News for hackers. Stuff that matters.
Re:Cisco Acquires Splunk by onei on Thursday September 21, 2023 @04:21PM (#37603733)
From an outsider perspective, it looks hard to label this as anything but insider trading. Is that the wrong take?
Re:Cisco Acquires Splunk by Sebguer on Thursday September 21, 2023 @04:30PM (#37603866)
Matt Levine's money stuff offered the hypothesis that it could just be normal gambling. But, it's almost definitely insider trading, and either way, someone will definitely be getting an SEC visit.
Re:Cisco Acquires Splunk by posnet on Thursday September 21, 2023 @06:14PM (#37605149)
They also directly broke Levine's second rule of insider trading.

2. Don’t do it by buying short-dated out-of-the-money call options on merger targets [0]

[0]: lawsofinsidertrading.com

Re:Cisco Acquires Splunk by xmcqdpt2 on Friday September 22, 2023 @08:12AM (#37610965)
Yeah I would have thought they should have bought Datadog stock instead... but actually DDOG is down. I'd make a poor trader.
Re:Cisco Acquires Splunk by technovangelist on Saturday September 23, 2023 @09:44PM (#37629392)
Cisco offered to buy ddog the night before the ipo. Thankfully ddog said no.
Re:Cisco Acquires Splunk by spopejoy on Friday September 22, 2023 @09:05AM (#37611503)
Which every time he invoked said law, he also backs off and says it's probably gambling or automated hedging, or in the original case, a failed "broken wing iron condor straddle" going the opposite direction
Re:Cisco Acquires Splunk by secfirstmd on Thursday September 21, 2023 @04:26PM (#37603814)
Possibly. I guess you can't remove the idea that the information was found through some open means. For all we know the private jets of the Cisco leaders might have been in the same location as those from Splunk.
Re:Cisco Acquires Splunk by aodin on Thursday September 21, 2023 @04:37PM (#37603958)
They bought 1-day options, so they knew the timing of the announcement.
Re:Cisco Acquires Splunk by secfirstmd on Thursday September 21, 2023 @04:46PM (#37604071)
Yeah true. Pretty hard to figure out that accurately from open sources.
Re:Cisco Acquires Splunk by fatnoah on Thursday September 21, 2023 @05:00PM (#37604260)
I don't have the knowledge or the patience to find out, but it would be interesting see the overall pattern of 1 day calls on Splunk stock to see if this was an outlier.
Re:Cisco Acquires Splunk by noselasd on Thursday September 21, 2023 @06:30PM (#37605332)
Did anyone do the same the two days ago? (but just did't make any money yesterday ?). What about 100 days ago ? And so on.

It is certainly no secret that Cisco wanted to buy Splunk for $20BN in Februart 2022

Re:Cisco Acquires Splunk by arcticbull on Thursday September 21, 2023 @08:30PM (#37606362)
Sounds like something one of the very special folks on WallStreetBets would have done on the basis of half-baked "dd."
Re:Cisco Acquires Splunk by ineedasername on Friday September 22, 2023 @06:50AM (#37610391)
What’s dd?
Re:Cisco Acquires Splunk by giantg2 on Friday September 22, 2023 @07:04AM (#37610455)
Due dilligence. Or in the case of wallstreetbets, the illusion of it.
Re:Cisco Acquires Splunk by johnvanommen on Friday September 22, 2023 @03:18PM (#37616452)
If the buyer works for Cisco or Splunk, they're going to have a bad time
Re:Cisco Acquires Splunk by mekster on Friday September 22, 2023 @11:25PM (#37620359)
If the buyer was told buy an insider, that still blows.
Re:Cisco Acquires Splunk by patrikmansuri on Thursday September 21, 2023 @04:25PM (#37603790)
That's exactly what it looks like
Re:Cisco Acquires Splunk by roozbeh18 on Thursday September 21, 2023 @04:43PM (#37604024)
Easy for sec to identify affiliation to Splunk for this call.
Re:Cisco Acquires Splunk by kabes on Thursday September 21, 2023 @05:24PM (#37604583)
What's the chance the sec will go after this? I guess they don't have the capacity to go after all these cases, even the clear cut ones
Re:Cisco Acquires Splunk by jmvoodoo on Thursday September 21, 2023 @07:45PM (#37605999)
They'll investigate this. It's an easy target.
Re:Cisco Acquires Splunk by positr0n on Thursday September 21, 2023 @10:09PM (#37607063)
I think the SEC loves cut and dry cases like this. You see enforcement actions all the time about similar situations. Usually some VP of one of the two companies is behind it and they amateurishly try to cover their trails by getting their brother to do the trade, or using their mother-in-law's account, etc.

IMO though it could easily be just some WSB bro that gambled and got lucky. Robinhood and other platforms make it easy to trade short dated options these days and people love to gamble on them.

Re:Cisco Acquires Splunk by blitzar on Friday September 22, 2023 @04:07AM (#37609269)
> What's the chance the sec will go after this?

100%

Re:Cisco Acquires Splunk by xmcqdpt2 on Friday September 22, 2023 @08:15AM (#37610984)
The SEC is 100% on the case right now. They catch people all the time doing much smaller version of this.
Re:Cisco Acquires Splunk by theogravity on Thursday September 21, 2023 @05:14PM (#37604444)
The not-insider-trading possibility:

It's possible someone was selling contracts as a hedge since the tech market has been really bad this week. A market maker was obligated to buy the contracts.

