x0x0

37 ms·

601.
by x0x0 3y ago
Still -- my quick google came up with 750 employees mid 2023. So this is 125-ish employees. Particularly with 5 months severance, that seems too small to save much money (assuming $300k fully loaded, that's $40m pa) and also too smal
602.
by x0x0 3y ago
> why does this element even exist? The deliberate explosion of the specs required to build a browser ensuring that Google has a permanent quasi-monopoly because the size of the specs outstrips all but a handful of company's abili
603.
by x0x0 3y ago
I think the common thread with Twilio the sms/sip product and Twilio the CDP / nee Segment is this: businesses outgrow them. Both of them work well for smb and lower midmarket, but as companies grow, become horrendously expensive
604.
by x0x0 3y ago
And it opens the door to unhappy wondering about just who within Carta has this info, and who outside Carta are they sharing it with.
605.
by x0x0 3y ago
I've built a break glass system. The trick is you need to actually audit the use. We reviewed every access, audited as part of our soc 2 commitments, at a +2 reporting level the next business day.
606.
by x0x0 3y ago
Their last raise was $500m at a $7.4B valuation. Using a 10x rule of thumb, that implies they make $740m/year, or the vc believes they will grow into making that. I can't understand it either.
607.
by x0x0 3y ago
My claim is that people tend not to do crime if there's a very well-paid alternative, and I think I have pretty good empirical backing on that one. Also, our data is probably not worth that much. We do pen testing so we don't ge
608.
by x0x0 3y ago
I meant silly to use exploits find while performing a pentest for malicious purposes. You get well paid and it's legal.
609.
by x0x0 3y ago
I think it would be silly to do so. You're pulling down $20k+ contracts for a week's work. It's a pretty good gig and completely legal.
610.
by x0x0 3y ago
The app and api are on the internet anyway, so you don't need to be a pentester to test it w/ no intention of reporting.
611.
by x0x0 3y ago
> What percentage of the vulnerabilities discovered are independently discovered by multiple pen testers? Zero because we patch them as soon as we are notified. Generally at the end of the test / before the retest, but if they fo
612.
by x0x0 3y ago
We log all accesses and flows. So eg if our pentesters found a vulnerability in an endpoint, we can retrieve every post against that endpoint and (1) verify the pentesters didn't exploit it against prod, and (2) verify that it hasn&#x
613.
by x0x0 3y ago
We spin up a clone of prod and point them at that. Certainly if a weakness is found in the clone it's also present in prod, but that's what contracts are for. And we also review logs to make sure. edit: a clone of prod w/ on
614.
by x0x0 3y ago
You could also consider working as a consultant or external pen tester. When we hired our pen testers, we did not run background checks on them, not least because they have no access to customer data so it's much less of a concern.
615.
by x0x0 3y ago
I will say that I think succeeding as an author requires business skills that most of them appear to lack. Amazon has started getting better at notifying me that there are new books available by an author from whom I've previously purc
616.
by x0x0 3y ago
Here's what I find extremely useful: 1 - very hit or miss -- I need to fidget with the aws api in some way. I use this roughly every other month, and never remember anything about it between sessions. ChatGPT is very confused by the
617.
by x0x0 3y ago
> We don't know how to identify and cultivate talent in this industry yet, it's clearly dysfunctional and deprioritized. Do you even watch professional sports? Professional sports is not great at identifying or cultivating
618.
by x0x0 3y ago
Well, the explanation that people are getting exactly the dirt-cheap shoddy crap they demand is correct. You can buy a nice burr grinder from a company that not only sells spare parts for at least 5 years after they stop selling the model,
619.
by x0x0 3y ago
Team / interpersonal communication overhead, planning overhead, and dealing with less skilled members of the team can easily make 4 engineers roughly as productive as one very skilled engineer, just at 4-5x the cost once you include th
620.
by x0x0 3y ago
The article, and much of the commentary here, said exactly the opposite. It's not that it's too hard; it's consulting businesses aren't very profitable, don't scale well past 1 person, and if you scale, fill the own
621.
by x0x0 3y ago
> Either way, it should be up to the user to decide what they want to do with their messages and how much security they attach to them. So you agree, it's wildly unethical to use Beeper because it doesn't give all the users in
622.
by x0x0 3y ago
Those are exceptions. Being able to take a screenshot simply isn't in any way comparable to silently transiting every single message through a service, with unknown management and unaudited security, with < 50 employees, and that d
623.
by x0x0 3y ago
Nonsense. They're making that decision, without consent or notification, for everyone else in that conversation.
624.
by x0x0 3y ago
100% accurate elsewhere. Who is auditing Beeper's code for security issues? How big is their security team and their response SLA? How are they encrypting messages at rest? How much money are they prepared to spend on attorneys to d
625.
by x0x0 3y ago
https://www.fastcompany.com/90740511/heres-what-its-like-liv...
626.
by x0x0 3y ago
The author's point is deeply stupid. As he admits: > WebP re-encoding of an already lossy compressed JPEG So... all this shows nothing. Is webp worse than jpeg? Not addressed. He re-encoded jpeg to webp and it somehow didn'
627.
by x0x0 3y ago
I dunno what to say, but it does not do basic tasks to the satisfaction of people who buy 1gb internet connections. I can tell you from experience that large downloads and uploads cause latency-sensitive applications to stutter in a way tha
628.
by x0x0 3y ago
No, AT&T is still shipping with a router that cannot hit more than 50% bandwidth on any of 3 devices from under 5 feet. With one wood + pressboard wall between me and the router, 25%. This is symmetric gigabit product, but still.
629.
by x0x0 3y ago
To enable workarounds and/or stop the bleeding. There's many places where no network is strongly preferable to network that could be open to hackers.
630.
by x0x0 3y ago
Oh sorry, I wasn't trying to bag on you. I was curious what it takes to store 1/3PB these days, and even at $15k it's surprisingly cheap.

More ›