Hacker Newsnew | past | comments | ask | show | jobs | submit | more danielpal's commentslogin

I wanted to take a quick second to dispel this myth. Although I collect watches and I have several high end pieces, including grand complications - none of them are good "investments". You will likely loose money on 99% of watches you can buy and it certainly applies 100% to all new Rolex watches. There is just a small amount of watches that actually appreciate like Patek application pieces or the Vintage Rolex Daytona ('Paul Newman) or 1980's Milgause. The chance you buy one of this is 0% unless you know what you are doing.

So your friend has a 25 year old Air King? This is not a vintage piece, it's just an old piece. Worth? $1500 - $2000 depending on condition. Secondly, in 25 years he had to service it at least 3 times. Each service cost? $400 - $800 depending on the issues. If he polished it, $500 more.

So all in he's put in $1,200 + ~$1,500 = $2,700.

Now had he place $1,200 in the S&P 500 on 1991 (exactly 25 years ago), he would have at the end of December 31 exactly $13,588 dollars (~9.78% on average per year).

I don't understand how you can say he beat the S&P many times over.


He meant Seikos&Pulsars


Wow, congratulations. This is what google should have built for Google Drive and Docs. Best Show HN this year.


When I saw this I was actually surprised that there's a need for it. I assumed Office Online has this built in (never used it).


I'll go the opposite of most of the comments here.

Assuming a NO attitude right from the start is probably not the way to go. Telling them to "Pound Sand" or just plain NO is not in your best interest. First, you should let the B investors know about this - ASAP. Second, you should start by emailing the GP at firm A and asking him to clarify why they think "you should pay" their legal fees.

With this information, you should consult your legal counsel on how is best to proceed. Most likely the A VC firm feels like you didn't negotiate in good faith and you made them spend money with no intention to accept their offer. You should in this case talk to the GP at that firm and show him that you wanted to close a deal with them and you even made them aware of another offer and asked them to reconsider the terms.

Most of this issues are easily solved if you discuss things with the other party. Assuming a NO attitude from the start, just brings everyones worst character and might land you in a legal dispute.


Meeting with a firm who is actively out to collect money from you is a dangerous path for a young founder without a legal background. You don't want to accidentally give them any more fuel for a potential lawsuit via something you say during that meeting.

I do agree that talking to legal counsel is wise... but not necessarily VC B's legal counsel, as that relationship will skew towards what is good for the VC, not your company.

Also, don't be afraid of getting sued. One of my lawyer friends always says that small businesses tend to harm themselves by over-avoiding lawsuits. If you grow enough, lawsuits will happen, and you need to know how to deal with them. Act from a position of knowledge, not of fear.


This is one of those things where you have his lawyer talk to your lawyer. This guy shouldn't be talking to anyone himself.


Absolutely no.

The best thing he can do is listen and get more information. You can't resolve a dispute without talking, and it only ends up in court if you don't resolve it. Yes he could ask his new investors for advice, and yes he should have called his lawyer the minute he heard, but the best way to clear things up is to listen to the VCs who are unhappy.

This is a completely different situation from the reason not to "talk it over" with the cops.


But this is not a dispute, at least not yet. It is just a one-sided request. They can just talk to their lawyer, ignore it, and wait to see if the VC files a suit. Short of that, there is no obligation to even reply. So why go into potentially dangerous legal territory at all, when you are perfectly in your rights to just discuss it with your lawyers, but then ignore it?


This is a VC who wanted to invest in the last round, not an attacking army. There's no reason to leave the relationship on a sour note.


This doesn't make things necessarily more sour. Firstly, given the evidence in the post, it sounds like a BS claim (although only a lawyer would know). Things are already sour. That being said, reaching an amicable arrangement via legal proxy doesn't make the situation sour at all. Getting lawyers involved is not an aggressive action - they are the subject matter experts. Just like you wouldn't have a software architect dealing with relations, you don't put a founder in charge of legalities.


