-end encryption over a walled garden like Signal or Session.

Re: Session is shutting down in 90 days

#172

Post by paulnpace »

RandomGerm4n wrote: post #124
seanw444 wrote: post #113

Earlier quoted context omitted.

Or the mature and robust XMPP + OMEMO.

The problem with XMPP is that most clients use an outdated and insecure implementation of OMEMO. This includes popular clients such as Conversations and Gajim. Currently only Profanity and Kaidan use the latest version and you must always assume that the encryption has been secretly downgraded because the other person is using an insecure client. I highly recommend Soatek's blog post on this topic. https://soatok.blo…

Does that blogger discuss metadata, at all? I'm not saying the stuff pointed out in various non-Signal tools isn't valid, but I don't see any discussions on the dangers of metadata.

Re: Session is shutting down in 90 days

#173

Post by fakedang »

Ms-J wrote: post #154
Youden wrote: post #115

Earlier quoted context omitted.

No legal mechanism with such breadth exists in Australia. There was a great deal of overblown media reporting but the law [0] makes it explicitly clear that any request that requires a "systemic weakness", "systemic vulnerability" or anything of the like is null and void. Those terms are defined [1]. Note that it doesn't say the government can't request such a thing, it says that such a request "has no effect". It's…

"No legal mechanism with such breadth exists in Australia." No. See: https://lowendbox.com/blog/australian-police-will-soon-have-... "These new warrant powers include: 1. Data disruption 2. Expansion of targeted devices to include all devices a suspect uses or might use 3. Account takeovers" Australia is extremely draconian.

And a Five Eyes member.

Re: Session is shutting down in 90 days

#174

Post by burnt-resistor »

coldpie wrote: post #14

I feel like a crazy person for having to write this, but: if you are starting a business (yes, non-profits are businesses), then you need to have a business plan. If you launch a business and you have not done the work to have a business plan, then in 99.999% of situations, your business will fail. A business plan includes market & competitive research, a revenue plan based on that research that includes realistic pr…

Not every organization can or should be a business, this is dead wrong. Organizations including non-profits and social ventures need sustainability plans rather than business plans. These are largely similar but the values are different.

Some of the slippery slopes include the wanton privatization and outsourcing of government especially for things that create perverse incentives like for-profit prisons, education, and healthcare, and so-called private-public "partnerships" that usually turn out to be predatory "gotcha capitalism" monopolies that charge people for things that were previously free and paid for with taxes as commonwealth services.

OTOH, another pathology can happen in all sorts of money collecting organizations by putting profits/fees before mission, such as by making worse products or services to sell more of them, seeking maximum fines or fees unreasonably without offering value or a public service, or charging unreasonable fees for things that cost almost or nothing.

Re: Session is shutting down in 90 days

#175

Post by unmole »

coldpie wrote: post #156
anonymous908213 wrote: post #152

Earlier quoted context omitted.

> "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time. This is literally the foundation story of numerous billion-dollar businesses. In fact OpenAI managed to beg their way into a trillion dollars after losing money offering no kind of product for many years. It sounds l…

Those are actually all pretty good examples of what I'm talking about, yeah. Investment money is not income, it is debt. It has to be paid back some time, or else your business will close. So the users who came to depend on the business will get boned when the business either closes or drastically changes as they find a business model. OpenAI, for example, is not profitable as far as I know. I think the users they ha…

> Investment money is not income, it is debt. It has to be paid back some time, or else your business will close.

It's pretty clear that you don't have the faintest idea of what you're talking about.

Re: Session is shutting down in 90 days

#176

Post by zachlatta »

Running a nonprofit is really, really hard and I commend them for doing it. I hope they get through this crisis.

Hack Club almost went insolvent in 2017. We would have, if it wasn’t for 2 friends who stepped in near the end and saved us. Today there are tens of thousands of teens involved and doing amazing things.

I’m disappointed by all the negativity in the comments. I’m not familiar with Session, but raising donor funds is a very different skillset than software engineering and anyone who is trying to do both has my respect.

Re: Session is shutting down in 90 days

#178

Post by Natfan »

ExpertAdvisor01 wrote: post #51
Archelaos wrote: post #11

> In most markets Senior developers often command salaries exceeding $150,000 USD per year Why not outsource this to a cheaper country? For example, here in Germany salaries are about half of that, and the talent pool is excellent.

Add 30% on top of your salary to cover social contributions+ healthcare.

so still 20% less?

Re: Session is shutting down in 90 days

#179

Post by balamatom »

vel0city wrote: post #69
balamatom wrote: post #63

Earlier quoted context omitted.

What's easier: to obtain state ID, or to sign up to a website with your preferred username and password?

Well, I and a lot of the people I'm going to talk to through things like Signal are going to have a state ID regardless as I live in a country where one practically needs to drive a car to function in society. On top of that so many other things just inherently expect one to have a phone number. It would be somewhat odd to not have a phone number for most of the people I know and talk to through platforms like Signal…

That's not what I asked.

Re: Session is shutting down in 90 days

#180

Post by balamatom »

oofbey wrote: post #65
balamatom wrote: post #63

Earlier quoted context omitted.

What's easier: to obtain state ID, or to sign up to a website with your preferred username and password?

Obtaining your first id is obviously difficult. But so is obtaining your first computer. If you’re on good terms with your government, obtaining the id is easier. That’s really the key. Sure if you focus on hostile states this stuff all makes sense. If you’re insistent on hiding from authorities then many things become much more difficult, by design.

That's not what I asked.
Post reply on HN