Comments URL: https://news.ycombinator.com/item?id=44234859

Points: 3

# Comments: 0

Being cloud-based makes this an immediate non-starter for many use cases (and I specifically don't mean large enterprises but especially SMB, NGO, and homelab use).

The pictures must be of insane resolution, as you can zoom in to read even the smallprint on all the posters clearly (imagine Google StreetView like this). And I didn't really notice any stitching, tripods etc.

Also they have cleverly embedded video animations in some of the rooms 360 degree images. These were clearly recorded separately but I still haven't fully figured out how they added them. Very well done and indeed probably almost as good as being there in person.

I for one would have loved some more substance to your post...

Comments URL: https://news.ycombinator.com/item?id=37701679

Points: 2

# Comments: 0

The all-powerful CEO who wants access to detailed customer data? He will be in The Database himself (if not his own, then in the one that a rival company offers). As will his favorite son with the drug habit, and the questionable thing he did on holiday that one time... Might not even be that bad or illegal. But would he want his workers to know those things about him?

The policitian whose party is in power right now? She is in The Database, too. As is her shady half-brother, all the info about the medical procedures she had done while in college, plus her husband's business dealings. Sure, they are legal but will it sound good to her constituency if it leaks? After all, her party might not be in the majority anymore after the next election...

Whenever your unbridled greed for tracking, profiling and surveillance becomes overwhelming, please attend your closest meeting of "Data Collectors Anonymous" and memorize the mantra: IYDTS - It's your data, too, stupid!

Your own daughter will be spied on by creeps. Your mother may be discriminated against when trying to get a mortgage. Whenever you collect people's data for profit or control, you WILL hurt yourself and the ones you love.

Even if you personally are the cleanest Mr. goodie two shoes to ever live, those around you surely aren't - and don't forget, in the end it's very easy for The Database to have some entries about you that might not even be true. Mistakes happen. Good luck proving or correcting them.

If you don't do whatever you can to protect privacy and minimize data collection, every day the chance increases that your own data will be collected and used against you or the ones you love. Then you might not be in a position to stop it anymore. And you may never be happy again...

It was never heard from again afaik - even though Adobe is not known to shy away from an opportunity to increase revenue, so one cannot help but wonder...

[1] https://en.wikipedia.org/wiki/Adobe_Voco

I only wish Delphi had a "favorites" filter for the Object Inspector, so you could quickly access your most needed properties without scrolling (that would save so much time when naming a bunch of components, setting captions or adjusting height and width). Never understood why such an obvious and simple feature was never implemented.

The other thing Delphi should really have is a way to "package and export" (or snapshot) the whole Delphi setup, with GUI settings, installed components etc. (similar to how Adobe InDesign lets you package projects with all font files, graphics etc. included), so you can save them along with a project. I find it still a big pain to open an old project on a new machine and having to spend three hours searching and installing components in their latest versions again. Oh well, maybe one day.

Anyway, so great to be able to do Rapid Application Development once again, the latest Delphi is a win, maybe Embarcadero finally saw the light again. Fingers crossed.

Built a couple of quick & beautiful apps over a weekend and it got me determined to use Delphi more and more now. It has several ChatGPT plugins available for the IDE which work quite well and speed up development especially for someone like me who is a bit rusty, not having used it for some years. The component ecosystem is amazingly still thriving, with companies like TMS and others offering tons of great (and, for academia, free) ready-to-use components for everything you need these days, from HTML components, full SIP servers, WebView2 integration, SVG support to one-click AWS and Azure integration etc. Such an immense timesaver for anyone wanting to create beautiful GUI apps, too.

I only wish Delphi had a "favorites" filter for the Object Inspector, so you could quickly access your most needed properties without scrolling (that would save so much time when naming a bunch of components, setting captions or adjusting height and width). Never understood why such an obvious and simple feature was never implemented.

The other thing Delphi should really have is a way to "package and export" (or snapshot) the whole Delphi setup, with GUI settings, installed components etc. (similar to how Adobe InDesign lets you package projects with all font files, graphics etc. included), so you can save them along with a project. I find it still a big pain to open an old project on a new machine and having to spend three hours searching and installing components in their latest versions again. Oh well, maybe one day.

Anyway, so great to be able to do Rapid Application Development once again, the latest Delphi is a win, maybe Embarcadero finally saw the light again. Fingers crossed.

I see so many use-cases for browser isolation but haven't found a well-working option that doesn't need a full-time admin to set it up, isn't call-for-pricing or doesn't have streaming quality issues.

I did look at Browserbox some time ago and found it very promising, but alas the quality/performance (compression) was too subpar for non-tech users, even when run locally on the same machine.

While you're at it, please also make sure you support "plus addressing", and let people change their email in the profile settings without having to email you...

Email address validation is not easy, you'd be surprised what weird things can be in valid email addresses ;-)

I'm now going to check it out in more detail.

Thanks for sharing this - and happy birthday from me as well.

