bfrit

Going to give this a try! Interested in code-informed documentation hinting.

Reminds me of using the machine email addresses for Zendesk tickets and other helpdesks where you can reply to the ticket via email to join domain-restricted services like slack, notion, etc. So many clever ways to get in without an explicit technical vuln.

That happens but there are a bunch of other benign reasons as well.

The problem is that the extension can alter or fully remove the cors headers before it injects scripts, neutering even the best configuration.

^^^ This

We're looking for a Lead Software Engineer to join our ground floor team. We help small businesses avoid the financial and reputational impacts of cyber attacks - an all too often business-ending threat. You can think of us like the TurboTax for startup and small biz cyber security programs.

This person will be responsible for starting off our design team, partnering directly with our founding team, engineers, and others on a variety of design projects from ideation to final delivery. They'll be passionate about making software that translates complex, hard-to-understand topics into plain language.

Our MVP has gotten us to where we are today, and you'll be a key member in moving to a platform that can support our plans and customer needs for the next stage of growth - including helping identify and select technologies, backing systems, tooling, etc.

We see this person being the first among an immediately growing engineering group. We'd like you to be excited about, and prepare to be the one to start, but also the one to lead as the team grows.

Great benefits, well-funded, totally remote team, multi-time successful founders. I'll be in comments for any questions!

That's it?

No they won't. Canva produced canonical, valuable content and made it easier to be found. That's exactly what search engines want you to do.

This is wholesome

This is awesome!

> Overall, I think there's a huge need today for product-centric cybersecurity companies, where most of the big players are sales-centric companies.

Totally agreed, and I love this. High five from a Techstars 2020 company doing a similar product-first approach to cyber security program planning and implementation for small businesses. We use Webroot as a vendor to supply phishing right now but would love to talk. [email protected]

I'm a big fan of Keeper. If you're looking for an overarching cyber security program that includes things like a keeper subscription and cyber awareness training, check out https://havocshield.com

Still comes across as diminishing the helpful work.

My normal minute-by-minute email checking is REAL BAD right now.

I introduced a thin process at my last job called "capacity setting". It's more abstract than just tech debt, but highly autonomous while still being aligned to the company's needs and goals - including making it clear on one page what the team is working on and why. It worked out reasonably well as Tech Leads were able to control capacities and the business was able to see justification of why we're working on various elements and how much of each.

Here's the brief. Will be glad to answer any questions. https://drive.google.com/file/d/1-ej-qOCYIaNHJITq8wiMj0hZTFK...