alexh1

Steakwallet | Full-time | Remote | https://steakwallet.fi

Steakwallet is building the future of self custodial cryptocurrency management. We have a unique approach to our wallet where we're focusing on what we believe users care most about, yields.

We have a flagship React Native application we've been working hard on, and are about to begin building out our smart contracts and the corresponding ecosystem.

We have two roles open on the engineering side, an experienced React Native engineer and a DeFi native Solidity developer.

Checkout the link below and get in touch if it sounds interesting!

https://steakwallet.notion.site/Careers-at-Steakwallet-935e8...

Double take moment, used to work for Xero during uni ~5 years ago in Auckland.

Great people and company to work for, since then they've continued to grow massively and everyone I worked with then is now team/country/region lead.

Fingers crossed they're back up and running soon.

Are you referring to the analytics tracking (a la Google Analytics) or enforcing limits on user activity?

For a GA alternative there are many and what you should look for is an analytics provider (if you don't want to self host) that rotates salts. Basically user ip hashed with a random salt that changes every 24 hours is good enough to protect user privacy while allowing you to not count every page view as a unique session.

Of course everyone is counted as a new visitor after 24 hours.

On the rate limiting side, great question. I'm currently writing a series of blog posts around creating your own privacy friendly products (Part 1 is targeted at apps, part 2 will be SaaS) where I'll cover this in detail.

Here's a few key takeaways, if you can provide something without collecting any user data, do it. However for anything involving payment you need to at least know the users email (leaving aside cryptocurrency, I'm a big fan but it's difficult to accept as a bootstrapped business). Additionally rate limiting based on usage (which you therefore need to track) is kind of a given. The best we can do here is make sure user data is encrypted.

This is a nice article, echoes my thoughts a little better than the other post [1] on thd front page right now.

That said, there are strong competitors to Google Analytics, that's the one take I don't agree with.

With Portabella (https://portabella.io) we've gone the restricted free tier route. As a bootstrapped company we have to make that tradeoff between wanting users but also safe guarding against abuse.

1. https://news.ycombinator.com/item?id=26059517

I run a business that competes with those companies you mentioned, it's called Portabella (https://portabella.io), an end-to-end encrypted and privacy friendly alternative.

We have a free plan that basically locks you down collaboration wise (limits inviting anyone to your projects).

We haven't had many people convert yet (https://portabella.io/open) but I'm starting to think it'd be better to offer no free plan but a 7 day free trial

Hey HN, recently I shipped PrivaNote (https://privanote.xyz), and also took some time to write a tutorial on how it works.

When looking for new apps to use, I always have a preference for them to be end-to-end encrypted. Hopefully this shows people how easily it can be done and inspires them to create their own.

Portabella (https://portabella.io) is my primary focus (side project wise) right now.

The long and short of it is: privacy friendly and end-to-end encrypted project management. Think Asana/Trello/Jira but end-to-end encrypted.

A few cool things;

- it's an open startup, meaning all our interesting metrics (user sign ups, MRR, etc are public)

- we're about to release our SDK which means more cool projects can integrate with it. It's also how we built our feedback widget (https://portabella.io/feedback), the widget just consumes the SDK

- we offer a 70% discount for non profits and students. Additionally we'll price match based on local purchasing power if our plans are too steep.

Check it out!

Ha, I made something similar last year https://github.com/AlexBHarley/skipper.

It adds a keyboard shortcut to take you to the next top level comment. I think it's broken now because I did it in a really hacky way.

When you get tired of a comment chain in a thread click two (or three, I forgrt) keys and bam, you're into the next conversation.

I'm doubling down on what I believe in after 2020. I started too many things and wasn't able to commit to them properly.

Highest priority is growing https://portabella.io, we're on the brink of MRR and 2020 was about getting the base features out the door. Content marketing, tutorials, guides will be the goal for me here.

https://block-hooks.com is my other focus, I think it has real potential to take off given the growing ecosystem.

Don't think it matters so much but when negotiating salary, abuse it!

One definition of seniority I use:

- requires a base level of knowledge. 5 years at least of development but less if you've done tons of side projects / overtime / etc

- You need to know how things work across the stack and be proficient in a few places. That's where the deep knowledge comes from

- be a leader when it comes to planning, as a senior you can reason about the project well and make longer term plans about it

Portabella (https://portabella.io) is privacy friendly project management. Think Trello/Asana but end-to-end encrypted with no third party tracking.

