mh_

8 ms·

31.
by mh_ 6y ago
I've previously pondered how we would have approached our early steps if we were completely unknown, and the best option i can think of is a kind of sincere, influencer marketing approach. i.e. if you dont have the voice in the industr
32.
by mh_ 6y ago
We do average to above average salaries, and all share a profit share bonus at the end of the year. Everyone gets a company credit card to buy books/tech needed to do their jobs. Everyone gets side benefits like an audible subscription
33.
by mh_ 6y ago
We were a little bit lucky in this regard, because we had some authority in the niche (2 members of our original team had spoken at security conferences internationally for the previous 10 years). I have lots of thoughts on this though. I t
34.
We bootstrapped to $11M in ARR(blog.thinkst.com)
387 points by mh_ 6y ago|217 comments
35.
We Bootstrapped to $11M in ARR(blog.thinkst.com)
6 points by mh_ 6y ago|0 comments
36.
SolarWinds (and the terrible state of enterprise security)(blog.thinkst.com)
1 points by mh_ 6y ago|0 comments
37.
Why the SolarWinds incident should scare you (even if you aren't running it)(blog.thinkst.com)
2 points by mh_ 6y ago|0 comments
38.
Quick Points on the SolarWinds Hack (a Twitter thread)(twitter.com)
1 points by mh_ 6y ago|0 comments
39.
New features are not the same as solved problems(blog.thinkst.com)
2 points by mh_ 6y ago|0 comments
40.
Why Pareto optimality might be wrong for building products(blog.thinkst.com)
3 points by mh_ 6y ago|0 comments
41.
Security Products and Terrible Design(blog.thinkst.com)
1 points by mh_ 6y ago|0 comments
42.
by mh_ 6y ago
Also, in our defense, we wrote this in 2015 :)
43.
by mh_ 6y ago
What they (we) are talking about, is that nobody caught the attacks. The article then goes on to explain why, even with hundreds of thousands of ppl doing incident response investigations, nobody caught / correctly attributed these att
44.
by mh_ 6y ago
As the original author of the piece... I agree :)
45.
We tamper with all outgoing API calls. Here’s how (& why)(blog.thinkst.com)
1 points by mh_ 6y ago|0 comments
46.
A Steve Jobs masterclass from a decade ago(blog.thinkst.com)
339 points by mh_ 6y ago|149 comments
47.
by mh_ 6y ago
To defend Canarytokens here (and I’m totally biased because we make it) some tokens can’t be easily avoided. Ie. If the token is a Slack/AWS/something API key, then the only way for the attacker to profit is to use it, and the mom
48.
by mh_ 7y ago
Thanks! I'm guessing it must have been in the talk given at Google (that the essay is based on) that appears to no longer live on the internet.
49.
Ask HN: Can you source this pg quote?
1 points by mh_ 7y ago|2 comments
50.
It's probably not your companys bureaucracy stopping u from doing great things(blog.thinkst.com)
2 points by mh_ 8y ago|0 comments
51.
How to “build something people love” when you don't know what love feels like(blog.thinkst.com)
4 points by mh_ 8y ago|0 comments
52.
Undo is an important feature too(blog.thinkst.com)
1 points by mh_ 8y ago|0 comments
53.
Ego (and why it nudges you away from bootstrapping your startup)(vimeo.com)
2 points by mh_ 8y ago|0 comments
54.
As a young security startup, should you have a booth at the RSA Expo?(blog.thinkst.com)
3 points by mh_ 8y ago|0 comments
55.
by mh_ 9y ago
This is neat.. Its currently a single type of token (ie. a URL). If you check out https://canarytokens.org you will notice the ability to create several others (be notified when someone resolves an IP address, be notified when s
56.
by mh_ 9y ago
Canarytoken allows you to download a docker instance, so you can host the server on any domain you like.
57.
A quick introduction to Sandboxing (using NsJail)(blog.thinkst.com)
1 points by mh_ 9y ago|0 comments
58.
A Geneva Convention for Software(blog.thinkst.com)
2 points by mh_ 9y ago|0 comments
59.
Use Windows signing to get notified on file opens / executions(blog.thinkst.com)
2 points by mh_ 10y ago|0 comments
60.
Unicorns, Startups and Hosted Email(blog.thinkst.com)
49 points by mh_ 11y ago|52 comments

More ›