HackerTrans
TopNewTrendsCommentsPastAskShowJobs

standapart

no profile record

Submissions

The xz attack may be bad, but trusting Microsoft certs is worse

twitter.com
59 points·by standapart·2 ปีที่แล้ว·19 comments

[untitled]

1 points·by standapart·3 ปีที่แล้ว·0 comments

Irving on Helen, Ilya, and Sam

twitter.com
26 points·by standapart·3 ปีที่แล้ว·29 comments

comments

standapart
·2 ปีที่แล้ว·discuss
Perhaps Plume will be the next company to be sued by Texas...
standapart
·2 ปีที่แล้ว·discuss
tl;dr

The author discovers the wild world of financial engineering and "float".

Instead of settling usage changes for it's image service with a single charge, Cloudflare settles it with two charges in such a way that the customer "floats" Cloudflare money for some portion of their billing cycle.

This is the bullshit that you start to do when you become publicly traded. It adds zero value for the customer.
standapart
·2 ปีที่แล้ว·discuss
Your investors need liquidity and private markets won't give you the valuation that you need.

So get Google to buy Wiz for their nascent services play and plow the cash into this.

Smells like July of 2000.
standapart
·2 ปีที่แล้ว·discuss
A master class in enterprise software sales fit into a single comment. Bravo!
standapart
·2 ปีที่แล้ว·discuss
However, scaling will get you your next round led by Nvidia... I mean Microsoft... I mean AWS...
standapart
·2 ปีที่แล้ว·discuss
If Figma continues along this path I worry that they are doomed.

Generally, there are three paths to profitability: 1) increase pricing, 2) decrease expenses, or 3) offer new products and services with superior margin.

It seems like Figma has chosen to implement 1) but sell it to customers as 3). However, in contractionary periods like we are in now, 1) does not work -- no matter how much lock-in you have and how you sell it.
standapart
·2 ปีที่แล้ว·discuss
Weirdly, they don't preference contracts for shell corps owned by, say, poor white trash from Middletown, Ohio -- despite these people meeting your definition of "someone who historically hasn't been paid well".

But I digress. In the biz, if the contract has to be trafficked through a shell corp where the owner takes a 20% cut, everyone simply bids a 20% higher rate.

It's the taxpayer's prerogative if they would rather their government pay an inflated contracting rate -- as opposed to using that money for education, infrastructure, social services, etc.
standapart
·2 ปีที่แล้ว·discuss
From subpoenaed communications we even know that certain figures who publicly denounced the lab-leak theory, privately believed the theory was plausible or even likely.

https://www.wsj.com/articles/the-covid-lab-leak-deception-an...

This article is part of what I like to call the narrative media. You decide what the facts are and don't give a damn about reality -- because that's what keeps your readers coming back for more.
standapart
·2 ปีที่แล้ว·discuss
I forgot that we're playing the demo games now.

Well I'll see your demo, and raise you another demo

https://x.com/sean_moriarity/status/1760435005119934862

Except that demo was done by a single person, with a day job and no cap table.
standapart
·3 ปีที่แล้ว·discuss
Weird... Things are starting to smell a lot like 2020, again...
standapart
·3 ปีที่แล้ว·discuss
Exactly -- and CZ was always the fall guy. Yi is the mastermind.
standapart
·3 ปีที่แล้ว·discuss
Some stories don't have a hero.
standapart
·3 ปีที่แล้ว·discuss
What a wonderful way to cut headcount/expense and lock-in profitable margins on healthy annual revenue.

Can only work when you have the advantage of being the dominant product in the marketplace -- but I gotta hand it to the board, I couldn't have done it better myself.
standapart
·3 ปีที่แล้ว·discuss
Not really. There were things like Purdue, but that wasn't fentanyl.

The fentanyl epidemic is the result of market developments in the illegal drug trade.
standapart
·3 ปีที่แล้ว·discuss
So here's a little brain teaser about what you have to do when dealing with potential nation-state actors. This scenario is for the folks who are calling "hyperbole" when the actor is clearly, potentially a nation-state. This scenario is based upon an event that actually occurred.

1. You have a $200 million piece of defense-critical equipment. 2. You know that there was a 5-minute period where a potential member of a foreign intelligence service was alone and unattended in the same room as this piece of equipment.

What do you do with the equipment? You can:

a) Put the equipment into service b) Disassemble the equipment on both a hardware and software level and try to detect if anything was altered c) Destroy the equipment

If you choose anything other than c) you have probably never been, nor should you ever be, in charge of securing critical assets that can be targeted by a nation-state. This incident seems to indicate that the leadership at Microsoft would choose a).

Also, bear in mind that these are the people that you just sent all your ChatGPT data to.