Hasn't made any money yet but I think it's on the brink

I've also worked on Block Hooks (https://block-hooks.com) but that's very early days. I expect as the Celo ecosystem grows I'll get customers.

Interesting, I was just looking at Qwant this morning.

They seem different to other search engines in that they actually have their own index rather than just proxying to another engine (e.g. Bing)

Haha my bad, responding off mobile vs. desktop

Yeah I chatted with Tom (primary guy behind Etebase) the other day, definitely passionate about this space and knows what he's doing.

Etebase didn't exist earlier this year when I wanted to build Portabella, but I think it's a great option for many platforms.

Social media is a tricky one because it's got such a bus factor wrt. usage, however I'm pleasantly surprised at the abundance of products coming out where you (your data, that is) are _not_ the product.

Analytics - Fathom (https://usefathom.com), Plausible (https://plausible.io)

Project Management - Portabella (https://portabella.io) (disclaimer: I'm behind this one)

Chat - Signal (https://signal.org/en/), Matrix (https://matrix.org/)

I could absolutely go on and on, because I see new privacy focused products popping up in all sorts of industries every day.

The key is that these services are usually paid, which offsets the need for your data becoming the product.

More and more these days I have less trust in free lunches

Take a look at Portabella (https://portabella.io), we're not feature complete with Notion but making serious progress!

I see in another comment that users have a key pair generated for them. What you can do is fetch other users public keys and encrypt data to them, or better yet, generate a symmetric key for a project and encrypt that to trusted users.

It's how we did it for Portabella (https://portabella.io) anyway but that's not based on Etebase/Etesync, just another e2ee tool

Anyone have insight into how they built this? Custom Gantt solution or you think they bought one?

There are no good and free JS gantt libraries, but many, many paid ones. I've been trying to find a good one for Portabella (https://portabella.io) as they're an essential part of project management platforms, but no luck yet.

Fuck. Shit sucks. I myself have dealt with long lasting (> 1 month) pain and it's horrific. Your whole perspective changes, you think life will never be the same. I can't imagine what it's like when these issues stretch into the years.

Cool! Did you know about https://arcentry.com/ when you started this? Sorry on mobile so I won't look at your commit history to see if you started before.

I know the guy behind arcentry so just curious.

I made Portabella (https://portabella.io), an end to end encrypted project management solution, Trello or Asana are the main competitors.

It started as a simple e2ee todo list and kind of spiraled from there, now I've incorporated, am planning Gantt charts, thinking of quitting my job...

Yeah... I'm aware. My list of things to do is extensive and over the last week I committed to a PoC of the app, which is now done. Time to clean up the landing page

https://encrypted-todos.com - End-to-end encrypted kanban

Operating under the codename Portobello for now but friends and family don't like the name. The landing page is atrocious, but the actual app functionality is nearing an MVP.

I guess the big question for me is do I make it realtime for the launch. The handshake for swapping keys and allowing access to a board/organisation currently happens via HTTP polling, but that's not such a nice experience. Currently the whole thing is hosted on Netlify so moving to websockets would require me to set up another service somewhere, not sure if it's worth it before I validate my idea.

I'm going to do an official launch on Hacker News within the next couple of weeks. Still a lot to do as you'll see.

Not currently. Which I agree makes it 10 times more difficult to verify if this is secure.

I'm currently working on adding a kanban/trello board type page to this using the same backend. Maybe after that and cleaning up the code I can consider open sourcing it

This is how Cosmos (https://cosmos.network/) deals with signing transactions, caused _major_ headaches for me trying to figure out why my signatures were invalid when sending them from Node.js

1. PW derived keys. Yes this is on V2 of the roadmap. It is definitely possible today, however a bunch of research our end is required to ensuring the security of private keys we hold (this includes an audit)

2. Logins across browsers. Securing private keys is definitely still part of V1, this is easy locally, just need to make it part of the UI. UI/UX is definitely our weak point

This is a PoC I worked on over the last week while I've had a little bit of free time.

In general I'd love to have an ecosystem of apps (calendars, notifications, etc) built on this type of platform, I've done a lot of the ground wrt. encrypting/decrypting/signing/verifying general operations.

Tech wise it's deployed on Netlify (the backend is just a Netlify function) with:

- Frontend: React, Grommet, web.crypto.subtle

- Backend: Node.js, Mongo, native crypto module