Hacker News new | past | comments | ask | show | jobs | submit | brokenbeatnik's comments login

How many hours a month would it take to run if you weren't focused on improving the product, just keeping the site running?

If the answer to that is a decent hourly rate, do that and then just start doing something else.

If it's not, and you aren't able to figure out growth, you may want to shut the doors, as I think it's not likely that you'll see a lot of buyers looking for $6K annual revenue, even at high margins.

I'm not that good at marketing either, but I'm having to figure it out. We programmer types think that "if you build it, they will come", and that a better mousetrap will trump any need for a sales and marketing strategy beyond a good checkout page. The truth is, if you don't figure out some of the marketing basics for yourself, at least enough to know what type of marketing experts to use, you'll be likely to have the same problems with your next venture. You might get lucky and stumble into a hot market, but if you don't, marketing will be the difference between being in the top tier making a double digit percentage of the available revenue in the market and being an also-ran making a pittance.


Thank you, this really put me on thinking. The good part is that I always like to work hard and automate most of my products even if it takes me more time, and in this case it's ~97% automated. The problem with marketing is that I couldn't find my buyers when I tested, most of the success was with forums but at a low volume. So I assumed that I picked the wrong niche where to do business :)


Neat analysis. Do keyless entry cars not have some kind of "too many presses" sensor that would slow this process down or render it impossible by making you start over? I don't know, I'm just asking.


Given the huge security holes already known to be present in the median auto electronics system, my guess is "absolutely not".

There may be some additional consideration for luxury-branded models, but for the standard models, the consideration is primarily whether it works for the auto-buyer every time, not how this could be used as an attack vector.


That’s awfully cynical. It also happens to be completely wrong. I extracted the following form a horrible Answers.com FAQ that was spread over 75 slides (barf):

"If the wrong code has been entered 7 times (35 consecutive button presses), the keypad will go into an anti-scan mode. This mode disables the keypad for one minute and the keypad lamp will flash. The anti-scan feature will turn off after one minute of keypad inactivity."

The Ford Explorer is hardly a “luxury-branded model”, and I’d venture that Ford uses this same system on all their models, across brands.


Except that 35 consecutive button presses is actually the wrong code entered 31 times. That security feature only adds 101 minutes (and about 400 button presses) to the cracking process.

I think I am correct to be cynical.

And why would you subject yourself to answers.com just for that?


Do you think this is an honest assessment?

"That security feature only adds 101 minutes (and about 400 button presses) to the cracking process."

Only adds 101 minutes? I'm incredulous.

The claimed attack time is 20 minutes. By your assertion, this security feature increases the required attack time by a factor of 5. Were this a virtual system, that is trivial, but this attack requires physical presence, or at least the presence of a device.

I think you're cynicism is unjustified, as the extra time makes this an undesirable attack vector in light of the alternatives. Anyone willing to spend 100+ minutes at a car door is just going to use a slim jim or move on to an easier target instead.


In contrast, requiring that each unlock attempt be a separate sequence of five button presses with a ten-second timeout between attempts would make the brute force attack take 15625 button presses with 520 minutes of waiting for timeouts.

The security feature is a useless patch on a fundamentally flawed foundation. It is less effective than fixing the underlying problem, which is that a well crafted attack can rule out one code per additional button press.

Making odd and even numbers discrete buttons increases the attack difficulty by a factor of 32. These things are not difficult or unpredictable. Literally anyone with a calculator and 15 minutes to think about security could come up with ways to improve the system superior to the BS band-aid they came up with.

If someone is attempting this, they will have barely-detectable near-instant access to your vehicle's interior from that moment forward. This isn't just about using a slim jim to grab your valuables. That someone could also smash your window with a rock. What happens when someone wants to photograph your auto registration while you are in your office, and visit your home address at a later time? Perhaps you use the same 5-digit code for something else? The attack space for that something else is now just 32 attempts.

Thinking about security threats requires predicting criminal motives. Cracking the keyless entry system is not a simple robbery tactic. The person doing it is after more than the contents of your vehicle at that instant.


I initially posted to refute this claim:

> Given the huge security holes already known to be present in the median auto electronics system, my guess is "absolutely not".

Which is provably false. There is a system to slow down attackers, and it results in a 5x increase in attack time. The rest is tangential to the point.

Yes, it could be better, but you're trivializing what isn't trivial. A 100 minute increase is not trivial. Yes, it'd be even better if it took hours. It'd be even better if it took years. If you're concerned about the security of your vehicle, why have this system at all? It's a trade-off in convenience for security, which many people can afford. All of these are tangents, but they do not qualify a response of "absolutely not" in response to the original inquiry.

Nothing else you've said is wrong, but it seem like you're grasping at other points in order to justify your cynicism, which was proven unfounded. I won't be baited in to an argument that the safeguards could be improved.


"Given the huge security holes already known to be present in the median auto electronics system"

Would you mind listing some?


The first thing that comes to mind is the vehicle audio system using the same electronic communication bus as its critical engine electronics.


I'm sorry to hear.

First thing: if money isn't a problem, that's really awesome. Put work in a box for a bit. Quit trying to make the business a rousing success for a month or two, and just work 8-2 or 9-3 or whatever schedule works for you and keep the lights on. From 3 on, do the stuff you like to do. Seriously, hold yourself to it. Put it in a box and punch out at 2 or 3 pm or whenever. You have to contain it before you can unpack it and figure out its proper place in your life.

Second: Forgive yourself for not being a wild public success. This startup thing is hard (I know, I've been doing it for 10 years), and it's even harder alone. If you made enough to eat and keep a roof over your head without being an employee, you have something to show for it.

Third thing: Read The E-Myth Revisited by Michael Gerber and the 4-Hour Workweek by Tim Ferriss. I know the second book gets love and hate from people, but I think he locked on to a key piece of wisdom early. It's not about not working or not doing stuff. It's about getting money out of the way so that you can spend your time on things you're passionate about. Those things aren't necessarily fun or easy, but they make you feel alive and purposeful.

If you're a person of faith, talk to your religious leader. If not, maybe sign up for something like meditation, Happify.com or something to reconnect you with things that make you happy or at least get you centered and get your anger, sadness, and guilt processed.

Last but not least, talk to your fiancee. Admit everything you're feeling. Cry it out if you have to. If you can't talk to the person you're going to marry about what's down inside you, it will be a problem later on. I don't know your situation, but assuming it's otherwise good with her and she loves you, she will appreciate your vulnerability and support you where you need it.

You've done good work to get this far; a lot of people don't have the ability, and fewer still have the courage. You don't have to give it up. You just need some real rest.


Geocoda (http://geocoda.com) launched last year, does point storage as well as geocoding, and should be comparable for low amounts of geocoding, and cheaper for large amounts per month (> 250K).


At ProjectLocker (http://www.projectlocker.com) we use Trac for issue tracking for ourselves and as a hosted service. By extension, so do our customers :).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: