8 ms·
A TL;DR after analyzing Clubhouse app
- stevewodil 6y agoSerious question: Why is an app like Clubhouse using external services such as Agora and PubNub and relinquishing control over their core app functionality (audio rooms)? Wouldn't that be something they would want to engineer in-house?
- pram 6y agoClubhouse atm is probably an MVP, and they most likely don't have the infrastructure talent to build/manage an audio and streaming backend.
- solosoyokaze 6y agoSeems like they shouldn't have a billion dollar valuation if that's the case.
- zepto 6y agoWhy not? If they have product-market fit, they can build the infrastructure they need.
- solosoyokaze 6y agoI don't think they have product-market fit. It's not even public, you need an invite to use it. Regardless, you wouldn't do this as it introduces massive risk to the business and puts you 100% at the mercy of your technology providers (who I hope are currently raking Clubhouse over hot coals for all the cash they have).
- zepto 6y ago> It's not even public, you need an invite to use it. It’s not clear what this has to do with anything, or whether it’s even realistic to say it’s not ‘public’. All existing users have invites to give out. Part of it is a strategy to manage scaling, but the other part is about building a coherent network. It’s not obvious that they ever need to change this. > Regardless, you wouldn't do this as it introduces massive risk to the business and puts you 100% at the mercy of your technology providers (who I hope are currently raking Clubhouse over hot coals for all the cash they have). I assume you don’t have a startup valued in the billions of dollars, so it seems like both they, and then investors know something about this that you don’t, but I could be wrong about this assumption! Feel free to correct me. As for being at the mercy of their providers - normally in business these problems are dealt with by using a contract that sets out what the costs will be and what the service will be for some time period. It’s also controlled by there bing more than one supplier, and supplier reputation. In short, business just doesn’t work the way you are implying it does. If their suppliers are able to ‘rake them over the coals’, that would be a huge failure of their lawyers, and it would be hugely damaging to their suppliers, who would not be trusted by new clients. Exposure to suppliers is also a normal risk which is checked during due diligence. That means their investors attorneys would also have failed.
- solosoyokaze 6y agoThey have a small, private audience that they've extrapolated into a mass market audience. That does not justify a one billion dollar valuation. They do not have the usage to back that up. VCs make tons of awful bets, I would not say they have any particular insight into what will be big and what will not. They fail more than they succeed. Regarding vendors, you're definitely incorrect. Clubhouse has exposed themselves to great risk by relying on another platform. Just a reminder: https://newatlas.com/skype-joltid-litigation-shut-down/12390/ https://newatlas.com/skype-joltid-litigation-shut-down/12390...
- zepto 6y ago> They have a small, private audience that they've extrapolated into a mass market audience. That does not justify a one billion dollar valuation. They do not have the usage to back that up. How do you know? Have you seen their data? Again you say the audience is ‘private’ but that isn’t true. > Regarding vendors, you're definitely incorrect. I’ve explained my position. You have not explained how it’s wrong. I have to assume you can’t. > Clubhouse has exposed themselves to great risk by relying on another platform. You don’t know what risk they have exposed themselves to unless you have seen the contracts and know what the switching costs will be. You also don’t know anything about where in their timeline their own infrastructure development is. > Just a reminder: https://newatlas.com/skype-joltid-litigation-shut-down/12390 https://newatlas.com/skype-joltid-litigation-shut-down/12390... That link proves my point, and disproves yours. eBay didn’t do appropriate due diligence, and didn’t have an appropriate contract. That is a risk Clubhouse can easily avoid, and the eBay/Skype case is now a well known piece of business lore taught in business schools. I assume you don’t know anything about what contracts Clubhouse has with their suppliers. Again, correct me if I’m wrong about that.
- pjc50 6y agoReminder that valuations are a measure of what investors think you might exit for, not an assessment of whether your technology is any good. Even in "tech" startups, the marketing, growth strategy, investor marketing, and userbase are incredibly important. If all those are amazing enough you can IPO before you even launch a product.
- solosoyokaze 6y ago> If all those are amazing enough you can IPO before you even launch a product. No, you actually cannot. For a one billion dollar valuation, it should be expected that the company owns the technology stack used to power the product. If I were Clubhouse's vendor I would be absolutely holding them over a barrel right now. I would have jacked up my costs 10X the second they closed the round.
- lhnz 6y agoThat would surely cause all of your other customers to freak out that if they became successful you'd do the same thing to them. Your reputation for fair prices would be ruined and all of your customers would now be building their own versions of your platform. Effectively your startup would be over, since nobody would ever trust you again. And, presumably your investors wouldn't be very pleased with you, so I guess you'd be looking for a new line of work, too... (That's not say that vendors won't increase their prices, but they will have to do so slowly. Meanwhile the founders of Clubhouse will be aware of this and no doubt building the replacement platform that has everything they will need...)