This is all terrible legal advice. If you think there may be a legal dispute, you should absolutely not communicate with the other party. You should involve your own lawyer, and decide whether and how to communicate after considering the ramifications.


> you should absolutely not communicate with the other party at all

One very slight, but important, addition - don't even indicate that you are looking for your own legal advice. Mum's the word. Totally a slippery slope albeit plausible argument: "Investor A" might just be waiting for you to make a legal mistake. Even that post could work against you (deleting it could be worse). Keep your lips sealed and share the whole ordeal once you have reached postmortem, if you still want to go that route and your lawyer gives you the go-ahead.


as someone who has been in a similar situation

do not respond. don't even acknowledge receipt. call your lawyer, and call your existing VC. tell them to call their lawyer too.

end of story.


+1 this answer.

You'll most likely end up in the same spot as other suggestions: NOT paying the bill. But the WAY you approach things (very good advice here) makes all the difference.


One of the biggest issues with Nest is that they pretend to be a serious company that takes cares of your home needs (security/monitoring, fire & gas prevention and heating) but their products are toy like in that respect.

However I own 3 cameras and the fire alarm. The fire alarm, is worthless, I eventually disconnected it given the large amount of false positives. Then there are the cameras. I travel a lot so wanted a system that allowed me to monitor my home remotely for security purposes. However, I soon found out they are pretty much gimmick and any burglar will by-pass their security. If you own a nest cam, be aware that if the cam is disconnected from your Wifi, it will take 30 MINUTES FOR NEST TO NOTIFY YOU.

What did I learned? Burglars will power off the electricity in you house upon entry - to prevent alarms etc from sounding. This will bring you Wifi and your cameras down. Don't worry, 30 minutes later, or approximately 20 minutes after burglars have left, you'll know.

You'll also only be able to set notifications via email and push, so if you are sleeping you're out of luck. I was thinking of hacking a system with Twilio to do an automated call upon the email being received, but after finding out that it would take 30 minutes to even be notified I gave up.

Nest is cool, easy to setup and the cameras look nice, but they are toys. Other products might be hard to setup, look uglier but work. I'd rather they did both, but if I have to chose between ugly and works, and beautiful but doesn't - i'll take the first.


Lets be serious here ... how often to people cut the power to the house?


Fwiw, a few UPS devices (for battery backup) could help out in this scenario.


This is what most security companies do if they are any good. A battery backup with cell connection. Can easily replicate it yourself using a mobile hotspot on an old phone. Along with some usb battery packs. Pretty cheap and easy to make a solution. (Under $50)


The premise is that having this on the cloud is supposed to make it easier and not require this complex setups. For instance, not needing a recording station in the house that can be stolen or a Telco chipset with an alternative power source.

If you do this on the cloud, you can call from a cloud provider and record outside the house. Nest could easily call you from Twilio after 1 minute of being disconnected and it will achieve the same.


Dropcam isnt a security cam. Its for checking on cats or kids. If you need security UPS then you can rig up a battery pack and a backup mobile hotspot with an old phone. I dont see how Nest could reproduce this anyways without adding a simcard and gsm to their cams.


It would require me to back-up the ISP router, the Apple Wifi router and 3 cameras - so 5 UPS. Yet even if I did that, given that my Internet connection comes via fiber, if they cut the Fiber, I am still out-of-luck.

It's as if an alarm company said, we will notify you after 30 minutes if someone comes into you house.


I just read both complains. This one is frankly ridiculous. The fact is that Kyle incorporated the company before he met Jeremy. And from Jeremy's complain, he is trying to build the case by saying he was more competent than Kyle. Yet why didn't he continue with the idea by himself if he was so competent?

The only proof he is using to say he was a co-founder is a YC application. This is I hope a non-binding document. I hope judge agrees that the only way to get equity in a company is if its granted in the form of shares. Jeremy was never granted any shares so he own's 0 shares.

He also acknowledges he did no provide any IP to the company. So if he didn't provide any IP and didn't receive any shares he should be entitled to 0.

