I feel like a crazy person for having to write this, but: if you are starting a business (yes, non-profits are businesses), then you need to have a business plan. If you launch a business and you have not done the work to have a business plan, then in 99.999% of situations, your business will fail. A business plan includes market & competitive research, a revenue plan based on that research that includes realistic pricing models and costs, a marketing plan, and several options for when things don't turn out like you planned. This isn't even Business 101, this is like Remedial Intro to Business. If you don't have this worked out before you launch, you have already failed.
The corollary for this is as a user, you should determine whether or not the business you are planning to depend on has a business model before you choose to depend on them. If there is no apparent income stream, then the business will close at some point and you may as well skip all the heartburn and choose not to use that business for anything you care about. BlueSky, I'm looking at you right now.
Keeping the servers online for 90 days is a very good thing.
This final donation run doesn't change the timeline unless it gets a big amount of money, in which case is it supposed to be bad for them to change plans?
> I feel like a crazy person for having to write this, but: if you are starting a business (yes, non-profits are businesses), then you need to have a business plan.
Not in tech you don't. The business plan these days is try and get as much investment money as you can to redistribute to your friends, have a few parties, hand out some Macbooks and try to get acquired by Google before your runway runs out.
> try to get acquired by Google before your runway runs out.
And on the user side, treat this outcome (company whose product you use being acquired by Google) the same as the company announcing it will go out of business within the next year, because Google will almost certainly shut the service down.
Exactly. The explicit plan for many/most tech startups is to raise VC money and get an exit before everything falls apart.
My last job was one of these. Everyone except the CEO and one designer quit. The money was drying up, CEO spent all his time chasing flashy big name customers who didn't want anything to do with us while ignoring customers begging to buy our product.
I'd wager most still successful businesses weren't started with much of a plan, especially if they offer services instead of products. I started mine by paying less than a hundred bucks to incorporate on a whim, and was successful for many years. The only reason I shuttered it is because it led me to programming and I went off in that direction instead. There are many such examples everywhere you look, so it's not just anecdotal. I'd say that all one needs is determination and a vision.
I suspect you did actually have a business plan, even if it was informal & just in your head. Something like "based on my experience in this line of work, I can charge about $X for Y service, if I get Z sales at that price, it's a viable business, otherwise I'll try to do ABC instead." It's light on details, but that's still a business plan, you had a plan to bring income in. That's fine.
Not having a business plan looks like "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time.
> have you started a successful business?
Not yet, but I am actually working on it! Having a meeting with a local business tomorrow to discuss potential market pricing options so I have some idea of how much money I can expect to make. Business plan!
> "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time.
This is literally the foundation story of numerous billion-dollar businesses. In fact OpenAI managed to beg their way into a trillion dollars after losing money offering no kind of product for many years. It sounds like it's just a business plan that you don't like very much.
Off the top of my head, I believe Twitter, Youtube, Discord, Reddit, Imgur each had no monetization at all for the first 3~5 years of their existence. Or more recently there was uv, that write-it-in-Rust Python package manager that had no avenue for monetization but received millions in investment funding a team working on it full-time until successfully getting bought out by OpenAI.
> I believe Twitter, Youtube, Discord, Reddit, Imgur each had no monetization at all for the first 3~5 years of their existence
yes, their business plans was always to engage a lot of users losing VC money until you are a platform with enough moat to add monetization. It was the plan all along
It is the plan for plenty of startups: when it works you become a tech giant, otherwise you fail and no one knows you
Those are actually all pretty good examples of what I'm talking about, yeah. Investment money is not income, it is debt. It has to be paid back some time, or else your business will close. So the users who came to depend on the business will get boned when the business either closes or drastically changes as they find a business model.
OpenAI, for example, is not profitable as far as I know. I think the users they have now will be in for a rude awakening once they have to come up with a business model in order to pay back their investors. Startups that don't have a business model and get bought also regularly get shut down shortly later, leaving users stranded, look at Nest or Keybase for example off the top of my head.
For my master thesis I did a lot of digging into the research on success factors for startups. And at least based on what I found back then, you're right. The correlation is weak between any factor like this and success. Generally positive though, so it does make sense to try doing some planning. But it's definitely not a requirement.
In general, observable factors doesn't strongly correlate with success. Probably both because there are so many to choose from and because the real world is complex and typically doesn't align well with any predefined plan.
This kind of analysis sounds far more interesting than a lot of the "just do what I did!" startup writing that's out there. Do you have any recommendations for further reading from this perspective?
I’m not speaking from the startup world, but the sheer amount of small businesses that don’t do any level of revenue forecasting, financial modeling, or even formal budgeting and still make a comfortable sum (~$10m assets over the course of 10 years) based on instinct is pretty staggering. Personally it seems more stressful but that’s the leeway experience gets you.
It took Uber, like, 14 years to become profitable. That doesn't mean Uber is necessarily a success, though. They could still disappear.
There's a lot of corpse businesses around. The walking dead, just operating with zero profit and no realistic plan to be profitable. Their investors are usually just stupid or they think they can eventually squeeze the market so severely they can't go out of business.
Privacy enthusiasts tend to align with anarchists - people who intrinsically distrust institutions. Maybe this also correlates with qualities like blind optimism, or disbelief in institutions like capitalism?
> Privacy enthusiasts tend to align with anarchists - people who intrinsically distrust institutions
That's not a reasonable definition. The distrust in the institution is actually a side effect of questioning the authority for authority sake. Anarchists aren't a bunch of individualists that want to burn down whatever we've got in terms of mechanisms in the society regardless if they are necessary. It's just the manifestation of the dialectical opposite of the expression of power and authority.
And privacy enthusiasts just know very well that power shifts and what once was a necessary mechanism can be abused by an elected authoritarian leader.
When I was in college, we were required to take a business class (Business 101) that mandated a finished business plan as part of the project.
It had to be long, in-depth, and include everything you mentioned.
I was incredibly surprised when I entered the tech and startup workforce that these were generally absent.
I had misunderstood the class and instructor and thought that you couldn't even start a business without one.
Then, when I started raising money for my own venture, I thought for sure a complete business plan was a prerequisite.
Nope. A few graphs, preferably hockey-shaped, and a good story were all that was necessary.
My venture failed, of course. But if I were to do it again, I would do myself the favor of having a complete plan. It would definitely save a lot of headaches and guessing in the moment.
There is some great irony that you can have a flashy app with good user growth, and get a chunk of cash from a vc firm. But if you want to get a loan from a Bank to open a restaurant you best have a business plan.
Here is an example of one of their core growth plan items from the strategy above:
"Social Media Campaigns, Organic and Paid
Driving key messages around digital hygiene, decentralisation, and security on social media platforms to raise awareness."
The whole pdf is basically a collection of the remedial "go-to" SaaS growth blog posts everyone thinking about startups read: make content, build a community, turn your community into advocates, write about things people care about etc etc.
Given I've done this stuff for some 20+ years now, here is what is missing and frankly what most folks miss/don't want to admit:
This document basically has no ICP, who is the ideal customer? What is their persona? Who specifically are they, like, super specifically! You can't start with "oh anyone who wants anon-privacy first msg'ing!" That would have been like me at digitalocean saying "oh it's for anyone who needs a VM" - you can't execute a series of steps with that, you can't boil the ocean so to speak, we had to work through communities one at a time, we did: rails, node, php, devops/config management, in that order, split up over quarters and years, maybe it looked like we just...did developers, but we didn't, we slowly worked our way through all the developer communities slightly tailoring towards them while keeping things general enough.
The biggest problem here tho is the classic vitamin vs. aspirin problem. They're selling "better privacy" and "decentralization" - these are vitamins for the vast majority of people - they're things people say they care about in surveys but don't actually switch apps for. The 85% of adults who "want to do more to protect their privacy" aren't switching off WhatsApp. Are they the most secure messenger, or are they a token ecosystem with staking? Those attract fundamentally different people with different motivations...so just bolting them together creates confusion.
Folks need to stop thinking "we're going to do marketing" = "we're going to build a business" marketing, go to market, growth.. these are tiny components of overall business strategy. </rant>
Not every organization can or should be a business, this is dead wrong. Organizations including non-profits and social ventures need sustainability plans rather than business plans. These are largely similar but the values are different.
Some of the slippery slopes include the wanton privatization and outsourcing of government especially for things that create perverse incentives like for-profit prisons, education, and healthcare, and so-called private-public "partnerships" that usually turn out to be predatory "gotcha capitalism" monopolies that charge people for things that were previously free and paid for with taxes as commonwealth services.
OTOH, another pathology can happen in all sorts of money collecting organizations by putting profits/fees before mission, such as by making worse products or services to sell more of them, seeking maximum fines or fees unreasonably without offering value or a public service, or charging unreasonable fees for things that cost almost or nothing.
Slack (originally an MMO), Nintendo (card games), Nokia (rubber shoes) and Netflix (DVDs over snail mail) would disagree.
"We'll gather a bunch of talented people together, figure out what this industry needs and then do that, let's hope we can do that before the money runs out" can be a viable business plan. There's no guarantee it's going to work, there's never a guarantee a plan is going to work, but it can work sometimes.
Plans are useless, but planning is essential. IIRC Nintendo had been operating for decades before they shifted to videogames. And Glitch (the MMO that gave birth to Slack) was also very much a product with a plan. Plan failed, or execution failed, or the industry shifted, or something else, or all or the above. But for sure it was not just "a bunch of talented people."
Nintendo was founded in 1889 and basically predates electricity in the home. I think they did a very successful job pivoting to new forms of entertainment as they arose over the years. Not a planning failure in any sense.
That’s not really a big deal since the session encryption was insecure anyway. It feels almost like a honeypot after they've removed forward secrecy. If you’re looking for a decentralized alternative SimpleX Chat is a more secure option.
Considering how fiercely anti-encryption the UK is/has become (because "only child molesters care about encryption!"), this is sadly reason enough for me not to trust it.
Do I believe they have a backdoor in their software? No.
But if the UK passes a law demanding they introduce one...
The problem with XMPP is that most clients use an outdated and insecure implementation of OMEMO. This includes popular clients such as Conversations and Gajim. Currently only Profanity and Kaidan use the latest version and you must always assume that the encryption has been secretly downgraded because the other person is using an insecure client. I highly recommend Soatek's blog post on this topic. https://soatok.blog/2024/08/04/against-xmppomemo/
I do not understand the security implications of this "Invisible Salamanders" post, but I would prefer XMPP even without any end-to-end encryption over a walled garden like Signal or Session.
Does that blogger discuss metadata, at all? I'm not saying the stuff pointed out in various non-Signal tools isn't valid, but I don't see any discussions on the dangers of metadata.
Afaik Germany is one of the most expensive countries for employing white collar jobs?
The gross income to the employee might be 75k in Germany, but the cost to the employer is roughly twice that amount in turn.
In my (very naive) mental model, US salaries are higher, have less "overhead" for the employer, but leave more responsibility (healthcare, retirement) to the employee.
Employer cost is not 2x, more like 1.2x, employer overhead is mostly insurance related stuff. We had salaray to employer cost tables at my previous job.
What true though is that after taxes you might just receive 60% of your total salary once you deduct taxes and insurances.
> In my (very naive) mental model, US salaries are higher, have a lot less "overhead" for the employer, but leave more responsibility (healthcare, retirement) to the employee.
Unfortunately this time, AI does not have vacations, healthcare, retirement or bills to pay and is available 24/7, 365 days on demand.
Many companies only see this as an opportunity to cut down on employees in 2026 and Session will do the same.
So that is why to answer your question:
> ...Germany is one of the most expensive countries for employing white collar jobs?
The main reason why the downsizing will continue until "AGI" is achieved internally.
Yeah , but the German pension system is unfortunately a scam .
Therefore everyone is responsible for their own retirement (private investments e.g etfs) .
If you are getting 60k EUR as a senior developer in Germany, you are getting ripped off. Look for a place with an IG Metall contract, friends - if you would like to be making significantly more than $75k USD full time as a senior developer, anyway.
Surprised to hear this since my understanding was that Session was run on a crypto coin based, user hosted onion routing servers. Do they mean the dev company behind Session is shutting down?
An anecdote I have: a friend once had narcotics shipped intl. through Session a few years ago.
Within the US, it's far more common than you think. That's typical senior dev money in a large company in cities like St Louis or KC. What is rare outside of the biggest markets is the whole "enough RSUs to double your salary" thing.
Nah, like others have said - 150k is fairly normal for senior positions in any decently sized metro in the US at this point.
Even a decade ago, seniors could easily be pulling 120-150k in markets like Houston/Atlanta/Miami/etc... The relatively cheap markets.
I'm in Atlanta and I'd actually say 150k is a lowball offer for a senior in this market at this point. I'd expect 175k+.
Now - the flip side of this is that current competition is fairly insane with all the recent tech layoffs. So it's possible we're seeing some market correction. But I don't really think it's going to come down much. Between inflation and rising costs... 150k just isn't what it used to be. If it comes down... it's going to be because we're entering a real depression.
---
The amount of money the US government has printed in the last 7 years is... insane. And while it was starting to taper back down in 2023 and early 2024... then we got the GOP, and the GOP is objectively bad with money (not that the dems are that much better...). So m1 supply is rising at a relatively steady rate again.
We going to feel the consequences for a LONG time (or very, very badly for a medium time... with unknown results).
At least in my experience, having worked in both Florida and California, that's more of a wash than people imagine it's going to be -- and more so than the "cost of living calculators" tend to demonstrate, at least if you're a renter.
I actually ran a few numbers based on current costs. If you're making $120K/yr in Florida and paying the average cost for a 1-bedroom rental in Tampa ($1,642/mo, as of April 2026 according to Apartments.com), your after-tax take home is $98 (24% federal tax bracket, no state tax) and you have $78.4K after rent. If you're making $180K/yr in California and paying the average cost for a 1-bedroom rental in San Jose ($2,705/mo), your after-tax take home is $130.5K (24% federal tax bracket, 9.3% CA state tax bracket) and you have $98K left after housing.
You can keep fiddling with the numbers, but in most cases, the premium for getting a tech job in Silicon Valley is sufficiently high that you really are making more in absolute dollars despite the higher cost of living.
That math breaks down if you have kids and need 4bdrm house commutable distance to work in good school district - prohibitively expensive in Bay Area and affordable on engineer salary in most tier 2 cities. If you do not have kids, Bay Area clearly wins, especially if you are ok with studio/1bdrm.
Interestingly I applied for one of their senior frontend positions that required a "high level of experience" in Australia, they said 120k AUD with no room to go higher. Went with an offer of 170k instead.
Manchester is only about 10% below London, other cities along the M62 are about 15% below according to the salary benchmarking data I've seen. The bigger difference is more in the number and type of available roles.
That salary would be above the median for most perm senior dev positions in London, but still well within the usual range for established tech companies and well-funded startups.
For a Senior perhaps. The figures I find for Switzerland are more in the 90-120 range depending on the source. Also, I think what OP was referring to is the 'most markets' bit. Switzerland is the best paying country in Europe (discounting London).
> Switzerland is the best paying country in Europe (discounting London).
How does that look when you correct for costs of living, because I imagine that would put London at the bottom of the list, as one of those places where senior-level tech salary is not enough to afford living in the city itself (and I don't mean the City of London, but the rest of it too).
"Session is an end-to-end encrypted messenger that protects your private data. A decentralized app designed, built, and operated by a global community of privacy experts."
For a senior developer, $150,000 is about right. I'm looking at the latest half dozen jobs I've seen on LinkedIn for open senior developer positions and they all start at that number, and range up to $185k to $200k. Digging a little deeper, I see some th atstart well above that number, but it's for the huge companies you're thinking of -- Google, Netflix, Github.
Time to broaden their hiring pool then, $150k is double the cost of a senior developer in many other parts of the world (yes including English speaking first world countries).
When you've got 90 days till the doors close you cant be picky about your hiring pool.
Read the posting. They dont have money for a team, they don't have money for a senior developer. Whether $150k/FTE or $75k doesn't matter, because they don't have either of those.
Once the server and other costs have been paid, the have money for... maybe a part-time junior in Cambodia.
The claim is that 150k is the baseline that is often exceeded. I don't know the region you're looking for on LinkedIn, but what I see for European jobs is that they barely crack 100k for developers. At least the senior, non highly specialist, jobs I'm seeing.
I'd love to know where the $600k that Vitalik Buterin donated to them 3 short months ago went. I don't think they've adequately addressed this question.
My advice: If you want people to give you money so that you don’t have to shut down, and you’re writing a ten paragraph plea for donations, consider using one of those paragraphs to tell people what your thing is.
Their logo actually links to their front page for once so it's not too hard to find out that Session is "The decentralized private messaging app", even if you're on a touchscreen. No need to fuss around and figure out how to get from "session.blogplace.org" to "getsession.com" by editing raw URLs like I feel happens with half the posts like this.
It could still use a paragraph or two of "why we believe it's important for this particular decentralized private messaging app to exist when there are about six hundred other decentralized private messaging apps out there that nobody but people who care passionately about decentralization are using", though.
It's sad but I'll forever remember them for having the best tagline ever on their frontpage:
"Send messages, not metadata"
We all know who this is directed at: the project(s) pretending to offer privacy but that need to collect your cellphone and that'll happily be able to know who you exchanges messages with.
Project(s) whom, moreover, have often weird shills that, if you squint your eyes just a little bit, suddenly look like xxxINT moles.
So if only for that tagline, thanks a huge lot: metadata are more important than the content of the messages themselves and you have no privacy if your phone number and contacts are known.
> approximately $65,000 in donations. This is enough to maintain critical Session infrastructure for the next 90 days. We are extremely grateful for the support Session has received from the community, but unfortunately this is not sufficient to retain full-time developers. As a result, all paid staff and developers will have their final working day on April 9, 2026. After this date, some team members will continue on a primarily volunteer basis to help maintain Session until July 8, 2026.
I had never heard of this, why session over signal?
Edit: here is a snippet from google AI:
Signal is a secure, user-friendly WhatsApp alternative requiring a phone number, while Session prioritizes maximum anonymity with no phone number, onion routing, and a decentralized network
Inauthentic activity benefits from privacy though. Inauthentic activity is a primary use case of ChatGPT, which is way more successful than anything you've ever made. Do you think kids using ChatGPT to cheat on homework would care if their chats were "private" but educators could check if submitted essays matched generated content? Uh, yes. So privacy isn't as simple of an idea as you think it is, and is certainly extremely valuable.
