Feedback on my first landing page please

Hello fellow hackers,

I'm building a privacy friendly alternative to Google Photos, and it's taking me some time to get things right. Instead of rushing into a release, I felt that I could share my work in progress on HN and get some early users and/or feedback.

This is what I have to show: https://ente.io

Any feedback would be super useful.

Thanks a bunch!

Vishnu Mohandas

on August 21, 2020

Say something nice to vishnu…

Post Comment

2
- I don't think 'end-to-end encryption' is the term you want, your probably after something like 'client side encryption', ssl which google photos uses is 'end-to-end encryption'
- The video nicely demonstrates "google photos" but nothing is distinct, why should I trust you this is more secure? you didn't even show me you putting a password at the start or anything.
- Search like that on a privacy app, while I'll want it, how do I trust it doesn't feed from any back-end? how is all the image recognition for keywords and faces done on my phone without sending it to any 3rd party api?..
- I'd also wonder about the share, if it's a privacy app I might expect to need to put a password again before I lose control of the image...
I like the initial sell, but you didn't buy trust yet that it is different in any way.
hatkyinc

·
6 years ago
·
Reply
1. 2
  
  There is another big issue, photos are usually stored for very long term, as a new unknown brand, IDK if I can trust my images won't be lost... I wonder if a 2nd storage option should be needed to make people comfortable... like lets say have my computer (laptop/desktop) as 2nd source in case you no longer exist... (for savvy security people it might also be partial prof on encryption..) :thinking:
  
  hatkyinc
  
  ·
  6 years ago
  ·
  Reply
  1. 1
    
    This is great feedback at this time. Thank you so much!
    
    I don't think 'end-to-end encryption' is the term you want
    
    You're right, I hadn't thought of the possible misinterpretations of the term. I'll use "zero knowledge" instead.
    
    you didn't even show me you putting a password at the start or anything.
    
    The demo was recorded on a client that did not opt in for the E2EE (/0 knowledge) mode. Which is why features like search and share are working. There is a small note currently that mentions this, but I'll be more explicit.
    
    you didn't buy trust yet that it is different in any way.
    
    I'll also place a privacy policy that clarifies how even if you don't opt in for the E2EE (/0 knowledge) mode, unlike Google I will not own the rights to reproduce, publish or distribute your data (https://www.androidauthority.com/google-photos-worried-privacy-616339/).
    I'll be using git/Notion to draft this so that the users have a voice in coming up with a policy that they are comfortable with.
    
    IDK if I can trust my images won't be lost
    
    Currently I'm using two different object storage providers, and a separate cold storage to mitigate the risks of a data loss. I'll communicate this clearly.
    I also don't have any qualms in letting the client upload to another S3-compatible endpoint, but it's not something I've given enough thought.
    
    Thanks again for your inputs, they have been very useful. :)
    
    Vishnu Mohandas
    
    ·
    6 years ago
    ·
    Reply
    1. 1
      
      The demo was recorded on a client that did not opt in for the E2EE (/0 knowledge) mode. Which is why features like search and share are working. There is a small note currently that mentions this, but I'll be more explicit.
      
      I think a privacy concerned platform shouldn't have a switch to be non privacy concerned. It's putting a huge caveat on your main product promise. Unless I just don't get the sell.
      Maybe have a look at duckduckgo.com for inspiration..
      
      Privacy, simplified.
      We don't store your personal info. We don't follow you around with ads. We don't track you. Ever.
      
      These are strong premises...
      
      hatkyinc
      
      ·
      6 years ago
      ·
      Reply
1
1. I like the explanation behind the name
2. You say that things are encrypted E2E. Does that mean that on the server you cannot access it? Maybe talk more about the encryption part
3. The page looks more like a blog than a landing page...
Good luck with the project!
victorhurdugaci

·
6 years ago
·
Reply
1. 1
  
  Thanks for the feedback Victor!
  
  Does that mean that on the server you cannot access it?
  
  Yes, that's exactly what it means. I will figure out a way to be more explicit about this.
  
  The page looks more like a blog than a landing page.
  
  I was inspired by how hey.com (https://web.archive.org/web/20200302092452/https://hey.com/) communicated their value proposition with zero illustrations, and felt that it was okay for me to attempt the same. I'm hoping that the crowd on HN will be patient enough to give my little essay a read.
  
  Vishnu Mohandas
  
  ·
  6 years ago
  ·
  Reply