I really wish that were the case. Alas, more and more sellers think it makes them look cool and enterprise-y if they go the "contact us" route. Possibly the most ridiculous I encountered was a browser plugin startup offering that ended up costing something like $2/month/user with a 20 user minimum but even during the demo they were all about "Fortune 500 this and national ISPs that".

As far as actual very large enterprises are concerned (pardon the pun), there might even be some truth to that: I know procurement guys who would only buy if they got the white-glove/wine-and-dine treatment and would have never bought something with a corporate credit card on a website that said "click to buy 35,000 licenses now" (you can do that with Atlassian IIRC).

Fair enough.

But for 99% of companies (i.e. SMB) it's just annoying to the extreme, especially if you have to do this more than once per year because your org is restructuring, your CTO is actually the CFO and reads marketing whitepapers and case studies to follow the latest tech fads, or you're in consulting.

I say, offer both: An SMB plan with listed pricing (segment further at your leisure) and an Enterprise option with "call us". If you don't want SMB business, be honest about it and say "enterprise only, we only do bespoke, don't call if your budget is <50k".

(I, too, consider price-hiding the bane of my existence and wish I could get those days and months of lifetime back that I spend going through useless "demos" and "quick calls with an evangelist/key account manager/person who nopes out at the first technical question".)

Another strategy is that you prepare a long-ish text that you email to a - perferrably senior - sales contact at each company, ideally one that has been referred to you (again, the above-mentioned sources may help).

Just change the name and first line mentioning their product and outline that "due to internal restructuring" your company will decide yea or nay "on doing a PoC within the next three working days" (i.e. you don't have time to waste on demos), that you are already very familiar with their product in all details from an earlier job, in fact, you want to recommend to your CTO to buy it, and that you wish to receive nothing more than their current pricing for $detailedreqs asap. Be overspecific as to your reqs and specs, so they can't weasel out with "it depends".

You might need to go one or two rounds where they try and talk you into doing calls/demos regardless but they will often CC more senior or local reps whose contacts are not public and if you push back repeating what you said in your first email but shorter, they will usually relent, especially if there are competitors in the field and they're getting afraid that the lead may go cold.

This strategy works maybe about 78.3% of the time but will likely fail if the SaaS offering does require extensive and bespoke customisation for your organisation.

Good luck, I really don't envy you having to go through this, to me it used to be like running the gauntlet.

For the developer, yeah, not for the user though. But "least-effort development" is not generally that meritorious, especially in this area, and arguably a large part of TS's value proposition is about "less effort and less risk" for the user!

For the user this means more effort and more risk if you consider that you've just multiplied your attack surface by combining internal, privileged access to your network (often without any firewalls or per-device authentication) with whatever other skimpy services you use the credentials for. I know we're all supposed to expect zero trust these days and have all these well-designed enterprise IdP systems in place but the reality is starkly different, especially in the SMB space.

I know that there are a lot of things you can do wrong with auth but a company capable of developing something as complex as a zero-config modern mesh VPN should be able to handle rolling their own auth, come on.

And by the way, it's not like they get the third-party SSO right either: Every time we log into the admin panel with our 3rd party (Microsoft/Github/Google) account, we are asked to re-authorize Tailscale ("Tailscale by Tailscale wants to access your data...").

In short, they could really throw some developer hours at this and polish it a bit, roll their own auth (again, can be a tertiary beta option with warning labels at first) etc. This would also leave a good first impression with first time and trial users, and, most importantly, give users an informed choice to leverage the solution that they consider the least effort and least risk for their use case.

Zerotier has had all of that figured out for years, in the meantime Tailscale just locked the thread requesting multiple connection support as "too heated" (after >2 years of no progress).

And putting access to our corporate networks in the hands of Google & Co. and their trigger-happy account-blocking algos means that TS gets an automatic thumbs down from compliance officers at several of our clients. We can read stories on HN every week why such authentication systems are a bad idea, and steadfastly refusing to roll your own account system (all the while justifying it with handwavy security concerns) just seems lazy to me.

I can follow their arguments to some extent, I just don't understand why the TS people insist on exclusionary features rather than letting the user choose. You believe multiple simultaneous connections are somewhat insecure and that's why you won't implement it? Okay, slap a warning sign on it if you want, by all means, but who cares about this if all I want is to connect to 5 branch offices at the same time.

You believe forcing users to use their private, everyday Google or Github accounts for authentication is safer than using a special account registered on TS with safe, unique credentials not used for any other purpose to minimze collateral damage (if the Google or Github credentials get compromised you'd get their emails or a bit of source code, but not access to the WHOLE corporate network)? How about letting the user choose and show some flexibility to use-cases that exist even if you can't imagine them?

Sorry for the rant, again, I want to love TS, it's UX is pretty neat, but something about their supercilious attitude with which they justify their (non-)features just rubs me the wrong way, I guess.

At the risk of downvotes (because I know TS has - rightfully - many fans), if anyone from TS is reading this, I do implore you to be more open-minded and give your users a choice rather than patronising them on multiple fronts when using your product. Feel free to recommend a "best practice" but understand that many users who might love your product will want and have to use it in a slightly different way than you intended - and that should be okay.