It's a telling that you picked an example where one user could access another user's private info in an unauthorized way. No famous app does that.
When I say privacy, I mean supporting the company promises a stronger privacy mechanism e.g. run locally, e2e encryption where the company itself cannot access your private info. This is the case for Session.
It turns out most users are okay with you promising not to use/access their private info for other means. That's already sufficient. Then, other factors e.g. usefulness are more important.
"When I say privacy, I mean everything that makes me right, and everything that makes you wrong."
"No no, that's not what I mean. I mean, privacy is this only, specifically this set of technologies applied to this very specific set of products, and nothing else. Whatever definition will allow me to make this conversation as uninteresting as possible."
Look, I guess my point is, privacy is complicated. In my example, I suppose OpenAI could authorize access to something. They already do, for training. Right? And in some sense, something valuable leaks from one users' data to another. It is still privacy when access to your data is limited in some important way from other people, even when you (or a lot of people, or other people) could benefit from such access. The biggest apps in the world have very, very complicated privacy stories.
It is certainly extremely valuable as an ideological construct, i.e. a fake notion to mislead people into self-defeating behaviors.
"Why not use $COP_APP?" "It's not private" "Well it's by a private company, it's not run by the government or anything - what the fuck are you talking about, corporal?"
I could never get it to work and I've tried several times. I kind of get the feeling I'm being blocked at the ISP level. We entered an era of the Internet where you're just not allowed to create secure communications.
They should keep a single competent and curious senior developer who can do it all. In this age of AI, you can make do without having a whole team of developers.
A few months ago, a Session update logged me out. I tried to log back in, but my passphrase caused Session to crash. I tried the Play Store version, the F-Droid version, and the desktop version.
Support told me that login method had been around for a while, and I didn’t know it. So suddenly, I was locked out and couldn’t access MY ACCOUNT. I used to promote Session, but since their support response was basically a big “fuck you,” I say “fuck you too,” and I hope people switch to SimpleX.
I like the idea. But I’m pretty happy with Signal. Signal does require a phone number I think, but otherwise seems very similar.
Grounding identity in a phone number is very reasonable for almost all normal usage. It makes recovery simple. It does block the ultra paranoid use cases though. Oh well.
>Grounding identity in a phone number is very reasonable for almost all normal usage
In many jurisdictions, telecoms form an abusive oligopoly, and you need to provide a state-issued identity document to get a phone number.
That is not at all reasonable for normal usage - unlike well-known non-abusive authentication methods, such as a keypair; or its even simpler cousin, the username/password.
I guess it depends on what you consider normal. Most of the humans I know find it vastly easier to produce a state issued id to an authority than to generate a public/private key pair.
Well, I and a lot of the people I'm going to talk to through things like Signal are going to have a state ID regardless as I live in a country where one practically needs to drive a car to function in society.
On top of that so many other things just inherently expect one to have a phone number. It would be somewhat odd to not have a phone number for most of the people I know and talk to through platforms like Signal.
So to your question of which is easier, having the state ID and a phone number is easier because I'll already have that for a multitude of reasons.
If you live in a place where its rare to have a phone number, then yes I agree Signal probably isn't a good choice.
You asked which is easier, and I gave my answer. It's easier for me and many many many millions (billions?) of others to have a phone number and state ID, because we'll have already had a phone number and state ID on hand for decades beforehand and have shared that number with the people we're already talking to while making a new identifier and sharing it would be quite a bit more work.
What's easier, using a tool that's already in your hand or going to the tool store, searching for a new one, and swapping to that one? Just using the tool already in your hands, that you're already using, that you've been using for a long time.
It's exactly what you asked, just not the perspective you cared to look at.
In the time it took you to selectively bring various outside context "for perspective" (instead of answering the question as asked) you could've registered a brand new account with username, password, email confirmation, and OTP 2FA, on any service that supports those.
If you insist that 2+2 equals "3 or 5 depending on perspective", ok sure let's work with your scenario of comparing registering a pre-existing state/telco ID with creating a brand new user/pass account (again: instead of what I asked you to compare). Well, suppose you were to lose your ID and/or your SIM - do you think you'd be able to renew them and regain access to your stuff in the same amount of time it's taking me to write this now?
Plus, I guess you've never seen bad actors buy fake ID/SIM accounts faster than you can block 'em - and much more quickly than any individual good-faith actor (with a single ID/SIM honestly linked to meatspace) would able to get out of harm's way in such a scenario.
>What's easier, using a tool that's already in your hand or going to the tool store, searching for a new one, and swapping to that one? Just using the tool already in your hands, that you're already using, that you've been using for a long time.
Hammers, nails... You're trying to make it make sense by dumbing it down.
In the end (again conforming to your framing), the "easier thing" is the one that fewer people will expend energy to prevent you from doing. And this last consideration kinda-sorta makes your reply be an answer to my question, except that I had to do the work of connecting the two, so now you owe me 100EUR.
I've answered it twice. Its easier to use the thing you already have than it is to make something new. Is that really difficult to understand?
> you could've registered a brand new account with username, password, email confirmation, and OTP 2FA, on any service that supports those
And then spend the many, many, many hours to share that new unique identifier with all the people I want to talk to. Or I can just continue using the same identifier they already know me by and have known me by for decades.
> I guess you've never seen bad actors buy fake ID/SIM accounts as quickly as you can block 'em
Whaaaa I thought you just told me a phone number is such an incredibly hard and challenging thing to get, now you're telling me anyone can easily get them anytime they want?
So phone numbers are incredibly challenging to get and yet people get them all the time easily. Otherwise, if phone numbers aren't hard to get and anyone can just freely get them what are we even really debating about?
For billions of users, having a phone number as their identifier isn't a challenge and is for sure the easier process and having to make a new unique identifier is a bigger deal and introduces far more roadblocks to effectual adoption. Its why WhatsApp uses it, its why iMessage uses it, its why Telegram uses it, its why WeChat uses it, and many others.
>Its easier to use the thing you already have than it is to make something new. Is that really difficult to understand?
I asked which is easier to make.
This is, evidently, an extremely difficult question to understand.
>Whaaaa I thought you just told me a phone number is such an incredibly hard and challenging thing to get, now you're telling me anyone can easily get them anytime they want?
>So phone numbers are incredibly challenging to get and yet people get them all the time easily.
Not phone numbers; accounts gatekept by them.
Not anyone; only bad actors.
>I thought you just told me
What I just told you is written in the parent post.
You have the right to misread it any way you like, and think whatever comes to your mind easiest. But since that's not how a conversation works, I will ask you to exercise that right somewhere I can't see you - and by the way you still owe me 100EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax.
Which is easier to make? The one I don't even have to make, I already have.
Which pizza is easier to make, the premade pizza that's already ready to eat and is right in front of you, or the pile of ingredients in the pantry and fridge? Uhh...the pizza in front of you ready to eat? Put it on a plate and eat, it's there, it's ready to go. And practically everyone already bought their pizza and it's already in front of them.
And no, you didn't ask which is easier to make.
> What's easier: to obtain state ID, or to sign up to a website with your preferred username and password?
Where's the word "make" in that?
> Well, suppose you were to lose your ID and/or your SIM - do you think you'd be able to renew them and regain access to your stuff in the same amount of time it's taking me to write this now?
Well, I'll end up wanting to replace that ID and SIM for once again a multitude of other reasons, so having that identifier tied to that really doesn't increase any complexity. Its really not that big of a challenge for billions of users, its something they're going to already do. When the school needs to urgently get a hold of me, they'll call my phone number not refer to me by some handle on a jabber server with a population of one. This same thing applies over and over and over and over for tons of people.
Meanwhile if I've got other accounts tied to other processes that get lost in their own unique ways, I'll have separate issues to get those unique identities recovered. Sounds like more work, not less work.
You now owe me 20,000,000,000,000,000,000EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax. Such a useless thing to add to the conversation.
My condolences to any children who have to interact with you.
>You now owe me 20,000,000,000,000,000,000EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax. Such a useless thing to add to the conversation.
Obtaining your first id is obviously difficult. But so is obtaining your first computer. If you’re on good terms with your government, obtaining the id is easier. That’s really the key. Sure if you focus on hostile states this stuff all makes sense. If you’re insistent on hiding from authorities then many things become much more difficult, by design.
You asked the wrong question. Sorry if you still don’t understand why. Seems others are also trying to help you understand but maybe you don’t want to.
I primarily use a nearly-bottom end android phone that's a few years old and just recently switched to an even older, even lower end android phone that is six years old. Neither has that issue.
Obviously, I'm not really claiming that it's not possible people are experiencing this issue, but it can't possibly be widespread.
I feel like most likely people are using android skins that aggressively kill apps in the background.
I have that exact issue on a couple of not exactly low end Samsung phones. Holding them side by side with signal open. Delivery times vary wildly. Whereas WhatsApp just works (though I hate it for other reasons)
nope, iphone here, and quite recent. But it's not just me, all the people i communicate with on this app have the same kind of problems. With a group of friends we even had a totally weird ordering of messages, making the conversation quite absurd.