I really hope Kyle wins and Jeremy is found guilty of tortorous interference and is obligated to pay for Kyle legal fees.


> Yet why didn't he continue with the idea by himself if he was so competent?

The complaint clearly explains this. He just got married and needed a job to pay the bills.

I really hope you just missed this.It would be a shame if you are one of the few entitled folks who doesn't understand the real struggle most people feel to support themselves and their family. The type of person who thinks everyone has the same opportunities you do. I really hope you just missed that line in the complaint.


> The only proof he is using to say he was a co-founder is a YC application.

Which, according to Jeremy's complaint, claims that the application was submitted by Kyle and repeatedly described Jeremy as a co-founder and their equity arrangement.

> He also acknowledges he did no provide any IP to the company. So if he didn't provide any IP and didn't receive any shares he should be entitled to 0.

That's not how it works, but that aside, this complaint claims that Jeremy provided "self-driving car concepts, technology, intellectual property, and expertise". I don't understand your statement about "he did [not] provide any IP to the company".


The only proof he is using to say he was a co-founder is a YC application. This is I hope a non-binding document. I hope judge agrees that the only way to get equity in a company is if its granted in the form of shares. Jeremy was never granted any shares so he own's 0 shares.

That's not how it works. If you and I decide to start a company and you give me a verbal agreement that it's a 50/50 split, then it's pretty strong evidence of the ownership of the company unless some other document supersedes it.

From what I can tell so, no such document exists.


What about the incorporation docs? :)


> This is I hope a non-binding document.

There's no such thing as a non-binding document.

A promise or agreement or contract can be binding or non-binding on any or all points. A document is just what it states, something that could potentially document the parties intent and agreement or lack therof.


Wow I hope no one ever founds a company with you.


Why? Im merely pointing out how the law works, and that if you want to win a legal dispute, do it when the opposing party has incentive (or better, a requirement) to quickly resolve the issue.

Not sure why pointing this out makes me not a good person to found a company with.

I have separated from a co-founder and I made damn sure we had an agreement in writing defining the terms of the separation. Didn't take much, no lawyers, just a one page agreement, three people each with a copy, all with signatures. All still good friends.


Because you're waiting to maximize your leverage and make a play for yourself. That's a bad quality in a teammate.


Assuming Jeremy's story is true, then by the time he exercised that strategy he'd already by forced out by his co-founder and was no longer a "teammate".

I don't think it's fair to judge the ethics of a person by how nicely they respond to being screwed over.


So is cutting someone out of a company. My point is that this probably became an emotional issue. If that's the case, it's not hard to see how someone would wait for an opportune moment to assert ownership.

But, since we don't really know all the facts, if this was a mutual parting of ways, then I agree that it's a terrible thing to do.

The bottom line is we really don't know what happened. I can at least see how a reasonable person could walk this path if they feel they've been maligned.


I think you can fire people without it making you a bad founder. At least, I hope so.


And I think you can demand the compensation you believe is legally due without being considered a greedy selfish asshole.


How is that not greedy and selfish?


...Because you have an agreement with someone that you were a 50/50 co-founder, and that agreement is on paper? Sorry, are you privy to some kind of proof that invalidates Guillory's central evidentiary claim -- in the same way that Zuckerburg and Facebook were able to show that Paul Ceglia fabricated a contract -- or are you just arguing from circular reasoning that Guillory is a greedy asshole and thus his claims that he was unjustly forced out must, QED, be false?


I think the claim is that demanding what is rightfully yours is greedy and selfish. I don't know whether I agree in this case (probably not), but there have been cases in my life where I do agree.


That is correct.

It's that "rightfully yours" bit that really bothers me. Where does that come from and why is it so obviously rightfully yours? It takes some gumption to assume you're in the right. This land is rightfully mine because I bought it from someone else who genocided a people, but okay great, it's rightfully mine, I feel super great about it.


