varunjain99

I think more than software sales it's useful to learn about "sales" and "persuasion".

I've found Robert Cialdini's Influence to be a great read!

Do you have any stats / benchmarks of how often it answers a question correctly that's present in the customer's documentation?

Congrats! Definitely think QA farms can be automated using AI! Can you explain more what part Checksum is using AI?

Is it for the identification of user sessions that are good candidates to make into tests? Is it the generation of test specification in some DSL / Cucumber / Selenium / etc.?

We need better categorization of what to blame - is it the data collection mechanism, the training of the AI, the use of the AI in a broader software system.

Even without a neural net based model, it's possible we run into many of these incidents...

I actually have a chrome extension that will point me to HN discussions on a particular webpage - find it useful to get community context of pages I'm browsing!

Well, it's to their benefit to portray their models as working alongside and enhancing humans, as opposed to replacing us. So it sounds a bit like marketing speak to me.

And it's to the benefit of many of those tech "thought leaders" to be alarmist since they don't have much of the AI pie

They probably should have reported 7 or 8 nine's just to not get called out! Technically by their (limited) definition of uptime, Slack is correct. But there's always incentive to underreport breakages, so you want to more heavily weight 3rd party metrics

Solid step forward for supply chain security! For all the talk of SBOMs, supply chain security is much broader - notably, it must include frameworks to think about trustworthiness of builds, images, and build environments.

Maybe it was written by ChatGPT!

Perhaps we should require AI systems to identify themselves, so that we're not forced to conduct Turing tests in all our online interactions

I view it as open-source is a currency to buy you certain advantages (distribution, feedback, customizability, trust, etc.) But you need to be clear on what part of the value creation you're capturing in sales transactions (support, premium features, managing infrastructure).

Without this lack of clarity, many companies get bogged down by inefficiencies of open-source and are unable to figure out how to monetize the value they're providing.

The only way you can do secure by design/default is if the customer of your service experiences a productivity gain.

For example, if they can deploy infrastructure more efficiently (and securely as a byproduct). Or if they're able to get reliability out of a software library (and security as a byproduct).

You have to find these win-win situations where the developers/clients are not even aware of security improvements.

I'm surprised this isn't measured more frequently after the CFC crisis we had back in the day. Also, very puzzling that they have different theories for different CFC's... surprising to have independent trends causing this?

Hm, this seems a bit contrary to my personal anecdotal experiences. I've generally seen more coddling of kids, and that has been accompanied with lax rules / letting kids have what they want. Especially when it comes to digital tech / roaming the web. Perhaps both extremes of parenting - giving autonomy and helicopter parenting - are both becoming more common?

Congrats! I've always thought the bug bounty structure in security should be more prevalently applied to just building OSS software

This is a neat data modeling exercise, but not sure why you'd prefer this approach over Neo4j.

It's much simpler to query in native graph database land (though it's not exactly SQL, it's pretty close to be honest). And there are performance / reliability implications of forcing postgres into graph land.

Looks like Google dodged a bullet in acquiring them all those years ago

I appreciate that this is not the most clear cut charge against Trump and potentially helps his chances at reelection (theoretically).

Anyone else would've been at least indicted as well. This is an indication that the rule of law is prevailing. Even former presidents aren't above the law.

All the more reason to not rely on the cloud provider itself as your security vendor, I suppose...

Fascinating! And even now we don't have a unified quantum + GR theory.

I've always wondered if we had all of the notebooks and scratch work of the greats, could it inspire us to see something new?

I like the idea of Beeper but two issues bug me

- reliability (especially for iMessages)

- having to give them custody of passwords like iCloud

It will be an interesting race...

I do think that it'll be easier to find vulnerabilities than to design systems that are provably secure. It's like evaluating a function f(x) vs finding the values of x for which f(x) = 0.

Hm, I think the national security concerns are far heftier here than kids being influenced. ByteDance can be forced to do almost anything by the CCP. Sure, American tech companies might be forced to do things by the American govt but theoretically there are checks / balances / rule of law to prevent misuse.

On the kids' manipulation -- even though that's not the main intent and American social media co's influence kids as well -- I'd still argue it's significant. A foreign adversary can control how your population thinks... it almost speaks for itself.

While the language of the bill is certainly way too broad and confusing, there's also a lot of fearmongering + exaggeration going on...

E.g. I'm hearing folks talk about criminalizing VPN use... but the bill does lay out very high standards for any criminal liability

Even with all these crazy CVEs / new attack techniques, basic misconfigurations are still the cause of most cloud breaches!

I wonder why Bing's cloud configuration checker didn't catch this multi-tenancy misconfig. Or if they did, where did it get lost in the alert triaging?

Pretty cool that all you need is the sitemap for the assitant to index the data! Will give this a try soon :)

I guess we don't need to worry about authoritarian China stealing our data if we become authoritarian China!

I've found Linkedin to work reasonably effectively for marketing / sales personas.

In general I'd focus on the problem and not the solution you're proposing. In your initial out reach message and during the conversation.

You should also try to get the feedback that might invalidate your idea. This will get you thinking about why your idea may not work. Or how you may need to tweak it or test it to avoid this scenario. Better to learn this early than later! Don't be afraid of getting shot down :)

Rather surprising to me that it's taken this long to bring such a lawsuit...

They literally don't put a headquarter to claim to avoid all regulations

While it is significant, the article also does mention they've faced larger outflows in the past.