News for hackers. Stuff that matters.

c0nrad

First company was csper.io (2019), took maybe 3 months till I had my first customer, and then around month 6 I started getting ~1 customer/week, and continued scaling after that. Felt pretty comfortable with the idea and didn't need to pivot/drop.

Second/current one, dmarcdefender.io (2025), took maybe 6 months till I had my first customer, but now it's growing much slower. There's a lot more competition and still trying to figure out where I fit in / how to market it among all the competition. I was originally positioned as a security focused product, but now pivoting to more of a marketing/deliverability product. But to be honest not really sure where it's going, but still fighting the fight.

Re:Show HN: Domain DMARC Checker on Wednesday May 27, 2026 @07:23AM (#48292530)
Thanks for the feedback! The domain checker tool is completely free and unrelated to the subscription. The subscription is for dmarc monitoring (I collect the dmarc aggregation reports and provide insights). I'll see if I can make that more clear.
Re:Ask HN: What Are You Working On? (April 2026) on Monday April 13, 2026 @09:01AM (#47751363)
https://dmarcdefender.io. DMARC service focused on api/integrations. Currently thinking about (1) writing an ml classifier to classify sources, and (2) using rag to automatically generate spf/dkim fix advice for different sources.
Re:Ask HN: What Are You Working On? (February 2026) on Monday February 09, 2026 @07:31AM (#46944531)
Two free dmarc tools: * dmarc domain scanner https://dmarcdefender.io/tools/domain-check * dmarc xml analyzer: https://dmarcdefender.io/tools/xml-analyzer
Re:Ask HN: What Are You Working On? (January 2026) on Sunday January 11, 2026 @01:31PM (#46578259)
https://battlecode.org/ is in January, I look forward to it every year.
Re:Ask HN: What Are You Working On? (Nov 2025) on Monday November 10, 2025 @07:27AM (#45875276)
Building a cheaper DMARC service with no ssotax. https://dmarcdefender.io
Re:Ask HN: What Are You Working On? (June 2025) on Sunday June 29, 2025 @06:01PM (#44416891)
Base health counter for Star Wars Unlimited https://blog.c0nrad.io/posts/swu-health-counter/
Re:Ask HN: Could you share your personal blog here? on Tuesday July 04, 2023 @08:46PM (#36594325)
I do security Capture The Flag (CTF) writeups on YouTube. It's been fun, I've learned a lot, just published my 100th video.

https://youtube.com/@SloppyJoePirates

Re:DiceCTF 2023 Security Challenge Writeups [video] on Wednesday February 08, 2023 @01:46PM (#34712752)
Not sure if this is interesting to the HN crowd, but some challenge writeups from a recent security Capture the Flag competition.
Going back to school for Physics (age 30). It'd be cool to understand why the universe exists before I die.

Ask HN: How to Price a Slack App

We recently released our first Slack App (https://slacklatex.com/) and we're trying to understand the best way to structure pricing.I think the options are: 1. $ / month 2. $ / user / month 3. $ / active user / month 4. $ / api call / month But I'm not sure how to evaluate which is best. (Nor am I even sure what the criteria for best even is)If anyone has any experience pricing slack...

( Read More... | 5 comments | 16 points | on HN )
Re:Slack LaTeX on Wednesday October 13, 2021 @09:31AM (#28851839)
Ah thanks for the heads up. We'll wrap it in a html picture block. (Google's https://web.dev/measure/ recommends webp, but I should have done more research)
Re:Slack LaTeX on Wednesday October 13, 2021 @09:29AM (#28851815)
Thanks for the insight!
Re:Slack LaTeX on Tuesday October 12, 2021 @10:20PM (#28847499)
> Interesting article. How much requests can you support for 20/month before losing money with this stack?

Ha, I haven't profiled it yet. I'm not too sure. But, I think a decent amount. If a slack team with 10000+ physicists signs up, I may need to talk to them offline.

I do plan on doing some stress testing in the future for fun, I'll try to remember to reply here.

> partner frontend

Yep, to repeat what steve_adams_86 said, she did the frontend completely. Usually I'm forced to do the frontend, it was very nice having someone else just do the whole thing without me.

Re:Slack LaTeX on Tuesday October 12, 2021 @09:52PM (#28847345)
Disclosure: I used to work at MongoDB, left 2 years ago.

True, it probably would have made sense to stay completely within AWS. If I didn't know MongoDB very well, I would have used DynamoDB.

But I know MongoDB well, and MongoDB Atlas (the hosted platform) also has a free tier, and it's hosted in ec2, and you can setup VPC peering (so network speed _should_ be comparable to dynamo, but not sure).