- solosoyokaze 6y agoI don't think anyone would fault a vendor for charging a startup that built a billion dollar valuation off of their tech stack more money. In fact, I'd question the business acumen of a vendor who didn't do that. Of course, most people know better than to use someone else's technology to build their business.
- adrr 6y agoThe demand and growth for the social network is what the valuation is based off. Marketing/Growth is really expensive and more expensive than actual infrastructure spend for most companies. Users of the social network don't care what the infrastructure is based off of.
- yorwba 6y agoBecause it's the social network that's generating hockey-stick growth, not whatever boring technology enables it. The alternate universe Clubhouse whose developers decided to build their own audio stream multiplexing technology first is still working on it while the actual Clubhouse is rapidly grabbing market share and securing their position. It might make sense for them to acquire their infrastructure providers or clone their technology in-house, but only later when they have the money to actually do that.
- dathinab 6y ago> would want to engineer in-house? It's quite expensive to do so so why not buy a reasonable working solution until you become big enough? Clubhouse is in the end a life style app which from the get to go uses the snake oil of pseudo elitism and exclusiveness to create a flair of it being a high quality serious product independent of weather or not it actually is one. So they do a clever slow grow strategy: - start with invites to grow slowly and with this only have slowly increasing costs of operation - only start with one platform to keep initial cost down - buy in/rent all the tech know-how to reduce initial costs and bring initial products out faster even if it has some quality or security issues - (maybe) hype highly to grow investments fast - later expand to other platforms - later replace bad dependencies with custom solutions
- ErikAugust 6y agoEngineers engineer, product creators create products. Therefore, product creators are running Clubhouse.
- djitz 6y agoInterestingly enough, I believe you inadvertently highlighted a major reason why many projects never manage to see the light of day.
- spamizbad 6y agoThey probably realized it's not worth the engineering effort to bootstrap an in-house audio/voice backend until they know if their idea is viable. Also: For all we know they've already hired engineers who are diligently working on this right now.
- zschuessler 6y agoObligatory unrolled thread: https://threadreaderapp.com/thread/1361866446427488256.html https://threadreaderapp.com/thread/1361866446427488256.html Link to the original (Korean) article: https://theori.io/research/korean/analyzing-clubhouse/ https://theori.io/research/korean/analyzing-clubhouse/ The real tl;dr: Clubhouse made some weird security decisions and seems like you shouldn't trust them with state secrets. Also, weird traffic going to China.
- pxue 6y agoClubhouse will be another snapchat when FB/Twitter clones it.
- stevewodil 6y agoSo Clubhouse will have a market cap of $96 billion? Seems worth it for them then.
- tmotwu 6y agoSnapshat is far more impressive wrt tech and scale. Clubhouse will never get that far honestly - simply too easy to clone even without Facebook and Twitter.
- stevewodil 6y agoSnapchat was the same though which is why I jokingly posed the counter point. Snapchat was just an app to send photos (and later videos) back and forth. Facebook copied it with their Poke app that failed. Maybe the answer is integration with existing apps instead of having a dedicated app? Instagram stories was relatively effective
- robjan 6y agoWay ahead of you https://help.twitter.com/en/using-twitter/spaces https://help.twitter.com/en/using-twitter/spaces
- rasz 6y agorepeat of https://en.wikipedia.org/wiki/Vine_(service) https://en.wikipedia.org/wiki/Vine_(service)
- woliveirajr 6y agoThe ClubHouse price isn't the technology (as it isn't nothing more than audio in some setup). It's in the userbase and attraction: influent people getting onboard, demand based on invitation only, exclusivity, iOS-only... If they don't lose their hands, they'll keep this as a desirable product, and the value will reflect so.
- berelig 6y agoIf an app like Clubhouse wanted to hide communication with Chinese servers would it not be trivial for them to proxy all of the telemetry calls through a US-based AWS or Azure server?
- ylere 6y agoI don't get why startups have such horrible security practices so often. It's much harder when you have to improve a legacy application, but these guys started from scratch! Does it really take that much more time to at least follow basic security practices? Even if one wants "to move and break things fast" I don't see how it would take that much more effort...
- jasonladuke0311 6y agoNot enough appsec people relative to engineers?
- rkalla 6y agoSecurity <---------------------------X-> Convenience The 'X' is where I imagine most startups are focusing for usability and time to market so they survive. Moving the 'X' farther left delays time to market and increases overhead for the company, tech and users.
