ksajadi

i wonder if there is a chain reaction point, when one compromised vendor holds secrets to another one and that becomes the next target. Northflank lists Sentry as their customer. So if Northflank secrets are decrypted and Sentry used them for deployment, you have a starting point to attack Sentry next which then opens up a lot more.

cool idea (it's very similar to sendops) but why wraps? what's the deal with that name?

Isn’t it a little like asking a PE or VC: “if you’re so good at investing, why don’t you invest your own money”?

There are some money managers that don’t take in external money (I think TwoSigma started that way). Which could mean there might be someone out there that just does crazy good apps with their own model and don’t sell the model in form of tokens. We can’t know that by definition but the maths of tokens suggests that’d be very unlikely to exist at least right now.

Secondly, I think they are doing that. All the functions that their harnesses take on are businesses they are taking money from. It’s just not in the form of SaaS as we know it.

looks cool. how's that different from things like markbase dispatch where you can fire up the agent remotely with some given context. i mean what is the advantage of having the agent run always vs start and stop when you need it but give it a long-term memory context? maybe i'm missing something.

someone managed to get the environment variables AND the encryption keys for those? i feel for the secops engineers over there right now. brutal

The first thing I look at the next time I look at a project like Deno would be its governance structure and if it can be bought by a large company. Imagine if what happened here (or MySQL) happens to Postgres!

My girlfriend just got scammed by a super convincing ad for UK Visa which looks identical to the real thing.

I have no idea how you can get that wording and that landing page get passed the google review.

I’ve done a lot of ads on google and every time my ad was just a little off (use of trademark word or competitor’s name with a reserved keyword) it will be blocked.

Reddit is probably the worst of these ad platforms. We had a simple issue: we couldn't set the account that the ad was coming from to be the correct one (we have two Reddit accounts). That's it! So we sent a support email.

That was the beginning of 4, 45 mins sales calls, with full Powerpoint decks and on the spot commitments from us to reach, spend, etc. At the end of each call the rep would promise us that the account issue is escalated and will be fixed before we launch the campaign and would set the time for the next call.

3 weeks in, the account issue is still not fixed and frankly I cannot trust anything they say about their metrics, impressions, CTR or anything else.

Maybe I’ve just been unlucky for 14 years but ads almost never work (as much as you pay for them).

Ad business is the best business: you pay for something no one can reliably verify or measure. But you still pay because there is something somewhere with some correlational relationship with an uplift in some of your metrics and you’re afraid to turn it off. So you just keep paying.

If you login to the admin side of any ad business (Reddit Ads, X Ads, LinkedIn Ads etc) you are faced with a severely broken product: broken buttons, obviously wrong metrics, and other glaring bugs.

But somehow you still trust that people who cannot pull the CRUD side of the product off, are going to serve your ad accurately to the targeted audience and give you reports.

To me this is where the EU MEPs should place their privacy concerns. Unless it ends up being another consent pop up on TVs.

looks very similar to markbase.cloud