alainmeier

I've been going very deep on device-based identity (I previously co-founded YC S14 Cognito that was acquired by Plaid) and am going to start sharing some of the things I've been learning.

The core takeaway: every AI agent browser system out there talks about having incredible anti-bot, but they're all extremely straightforward to catch. I thought it would be worthwhile to validate a bunch of their marketing claims to see whose stealth systems actually work.

Happy to answer any questions you may have about anti-bot (both on the defensive and offensive)

BlockScore (YCS14) - Intelligent ID verification (https://blockscore.com)

We build APIs and products that help companies fight fraud and automate cumbersome compliance requirements.

https://jobs.lever.co/blockscore/a12f7545-e0dd-49ee-805d-3cc...

If you make the black overlay container position fixed and the window itself normal, you can have the modal scroll within the context of the black overlay. Facebook uses this same method and it's significantly nicer!

Cool idea! I think there are a few things on the usability side that you could do to make it even better:

* Lock the body when you open the modal by setting overflow: hidden. That will prevent people from scrolling around accidentally while filling out the form.

* This is related to the first point, but you should probably position: fixed the modal

* Make the label for the monthly donation clickable - people shouldn't have to find the little check box!

* Lighten the .iframe-subheader-text as it can be pretty low contrast when the background is white

* Add some subtle animations to the open and closing of the modal. It feels very jarring right now.

We are looking for Rails people, hit us up!

https://blockscore.com/jobs

This reminds me of Enigmo http://www.pangeasoft.net/enigmo/

Jumio is actually a complementary service to ours. Jumio pulls information off of identification, but the information is not verified. You can use us to verify and authenticate that information.

Account recovery is a great use case. Any mission critical applications for businesses should require more than security questions or a phone call in order to gain access to accounts.

We agree that front-loading is not always the best solution and are working on systems to help firms with progressive authentication, too.

> Silicon Valley ideologues are proposing secession

I believe no one ever said this; it has been misreported by Gawker and others.

If you're curious, the original talk is here with no mention of secession: www.youtube.com/watch?v=cOubCHLXT6A

Here's a very thoughtful response from Rob, the creator of Soylent answering your very question:

http://discourse.soylent.me/t/comparing-soylent-to-existing-...

tldr; There's room in the market for more than one non-solid dietary product, the goal of Soylent is to be a complete alternative that supports an active life rather than something that just lets you survive, ensure is expensive and low calorie.

The main lecturer co-founded one of the biggest personal genomics companies in the US, so I'm quite certain that he realizes the difference between the two.

The course emphasizes using CS-related skills in any startup for product development and getting insight into your market. Example exercises are things like scraping competitor data, wading through genomic data from the cmd line and building internal APIs for managing company data.

I took it in the winter at Stanford. It was an amazing class - the material was very strong and there's an emphasis on working on ideas that matter. Read: not social startup #5024. Every Thursday we had hackathons that went til 6am where the main lecturer would advise us on our ideas, give feedback on the product and generally teach us about the important things™. That was considered to be v1 of the course, and I know he (the lecturer) plans to iterate on it and make it better every time it's offered.

tl;dr Highly recommended.

Indeed, that one is listed in the known vulnerabilities section of the repo. Thank you for trying it out

I experimented with that too, but the character limitation was what made me go server-side. Cool project though, works really well

There are a lot of single view self destruct sites, but I wanted to make a new one because I wanted to let people host their own instead of relying on the site provider.

I didn't know about those, they look very cool. Thanks for the link.

Hm, yes, added a warning message, good idea. As for your other thoughts, I completely agree. It's a work-in-progress and I figured the best way to figure out what's wrong is to learn from others.

Edit: Also added a link to that discussion next to Nadim's post.

I was just getting this out as soon as possible. There's nothing hard about it, I just wanted to put it out there and keep working on it.

Thanks, and that is absolutely true. That's why it's open source: I want people to host their own version if they don't trust me https://github.com/alainmeier/cryptonote

Good catch, I'll take that out right now thanks.

Edit: fixed. If anybody thinks of anything else, please let me know. This is as much of a learning exercise as anything for me.