The person selling the contracts gets $22k in premium, and misses out on the pop. The market maker will absolutely exercise the contracts and profit.

(This is coming from someone who sold APPL calls expiring tomorrow for .08 at a high strike today)

Personal opinion: It's insider trading. You'd need a ton of shares to be able to sell $22k worth of contracts at a high strike unless you're doing naked options selling.

Re:Cisco Acquires Splunk by qeternity on Thursday September 21, 2023 @06:49PM (#37605504)
This is not quite how things work. Market makers don’t just take risk and not hedge. They would have hedged deltas (by shorting stock) and gamma/vega by selling other stuff (or this offset stuff they had sold previously). Impossible to say whether an MM would have made or lost money but usually gap moves like this cost MM on a net basis.
Re:Cisco Acquires Splunk by theogravity on Thursday September 21, 2023 @07:52PM (#37606050)
You're right, and it's something I should have mentioned.
Re:Cisco Acquires Splunk by hyeomans on Thursday September 21, 2023 @07:20PM (#37605794)
I understood nothing of what you said, what is a good resource/starting point to understand the meaning of this?
Re:Cisco Acquires Splunk by theogravity on Thursday September 21, 2023 @07:49PM (#37606031)
Re:Cisco Acquires Splunk by tempaccount420 on Thursday September 21, 2023 @10:19PM (#37607119)
ChatGPT
Re:Cisco Acquires Splunk by johnvanommen on Friday September 22, 2023 @03:16PM (#37616418)
Buying options is a great way to go broke fast

Selling options, on the other hand...

Re:Cisco Acquires Splunk by bradleyjg on Friday September 22, 2023 @04:36AM (#37609501)
Not that I recommend you try this, but my understanding is that if a careless splunk executive were talking about the merger on the phone at the local coffee shop and you, a total stranger, happened to overhear you could trade on that without it being a crime.
Re:Cisco Acquires Splunk by toochtooch on Friday September 22, 2023 @03:27PM (#37616552)
Cisco and Splunk merger/acquisition rumors are at least 1 year old. Lots of Splunk employees speculated that it would be announced at the last Splunk conf (2022). Either way I vote for this being a blatant insider trading.
Re:Cisco Acquires Splunk by windexh8er on Sunday September 24, 2023 @05:42PM (#37637485)
I was working for a startup that was acquired by Splunk in 2018. At the next Cisco Live that was all the talk/rumor: Cisco acquiring Splunk. At one point it sounded like Cisco attempted a somewhat hostile takeover of Splunk. My sources and I rehashed this last week and the initial bid for Splunk was $23B sometime between 2018-2020. At the current price it's hard to tell if the current offer is higher, or actually lower, given inflation and market movement/sentiment.

Either way, it's a bad deal for both Splunk employees and their customers. SIEM is a space that is hard to be a leader in when you're not vendor agnostic. This is basically what XDR has become: vendors who have EDR/NDR/whatever are claiming to have some unique (it's not) data lake that can ingest any source, when in reality all of these solutions suck at everything outside of their own product set. I've worked with countless clients over the last year who, as an example, made the mistake of thinking Microsoft Sentinel was a cost effective tool, only to realize that once you're outside of the Microsoft ecosystem analytics/detections quality becomes very close to zero in terms of quality and the price is not cost effective. But SIEM has always had a flair of vendor lock in to it anyway. It's a hard platform to move from once time has been invested in wrangling all the data sources for ingest, transforming them to some bespoke schema and then all of the detection engineering on top of that. It's almost as bad as large scale firewall migrations.

What a lot of folks don't know is that when Splunk decided to move to a Cloud/SaaS model they literally just lifted and shifted the unoptimized bits of on-prem Splunk to a managed VPC under the direction of then-CTO Tim Tully. Splunk was losing money on every deal due to the infra outcosting the insanely high quotes Splunk was churning out. This is a great case study on Innovators Dilemma as Splunk drug their feet for years internally saying that cloud would never impact them. And then they realized they were far behind the 8-ball and decided to hemorrhage cash so as to not churn customers. They eventually optimized it, but the underpinnings still aren't what a fresh take on the bits would have looked like had Splunk done the "right" thing.

Cisco will continue to play ELA games with customers just like VMware. For those who don't know both companies like to get customers into ELAs. Why? Because those contracts basically state that said customer will buy X number of new products annually or risk losing some, or all, of their currently negotiated discount. For smaller orgs this works less well, but you'd be amazed at how those smaller are easily manipulated by snake oil sales folks. For large orgs this puts them in a bind. I've even seen shady contracts written (from Splunk) that had language wherein if the customer does not renegotiate or cancel a, let's say, 3 year contract in writing 90 days before it's going to expire that the contract will autorenew at a ridiculous percentage increase in cost.

Move away from these enterprise product sets where and when you can. These companies are focused on the bottom line - and that is profit, not the customer. The industry has it all backwards, and it's working for them... Still.

Re:Cisco Acquires Splunk by cosgrove on Friday September 22, 2023 @08:03AM (#37610874)
r/WallStreetBets folks do this type of thing all the time... wouldn't be surprised if it was someone gambling.