_(Prelude: At ollaa.com we are 3 undergrad CS students, developing a mobile social network.) _
We have faced several difficulties in our startup adventure until now. Here’s a few of them:
**Things are slow: ** When everybody is supposed to pay attention to college courses, development is not so agile and you cannot expect all team members to push feature implementations everyday. GPA-hobbies balance is pretty dangerous. Therefore, you keep postponing release dates. Read More →
At ollaa.com we are 4 undergraduate CS students, developing a mobile social lifestreaming network. We are not working on this startup full time and we don’t have a budget to spend on fancy project management tools. One of the solutions that we proudly use to get things done is HipChat.
Basically it is a chat software that team members can communicate in chat rooms or in person. The different thing is, conversations are persistent and you don’t have to be online to keep up with previous chats. It also allows file sharing, video chat and has iOS, OS X, Android apps, which is pretty cool. Read More →
Yesterday there has been a popular post on Hacker News about Designing Secure REST API ** without OAuth**. I don’t agree that OAuth is unsuitable and I’ll introduce my way shortly. This post is intented to be a reply on this topic. In our new startup (ollaa.com), we (3 undergrad co-founders) are basically developing a mobile social network that has iOS/Android clients communicating the server via a REST API. We also looked at how we can provide a secure authentication to our API.
Earlier in our development days, we developed our own proprietary authentication method. It basically should not make us store passwords on the clients and should be extendible for 3rd party apps (who should not know user passwords).
Naively, we were just passing
Read More →
/api/someEndpoint?username=xxx&passsword=xxx
as URL parameters. But later on we realized that will cause serious issues: