thomasdub

5 ms·

1.
by thomasdub 1y ago
Does anyone know of a list/can name companies that don't charge for SSO, Audit Logs[0], that have a free edition where you don't have to talk to a salesperson to evaluate etc.? [0] https://audit-logs.tax/
2.
by thomasdub 3y ago
"An appraised value" could work for companies too! Though, in fairness, for many billionaires the gains are pretty explicit i.e. we know the public stock price or the 409a valuation.
3.
by thomasdub 5y ago
Co-founder of Tines here. This is exactly why we built Tines - I spent years working in security, and tried nearly a dozen different SOAR/SOAR-like solutions and felt the all were too complicated and the "connector" model was
4.
by thomasdub 5y ago
Thanks for the feedback! We've implemented a ton of features since then, most notably story history & versioning, annotations for documenntation, better alerting on changes (e.g. no event in 24 hours etc.), but recognise there&#x27
5.
by thomasdub 5y ago
Co-Founder of tines here, thanks for all of very valid feedback, there’s loads to think about! I’ll respond to a bunch of the comments individually but the one thing I’d say is try it - it’s way more powerful and flexible than any of the pr
6.
by thomasdub 6y ago
It's usually really hard to negotiate a longer post termination exercise window as an individual, as that will have to be written into the options plan (which requires board/investor majority approval and is generally a huge legal
7.
by thomasdub 6y ago
This is quite dangerous unless you know what you’re doing, if you execute the malware then plan to throw away all equipment you’re using to analyze it. For a next-best experience, if you’re curious, you should upload one to an online malwar
8.
by thomasdub 6y ago
MalwareBazaar allows users to share live samples of indicators and not just hashes/metadata associated with them which threat Intel platforms like AlienVault do. There are several differences between the two but the biggest advantage (
9.
by thomasdub 6y ago
I love the lure, and I respect the GitLab team for making it public, but this is a tough read - it’s putting way too much responsibility on the end-user. For example I’m a huge fan of security teams using email headers to analyze suspicious
10.
by thomasdub 6y ago
Most companies will have a firewall on their corp network so new domains, or malicious-categorized websites will usually be blocked which offers additional protection above working from home. You can obviously use an always-on-VPN for wfh c
11.
by thomasdub 6y ago
What’s your use case for this? I scrape a ton of pastebin links and other sources of hashes posted by folks on Twitter about Emotet, trickbot etc. and I’d be happy to point them to a webhook or get them to you another way? Happy to talk thr
12.
by thomasdub 7y ago
"Now before you try to tell me "well you should've forwarded the email and been done with it" those guys are going to be pissed as fuck if I pass along every spam link trying to sell me boner pills" I know you say t
13.
Dropbox buys electronic signature startup HelloSign (YC W11) for $230M(cnbc.com)
7 points by thomasdub 8y ago|0 comments
14.
by thomasdub 9y ago
There isn't much evidence that Tether Limited is indeed keeping a reserve of USD for each Tether printed [0]. They are minting hundreds of millions of Tethers and there are a lot of skeptics out there who don't believe that they h
15.
by thomasdub 9y ago
Do you think the current security risks are an impediment to it being a perfect solution? I don't want my house deed transferred to someone else just because the provider that managed my wallet that held the deed to my house got compro
16.
by thomasdub 10y ago
It's still showing for me [0]. I just cancelled my account. [0] http://imgur.com/v150a7w
17.
by thomasdub 10y ago
The report shows far more than signs of intrusion - modules for credential theft, data transmission, persistence mechanisms, keylogging etc. were all discovered. I'd call that hostile. I'm not sure I get your analogy, but no, I wo
18.
by thomasdub 10y ago
What sort of proof are you looking for? If you're looking for firewall logs or hard drives with definitive proof that malware on certain machines was linking back to particular servers then you're out of luck. However Crowdstrike,
19.
by thomasdub 10y ago
I appreciate the sentiment that anyone can phish or password guess, but even a cursory glance at infosec reports shows there was an operation targeting the DNC that was far more sophisticated than a one man job. Firstly we know that that Po
20.
by thomasdub 10y ago
This sounds very like Redmine [0]. It's ostensibly for project "issues" however it's extremely customizable and all of the above are included in the default config and not much more. It sounds like if you removed about 2
21.
by thomasdub 10y ago
Curious - what's a disaster about Stripe Atlas? I would have considered going down that route if I was to start a company
22.
by thomasdub 10y ago
Don't get me wrong, I'm not a huge fan, JS is not exactly a model CEO, and they do sell hard. A tough sell, however, isn't illegal or fraudulent. a shakedown is something else though - are you suggesting they engage in any fr
23.
by thomasdub 10y ago
I'd love someone to point to evidence of this beyond pure anecdotes. Yelp clearly allows negative reviews on accounts which advertise with them which can be seen with this Google search [0]. Furthermore an independent Harvard Business
24.
DocuSign Payments(techcrunch.com)
3 points by thomasdub 10y ago|0 comments
25.
by thomasdub 10y ago
There is a fantastic Lexicon Valley podcast episode about this [0] which draws on most of the same evidence. It also dicusses whether the word "Dude" my have been popularised from the same song. Definitely worth checking out! [0]
26.
by thomasdub 10y ago
Would you consider adding some of the startup valuations from different mutual funds to add context to the valuations? Your latest valuation for DropBox is $19.10 but various mutual funds have valued them between $9.75 and $12.30 in Q2 201