HN user

badkins

31 karma

I am the cofounder of Light Point Security and spend my time building the world's most secure web browser.

http://lightpointsecurity.com

Posts2
Comments35
View on HN

Cilent side: Firefox plugin for graphics and extension for browser integration. Server side: openvz for process isolation, webkit for browsing, openssl for crypto. I started using vnc as the protocol but it is too slow. Now I'm using NX.

I am sort of doing the browser in the cloud idea. Except the value of mine is security, not tab management.

If you really wanted tab management, that seems like an easy job for a simple browser add-on.

You can do the automatic sign ups with extensions pretty easily.

As for the offline access native apps: does each site then have to write a native app module for your browser for it to work. This doesn't sound like something you can do without work from each site owner.

The same for locally stored data. You could keep a local copy of any files you upload to sites, but if you are uploading, you already should have a copy. But you can't do anything in a browser to make facebook serve images from your computer instead of theirs. This is another feature which requires work from every site to make happen.

The solutions mentioning IP addresses won't solve the problem. For someone to use firesheep to steal session keys, they have to be on the same network, such as a coffee shop's wifi. Your website will see any request from that network as the same IP address.

this solution will not stop the attacker until he leaves the coffee shop.

that's my point. If something can't be specified unambiguously in code, it shouldn't be in a law. Whether the verdict is innocent or guilty shouldn't rest on who happens to be sitting on the bench that day.

man, I have been thinking this for years. If ilaws were written in code there would be no reason to have judges or lawyers. We have those only because spoken language is ambiguous and open to interpretation.

Maybe in 1998. Computers don't go "out of date" as fast as they used to. I bought my desktop in 2004 and it wasn't top of the line then. What's it got? Dual core 3.2 GHz, 2G RAM, 400 Gig HD. 7 years old and it still comparabe to what I'd get if I bought another one today.

I see a similar problem on my palm pre. I type my creds, hit login, and I'm back at the home screen, but not logged in. I've found out though that if I close the browser, and start a new one, it will be logged in. Weird.

I have to say skip straight to #4. Finding a tech founder will be the best thing you can do to get started. But you better decide what role each nontech has beforehand. I doubt the tech founder will be happy with 20% equity with the other 4 just coasting on the idea for the same amount.

When optimizing, don't do it blindly. Do some actual tests or profiling to find the true bottleneck. It might be a specific query, the DB as a whole, etc. But unless you fix the biggest bottleneck, other improvements won't make much diference. Once you fix the biggest bottleneck, go back and do it again for the next biggest.

This way, you will know for sure if you need another machine, more RAM, or just another table index.

[dead] 15 years ago

I just tried the site from my phone, and had a couple issues. First, the main report page is in flash, so I couldn't see it. That's not a big deal since I can look at the other links at the top of the page to see the results. But on these pages, the vulnerabilities are shown as a collapsed category. When I try to open them, they close back up immediately so I can't read them.

otherwise, the site looked good.

In my first startup now. The biggest thing I have learned is the roughness of the emotional rollercoaster. When things are going well, it is an amazing rush. Bur when things are going wrong, the lows can be absolutely brutal. You NEED someone to provide support in these times. The best trait to have in a startup is persistence, because without it, you will want to give up during these times.

From what I have read (but I do not have personal experience here yet), if you do decide to raise prices, be sure to grandfather your existing paying customers at their current price. People become furious over raising prices of a subscription, even if it is a tiny amount.

To decide if you should think about raising them, I think it would be nice to know what your current profit margin is per paying customer.