There's something deeply wrong with the way signal delivers messages...
Signal's code quality is not conducive to security. They had an extremely bad state management bug that resulted in photos being sent to random contacts in your list (potentially life ruining implications if you're sending private photos).
For this reason, it's hard to trust them. The encryption quality is irrelevant if the slop coded client is blasting random photos to random contacts.
Send a GIF to Contact A, Contact B receives random private images? Absolutely inexcusable slop code project. This class of state management bugs should not be possible with a well-architected client, period.
Signal's E2E encryption is more like End 2 Random End.
So 7 months of their users getting rinsed by an extremely serious issue exposing your private photos to random contacts. Seems like slop code to me. Those kinds of state management bugs should not be possible. It indicates code divorced from best practice state management.
Knowing that bug COULD exist, means that you cannot be sure that messages you send in Signal will make it to the recipient you intend given the poor quality. This means the E2E encryption is fundamentally broken, by the way. Because the client is lying to you about the true state of who it's about to send to.
The recipient text has fundamentally zero relationship to the true recipient of the message given that bug.
Having the UI and message sending code reference two different versions of state is incredible incompetence.
Running a nonprofit is really, really hard and I commend them for doing it. I hope they get through this crisis.
Hack Club almost went insolvent in 2017. We would have, if it wasn’t for 2 friends who stepped in near the end and saved us. Today there are tens of thousands of teens involved and doing amazing things.
I’m disappointed by all the negativity in the comments. I’m not familiar with Session, but raising donor funds is a very different skillset than software engineering and anyone who is trying to do both has my respect.
Ha, and it was also used as a kind of low-rent/unmoderated alternative to Onlyfans.
Certainly, there were enough people making money through it that they should have been able to cover operating expenses. How did they go about appealing for donations - was there a notification inside the app, or did they rely on word of mouth?
Session was Australian based which means they would have to do all sorts of horrible things when asked by the government, such as even letting police impersonate users...
I just checked and they claim to have moved their infra to Switzerland.
There are many other issues, some I've forgotten about since I would never trust it in the first place. They also require a phone number even!
Seeing them go, I feel neutral. It's always good to have more anonymity software, just not this for me.
From your link, it explains that they have to Switzerland:
"The developer of Session, an encrypted messaging app, has moved operations to Switzerland as ‘being in Australia just threatened our credibility as a privacy tool’."
What else in particular are you talking about?
With the phone number, I may have not remembered correctly for this particular software. If I could edit my comment, I would add a note.
But when going to the FAQ link I remembered how bad this piece of software was especially promoting cryptocurrency. I would never want a messenger to promote crypto, such a "Signal"
No? Where did you get this from? I have used the app and was never asked anything. I was given an id I could share with others and that's it. Very simple. I wish more apps had this easy onboarding process.
No legal mechanism with such breadth exists in Australia. There was a great deal of overblown media reporting but the law [0] makes it explicitly clear that any request that requires a "systemic weakness", "systemic vulnerability" or anything of the like is null and void. Those terms are defined [1]. Note that it doesn't say the government can't request such a thing, it says that such a request "has no effect". It's simply dead on arrival.
My understanding is that the government could compel Facebook to publish a version of WhatsApp with a special mode that sends all messages to the police if the user ID is 1234567. This introduces a vulnerability but it is limited to one specific person. If your user ID is not 1234567, you're completely unaffected.
However my understanding is that the government cannot compel Facebook to compel a version of WhatsApp that, when it receives a special message, silently starts sending plaintext copies of every other message it receives to the police. Such a mechanism would be a systematic weakness that affects people other than those for which a warrant has been issued, so the notice would "have no effect".
The government could also not compel a source-available app with verifiable builds to stop distributing them so that it can add a secret user ID branch like the one I mentioned above for WhatsApp.
> In most markets Senior developers often command salaries exceeding $150,000 USD per year, and on top of this there are legal and operational overheads for running the STF.
Translation:
Our product makes no money, has no use case and we need $1M to survive.
Two ways a PE "cost saver" would fix this:
1. Claude + 1x senior engineer (in India).
2. CTO + Claude and no senior engineers / employees.
Given we have (allegedly) achieved "AGI" (heavily disputed) they don't need as many employees.
Especially those that are after $150k+ which when you can vibe code with Claude for less than $10k anyway. /s
So you are suggesting that a private communications and messaging system that proports to offer reliable anonymity is a reasonable use case for more-or-less unsupervised development by Claude? Because that is just the sort of use case where I would NOT trust an unsupervised AI.
I feel like a crazy person for having to write this, but: if you are starting a business (yes, non-profits are businesses), then you need to have a business plan. If you launch a business and you have not done the work to have a business plan, then in 99.999% of situations, your business will fail. A business plan includes market & competitive research, a revenue plan based on that research that includes realistic pricing models and costs, a marketing plan, and several options for when things don't turn out like you planned. This isn't even Business 101, this is like Remedial Intro to Business. If you don't have this worked out before you launch, you have already failed.
The corollary for this is as a user, you should determine whether or not the business you are planning to depend on has a business model before you choose to depend on them. If there is no apparent income stream, then the business will close at some point and you may as well skip all the heartburn and choose not to use that business for anything you care about. BlueSky, I'm looking at you right now.
I think this was their business plan. See if it works and, if it doesn't, shut it down
Is that a problem? Seems like a fair strategy. lol
Only if you're using other people's money.
Fair early, fail fast is a cornerstone of startup culture
That's not what Session is doing. They're dragging it out with a plea for donations to cover operating expenses.
I don't see the issue.
Keeping the servers online for 90 days is a very good thing.
This final donation run doesn't change the timeline unless it gets a big amount of money, in which case is it supposed to be bad for them to change plans?
I don't see an issue either. I never really fully bought into moving fast and breaking things.
I'll rephrase. I don't see what's "dragging it out" about what they're doing.
> I feel like a crazy person for having to write this, but: if you are starting a business (yes, non-profits are businesses), then you need to have a business plan.
Not in tech you don't. The business plan these days is try and get as much investment money as you can to redistribute to your friends, have a few parties, hand out some Macbooks and try to get acquired by Google before your runway runs out.
> The business plan these days is try and get as much investment money
I know you're trying to be snarky, but this is itself a business plan and will impact how the company is operated.
> try to get acquired by Google before your runway runs out.
And on the user side, treat this outcome (company whose product you use being acquired by Google) the same as the company announcing it will go out of business within the next year, because Google will almost certainly shut the service down.
Exactly. The explicit plan for many/most tech startups is to raise VC money and get an exit before everything falls apart.
My last job was one of these. Everyone except the CEO and one designer quit. The money was drying up, CEO spent all his time chasing flashy big name customers who didn't want anything to do with us while ignoring customers begging to buy our product.
I'd wager most still successful businesses weren't started with much of a plan, especially if they offer services instead of products. I started mine by paying less than a hundred bucks to incorporate on a whim, and was successful for many years. The only reason I shuttered it is because it led me to programming and I went off in that direction instead. There are many such examples everywhere you look, so it's not just anecdotal. I'd say that all one needs is determination and a vision.
You know, bra, at Sandhill Road offices we call this "to make a pivot to challenge more sustainable goals" or so ;-)
nah. we never had a business plan and are still going strong 11 years later. 99.999% is a gross exaggeration of reality.
we’ll never actually have this data, but I bet there isn’t much correlation if any between having a business plan and being successful.
have you started a successful business?
I suspect you did actually have a business plan, even if it was informal & just in your head. Something like "based on my experience in this line of work, I can charge about $X for Y service, if I get Z sales at that price, it's a viable business, otherwise I'll try to do ABC instead." It's light on details, but that's still a business plan, you had a plan to bring income in. That's fine.
Not having a business plan looks like "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time.
> have you started a successful business?
Not yet, but I am actually working on it! Having a meeting with a local business tomorrow to discuss potential market pricing options so I have some idea of how much money I can expect to make. Business plan!
> "we'll release a free thing, have no way to generate income, lose money for a few years, and then beg for a million dollars." That's not a business plan. That's a waste of your time & your users' time.
This is literally the foundation story of numerous billion-dollar businesses. In fact OpenAI managed to beg their way into a trillion dollars after losing money offering no kind of product for many years. It sounds like it's just a business plan that you don't like very much.
Off the top of my head, I believe Twitter, Youtube, Discord, Reddit, Imgur each had no monetization at all for the first 3~5 years of their existence. Or more recently there was uv, that write-it-in-Rust Python package manager that had no avenue for monetization but received millions in investment funding a team working on it full-time until successfully getting bought out by OpenAI.
> I believe Twitter, Youtube, Discord, Reddit, Imgur each had no monetization at all for the first 3~5 years of their existence
yes, their business plans was always to engage a lot of users losing VC money until you are a platform with enough moat to add monetization. It was the plan all along
It is the plan for plenty of startups: when it works you become a tech giant, otherwise you fail and no one knows you
Those are actually all pretty good examples of what I'm talking about, yeah. Investment money is not income, it is debt. It has to be paid back some time, or else your business will close. So the users who came to depend on the business will get boned when the business either closes or drastically changes as they find a business model.
OpenAI, for example, is not profitable as far as I know. I think the users they have now will be in for a rude awakening once they have to come up with a business model in order to pay back their investors. Startups that don't have a business model and get bought also regularly get shut down shortly later, leaving users stranded, look at Nest or Keybase for example off the top of my head.
> Investment money is not income, it is debt. It has to be paid back some time, or else your business will close.
It's pretty clear that you don't have the faintest idea of what you're talking about.
Investment money is not debt. Equity and debt are different things.
For my master thesis I did a lot of digging into the research on success factors for startups. And at least based on what I found back then, you're right. The correlation is weak between any factor like this and success. Generally positive though, so it does make sense to try doing some planning. But it's definitely not a requirement.
In general, observable factors doesn't strongly correlate with success. Probably both because there are so many to choose from and because the real world is complex and typically doesn't align well with any predefined plan.
This kind of analysis sounds far more interesting than a lot of the "just do what I did!" startup writing that's out there. Do you have any recommendations for further reading from this perspective?
I’m not speaking from the startup world, but the sheer amount of small businesses that don’t do any level of revenue forecasting, financial modeling, or even formal budgeting and still make a comfortable sum (~$10m assets over the course of 10 years) based on instinct is pretty staggering. Personally it seems more stressful but that’s the leeway experience gets you.
It took Uber, like, 14 years to become profitable. That doesn't mean Uber is necessarily a success, though. They could still disappear.
There's a lot of corpse businesses around. The walking dead, just operating with zero profit and no realistic plan to be profitable. Their investors are usually just stupid or they think they can eventually squeeze the market so severely they can't go out of business.
Privacy enthusiasts tend to align with anarchists - people who intrinsically distrust institutions. Maybe this also correlates with qualities like blind optimism, or disbelief in institutions like capitalism?
> Privacy enthusiasts tend to align with anarchists - people who intrinsically distrust institutions
That's not a reasonable definition. The distrust in the institution is actually a side effect of questioning the authority for authority sake. Anarchists aren't a bunch of individualists that want to burn down whatever we've got in terms of mechanisms in the society regardless if they are necessary. It's just the manifestation of the dialectical opposite of the expression of power and authority.
And privacy enthusiasts just know very well that power shifts and what once was a necessary mechanism can be abused by an elected authoritarian leader.
> Privacy enthusiasts tend to align with anarchists
That's a mighty broad brush you're painting with over there.
What do anti privacy enthusiasts align with?
Statists, I suppose.
When I was in college, we were required to take a business class (Business 101) that mandated a finished business plan as part of the project.
It had to be long, in-depth, and include everything you mentioned.
I was incredibly surprised when I entered the tech and startup workforce that these were generally absent.
I had misunderstood the class and instructor and thought that you couldn't even start a business without one.
Then, when I started raising money for my own venture, I thought for sure a complete business plan was a prerequisite.
Nope. A few graphs, preferably hockey-shaped, and a good story were all that was necessary.
My venture failed, of course. But if I were to do it again, I would do myself the favor of having a complete plan. It would definitely save a lot of headaches and guessing in the moment.
There is some great irony that you can have a flashy app with good user growth, and get a chunk of cash from a vc firm. But if you want to get a loan from a Bank to open a restaurant you best have a business plan.
https://cdn.sanity.io/files/btop3zhg/production/6cdd8502a5fd...
Closest thing I could find poking around.
Here is an example of one of their core growth plan items from the strategy above:
"Social Media Campaigns, Organic and Paid Driving key messages around digital hygiene, decentralisation, and security on social media platforms to raise awareness."
The whole pdf is basically a collection of the remedial "go-to" SaaS growth blog posts everyone thinking about startups read: make content, build a community, turn your community into advocates, write about things people care about etc etc.
Given I've done this stuff for some 20+ years now, here is what is missing and frankly what most folks miss/don't want to admit:
This document basically has no ICP, who is the ideal customer? What is their persona? Who specifically are they, like, super specifically! You can't start with "oh anyone who wants anon-privacy first msg'ing!" That would have been like me at digitalocean saying "oh it's for anyone who needs a VM" - you can't execute a series of steps with that, you can't boil the ocean so to speak, we had to work through communities one at a time, we did: rails, node, php, devops/config management, in that order, split up over quarters and years, maybe it looked like we just...did developers, but we didn't, we slowly worked our way through all the developer communities slightly tailoring towards them while keeping things general enough.
The biggest problem here tho is the classic vitamin vs. aspirin problem. They're selling "better privacy" and "decentralization" - these are vitamins for the vast majority of people - they're things people say they care about in surveys but don't actually switch apps for. The 85% of adults who "want to do more to protect their privacy" aren't switching off WhatsApp. Are they the most secure messenger, or are they a token ecosystem with staking? Those attract fundamentally different people with different motivations...so just bolting them together creates confusion.
Folks need to stop thinking "we're going to do marketing" = "we're going to build a business" marketing, go to market, growth.. these are tiny components of overall business strategy. </rant>
Not every organization can or should be a business, this is dead wrong. Organizations including non-profits and social ventures need sustainability plans rather than business plans. These are largely similar but the values are different.
Some of the slippery slopes include the wanton privatization and outsourcing of government especially for things that create perverse incentives like for-profit prisons, education, and healthcare, and so-called private-public "partnerships" that usually turn out to be predatory "gotcha capitalism" monopolies that charge people for things that were previously free and paid for with taxes as commonwealth services.
OTOH, another pathology can happen in all sorts of money collecting organizations by putting profits/fees before mission, such as by making worse products or services to sell more of them, seeking maximum fines or fees unreasonably without offering value or a public service, or charging unreasonable fees for things that cost almost or nothing.
Slack (originally an MMO), Nintendo (card games), Nokia (rubber shoes) and Netflix (DVDs over snail mail) would disagree.
"We'll gather a bunch of talented people together, figure out what this industry needs and then do that, let's hope we can do that before the money runs out" can be a viable business plan. There's no guarantee it's going to work, there's never a guarantee a plan is going to work, but it can work sometimes.
You’re neglecting the fact that each one of those businesses had a plan, they just pivoted to more successful plans.
Plans are useless, but planning is essential. IIRC Nintendo had been operating for decades before they shifted to videogames. And Glitch (the MMO that gave birth to Slack) was also very much a product with a plan. Plan failed, or execution failed, or the industry shifted, or something else, or all or the above. But for sure it was not just "a bunch of talented people."
Nintendo was founded in 1889 and basically predates electricity in the home. I think they did a very successful job pivoting to new forms of entertainment as they arose over the years. Not a planning failure in any sense.
I believe NetFlix actually had a plan to stream movies from the start (hence the name) and just did the DVD shipping as a way to get started.
That’s not really a big deal since the session encryption was insecure anyway. It feels almost like a honeypot after they've removed forward secrecy. If you’re looking for a decentralized alternative SimpleX Chat is a more secure option.
My issue with SimpleX is that the company is in the UK, and it's developed in the UK under UK law. https://simplex.chat/transparency/
Considering how fiercely anti-encryption the UK is/has become (because "only child molesters care about encryption!"), this is sadly reason enough for me not to trust it.
Do I believe they have a backdoor in their software? No.
But if the UK passes a law demanding they introduce one...
Its FOSS so such a change would be visible.
What government are you certain will never introduce a backdoor requirement?
Or the mature and robust XMPP + OMEMO.
The problem with XMPP is that most clients use an outdated and insecure implementation of OMEMO. This includes popular clients such as Conversations and Gajim. Currently only Profanity and Kaidan use the latest version and you must always assume that the encryption has been secretly downgraded because the other person is using an insecure client. I highly recommend Soatek's blog post on this topic. https://soatok.blog/2024/08/04/against-xmppomemo/
I do not understand the security implications of this "Invisible Salamanders" post, but I would prefer XMPP even without any end-to-end encryption over a walled garden like Signal or Session.
Does that blogger discuss metadata, at all? I'm not saying the stuff pointed out in various non-Signal tools isn't valid, but I don't see any discussions on the dangers of metadata.
Yes, I do. See my review of Signal for more: https://soatok.blog/2025/02/18/reviewing-the-cryptography-us...
Not sure why it's always a binary: either give us $1M or we shut down.
Vast majority of products and services can continue on or near zero, with slow or zero velocity.
Really, you can't fire half the team if you have to and keep operating?
1.75M MAU requires very small infrastructure.
Maybe it's a binary choice for the people who have to maintain it?
You can scale down money.
But you can't scale down commitment arbitrarily.
Yeah, there is no way they need $1M for the servers, come on...
God forbid someone get paid for their work.
Paid is desirable. Overpaid, not so much.
$150k is overpaid for a senior engineer?
Depends on what "senior" means. Every company has its own definition.
In most of the world, yes.
> In most markets Senior developers often command salaries exceeding $150,000 USD per year
Why not outsource this to a cheaper country? For example, here in Germany salaries are about half of that, and the talent pool is excellent.
Afaik Germany is one of the most expensive countries for employing white collar jobs?
The gross income to the employee might be 75k in Germany, but the cost to the employer is roughly twice that amount in turn.
In my (very naive) mental model, US salaries are higher, have less "overhead" for the employer, but leave more responsibility (healthcare, retirement) to the employee.