Legal documents are part of a negotiation, not a casual conversation. If one side says they owe you nothing, you come in saying they owe you everything. You meet in the middle.


Same as with patents and everything else.

The one's filing them and demanding what's rightfully theirs are selfish, the one's not filing patents are less selfish.


To you and everyone else attacking him, you're conflating his explanation with his personal character. That's not fair.


Tell that to Eduardo Saverin and the Winklevoss twins.


That's not how I want the law to work. We should strive for better


It indicates your attitude towards how one should act.

Obviously, one should act in their own self interest and use the law to it's fullest extent, not consider the social consequences of being a dick.

Good luck sir.


Which side is being more dickish in this case is still very much in dispute, which is why it's going to court.

You seem to be certain one side is looking out for their self interest much more than the other, which you have no way of really knowing because you are just another person commenting on a discussion on the Internet.

Unless you are personally involved in this matter, and know more than what has been publicly reported so far? And even then, how would we know you are not being biased in your judgments by your involvement?


The amounts of money involved make everyone involved pretty greedy, I don't understand why that's so controversial.

Ya'alls notion of "rights" is pretty disturbing to me.


So you are against anyone being compensated at the amounts under discussion?

Which is a coherent, defensible position. Sounded like you were selectively accusing one actor in this dispute as the "greedy" one, which I think is why you got so much push back on your comments.


Not against anything, just think it's fair to label those seeking large amounts of money as dick'ish and greedy.

If money is your goal great, more power to ya, but I'm gonna call you a dick and not want to work with you.


So you're implying that you'd never work with YC or Vogt or any of their investors? GM is spending $1B to acquire Cruise, which is a vast sum for a small company that has been around for 3 years. Even 20% of that would be a great payout for all involved, and think of how much money GM could have left over to continue to revive the dormant U.S. industry, and U.S. fortunes at large. By your standards, if YC and Vogt were ethical actors, they'd ask GM to reduce the offer, because building things and innovating is itself an honest reward.


> By your standards, if YC and Vogt were ethical actors, they'd ask GM to reduce the offer, because building things and innovating is itself an honest reward.

What do you need a reward for at all?

Why are you trying to build something?

By my standards, your motivation matters a lot, it sounds like you think people deserve rewards for doing things, I don't think that makes very much sense. Gold star you did the right thing, bullshit.


Being aware of risk angles and protecting yourself is not the same thing as condoning exploitative behavior.

I'd want my cofounder to think through how somebody with legal leverage over our company would act. You should want that too.


> I don't think so, it's the right way to play it. Wait until you have maximium leverage and then play your legal cards.

That sounds like condoning exploitative behaviour to me. Is that the sentence we are both talking about?


The company left a liability floating around, which was a disgruntled co founder. Like a liability on your balance sheet.

And if you're the disgruntled co founder, this is your most opportune moment to extract maximum equity value for yourself.

What I don't understand is, if a company did this to another company, people are all like 'yeah, that's how the market works', but when a person does it to a person, they're all like 'you're heartless and not playing nice'. Why the hypocrisy?


if anything, i would say this make it a +1 to start a company with hodoof, atleast he has some sense of contractual/legal requirements imo... its not about being a dick, you and all parties should know what you getting into/not getting into make sure you have written contracts/agreements in place incase something changes


If you look at gross profit (164.4 million for the first semester 2015) it's a much more comparable metric to what SaaS revenue would be. The problem with overall revenue in this market it that it's a low margin and more that half of it goes to the credit card companies.

With ~328 profit per year, they are getting about 8X multiple - very comparable to Hubspot, Zendesk which are doing terrific in the public markets.

For anyone getting stock options, expect as much as 6X-8X multiple on revenue if your gross margin is >60% and your year-to-year growth is >70% - the 10X-14X days are gone. Else, if year to year growth is below 70%, or gross margin less that 55%, expect 2X-4X.


Founder of @Authy here. Happy to answer any questions.


Why do you refuse to delete accounts? It is my data and I want it to be removed. How can I feel safe about my data if I cannot remove it if I choose not to continue using your service.


I would also really like to hear an answer to this question.


Sounds like it’s more like "Happy to answer _some_ questions”...


Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information.

This is not in the spirit of 2FA.


An in my opinion crucial information is missing in the discussion that unfolded here 4 years ago; still this discussions comes up as a top result when searching for "authy telephone number required" and that is why I want to add something for current and future references: The phone number is only needed to recover access to your encrypted data that is stored on authys servers.

If you're questioning yourself whether authy is trustworthy because they require you to provide a phone number for a 2FA-TOTP-Method that does technically not require it at all(!) and thus could pose a potential security degredation, check the FAQ about account recovery/passwords here: https://support.authy.com/hc/en-us/articles/115001950787-Bac...

Quote: * The Backups password is never sent nor stored in our servers for your security * Like the Backups password, the App Protection PIN (and optional biometric data) is never stored in our servers * Like the Backups password and App Protection PIN, the Master Password is never stored in our servers

the question still is if you trust those promises - but as authy is backed by twilio (thus lots of 2FA-SMS are already processed by them) the chances are good those guys know what they do and do it responsibly


Hi, good question. The reason for the phone number is that we depend on your phone number as part of your identity. Almost all 2-FA systems today use the phone number as a way to send you the code via text/phone call. If you read my blog post: blog.authy.com/twilio you'll see we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous.

I also understand why some people don't like clouds backups. The good news is that backups are off by default and optional. If you don't need them, you can keep them disabled.


This tweet indicates you're using TOTP, slightly modified from Google's implementation:

https://twitter.com/authy/status/498244613766139904

  @benmcginnes Yes we are RFC 6238 TOTP compatible. 
  Same algorithm as GAuth but 7 digits, 256 bit keys and 10 seconds window.
So why do you still need my phone number? There's no network connection or SMS required to generate those TOTP codes. I'm not buying the story that you need to text me or call me unless you're storing the seed/token centrally and sending it to users upon request which I strongly disagree with. That should only be stored on the user's device.


For those interested in how TOTP is implemented, here it is in Python [1] and Ruby [2]. It is really simple and understandable. Oh, and did you know you can secure your SSH connections using TOTP [3]?

This stuff is no more complicated than storing password hashes. Having a nice client app is good, but Google Authenticator is good enough. So instead of using authy and relying on a third party, why not get something like [4] and be done with it?

[1] https://github.com/nathforge/pyotp

[2] https://github.com/mdp/rotp

[3] http://delyan.me/securing-ssh-with-totp/

[4] https://github.com/mtigas/django-twofactor


Oh thanks for mentioning [4], I always thought 2FA using PAM disabled the key-based authentication and used passwords.


Authy exists to make 2 factor easier for people implementing it. Some users will want methods other than TOTP, so they support methods other than TOTP.

If they don't have a phone number they can't do all that transparently, which is bad when you are aiming your service at a broad audience.


Then why not allow users to defer entering a phone number until they try to add a service that actually requires it?


Because doing a high enough level of identity verification at that point would be disruptive.

I'm not really interested in defending it, I probably don't like the idea of depending on a third party any more than feld does, I was just pointing out that there are simpler explanations for what they are doing than I'm not buying the story that you need to text me or call me unless you're storing the seed/token centrally and sending it to users upon request which I strongly disagree with.

Another one is that if they actually implemented TOTP like that their business would take a lot of damage when it was revealed publicly (because what's the point of paying for a broken implementation?).


Ok, serious question: how do you manage your tokens? What happens if your device flies out of the window?

A couple of months ago I managed to break the screen of my tablet with 20-30 services I use 2FA (Google Authenticator). I had to spend about 50 bucks just to get a new screen and repair it.

For some of these services I had the token saved on my keepass, but I always felt a little dirty doing that. If there was a way to keep backups of Google Authenticator data, I'd take it in a heartbeat.


