DethNinja

Sorry, it was meant to be USSR (Union of Soviet Socialist Republics).

- Hired a journalist on some mid-size news company to tarnish the company’s reputation. I never imagined they would bother to do this, but I was wrong.

- Used an APT for hire but I don’t believe they did succeed , still it is quite insane. I was lucky enough to catch a targeted rootkit but issue was quickly remediated. I’ll eventually find a consultant to analyse the Win 11 rootkit. They were definitely not script kiddies.

- Some black hat SEO and shills for hire, but that is expected.

I’m really surprised by hired journalist / APT aspect. Something I never imagined would happen, but apparently it does happen.

On the other hand, my first self-funded startup got destroyed by a VC funded venture. They had a worse product but far better marketing and they used every dirty trick in book to tarnish my company’s reputation.

There is no way I’ll start another startup unless I receive backing from a huge VC company.

Current economic paradigm is more similar to centralised/controlled economies of USSR. Thus if you want to succeed, you will need friends with connections to central banks.

So was the company the best in their field? I sometimes see small / badly managed companies pull such interview processes and it is ridiculous. You would expect they would hire 100x engineers with these tasks but I wonder what they are exactly looking for.

Do a16z invest in small scale AI companies? Or are they only doing series B+ investments?

C++ - Botan

C - Redis

It is just a precaution measure, some of the malware like DDOS Bots might persist more than 6 months.

Honestly, an immutable OS would be more ideal but it isn’t very realistic. If you are adventurous, it would also be possible to setup a system where host image gets rebuild every night and persistent data gets pulled from a git repo.

This is a pretty good guide.

I also recommend manually reading/checking the the BIOS EEPROM and re-installing the OS from scratch at least every 6 months. This should mostly eliminate most of the advanced threats.

You can setup an ansible script to re-install everything so it can automated.

You should absolutely never release a commercial binary to public with debug symbols.

There are ways to convert symbol names on the crash report server, so the claim that you can get better crash report with debug symbols is not correct.

Why you shouldn’t release debug symbols:

* It helps patent/copyright trolls litigate you easier.

* Makes it easier to reverse engineer your binaries, which will help malicious actors and competitors.

* You might lose some trade secrets.

If you are a startup owner, please ensure to never release commercial/close-source binaries with debug symbols. You can thank me later.

How did they target the group though, did they just scan the internet traffic and said, oh wow there is a group of people who only talk through Signal, or were there another precedence?

YouTube is horrendous, I keep reporting couple of animal abuse videos but platform just keeps them.

Some of these videos especially with small animals like hamsters have millions of views, so I guess there is a monetary incentive for them to keep such videos.

Flatpak isn’t ideal and it has lots of room for improvement but what is the better alternative?

I would say that at least Flatpak is on the right direction.

What is the use case? I’m guessing just to store secrets but then why not just use a HSM or even yubikey.

Are shadows really that annoying, I’m willing to bet that most of the gamers would just glance over these defects.