4 ms·

-- EDIT -- [ To give these messages context. This comment could have been construed to say something else. I said 'what makes your app worthless is this' after

-- EDIT -- [ To give these messages context. This comment could have been construed to say something else. I said 'what makes your app worthless is this' after taking about how he describes a lack of technical info and before I talk about the FAQ. I later updated this line to make it clearer. I should have added an edit note but didn't. I apologise. I just added the edit note and this blurb at the beginning to give the rest of the conversation context. This is why there is discussion about lack of designer's tech knowledge devaluing an application. This was down to my poor writing. Wasn't my intent. I hope everything is clearer now. I will no longer be using the edit button on HN ] -- END OF EDIT -- This is worrying: > My co-founder is offline will ask him to add more details on tech used side. You have already got this far. Why do >> you << not know this already? This text in your FAQ, for me, makes your application worthless. [Edited -- Original line could have been read as lack technical information devalued the application. This was not intended] > Do you have access to my account information? > Yes. But with 100s of people using the app, it's really not interesting to run after your details. If your financial data can make world economy crash, please do not use the app. What you have said is this. "Yes we have full access to your account information." Then to follow it up you effectively say this. "We may snoop on your account so if you have sensitive info do not use this application." Its really really bad. Data security should be the most important thing you do. Especially as your app is to do with people's finances. User data should be encrypted. I don't understand why you need to have access to individual clients data. Can you explain please.

kingsidharth 15y ago
Being a designer I do not get the hang of what gem went in this app. SO yeah that's the first part. I do not know how this makes the app worthless. Honestly? Designer doesn't know what goes behind it so app is worthless. Data is not encrypted because shipping a MVP was the main goal till now. But it's on the list yes. Follow up does not say sensitive data. Follow up says if you're data is so interesting that everyone is after it pelase don't share. Edit: PS: Dude when you edit your original comment. do mention you edited it. In the comment itself.
- milkshakes 15y ago
  welcome to HN. i personally think "worthless" might be just a bit rude but the H does stand for hacker, so naturally the audience would be interested in the technology you employ to keep their data safe.
  - kingsidharth 15y ago
    Yeah even after 400+ days on HN. I fail to understand why Designers are not just respectable :|
    - abcd_f 15y ago
      > Designers are not just respectable That would be "Designers living in vaccum." You need to decide if you are a designer or a co-founder, and if you are owning the product or merely contributing to it. Because designers shouldn't be making public comments on product privacy policies.
      - kingsidharth 15y ago
        In referrence to original comment: He mentioned I should know the stack. Privacy policy was not mentioned. Nor did I say being a designer has anything to do with Privacy Policy. I said, being a designer I do not understand what stack it is and that doesn't make the app worthless.
  - evolution 15y ago
    worthless is still rude
    - VonLipwig 15y ago
      The application looks nice. BUT... What else do you call a financial application which hasn't set its cornerstone as data protection. I saw this app and thought it looked nice, I could see myself using it. I then read a bit more about it in the FAQ and I cannot use it. My financial data may not send the world into an economic downturn but it is something I care about and what to keep safe. If this application cannot do that then I cannot put my financial details into it... If this was sorted out the app would look very promising. Such an apparent disregard for data protection isn't acceptable for a financial app and in its current state looks like it shouldn't be used.
viandante 15y ago
Honest question, how do you query encrypted data? And how do you process them (summarize, group, categorize, etc.)?
JonoW 15y ago
Honest question; in a small MVP like this, how would I, as a developer, ensure that I cannot access user data? I understand that you can encrypt at the app or database level, but at the end of the day I would have (or could get) the encryption keys (obviously in an established company there would be protocol about who has access). I guess you could use the users own password to encrypt the data, but then you're pretty stuffed if they forget it. Ideas?
- VonLipwig 15y ago
  Honest answer.. I don't know. Its not so much about encryption. It is more about data protection and restricting data access. In their FAQ regarding if they have access to account information... "Yes. But with 100s of people using the app, it's really not interesting to run after your details." I would expect that in a lot of application's it is possible to pull out client data one way or another. The way this is written makes it sound like client details are sitting on a desk and the only reason they aren't rooting through your details is because you aren't interesting enough. Well.. what happens when you apparently offend the designer on HN and become of interest. The answer should be technically yes but no. A developer could engineer access or pull data from a client database. However, breaches like this aside, there is no formal way to access your account or see your data.
  - JonoW 15y ago
    Yup I do agree with you that the FAQs should come across as though they will do their absolute best to protect your financial data and restrict who can see it.

kingsidharth 15y ago

Being a designer I do not get the hang of what gem went in this app. SO yeah that's the first part. I do not know how this makes the app worthless. Honestly? Designer doesn't know what goes behind it so app is worthless. Data is not encrypted because shipping a MVP was the main goal till now. But it's on the list yes. Follow up does not say sensitive data. Follow up says if you're data is so interesting that everyone is after it pelase don't share. Edit: PS: Dude when you edit your original comment. do mention you edited it. In the comment itself.

milkshakes 15y ago
welcome to HN. i personally think "worthless" might be just a bit rude but the H does stand for hacker, so naturally the audience would be interested in the technology you employ to keep their data safe.
- kingsidharth 15y ago
  Yeah even after 400+ days on HN. I fail to understand why Designers are not just respectable :|
  - abcd_f 15y ago
    > Designers are not just respectable That would be "Designers living in vaccum." You need to decide if you are a designer or a co-founder, and if you are owning the product or merely contributing to it. Because designers shouldn't be making public comments on product privacy policies.
    - kingsidharth 15y ago
      In referrence to original comment: He mentioned I should know the stack. Privacy policy was not mentioned. Nor did I say being a designer has anything to do with Privacy Policy. I said, being a designer I do not understand what stack it is and that doesn't make the app worthless.
- evolution 15y ago
  worthless is still rude
  - VonLipwig 15y ago
    The application looks nice. BUT... What else do you call a financial application which hasn't set its cornerstone as data protection. I saw this app and thought it looked nice, I could see myself using it. I then read a bit more about it in the FAQ and I cannot use it. My financial data may not send the world into an economic downturn but it is something I care about and what to keep safe. If this application cannot do that then I cannot put my financial details into it... If this was sorted out the app would look very promising. Such an apparent disregard for data protection isn't acceptable for a financial app and in its current state looks like it shouldn't be used.

viandante 15y ago

Honest question, how do you query encrypted data? And how do you process them (summarize, group, categorize, etc.)?

JonoW 15y ago

Honest question; in a small MVP like this, how would I, as a developer, ensure that I cannot access user data? I understand that you can encrypt at the app or database level, but at the end of the day I would have (or could get) the encryption keys (obviously in an established company there would be protocol about who has access). I guess you could use the users own password to encrypt the data, but then you're pretty stuffed if they forget it. Ideas?

VonLipwig 15y ago
Honest answer.. I don't know. Its not so much about encryption. It is more about data protection and restricting data access. In their FAQ regarding if they have access to account information... "Yes. But with 100s of people using the app, it's really not interesting to run after your details." I would expect that in a lot of application's it is possible to pull out client data one way or another. The way this is written makes it sound like client details are sitting on a desk and the only reason they aren't rooting through your details is because you aren't interesting enough. Well.. what happens when you apparently offend the designer on HN and become of interest. The answer should be technically yes but no. A developer could engineer access or pull data from a client database. However, breaches like this aside, there is no formal way to access your account or see your data.
- JonoW 15y ago
  Yup I do agree with you that the FAQs should come across as though they will do their absolute best to protect your financial data and restrict who can see it.