Hacker News new | ask | show | jobs
by poisonborz 103 days ago
This looks like a good faith project, and OP surely put in time (2y+) and effort. Yet I would have discouraged them to make such a project at this time. OP seems like a well meaning but young, at the start of their career. A proper modern messaging app takes a great technical effort (even while the core concept itself is extremely primitive and could be coded in 10m) and even with that in mind, for end-users it's not really about technology, but trust - on long, long term. And you can't gain that as a blank page dev with no open source karma (or posing as such to stay anonymous).

Putting in so much effort to chase the holy grail of a new concept of a messaging app is like a film student who wants to cram in all their ideas in life to make something epic in movie no. 1. There are some who can stroke genius on first try, but the current project doesn't strike me as such. Props for making a product that is coherent and looking useful on the surface level, but I wish you'd put efforts in something smaller in scope first (or contributing to something already existing) and gaining more of a foothold first before tackling a messaging project.

1 comments

Respectfully, you don't know what you're talking about. you have no idea who I am and are projecting your opinions of me and my efforts on my project (mostly incorrect). A lot of it seems like an attempt to discredit the project.

Scrutiny is something I come across a lot in the cybersecurity space (as it should be). its encouraged to make sure ideas hold-up. Your pushback here lacks substance.

Links to the technical docs are provided in the post. Feel free to reach out for clarity on the details.

Valid and yes, but it's why I wrote it like

> blank page dev with no open source karma (or posing as such to stay anonymous)

The problem as I wrote is not technical. I'd use a video converter or a string parser - that are offline and "download once" - gladly from any OS project. For a chat app that I'd use long term to share private communications would require trust, more contributors, and some background info - not names or an address, but some About section and a sense that the whole thing doesn't rely on the motivations of a single person and that there is some mutual/community oversight.

Understandable concerns, but then we start to talk about my limitation as a solo developer on an unfunded side project.

> blank page dev with no open source karma

I dont want anyone to just "trust me bro". im mainly active on reddit. I ask for feedback on relevant subs. What you see on my app is the result of several iterations from feedback and my learnings. This is a recent post about how encryption is being used.

https://www.reddit.com/r/cryptography/comments/1rix3nb/imple...

I discuss various details on reddit to seek feedback. Feedback on experimental code has always been hard to ask for even before AI slop and i get my fair share of criticism about my code.

I previously worked on a open source version of the project. I created docs and communicated a reasonable amount about the details. It would have been worth collaborating with if i could get some kind of open-source funding. Ive tried grants and donations platforms. for similar resons to you, no grant wants to support this project and nobody donates (completely understandable). In the age of AI, it looks like a weekend project. That version of the project looks like this: https://github.com/positive-intentions/chat

I leave that open source because it demonstrates some core concepts around my project that i cant see anywhere else (webapp, no registration/installation, browser-based signal protocol, etc)... but after how long i worked on it, it seems open source isnt sustainable. That leads me to the latest version linked in this post. its and improvement over the open-source version in every way.... but i try to be clear that its still far from finished, because there are a lot of things to address before promoting this as ready.

While its understandable youd like a project like this run by a team of experts, there are limitation in what i can do beyond open-sourcing and talking about it. Some of the grant applications rejected with reasons along the lines of me being a one-man-band. completely understandable, but experts are not going to hire themselves on this project.

My motivations on this project are simple. I want to create a secure messaging app with the aim for it to be able to support me. it is reasonably open source, but not 100% in order for me to remain competative. (im sure you can imagine what AI is capable of if i fully open source it). I think its works in a fairly unique way, and i think i sufficiently demonstrate it.

Some more details about roadmap and faq's here: https://positive-intentions.com/docs/technical/p2p-messaging...