You print off a list of backup codes and stick them in a safe. Then log in with the backup code, and set up a new Authenticator token.

You could also add a U2F token and store that away.


Not all of the services that implement Google's 2FA provide backup codes. Plus, the idea is that 2FA should be used anywhere, even for lesser-values web sites, so the idea of printing everything seems to be archaic.


Or save the token in an encrypted password manager so you can retrieve it later


"identity" isn't part of the 2FA concept (nor should it be)--you're shoehorning in something that doesn't belong.


Is that method of sending the Authy authentication code any more secure than all the "regular" SMS-based 2FA methods (like say Gmail's SMS-based 2FA)? If so, how?

I think Google's (or Microsoft's because I think they use a similar SMS-based 2FA) method could be easily manipulated by intelligence agencies for example with access to the carriers' networks. The Google Authenticator app is now completely useless for Gmail as well, since they made it to fallback to SMS-based 2FA if you forgot your password (ugh - why Google? WHY?!).


> we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous.

I am not very familiar with Authy, but I have built pin-code 2FA solutions using Twilio. Based on your comments, I am not sure the point of Authy if it is easy to build 2FA except TOTP using yesterday's Twilio.


The advantage is that if you lose/switch phones, you don't have to reset your 2FA. (a disadvantage, of course, if your account/device is compromised)


What's your take on U2F?


Hi An6n, Fido and U2F are really interesting to us - we are totally supportive of it and have some really great things planned around this area. Stay tuned!


Do you have any plans for a Windows Phone app? The SMS backup works well, but an app would be ideal; it's one of the few things I'm still missing after switching from Android.


Hi, very likely. We will be investing a lot more resources into Authy - Windows Phone App is very high at the top of things we are thinking of doing.


It's just TOTP, so if they weren't creating a walled 2FA garden you could use any of the available TOTP apps on Windows Phone, but alas...


What was the acquisition price ?


Hi Whyley, the acquisition price was not disclosed.


we might find out if/when twilio IPOes

I'm guessing it was money+stock, probably a bit over 10M, given that authy just raised 3M in September (total of almost 4M)

again, just a guess out of thin air.


Can you point to the source? With net revenues of >100M it looks like they could have just IPO. 6X revenues seems low.


This is a far better deal for BrightRoll than going public. Tremor and YuMe, arguably similar businesses, are basically trading for the cash they have on hand. Todd (BrightRoll CEO), had told me he thought ad networks were not meant to be public companies. He certainly followed that mentality through to a nice exit. I'd take $640M outright exit any day versus going public at a slightly higher comp.


Per Yahoo's Investor Relations Press Release (https://investor.yahoo.net/releasedetail.cfm?ReleaseID=88227...), "Yahoo is acquiring BrightRoll for approximately $640 million in cash. The transaction is subject to customary closing conditions."


Agreed seems a bit low. Here's the TC article http://techcrunch.com/2014/11/11/confirmed-yahoo-acquires-br...


most of the public video ad companies have fallen substantially


Yeah you're right, Tremor video is trading about dollar for dollar, revenue to market cap at the moment.


Right, I know how you feel. This is how the Digital Sky Technologies LP's must feel about them investing in FB at 15B...good for you that you weren't part of that fund - they are definitely not serious VC's.


Are you actually trying to imply that Snapchat is the next Facebook?


I am saying that valuing a company at a value $10B or $100B it's not outrageous in any way. You said you cannot take seriously any VC that values a company above $10B implying that no company can go above $10B or that they are somehow insane to think that could happen.

This is simply no outrageous in any way and it was likely a very competed investment - I do think that Snapchat can achieve a value much larger than $10B or even $20B. Outrageous I would say is $1 trillion.


>"You said you cannot take seriously any VC that values a company above $10B implying that no company can go above $10B or that they are somehow insane to think that could happen."

I said nothing of the sort. I said that Snapchat is not worth $10 billion and likely never will be. For reference, my exact words were:

"I just can't take seriously any VC valuing this company at $10 billion"


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: