Hacker Newsnew | past | comments | ask | show | jobs | submit | alcazar's commentslogin

> At MWC 2026, Motorola announced a formal partnership with the GrapheneOS Foundation and said the two groups will work on future devices engineered for GrapheneOS compatibility.

> The official announcement was careful on timing, but follow-up reporting points to the first compatible Motorola flagships arriving in 2027, not on current devices.

> If that happens, GrapheneOS stops being only a Pixel answer.

https://blog.alcazarsec.com/posts/most-secure-phone-setup


Yeah but as of the post, that hasn't happened (and it'll probably take some time even if they meet 2027 target) - there are also countless other vendors that I'm sure people would appreciate grapheneOS on (I would, for one).

I agree. For now you can buy a used Pixel to avoid giving Google money directly. In a year, you may have more options.

What happens if you add a new item on two devices simultaneously?

It renames one of them to $hostname_conflicted, or something like that. Keepass has a built in tool for reconciling two databases, you can use that in this scenario.

Why would you do that?

By the way, syncthing can manage conflicts by keeping one copy of the file with a specific name and date. You can also decide is one host is the source of truth.


I'm working on an anonymous Dead Man's Switch (https://alcazarsec.com/deadmanswitch). You don't need any personal information to sign up, and you can configure email messages that will be automatically sent only when you stop checking in.

This can be useful for families handling digital legacy, solo founders, journalists, and others.

Let me know if you give it a try!


What would happen to the service when you've died? How long after you've died, it stop working? That's the real problem with it.

If your app, pays for its own costs, it can live long after you've gone. You may have to use dApps (Decentralized Applications) on blockchains.


[OpenAI says its new model GPT-2 is too dangerous to release (2019)](https://news.ycombinator.com/item?id=47684326)


I set up a Dead Man's Switch. It sends me an email with a link every day. If I click it, I acknowledge that I am alive and nothing happens. If I do not, after a grace period and more reminders, it sends an email to my wife with a password-protected file. I have listed all our accounts, passwords, assets, etc., along with instructions on what to do and whom to ask for help.

Disclaimer: I sell digital legacy products. However, I also honestly use them, and some of these tools I distribute for free and have made open-source.


Wow, that contains a fatal weakness (no pun intended), that She won't assume the email is spam (or a scam) and just delete it without opening it.

It's quite possible for you (or anyone who uses your work) to have the outcome they were trying to prevent because of this.


She knows about it, so she will actually be expecting it.

But yes, that is indeed a risk, particularly for other family members who don't know there is an email for them.


Wow, why every day and not weekly? Every day seems too frequent.


I also thought that, but I like it this way. It supports weekly checks as well.


How do you perform the check-ins? Can you send messages to "normal" people, such as your parents, or must they be running a script to check the blockchain periodically?

Most people want an easy-to-use solution for sending messages to family and friends. However, technical people with technical friends can use the bleeding edge, and that is cool as well.


That's great if you just want them to know you are gone (although many friends would realize before that).

It is not complete if you want to send them anything after you go—some goodbye letter, or something more practical like a password, or plans and info they should know.

It is still a good idea to configure anyway. It's not one tool or another; they can complement each other.


For "bus factor of one" stuff I am thinking about making some preperations. I was considering using ssh key based sudo or something like that and something like vaultwarden.

The people who i am thinking of can have access now. They just wouldn't know what to do with it.


I think Vaultwarden is the right place to store secrets and SSH keys. They can use the emergency recovery feature to request access after a certain period.

You could then share the complete instructions via email using a dead man's switch, which would make it easier for them to navigate those difficult times.

If you want to give that a try, I can answer any questions you have during setup and extend the free trial (the default is 14 days) until you are sure that this is the right solution.

Send us a message if we can help!


We're sorry if you had the impression it wasn't our own product. The second recommendation is "Alcazar Dead Man’s Switch," and the page is titled "Alcazar · Blog." We thought it was clear.

We recommend our own product because we think it's one of the best options out there. We want people to hear about it, while we also share information about our competitors and when one would choose us versus them.


Here is the text that made me assume it wasn't your own product:

> The public product page also says you can send different information to different contacts

In any case, writing a product comparison including your own is subjective so better abstain. Now I do wonder if this post is advertising or informing us.


Fair enough. It is an advertisement, like when you read a "What is the best free email account?" blog article on the ProtonMail blog; you know it is an advertisement for their own product.

As a company that builds stuff, you need to get people's eyeballs on your products. One way you do that is by advertising your product. This is not in a nefarious way; it is just the law of nature.

Do you have better advice on how to get people to know that we exist and to try our product? I am honestly listening.


To be clear, I wasn’t calling your article spam or strict advertisement. But avoiding dark patterns is better in the long run. I’m being honest: reading that article left me feeling fooled.

You’ve clearly put time into writing a detailed post and replying to comments, here’s what I’d suggest: focus on strictly value-add articles. distribute them widely, yes.

No catch. No reader left with a "I see what you did there" pinch.

By strictly value-add content, I mean exactly the kind of blog post you shared, but written without any attempt to name-drop your own product. You don’t need to. Your blog already lives on a subdomain.

It’s fine to include a simple footer like “Discover Alcazar products.”

In my experience, adding real insight without selling has a far greater effect, at least on me. I’m much more inclined to visit a product page when I don’t feel sold to. But the way your article is currently written, that inclination isn’t there. So I didn’t visit the product page.

What works best is when readers feel they’ve solved a problem. or at least realized one existed, and learned something. Without ever feeling like they’re watching an infomercial.

Sales is solely about building trust, in my view all other aspects are less relevant. You are right being seen is important, even more than trust, but it would remains pointless on its own.

Edit: the blog post on Pixel with graphenOS being the most secure phone is the perfect example of value add.It made me want to check what Alcazarsec has to offer.


It's very hard to simplify a list of services to the point where it's useful for everyone. Some people have never heard of the topic and just want a quick skim. Others want the full feature list (which you can find in the linked websites). There's no perfect solution.


No upvoting ring here. In fact, I didn't realize this blew up until now.

We routinely post blog articles explaining digital legacy to people. And oftentimes we recommend our own product, as we honestly believe it's one of the most simple and private ones out there.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: