I completely understand what you mean regarding Firefox. While everything already works fine there, the extension isn’t available yet. We had to make a decision regarding the tab management feature (tab grouping), which posed some challenges for Firefox.
That said, Firefox extension support is on the way! Even if we start with a stripped-down version focused on 'bookmarking' for now. We can’t be a privacy-centric company without supporting Firefox, that’s for sure.
I studied Operating Systems in my CS studies for two years, so I’m quite familiar with the methodologies and the strict definitions that define a traditional OS. I’m not trying to redefine what an OS is in the academic sense. My intent is more about using the term as a metaphor to communicate what our product does—similar to how many technical terms are borrowed from the physical world.
You’re right that there’s a whole CS course on OS, and I respect that. But I believe it’s also okay to extend the concept in a practical way to help users understand what this product aims to offer, especially in today’s interconnected landscape.
It’s also good to note again that we're still at the early stages of this project. Hopefully by time the name makes more sense, or we might even change it entirely!
I understand your point. It's still early stages and I expected these kind of comments honestly, because I myself saw a lot of these "desktop in a browser" demos that ultimately had no use to me whatsoever.
I believe our approach is very different though, and as time goes by hopefully it'll become even more useful to even more people.
I appreciate your detailed response, so thank you for taking your time to explain.
First, I would like to point you to this page: https://savaos.com/about - I don't know if you've seen it already, but it explains in brief what we want to achieve/envision. Should explain some of your "what the hell is this" questions :) And as you can see, it's a very ambitious goal.
I agree with a lot of your arguments. To be honest, the most challenging part so far has been to try to explain what we're doing. "What would be the right MVP?", "How can we evaluate such a project?", "Is something like this even feasible?".. these kinds of questions constantly popped up in our heads. My point is, we had to start somewhere.
We don't know if this is the right direction yet, but so far we've seen some interest and already received valuable feedback. The best use-case right now is practically link & tab management. Definitely overkill for just that, but for "non-tech" people, it does feels familiar.
I'm not a UX designer, I tried my best with the design and I've personally worked on a lot of accessibility features before (in terms of code). It's not there yet I get that, but it will.
Regarding the comments, on the contrary, I don't see much of negativity here. Just people expressing their gut feeling, but I like it a lot. Much better then hearing the typical non-sense "congrats" & "all the best" kind of feedback. This is what opens my mind the most to make crucial decisions for the next steps.
By the way, I did mention that it's an MVP. In my opinion all MVPs are toys and demos of "what can become". Perhaps I'm too good of a designer for not being an actual designer, and it looks too good? I'll take that as a compliment.
It was tested and should work on all browsers (though the extension is only chromium based at the moment).
But for the sake of simplicity, we placed that badge since it's the most familiar icon to the wider audience. Initially most of our visitors thought it's an OS they have to download, this helped solve some of the doubts.
I had to create Facebook just for this, because whether we like it or not, it's a huge platform that shouldn't be missed.
I'm not sure I agree about it being a bold statement. Our description is very clear, and our approach is still much safer.
I see hundreds of products slapping "Encryption at rest" to make people believe their data is safe :) Yet, it's accessible by anyone that controls the server...
We also go further into details in the privacy page too.
The data cannot be decrypted without a client-provided secret. We'll make sure to be more transparent regarding all this.
Not 100% correct, but ok, you can say that as it stands.
If you inspect the IndexedDB when logged in, you can see that everything is stored locally already. Offline mode was planned from the very beginning. It will and can already work offline if I spare a couple of days on it. But I didn't see it as a priority right now.
This is a really good point and I have thought about this multiple times along the way. Web Crypto API seemed ideal, but it brought its own complexities, especially if you want to have quick access on multiple browsers/devices.
It's true that as it is, it still requires trust. We do have our own custom servers, and we made sure that no logs related to personal data are ever stored, and encryption is done on the application level before it is sent on the DB server.
Technically, you can say that an OS is a term for managing complexity. We're managing the complexity that comes with the modern age of the internet & the web platform. At this stage, I agree it might sound like an overstatement, but it's aligned with our vision and where we eventually want to take it.
As it stands, that's true. However, with the continuous advancements in WebAssembly, and if we open a store where people can install open-source software, a lot of great things could come from that.
You're right, we're not being clear enough regarding this. In the last section & in the letter we do mention & give hints of open-source, and that's because it will be.
We really hope to have the code & documentation ready soon, but I can't promise any specific timelines at this point.
We'll try to adjust the wording to be more concise
I ask for nothing else other than honesty. And I thank you for speaking so bluntly about your thoughts.
At this point I think you're right, it is indeed a toy and a demo of my hard work. But it's also available for others to try it, and hopefully together we can turn it into something substantial.
I understand your pain, but this is the best we could do right now to be able to implement the privacy features we mention on the website. Think about it as MFA by default, and Google is a super simple way to pass the first method.
Links & tabs contain a lot of personal data, and I'm sick of hearing "Encryption at rest", while not knowing that all the admins can still see everything.
It sucks I know, but at least the encryption & anonymity are rock solid.
We'll definitely try to find other solutions in the future.. and by the way, passwords don't need to be complicated ;) There's no restrictions
This will definitely be implemented, in fact we mention it on the website as the next major feature. We would also like to support NAS & FTP as well, but most likely start with the major cloud providers.