raresp

Hello,

I invite everyone to create a free account and test both the web application and the desktop application. The desktop application covers all known operating systems: Windows, Linux and Mac.

If you are a school or a university, please contact us and we'll offer a customized plan to cover your specific needs. The HiFiles AI assistant was created to help the academic world. Our first users are teachers, students, researchers and analysts. But HiFiles cand also be used by businesses of all sizes.

Feel free to ask me any questions regarding the HiFiles AI chat!

Thank you, Rares.

Congrats on being accepted to YC.

Your website and video presentations looks great!

I'm the founder of Typing AI Biometrics ( https://typing.ai ). We also applied to YC but we weren't accepted. Typing AI indentifies users by the way they type and can also act as a standalone Passwordless authentication method.

In case that you want to add an extra Multi Factor Authentication (MFA) method to your product offering (typing biometrics user identity check, known as keystroke dynamics), we can arrange an agreement.

Hello, I'm the founder of Typing AI Biometrics ( https://typing.ai ) - our product identifies users by the way they type. We focused a lot on development in the last months and we are pre revenue at this moment. We're a team of 5. Do you accept companies that are pre revenue? Should we apply to TinySeed? Thank you.

I'm working on Typing AI Biometrics, a secure keystroke dynamics authentication & authorization API that identifies users by the way they type. https://typing.ai

I understand your opinion, and yes, it's hard to be able to identify the owner of an accountby checking smartphones, tablets and desktop keyboards. The recommendation is to create separate signatures for all of these devices, in this way the typing signature will be more stronger and the keystrokes verification will be more accurate.

We are adding new cases to our algorithm almost weekly, the typing detection keeps getting better.

"trying a new typing layout, or just joining your first touch typing course?"

You have just described the case where your typing pattern is changed. In this case you'll have to just login to your account and update the signature or remove it and create a new one.

"How about when I break my wrist and it's in plaster for a couple of weeks?" - good question.

Your "one-hand" typing is totally different than writing with two hands but we also got this covered. The authenticity detection rate won't be over 90%, but it will still be over 80%.

In case of using the Typing AI as a two factor auth method, you can just skip to using a different factor, such as fingerprint/face recognition or OTP.

Our algorithm learns from previous detections. You will be able to enter different texts. Like writing your email or anything you want.

In the case of having an accident, you will be able to login into Typing AI and update your signature.

"Or what if I'm on the phone with someone, and trying to type with one hand? That would probably lock me out, right? " - good question. Your "one-hand" typing is totally different than writing with two hands but we also got this covered. The authenticity detection rate won't be over 90%, but it will still be over 80%.

Interesting news. But I see a lot of negative comments regarding the biometrics.

Here's my two cents.

I'm the founder of a biometric users identity check solution, called Typing AI Biometrics ( https://typing.ai ). We identify users by the way they type. Typing biometrics can be used as a two factor (2FA) or multi factor (MFA) authentication method.

Instead of combining the usual username + password with an OTP code that you recive on your smartphone or email, you can combine the basic username + password with a typing pattern check, it's much more secure and efficient. The typing signature translated into a 300+ encrypted characters hash, which is (up until now) impossible to break.

You can even remove the username + password and combine the typing biometrics check (known as keystroke dynamics) with an OTP verification. Biometrics are the future of authentication and authorization, because they are unique to each person, but only with the promise of not keeping and sharing the users data.

You can AMA on this Show HN thread: https://news.ycombinator.com/item?id=30130447

I like the fact that you are playing with my words.

I didn't said that we have 1000 id's or that we are limited when creating the typing signatures. I said that we have a 99.9% detection accuracy score.

Each signature translates into a unique and encrypted hash with a length of over 300 characters. Compare that with an 8 characters unencrypted password, or with a 64 characters encrypted password and you'll be able to decide for yourself which security is better and more efficient.

Thanks for your interest in Typing AI.

Very good question.

Simple answer - No, you won't be able to login as another by chance. You understood it wrong. If 1000 users try to login as you, the results of our statistics show that one of them may be able to do it.

But if you combine typing biometrics with other authentication factors, using it as a two factor authentication (2FA) or as a multi factor authentication (MFA) solution, this scenario won't exist at all.

So yes, typing biometrics is a very strong and efficient authentication method.

Our API returns a signature detection percentage. We recommend our users to accept users with a signature accuracy score of over 80%.

What does this means? When you type in the morning or late at night you have a different typing pattern. When you are tired or drunk, you have a different keystroke pattern, but still, our algorithm is able to identify you. You won't have a 90% matching score, but you will still have over 80% signature matching score.

This is why Typing AI's algorithm is better than our competitors.

In 14 September 2019, Europe adopted the PSD2 payment standard which require banks and fintech's to integrate two factor authentication solutions. The typing biometrics can be integrated with other 2FA methods, increasing it's use and importance.

PSD2 is the second revision of the Payment Service Directive (PSD, 2007), which is aimed at developing the market for electronic payments in the EU. The different measures highlight the opening for other companies to use banks payment services (Open Banking) and two-factor authentication (2FA) to increase security in transactions and prevent online fraud.

You can find more details about PSD2 here: https://ec.europa.eu/commission/presscorner/detail/en/MEMO_1...

Thanks for your questions.

Regarding: "However, this is claiming to authenticate me as an individual. But what if my writing improves? What if I have a mechanical keyboard at work but a rinky-dink iPad case soft keyboard at home?"

You will have to create separate typing signatures in order to cover both desktop and mobile apps, because mobile typing is totally different than the computer's keybord typing. Typing AI is able to identify your device and is able to learn from previous detections.

One of our advantages against the competition is that we're using a machine learning algorithm and the platform learns from previous detections. Thus it will be able to identify you even if you're using a smartphone, a tablet or a desktop computer.

Regarding the 99.9% detection accuracy score, I can confirm that in 2021, Typing AI Biometrics made over 300 000 user identity checks from over 30 000 unique users. When mentioning this score we used our yearly analytics, where 1 in 1000 identity checks was a false positive keystrokes detection.

Thanks for your questions.

We provide both desktop and mobile support. But you will have different typing signatures in this case, one for mobile and one for desktop usage. The mobile typing is totally different than the computer keyboard typing.

In order to guarantee strong security, we recommend you to use at least 8 characters for the signature (our competitors ask for over 160 characters). You can use an email address, a word, multiple words, a password. The longer your signature text is, the stronger will be the typing ID.

To allow the keystroke detection to work with arbitrary text you will have to submit multiple sentences in order to cover the entire alphabet. This case is also covered, but most of our users are defining the signature texts and they always use that text.

Typing AI is using a machine learning algorithm and it learns from previous detections, this is one of our advantages against the competition, we can easily cover the case described by you: "I'm thinking of authenticating while typing a post/comment somewhere".

I like your website and the fact that it's translated in multiple languages. What programming language did you used for the website? What about the translations?

I have a recommendation regarding your docs, please show options for other programming languages, not only for Python. You can use some keywords to boost SEO and get multiple customers if you, for example will show PHP, Javascript and Ruby code examples in the documentation.

Also, your "about us" page contains dummy data, it's important to show real data on the official pages if you want developers and businesses to trust your product/company/you as a developer.

In case you're interested in my product I prepared a 100% discount coupon, when you register use this coupon code: 193AE710F68353B8C17774D73BE52466

Thanks for your question. We have both a Firewall and a traditional Antivirus. They work separately.

The firewall blocks bad bods, hack attempts like SQL injections, XSS, CSRF and more.

The antivirus scans for known malware (we have a big list of malware definitions), but we use AI and Machine Learning and the Antivirus learns from previous detections and is able to act alone. The script is able to automatically remove the malware once it is found.

Try Protectumus: https://protectumus.com

Protectumus monitors the website uptime, speed, dns changes, scans the website for malware like a traditional antivirus, blocks bad bots, custom IP's and countries. Protectumos acts as a Firewall. We are the only security company specialized in SEO Security, we offer unique SEO services such as Search engines Cloaking monitoring, Google DMCA Complaints, Blacklist monitoring & removal and more.

Details here - https://news.ycombinator.com/item?id=18295381

Full disclosure: I'm the founder.

You're offering a good service. Many dev and QA teams are looking for this kind of solutions.

Forbidden

You don't have permission to access /wp/the-history-of-a-security-hole/ on this server.

You should update the URL when a user searches for specific words. In this way the users will be able to share the search. It will help the website SEO and will be better indexed.

You should automate the job posting, because now it opens the chat. You should integrate paypal or another payment gateway.

I applied for the S18 and I was rejected. I have to admit that at least 80% of these startups are much better than mine one.

I can also notice that almost all of them are in the public beta, whereas my project is still in development. It seems that this is also an important factor in the approvement process.

What happened with: "we also invest in ideas", "you don't need a finished product in order to be accepted".. Those days are gone :)

Or Wordpress :)

I'm curious about the average of your daily working hours. What will be a good number? 10 is too much? What about 8?

What do you do to motivate yourself?

Are you following the Silicon Valley TV series? In the first episode of the last season they use a botnet network to hack a pizza application, they create a lot of users and generate thousands of orders. They manage to put the pizza company in bankruptcy.

That's just a TV show, but the example is so good.

If you don't ask for email validation and you don't implement an API rate limiting many hackers can create a script that will fill your database with random generated users and you won't understand what happened.

This is a simple example that demonstrates why you should and must implement email verification.

More.. you should block the account when a user enters wrong password 5 times during a 2 minutes period for example (you can adjust these numbers). This is also a good security measurement.

Even more.. you shouldn't fake business numbers. Customers and investors will lose their trust in you.