But why must demonstration of skill be limited to elite red-team style pentesting? You could devise challenges geared at demonstrating all sorts of knowledge (HIPAA, PCI, websec) basic or advanced.
If you've seen the sad state of PCI audits in particular these days, you'll get my drift. I think there's a huge opportunity here to raise the quality bar with your marketplace.
I like the idea of a marketplace, but I don't think background checks and references are the way to build a credible list of the world's best pentesters.
I think what patio11 is doing with Starfighters.io is orders of magnitude better. Run developers through a gambit of supremely difficult tests via a fun CTF-type game and pair the best hackers with the highest enterprise bidder. Works not just for pentesters, but all devs really.
Also, I know where to get the best pentesters because they're listed on all the top companies' bug bounty pages. It's proof of skill I'm after, not some Gartner-esque gatekeeper telling me who's best because they've "background checked" them.
Give me a system more like StackOverflow or Starfighters where I can see the work. Not something subjective like eBay or Yelp, which can be easily gamed.
I think there's some truth in what you say about stroking journalists egos, but remember, nobody is forcing Uber to play so aggressively; they're doing it for the sake of growth.
Revolutionary, fast-growing, successful companies are going to be scrutinized no matter what. It's up to the Uber exec and PR teams to decide when to put on the brakes--at the expense of growth--to avoid it.
Certainly there are other groundbreaking companies (e.g., SpaceX) that haven't found themselves in Uber's position, and it's likely due to their leadership, not their ability or willingness to pay off journalists.
To start, the Uber exec was suggesting that they do their dirt-digging anonymously ("Nobody would know it was us.").
Also, those articles you linked to are examples of journalists providing commentary around direct quotes or facts/reports about the company. AFAIK, Sarah Lacy didn't dig up and expose personal information about people at Uber nor their families.
According to Levie, Box has 99% of the Fortune 500. Does it really count if 75 people in Toyota's marketing department uses Box to share a few hundred gigabytes of files?
The numbers don't lie: "Box’s average customer value (ACV) is $3,653, much lower than the median of 59,600." [1]
They're selling "enterprise" software at SMB price points.
Setting aside security concerns, getting a big enterprise to move a substantial part of their IT infrastructure to the cloud is a logistical nightmare. Perhaps they underestimated this.
Not sure why the article would say it's peculiar when it's the same thing Rose did before:
> [North] has a peculiar strategy. Rather than languish on building one app, North is trying to use a small team of about 3 people to launch a new mobile app every three months.
Certainly depression in tech is real and people suffering deserve help (and can hopefully get it given their station in life).
But when you strive for hyper-ambitious outcomes, whether it be selling your company for $2B, trying to change the world, or training to become a world champion fighter, you're likely going to suffer some injuries that you might not fully recover from.
I feel for all the people who are depressed AND struggling to find their next meal--working in fast food or in factories, being treated as if they were less-than-human.
I find it super-hard to get worked up when we founders and startup employees get to have health insurance, good salaries, free food and education, and a chance to win the lottery.
I think it's even harder when both parents work full-time.
When your spouse doesn't work, you can often pull off late nights knowing your kids and house are under control. But when both parents have high-stakes jobs it's super hard because you're almost always subject to a hard stop.
It's also a mindset thing--keeping your startup's problems in your head and trying to think and plan for the family (who has practice this weekend? is the preschool application in? who's meeting the plumber today? etc.).