Also, Atlas (MongoDB's Cloud Platform) has a really nice "charts" product (sort of like a built in web based tableau) which I use for my internal dashboards (it takes <5 minutes to setup, for stuff like "how many customers do I have", "at what stage in the pipeline are they", "how many renders does each customer average", etc), and they have a nice web based "query explorer", which I randomly use when debugging something, when I don't feel like connecting with terminal.

But yeah, if I wasn't already biased, I would have used DynamoDB.

Re:Ask HN: Solo-preneurs, how do you DevOps to save time? on Tuesday October 12, 2021 @11:09AM (#28840678)
(Profitable Solo founder)

Thankfully lots of tools do most of the heavy lifting. I use k8s, GKE does most of the work for me. It's very nice to have autoscaling for traffic spikes. Same with database (MongoDB Altas), dead simple autoscaling. I would never run my own k8s nor database.

I wrote more details about some of the Ops stuff I do here in a previous similar question: https://news.ycombinator.com/item?id=26204402

Coincidentally I also wrote some architecture notes about a new product last night: https://blog.c0nrad.io/posts/slack-latex/

I think everyone's milage will very, but as general principles, staging is nice, reading docs saves time overall, tests help you sleep at night and make it easier to make changes 6 months in the future, simple health checks (or anything on a critical path) help you catch the real issues that need immediate attention.

Good luck!

https://cloud.google.com/monitoring/uptime-checks

If I remember correctly you can specify a bunch of regions for the health checks to originate from. It was super simple to setup (point and click) and it's nice that it's decoupled from the rest of my infrastructure. When there's a failure I get a notification.

I've been solo running/building a startup (csper.io) for over the last year, it just hit profitability a few months ago.

It's easier said than done, but if you can prevent issues in the first place, things will be much more enjoyable.

Some things that worked well for me:

  * GKE on GCP is pretty smooth. When there's a spike in traffic everything autoscales up, so I don't have to do anything. Nice observability, things just work. Just make sure to set container cpu/mem limits.
  * Along that same note, I use MongoDB Atlas which also autoscales very nicely. It autoscales both up and down very well, saving both money, and making my infra resilient
  * GCP has a lot of monitoring/alerting/dashboards that I take advantage of. Health checks around the world, easy integration of logs/metrics. I find structured logging (json), makes setting up alerts pretty easy
  * Good consolidated logging for when there is an issue you know exactly what went wrong
  * GCP also support application tracing which can make timing issues easy to debug (although it requires a bit of work to setup) (for example if you are missing an index on some db)
  * Automatic deployments (thanks to k8s), there's no checklist for doing a deploy, I just run a single make command. I can't screw that up
  * A staging environment that's a match of production. Plenty of times I've crashed staging, it's worth every penny. It also makes life much less stressful
  * Lots of tests. The tests aren't important for when I'm writing the code, but for months later when I make changes and want to know I didn't mess something else up. I find a good test suite can really help you sleep at night, specially if the test suite covers the critical paths
  * An easy way for users to contact you if there is an issue. No one is perfect, but being able to respond quickly is usually forgiven.
Also "stay-cations" are also pretty nice. I try to do one a quarter. I'm still at home if something does break, but I don't do any work for the week. Just load up a new video game and relax for a week. I call it my "monitoring" week.

Hope that helps!

Re:Ask HN: Show me your half baked project on Saturday January 09, 2021 @01:05PM (#25702730)
I built a little tool to turn the dial on my thermostat. It's called the Thermoshat.

https://blog.c0nrad.io/posts/thermoshat/

Re:Ask HN: Successful one-person online businesses? on Thursday December 10, 2020 @04:37PM (#25379074)
I run https://csper.io. It's a web app that simplifies some web security stuff Content Security Policy (CSP).

I helped setup CSP at a company back when I was an intern (2013). I learned that CSP can be an unpleasant experience.

A year ago I decided I wanted to do something new with my life so I quit my job and Csper was born. Hopefully it makes CSP easier for other people.

It's not super profitable, but it almost pays my rent, no complaints.

Re:Ask HN: Who wants to be hired? (October 2020) on Thursday October 01, 2020 @05:13PM (#24656198)

  Location: Michigan, USA
  Remote: Yes
  Willing to relocate: Yes
  Current Position: CEO/Founder of profitable startup
  Previous: Yahoo! MongoDB
  Resume/CV: https://c0nrad.io, https://github.com/c0nrad
  Email: [email protected]
Looking to make a career change from software development/security into physics research. Only interested in positions involving physics research as a programmer!

Older »