Employer cost is not 2x, more like 1.2x, employer overhead is mostly insurance related stuff. We had salaray to employer cost tables at my previous job.
What true though is that after taxes you might just receive 60% of your total salary once you deduct taxes and insurances.
> In my (very naive) mental model, US salaries are higher, have a lot less "overhead" for the employer, but leave more responsibility (healthcare, retirement) to the employee.
Unfortunately this time, AI does not have vacations, healthcare, retirement or bills to pay and is available 24/7, 365 days on demand.
Many companies only see this as an opportunity to cut down on employees in 2026 and Session will do the same.
So that is why to answer your question:
> ...Germany is one of the most expensive countries for employing white collar jobs?
The main reason why the downsizing will continue until "AGI" is achieved internally.
Yeah , but the German pension system is unfortunately a scam . Therefore everyone is responsible for their own retirement (private investments e.g etfs) .
If you are getting 60k EUR as a senior developer in Germany, you are getting ripped off. Look for a place with an IG Metall contract, friends - if you would like to be making significantly more than $75k USD full time as a senior developer, anyway.
Id do it for 1/3rd!
Claude (or any other chatbot) can do it for 1/100th of the cost and faster than anyone.
So $150k+ is overpriced.
this is true, Claude and other LLMs are highly skilled at producing secure code
Name checks out.
Less Claudtistic apps, not more.
Add 30% on top of your salary to cover social contributions+ healthcare.
so still 20% less?
They don’t say how they plan to avoid a repeat scenario a few months down the line.
Donations are fine, but something needs to change or people are just propping up a non-viable business.
Surprised to hear this since my understanding was that Session was run on a crypto coin based, user hosted onion routing servers. Do they mean the dev company behind Session is shutting down?
An anecdote I have: a friend once had narcotics shipped intl. through Session a few years ago.
[dead]
Never heard of them, and this page doesn't tell me what they do, but I've laughed at this line
> In most markets Senior developers often command salaries exceeding $150,000 USD per year
Not really, there's basically a single sub-market in the US market where that is the norm.
Within the US, it's far more common than you think. That's typical senior dev money in a large company in cities like St Louis or KC. What is rare outside of the biggest markets is the whole "enough RSUs to double your salary" thing.
Nah, like others have said - 150k is fairly normal for senior positions in any decently sized metro in the US at this point.
Even a decade ago, seniors could easily be pulling 120-150k in markets like Houston/Atlanta/Miami/etc... The relatively cheap markets.
I'm in Atlanta and I'd actually say 150k is a lowball offer for a senior in this market at this point. I'd expect 175k+.
Now - the flip side of this is that current competition is fairly insane with all the recent tech layoffs. So it's possible we're seeing some market correction. But I don't really think it's going to come down much. Between inflation and rising costs... 150k just isn't what it used to be. If it comes down... it's going to be because we're entering a real depression.
---
The amount of money the US government has printed in the last 7 years is... insane. And while it was starting to taper back down in 2023 and early 2024... then we got the GOP, and the GOP is objectively bad with money (not that the dems are that much better...). So m1 supply is rising at a relatively steady rate again.
We going to feel the consequences for a LONG time (or very, very badly for a medium time... with unknown results).
the rare market is 250k+. You can get 150k in cleveland or milwaukee
I'd consider this a lowball in Austin
Whats the take-home after housing and expenses tho? It's the same in CA... massive salaries, but also massive taxes+housing expenses.
At least in my experience, having worked in both Florida and California, that's more of a wash than people imagine it's going to be -- and more so than the "cost of living calculators" tend to demonstrate, at least if you're a renter.
I actually ran a few numbers based on current costs. If you're making $120K/yr in Florida and paying the average cost for a 1-bedroom rental in Tampa ($1,642/mo, as of April 2026 according to Apartments.com), your after-tax take home is $98 (24% federal tax bracket, no state tax) and you have $78.4K after rent. If you're making $180K/yr in California and paying the average cost for a 1-bedroom rental in San Jose ($2,705/mo), your after-tax take home is $130.5K (24% federal tax bracket, 9.3% CA state tax bracket) and you have $98K left after housing.
You can keep fiddling with the numbers, but in most cases, the premium for getting a tech job in Silicon Valley is sufficiently high that you really are making more in absolute dollars despite the higher cost of living.
That math breaks down if you have kids and need 4bdrm house commutable distance to work in good school district - prohibitively expensive in Bay Area and affordable on engineer salary in most tier 2 cities. If you do not have kids, Bay Area clearly wins, especially if you are ok with studio/1bdrm.
Interestingly I applied for one of their senior frontend positions that required a "high level of experience" in Australia, they said 120k AUD with no room to go higher. Went with an offer of 170k instead.
Well, that aligns with both "total raise of 93k AUD" and "we need more money to afford to hire senior people"
That salary is not unheard of at all in London. Especially when you convert £ to $.
Sure but Londons known for being high wages. Now change that location to Cornwall or the North of England and watch it get almost cut in half.
Manchester is only about 10% below London, other cities along the M62 are about 15% below according to the salary benchmarking data I've seen. The bigger difference is more in the number and type of available roles.
That salary would be above the median for most perm senior dev positions in London, but still well within the usual range for established tech companies and well-funded startups.
You went from picking the highest salary city...to the second highest paying city. You get how that comes across right?
Most of the rest of the north is similar. Darlington's the main outlier, since it's dominated by the public sector.
And yes, a senior dev will be on half that in the public sector outside London - but only if you exclude the pension.
I don't have figures for anywhere in Cornwall. Is there actually much of a tech industry there?
not unheard of, but not typical.
They are based in Switzerland . 140k USD median dev salary
Interesting claim, where do you gather that data? The quick results I got where from a 2024 report on TheNextWeb claiming its around 90k USD equivalent in Switzerland https://thenextweb.com/news/european-cities-highest-salaries...
Market rate for a senior engineer in much, much poorer Poland exceeds 80k at current exchange rates - ask me how I know.
I also had a contract in Switzerland for a brief, beautiful moment and in 2020 it was not weird to have an hourly rate exceeding 90CHF/h in this role.
Permanent employees were making anywhere in the range of 100-130k CHF, so the 140k USD figure is close adjusted for inflation.
https://swissdevjobs.ch/salaries
Thanks for the data, 117500 CHF converted today is around 148k USD, and that means being in the top 25%
It clearly says that the median is 110k CHF ~ 140k USD
For a Senior perhaps. The figures I find for Switzerland are more in the 90-120 range depending on the source. Also, I think what OP was referring to is the 'most markets' bit. Switzerland is the best paying country in Europe (discounting London).
> Switzerland is the best paying country in Europe (discounting London).
How does that look when you correct for costs of living, because I imagine that would put London at the bottom of the list, as one of those places where senior-level tech salary is not enough to afford living in the city itself (and I don't mean the City of London, but the rest of it too).
I wouldn’t have replied if the session foundation hadn’t been based in Switzerland.
>Never heard of them
They're big on dark web drug markets.
Yeah I'm not sure what they do, or why they need support
A collection of strongly opinionated crypto experts running on hopes more than money is no way to run a government^W^W a messaging app
[dead]
[dead]
For a senior developer, $150,000 is about right. I'm looking at the latest half dozen jobs I've seen on LinkedIn for open senior developer positions and they all start at that number, and range up to $185k to $200k. Digging a little deeper, I see some th atstart well above that number, but it's for the huge companies you're thinking of -- Google, Netflix, Github.
Time to broaden their hiring pool then, $150k is double the cost of a senior developer in many other parts of the world (yes including English speaking first world countries).
When you've got 90 days till the doors close you cant be picky about your hiring pool.
Read the posting. They dont have money for a team, they don't have money for a senior developer. Whether $150k/FTE or $75k doesn't matter, because they don't have either of those.
Once the server and other costs have been paid, the have money for... maybe a part-time junior in Cambodia.
The claim is that 150k is the baseline that is often exceeded. I don't know the region you're looking for on LinkedIn, but what I see for European jobs is that they barely crack 100k for developers. At least the senior, non highly specialist, jobs I'm seeing.
I'd love to know where the $600k that Vitalik Buterin donated to them 3 short months ago went. I don't think they've adequately addressed this question.
seems like it was $300k (the total was split between simpleX and session), but still—fair question
If it were actually decentralised, it wouldn't really have huge costs to worry about...
You mean... developers?
My advice: If you want people to give you money so that you don’t have to shut down, and you’re writing a ten paragraph plea for donations, consider using one of those paragraphs to tell people what your thing is.
If we knew what it was, we might want to help.
Their logo actually links to their front page for once so it's not too hard to find out that Session is "The decentralized private messaging app", even if you're on a touchscreen. No need to fuss around and figure out how to get from "session.blogplace.org" to "getsession.com" by editing raw URLs like I feel happens with half the posts like this.
It could still use a paragraph or two of "why we believe it's important for this particular decentralized private messaging app to exist when there are about six hundred other decentralized private messaging apps out there that nobody but people who care passionately about decentralization are using", though.
(This is not a question that I feel their FAQ addresses, either: https://getsession.org/faq)
It's in the footer but yeah
It's Signal but blockchain
It's sad but I'll forever remember them for having the best tagline ever on their frontpage:
We all know who this is directed at: the project(s) pretending to offer privacy but that need to collect your cellphone and that'll happily be able to know who you exchanges messages with.Project(s) whom, moreover, have often weird shills that, if you squint your eyes just a little bit, suddenly look like xxxINT moles.
So if only for that tagline, thanks a huge lot: metadata are more important than the content of the messages themselves and you have no privacy if your phone number and contacts are known.
> To date, the STF has received approximately $65,000 in donations. This is enough to maintain critical Session infrastructure for the next 90 days.
Excuse me, what?! Spending $22k a month in infra as a pre-money startup is insane.
I've had the same question above: https://news.ycombinator.com/item?id=47706122
Haha. The wording's equal too!
> 65000 USD in donations > enough for infrastructure for the next 90 days
20k per month in infrastructure. Excuse me, what?
They're taking about paying for full time developers.
Where am I reading this wrongly?
> approximately $65,000 in donations. This is enough to maintain critical Session infrastructure for the next 90 days. We are extremely grateful for the support Session has received from the community, but unfortunately this is not sufficient to retain full-time developers. As a result, all paid staff and developers will have their final working day on April 9, 2026. After this date, some team members will continue on a primarily volunteer basis to help maintain Session until July 8, 2026.
I had never heard of this, why session over signal?
Edit: here is a snippet from google AI:
Well, I guess they didn't sell out
https://getsession.org/a-messaging-app-that-cant-sell-out
I've built many apps throughout the years.
One thing that I've learned is that privacy is a secondary concern. It's never a primary one.
If your app's main differentiation is privacy, it won't sell. Users just don't care about it that much.
Inauthentic activity benefits from privacy though. Inauthentic activity is a primary use case of ChatGPT, which is way more successful than anything you've ever made. Do you think kids using ChatGPT to cheat on homework would care if their chats were "private" but educators could check if submitted essays matched generated content? Uh, yes. So privacy isn't as simple of an idea as you think it is, and is certainly extremely valuable.
It's a telling that you picked an example where one user could access another user's private info in an unauthorized way. No famous app does that.
When I say privacy, I mean supporting the company promises a stronger privacy mechanism e.g. run locally, e2e encryption where the company itself cannot access your private info. This is the case for Session.
It turns out most users are okay with you promising not to use/access their private info for other means. That's already sufficient. Then, other factors e.g. usefulness are more important.
"When I say privacy, I mean everything that makes me right, and everything that makes you wrong."
"No no, that's not what I mean. I mean, privacy is this only, specifically this set of technologies applied to this very specific set of products, and nothing else. Whatever definition will allow me to make this conversation as uninteresting as possible."
Look, I guess my point is, privacy is complicated. In my example, I suppose OpenAI could authorize access to something. They already do, for training. Right? And in some sense, something valuable leaks from one users' data to another. It is still privacy when access to your data is limited in some important way from other people, even when you (or a lot of people, or other people) could benefit from such access. The biggest apps in the world have very, very complicated privacy stories.
It is certainly extremely valuable as an ideological construct, i.e. a fake notion to mislead people into self-defeating behaviors.
"Why not use $COP_APP?" "It's not private" "Well it's by a private company, it's not run by the government or anything - what the fuck are you talking about, corporal?"
I could never get it to work and I've tried several times. I kind of get the feeling I'm being blocked at the ISP level. We entered an era of the Internet where you're just not allowed to create secure communications.
If you need decentralized messaging and not some cryptocoin front, Delta Chat (https://delta.chat/) is what you're looking for.
They should keep a single competent and curious senior developer who can do it all. In this age of AI, you can make do without having a whole team of developers.
Unfortunately, i could see this coming
A few months ago, a Session update logged me out. I tried to log back in, but my passphrase caused Session to crash. I tried the Play Store version, the F-Droid version, and the desktop version.
Support told me that login method had been around for a while, and I didn’t know it. So suddenly, I was locked out and couldn’t access MY ACCOUNT. I used to promote Session, but since their support response was basically a big “fuck you,” I say “fuck you too,” and I hope people switch to SimpleX.
I don't personally use it, but regardless, it'd be a shame to see it go
I like the idea. But I’m pretty happy with Signal. Signal does require a phone number I think, but otherwise seems very similar.
Grounding identity in a phone number is very reasonable for almost all normal usage. It makes recovery simple. It does block the ultra paranoid use cases though. Oh well.
Session is not similar to Signal.
Session aims to provide anonymity, Signal aims to provide privacy.
>> Grounding identity in a phone number is very reasonable for almost all normal usage.
Yeah if you compare that with Facebook messenger and other such services but if you want secure communication it's not reasonable.
>Grounding identity in a phone number is very reasonable for almost all normal usage
In many jurisdictions, telecoms form an abusive oligopoly, and you need to provide a state-issued identity document to get a phone number.
That is not at all reasonable for normal usage - unlike well-known non-abusive authentication methods, such as a keypair; or its even simpler cousin, the username/password.
I guess it depends on what you consider normal. Most of the humans I know find it vastly easier to produce a state issued id to an authority than to generate a public/private key pair.
What's easier: to obtain state ID, or to sign up to a website with your preferred username and password?
Well, I and a lot of the people I'm going to talk to through things like Signal are going to have a state ID regardless as I live in a country where one practically needs to drive a car to function in society.
On top of that so many other things just inherently expect one to have a phone number. It would be somewhat odd to not have a phone number for most of the people I know and talk to through platforms like Signal.
So to your question of which is easier, having the state ID and a phone number is easier because I'll already have that for a multitude of reasons.
If you live in a place where its rare to have a phone number, then yes I agree Signal probably isn't a good choice.
That's not what I asked.
You asked which is easier, and I gave my answer. It's easier for me and many many many millions (billions?) of others to have a phone number and state ID, because we'll have already had a phone number and state ID on hand for decades beforehand and have shared that number with the people we're already talking to while making a new identifier and sharing it would be quite a bit more work.
What's easier, using a tool that's already in your hand or going to the tool store, searching for a new one, and swapping to that one? Just using the tool already in your hands, that you're already using, that you've been using for a long time.
It's exactly what you asked, just not the perspective you cared to look at.
In the time it took you to selectively bring various outside context "for perspective" (instead of answering the question as asked) you could've registered a brand new account with username, password, email confirmation, and OTP 2FA, on any service that supports those.
If you insist that 2+2 equals "3 or 5 depending on perspective", ok sure let's work with your scenario of comparing registering a pre-existing state/telco ID with creating a brand new user/pass account (again: instead of what I asked you to compare). Well, suppose you were to lose your ID and/or your SIM - do you think you'd be able to renew them and regain access to your stuff in the same amount of time it's taking me to write this now?
Plus, I guess you've never seen bad actors buy fake ID/SIM accounts faster than you can block 'em - and much more quickly than any individual good-faith actor (with a single ID/SIM honestly linked to meatspace) would able to get out of harm's way in such a scenario.
>What's easier, using a tool that's already in your hand or going to the tool store, searching for a new one, and swapping to that one? Just using the tool already in your hands, that you're already using, that you've been using for a long time.
Hammers, nails... You're trying to make it make sense by dumbing it down.
In the end (again conforming to your framing), the "easier thing" is the one that fewer people will expend energy to prevent you from doing. And this last consideration kinda-sorta makes your reply be an answer to my question, except that I had to do the work of connecting the two, so now you owe me 100EUR.
> instead of answering the question as asked
I've answered it twice. Its easier to use the thing you already have than it is to make something new. Is that really difficult to understand?
> you could've registered a brand new account with username, password, email confirmation, and OTP 2FA, on any service that supports those
And then spend the many, many, many hours to share that new unique identifier with all the people I want to talk to. Or I can just continue using the same identifier they already know me by and have known me by for decades.
> I guess you've never seen bad actors buy fake ID/SIM accounts as quickly as you can block 'em
Whaaaa I thought you just told me a phone number is such an incredibly hard and challenging thing to get, now you're telling me anyone can easily get them anytime they want?
So phone numbers are incredibly challenging to get and yet people get them all the time easily. Otherwise, if phone numbers aren't hard to get and anyone can just freely get them what are we even really debating about?
For billions of users, having a phone number as their identifier isn't a challenge and is for sure the easier process and having to make a new unique identifier is a bigger deal and introduces far more roadblocks to effectual adoption. Its why WhatsApp uses it, its why iMessage uses it, its why Telegram uses it, its why WeChat uses it, and many others.
>Its easier to use the thing you already have than it is to make something new. Is that really difficult to understand?
I asked which is easier to make.
This is, evidently, an extremely difficult question to understand.
>Whaaaa I thought you just told me a phone number is such an incredibly hard and challenging thing to get, now you're telling me anyone can easily get them anytime they want? >So phone numbers are incredibly challenging to get and yet people get them all the time easily.
Not phone numbers; accounts gatekept by them.
Not anyone; only bad actors.
>I thought you just told me
What I just told you is written in the parent post.
You have the right to misread it any way you like, and think whatever comes to your mind easiest. But since that's not how a conversation works, I will ask you to exercise that right somewhere I can't see you - and by the way you still owe me 100EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax.
> I asked which is easier to make.
Which is easier to make? The one I don't even have to make, I already have.