- levosmetalo 6y agoWe hear the version of every day as "why does Signal still doesn't have feature X? whatsapp, telegram and most other messengar have it since ages." And that's why telegram has at least 10x and whatsapp 100x more users.
- spaceywilly 6y agoMy guess is that there are plenty of startups that put a lot of time and effort into security, you just have never heard of them because they never shipped a product
- atyeshvj 6y agoI did a deep dive last week on this, more details here http://atyesh.com/how-clubhouse-app-is-built.html http://atyesh.com/how-clubhouse-app-is-built.html I dont see them using Agora infrastructure when you join from US
- gnabgib 6y agoThis is great analysis!
- atyeshvj 6y agothanks
- yorwba 6y agoDo you see them transmitting audio data? Because if you don't, you're probably missing something. (In your writeup it looks like you're only looking at HTTP requests.)
- atyeshvj 6y agoI didnt look at websocket data, i looked at all the https traffic, there is just no mention of Agora at all there. On the API call where they return the token and keys for the room, there is this flag agora_native_mute that is set to True. Other than this its all pubnub
- atyeshvj 6y agoit is possible that if you join from China/Taiwan, then they might use Agora to host those rooms.
- jimkleiber 6y agoI looked at PubNub's site and it doesn't appear that they do the type of audio tech that CH would need, or at least if they do, they don't advertise it very clearly. Do you know if PubNub has the tech capability to support ~7k people in one audio conference?
- sudhirj 6y agoHow does UDP work for broadcasting audio? I can understand UDP from a speaker's phone to a CH server, but how would UDP packets be sent to thousands of listeners, many of them hidden in NATs? What would be a better architecture? If I had to build this I'm thinking a fleet of Phoenix/Erlang servers accepting websocket connections and distributed-ly broadcasting each packet over them, think there's some WebRTC tools for this. Any better ideas? Go with memberlist UDP transmission maybe?
- saurik 6y agoAny serious audio transmission is going to be done over UDP as otherwise you get ridiculous head of line blocking issues where a single lost data packet can cause a blip in the audio at least as long as a full round trip. NAT--even broken symmetric NAT--is not an issue, as the client is establishing the channel to a fixed, public endpoint.
- sudhirj 6y agoFor sending the audio from the speaker to Clubhouse, sure. What about the broadcast to all the listeners? Here the server is sending UDP packets to thousands of clients? Not sure how NAT works with UDP incoming into the NAT - isn't UDP connection-less and there's no indication from the server side what the internal network layout is?
- spicyramen 6y agoYou use ICE/StUN servers to solve this.
- the-dude 6y agoThe trick to punching UDP through NAT is to make the client do an outbound transmission first. Now your NAT is keeping an eye on this port and will forward incoming packages to said client. And what the sibling says : all solved with STUN/TURN/ICE. This is decades old tech.
- latchkey 6y ago1. ToS violation to record and publish shows without 'written' consent of all the people in the room (which is effectively not enforceable) 2. iOS only 3. Invite only 4. Not ADA compliant (leaves out deaf folks) 5. Buggy 6. Centralized 7. You can't easily delete your account 8. Pushes hard to ingest your contacts, expanding their social graph I personally tried it and deleted it. No thanks.
- hammock 6y ago>Pushes hard to ingest your contacts, expanding their social graph This is the #1 thing that new apps seem to do. Is it just a growth hack, or is there something nefarious about it? For example, I find it mindblowingly irritating that Telegram, of all things, blasts a notification announcing you've joined, the instant you join, to every other Telegram user who has your number saved in their phone. You can't opt out of this. And that's without even allowing access to your own contacts!
- pjc50 6y ago> Is it just a growth hack, or is there something nefarious about it? Yes. It's a nefarious growth hack.
- nlitened 6y agoAre we really gonna complain that audio-only app leaves out deaf folks? Come on!
- deleted 6y ago[deleted]
- danpalmer 6y agoI think we have to consider whether the audio is the defining feature. Clearly with Spotify, it is, and an expectation that it works for deaf users would be ridiculous. I think with Clubhouse it's not. The defining feature is the network and social interaction, the audio is the format in the same way that on Facebook it's text. We expect Facebook to support screen readers for their text posts, so I think it's reasonable to expect that Clubhouse do something for deaf users. Whether they should be required to do this at an early stage or not is a different question in my opinion, but I think it's fair to consider eventual support the Right Thing To Do.
- riffic 6y agono one should use this app. quite honestly Clubhouse should pull their servers down until these issues are fully mitigated. What a shitshow.