Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I tried building my startup entirely on European infrastructure

coinerella.com

Post reply on HN
Print view View original

291–300 of 391 posts

Re: I tried building my startup entirely on European infrastructure

#291

Post by palata »

quadruple wrote: post #286
bravetraveler wrote: post #222

Earlier quoted context omitted.

I assume they're thinking about the 'offline' style where one would shuffle a database file and probably resolve conflicts. There's an app/extensions nowadays, man! I don't even bother with a VPN, just occasionally push a 'sync' button on the roaming devices [when they return to LAN] . DB transactions [new credentials] averages ~0 per month... but there's plenty of capacity. Works extremely well.

The truth is that even with KeePassXC, I just really do not notice stale passwords across devices. It's just really not a huge deal for me personally. Maybe it is for normal people. I sync my databases maybe once a year if I'm lucky.

Same here. I use pass, and I just don't create/update passwords that often. And synchronising is very easy (it's a git repo).

Re: I tried building my startup entirely on European infrastructure

#292

Post by amunozo »

znnajdla wrote: post #74

Thank you for this. I'm in Europe with an established SaaS that's been running in production for years and I've converged on a similar stack (OVHCloud instead of Hetzner). However, I've realized you can stay sovereign and independent in any jurisdiction (not just Europe) just by simplifying your stack and running a few baremetal servers in-house. Just buy a few Mac Studios and run them in-house with power supply back…

I have no idea how to setup something like this. How hard is to hire somebody competent enough to set a system like this in-house?

Re: I tried building my startup entirely on European infrastructure

#293

Post by throwaway063_1 »

bjourne wrote: post #118
zelphirkalt wrote: post #104

Earlier quoted context omitted.

You mean when using "sign in with" and then using a shitty password for your social media account? If you use e-mail and password with a good password manager, that runs locally on your device and generate good random passwords, it is unlikely you will end up on haveibeenpwned, and even if one website does shit, the blast radius is only one account on one website.

You'll still have your e-mail address exposed, which you may not want if it is to some random porn site. Moreover, password managers do not work if you use multiple devices for log in, which most people actually do.

If you sign in with Google, the site knows your gmail address.

Re: I tried building my startup entirely on European infrastructure

#294

Post by palata »

raincole wrote: post #106
bjourne wrote: post #62

Earlier quoted context omitted.

Heard of haveibeenpwned? You'll end up there, eventually.

Password manager. Before inevitable "what if your password manager is hacked...," what if your google account is hacked / banned?

Agreed. Just wanted to add:

> Before inevitable "what if your password manager is hacked

My passwords are encrypted with a security key. I think it is more likely for my computer to get compromised than for my password manager to leak the passwords.

Admittedly, if I lose all the security keys at the same time, I lose all of my passwords.

Re: I tried building my startup entirely on European infrastructure

#295

Post by palata »

bjourne wrote: post #281
Nextgrid wrote: post #86

Earlier quoted context omitted.

Ending up on HaveIBeenPwned is only a problem if you reuse passwords.

Nope. It is a problem if you reuse email addresses.

Are you saying that you reuse the same password everywhere, but a different email address every time, and you feel confident that having your password leaked won't have repercussions?

I am genuinely confused. Sounds like holding a gun from the wrong end and feeling protected by it.

Re: I tried building my startup entirely on European infrastructure

#296

Post by data-ottawa »

raffkede wrote: post #54

I tried buying a domain on OVH and the experience was shitty was forwarded between different versions of the page GB etc and could not finish the checkout

I tried to use their public cloud offerings and I got caught in a fraud filter for months. I signed up with my real email and real credit card without any VPN. All the staff could tell me was I should try to improve my reputation by paying for additional services for a while.

The issue eventually worked itself out without paying for services I didn’t need and now I have a functioning account, but it was frustrating for sure.

Re: I tried building my startup entirely on European infrastructure

#297

Post by Daegalus »

throwaway772549 wrote: post #175
Daegalus wrote: post #19

Great post, I did a similar switch mid last year. Hetzner was something I already used, so I just doubled down. I have a single OVH instance where I ma playing with Openclaw, but that was because I was having issues with Hetzner that day on their new instance page (was fixed the next day) I use Bunny for my CDN, I just wish they have the capabilityt to route IPv4 and IPv6 traffic to IPv6 only origins. If your origin…

How has your experience with Bunny been? I'm quite split on it. I used to work for a business in a pretty competitive area, where tactics like fake DMCA requests and abuse cases are routinely used to attempt to take down information, be it from Google, or from the CDN/hosting provider. While at first Bunny support seemed understanding of it, later they unceremoniously blocked the account on the basis of too many comp…

To be honest, it's been flawless but since I mostly use it for personal or self hosting, I haven't had or deal with your situation. I have had to contact support and they are very fast.

I also use it to hide and protect my hetzner server.

It works well. My only gripe is the ipv6 thing

Re: I tried building my startup entirely on European infrastructure

#298

Post by throwaway063_1 »

wvh wrote: post #121
TrackerFF wrote: post #42

Here in Norway (and probably Sweden, too) BankID is a widely used authentication system, and most domestic services will use that as a auth / login. Only "drawback" is that it requires 2FA, which is quite trivial today. But there are still tons of users that want their "login with FB / Google / etc." . And a last but: If using such auth systems, one would have to account for all the different systems unique to countr…

Many European countries have decent authentication, banking and payment system alternatives or even innovative solutions. I think, like usually, it's just a problem to break out of national or regional circles into something pan-European. A lot of people seem to agree that relying on a handful of too powerful American companies, especially in the ad and social media space, is a terrible idea and running foul of priva…

There are companies such as Signicat, Scrive and others that provide an API that integrates with different national authentication providers.

Re: I tried building my startup entirely on European infrastructure

#299

Post by cetra3 »

palata wrote: post #267
touristtam wrote: post #233

Earlier quoted context omitted.

How many services do you have subscribed to? from simple PHPBB boards to very much official product and online shops? How do you manage all those username/password? The single point of failure of relying on Google/Apple is real, but so is the manual and laborious process to auth via email/password and the managment that goes with it.

I have 400 entries in my password manager. I manage them with my password manager. There is no single point of failure.

Isn't your password manager a single point of failure?

Re: I tried building my startup entirely on European infrastructure

#300

Post by oytis »

palata wrote: post #266
oytis wrote: post #262

Earlier quoted context omitted.

> I just don't get why people love this. For the same reason why companies implement SSO for employees? It's just easier to have one account with one password to rule them all.

Companies implement SSO to have control over the accounts of their employees... Pretty sure they would still do it if it was more complicated. And that is also why companies don't allow employees to use anything other than the SSO.

Well, it gives you easier control of your accounts too. Just one entry point for everything, no need to track password leaks from dozens of services (you still need to keep an eye on whether Google has leaked your password, but in that event everyone will know and be working hard to fix it).

From the point of view of technical people it would be easier to achieve the same with password managers, but for the rest of us Google provides a smoother user experience.

Post reply on HN