Which pizza is easier to make, the premade pizza that's already ready to eat and is right in front of you, or the pile of ingredients in the pantry and fridge? Uhh...the pizza in front of you ready to eat? Put it on a plate and eat, it's there, it's ready to go. And practically everyone already bought their pizza and it's already in front of them.
And no, you didn't ask which is easier to make.
> What's easier: to obtain state ID, or to sign up to a website with your preferred username and password?
Where's the word "make" in that?
> Well, suppose you were to lose your ID and/or your SIM - do you think you'd be able to renew them and regain access to your stuff in the same amount of time it's taking me to write this now?
Well, I'll end up wanting to replace that ID and SIM for once again a multitude of other reasons, so having that identifier tied to that really doesn't increase any complexity. Its really not that big of a challenge for billions of users, its something they're going to already do. When the school needs to urgently get a hold of me, they'll call my phone number not refer to me by some handle on a jabber server with a population of one. This same thing applies over and over and over and over for tons of people.
Meanwhile if I've got other accounts tied to other processes that get lost in their own unique ways, I'll have separate issues to get those unique identities recovered. Sounds like more work, not less work.
You now owe me 20,000,000,000,000,000,000EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax. Such a useless thing to add to the conversation.
>the school
My condolences to any children who have to interact with you.
>You now owe me 20,000,000,000,000,000,000EUR, but since I'm not an actual cyberstalker, I won't be chasing you down to collect. So relax. Such a useless thing to add to the conversation.
Nah chill, I'll be there shortly with the money.
Obtaining your first id is obviously difficult. But so is obtaining your first computer. If you’re on good terms with your government, obtaining the id is easier. That’s really the key. Sure if you focus on hostile states this stuff all makes sense. If you’re insistent on hiding from authorities then many things become much more difficult, by design.
That's not what I asked.
You asked the wrong question. Sorry if you still don’t understand why. Seems others are also trying to help you understand but maybe you don’t want to.
>You asked the wrong question.
Oh, so there are "wrong questions" now? Yeah, I guess I'll have to get better at asking those real quick.
> otherwise seems very similar.
It's worth mentioning that Session had started out as a fork of signal.
signal is really crappy. It fails at the most basic feature which is : deliver the message on time.
does it? have you been trying to use signal while disconnected from the internet?
I had a friend who complained about this too. I never understood it. She had a really cheap old android phone. Maybe that’s the issue?
I primarily use a nearly-bottom end android phone that's a few years old and just recently switched to an even older, even lower end android phone that is six years old. Neither has that issue.
Obviously, I'm not really claiming that it's not possible people are experiencing this issue, but it can't possibly be widespread.
I feel like most likely people are using android skins that aggressively kill apps in the background.
I have that exact issue on a couple of not exactly low end Samsung phones. Holding them side by side with signal open. Delivery times vary wildly. Whereas WhatsApp just works (though I hate it for other reasons)
I can see why that would be incredibly frustrating. Have you reported it to them, either via github or email?
nope, iphone here, and quite recent. But it's not just me, all the people i communicate with on this app have the same kind of problems. With a group of friends we even had a totally weird ordering of messages, making the conversation quite absurd.
There's something deeply wrong with the way signal delivers messages...
Signal's code quality is not conducive to security. They had an extremely bad state management bug that resulted in photos being sent to random contacts in your list (potentially life ruining implications if you're sending private photos).
For this reason, it's hard to trust them. The encryption quality is irrelevant if the slop coded client is blasting random photos to random contacts.
Source?
It would've taken you less time to Google, but sure: https://www.bleepingcomputer.com/news/security/signal-fixes-...
Send a GIF to Contact A, Contact B receives random private images? Absolutely inexcusable slop code project. This class of state management bugs should not be possible with a well-architected client, period.
Signal's E2E encryption is more like End 2 Random End.
Or why not include the source of your claim up front?
From GitHub comments: https://github.com/signalapp/Signal-Android/issues/10247
Greyson:
> Hi there, sorry, this issue was fixed in 5.17 (which hit 100% production on 7/21)
They had a difficult to reproduce problem reported in late December 2020, and got the fix rolled out seven months later.
Not sure your criticism "absolutely inexcusable slop code" is well considered.
So 7 months of their users getting rinsed by an extremely serious issue exposing your private photos to random contacts. Seems like slop code to me. Those kinds of state management bugs should not be possible. It indicates code divorced from best practice state management.
Knowing that bug COULD exist, means that you cannot be sure that messages you send in Signal will make it to the recipient you intend given the poor quality. This means the E2E encryption is fundamentally broken, by the way. Because the client is lying to you about the true state of who it's about to send to.
The recipient text has fundamentally zero relationship to the true recipient of the message given that bug.
Having the UI and message sending code reference two different versions of state is incredible incompetence.
Running a nonprofit is really, really hard and I commend them for doing it. I hope they get through this crisis.
Hack Club almost went insolvent in 2017. We would have, if it wasn’t for 2 friends who stepped in near the end and saved us. Today there are tens of thousands of teens involved and doing amazing things.
I’m disappointed by all the negativity in the comments. I’m not familiar with Session, but raising donor funds is a very different skillset than software engineering and anyone who is trying to do both has my respect.
Sad. I will need a new way to communicate with my guy.
Ha, and it was also used as a kind of low-rent/unmoderated alternative to Onlyfans.
Certainly, there were enough people making money through it that they should have been able to cover operating expenses. How did they go about appealing for donations - was there a notification inside the app, or did they rely on word of mouth?
“Gas, grass or ass - nobody rides for free”
https://simplex.chat is the best option.
Session was Australian based which means they would have to do all sorts of horrible things when asked by the government, such as even letting police impersonate users...
I just checked and they claim to have moved their infra to Switzerland.
There are many other issues, some I've forgotten about since I would never trust it in the first place. They also require a phone number even!
Seeing them go, I feel neutral. It's always good to have more anonymity software, just not this for me.
https://www.theguardian.com/australia-news/2024/nov/05/sessi... they moved more than their infra
> They also require a phone number even!
"You don’t need a mobile number or an email to make an account with Session." - https://getsession.org/faq#identity-protection
From your link, it explains that they have to Switzerland:
"The developer of Session, an encrypted messaging app, has moved operations to Switzerland as ‘being in Australia just threatened our credibility as a privacy tool’."
What else in particular are you talking about?
With the phone number, I may have not remembered correctly for this particular software. If I could edit my comment, I would add a note.
But when going to the FAQ link I remembered how bad this piece of software was especially promoting cryptocurrency. I would never want a messenger to promote crypto, such a "Signal"
Edit: used different quote from the article
> They also require a phone number even!
No? Where did you get this from? I have used the app and was never asked anything. I was given an id I could share with others and that's it. Very simple. I wish more apps had this easy onboarding process.
No legal mechanism with such breadth exists in Australia. There was a great deal of overblown media reporting but the law [0] makes it explicitly clear that any request that requires a "systemic weakness", "systemic vulnerability" or anything of the like is null and void. Those terms are defined [1]. Note that it doesn't say the government can't request such a thing, it says that such a request "has no effect". It's simply dead on arrival.
My understanding is that the government could compel Facebook to publish a version of WhatsApp with a special mode that sends all messages to the police if the user ID is 1234567. This introduces a vulnerability but it is limited to one specific person. If your user ID is not 1234567, you're completely unaffected.
However my understanding is that the government cannot compel Facebook to compel a version of WhatsApp that, when it receives a special message, silently starts sending plaintext copies of every other message it receives to the police. Such a mechanism would be a systematic weakness that affects people other than those for which a warrant has been issued, so the notice would "have no effect".
The government could also not compel a source-available app with verifiable builds to stop distributing them so that it can add a secret user ID branch like the one I mentioned above for WhatsApp.
[0]: https://classic.austlii.edu.au/au/legis/cth/consol_act/ta199...
[1]: https://classic.austlii.edu.au/au/legis/cth/consol_act/ta199...
"No legal mechanism with such breadth exists in Australia." No.
See: https://lowendbox.com/blog/australian-police-will-soon-have-...
"These new warrant powers include:
1. Data disruption 2. Expansion of targeted devices to include all devices a suspect uses or might use 3. Account takeovers"
Australia is extremely draconian.
And a Five Eyes member.
[dead]
[dead]
> In most markets Senior developers often command salaries exceeding $150,000 USD per year, and on top of this there are legal and operational overheads for running the STF.
Translation:
Our product makes no money, has no use case and we need $1M to survive.
Two ways a PE "cost saver" would fix this:
1. Claude + 1x senior engineer (in India).
2. CTO + Claude and no senior engineers / employees.
Given we have (allegedly) achieved "AGI" (heavily disputed) they don't need as many employees.
Especially those that are after $150k+ which when you can vibe code with Claude for less than $10k anyway. /s
Job done.
So you are suggesting that a private communications and messaging system that proports to offer reliable anonymity is a reasonable use case for more-or-less unsupervised development by Claude? Because that is just the sort of use case where I would NOT trust an unsupervised AI.
That is probably the reason they added the /s at the end
[flagged]
Never heard of Session until today.
I'm amazed by how many companies I first discover via their shutdown announcement on Hacker News.
This is extortion.
They're hoping one of the rich dark web drug lords that use the app will sponsor them with crypto.