bitlad

Just having HSM is not good enough. You also need a process around it to keep it secure. you can also use Cloud HSM solutions.

It is probably safer if you enable HSM.

Sometimes compliance do help improve security. Hyperscalers have resources for that. They have resources and they do security well. Hyperscalers are treated as critical infrastructure.

One person's machine being compromised does not bring the whole org down.

Or do onprem or selfhosted. Surface area reduces drastically.

It feels like theres an incident every hour.

The hack seems to be via engineers laptop.

This attack vector has become so common and funny.

In one scenario, i remember a company got hacked because an engineer downloaded a RAT package on company laptop during fake interview and asked him to keep it running for days as part of the interview process while they stole the data.

I think AI did not promise less work. It promised more productivity and gains due to productivity for the organization.

this video made the government websites go offline and patch their servers.

This is the official exploit video in the writeup - https://www.youtube.com/watch?v=pfWZrdzvooc

It is the first one that everyone in the space is hoping for. When I say "winner takes it all," I am talking from a company's perspective. It is going to be cola vs. Pepsi. Either company chooses cola or Pepsi as their vendor and not both. I believe there will be a duopoly in the models.

Bruh, that's lack of understanding and insight as well as naivety. It is not a race to the bottom. LLM is the winner-takes-all market. Competitors are pricing against each other to come out on top.

Once there is a winner, there will be a price correction.

In your case, positioning yourself as a cheap provider is inherently a bad idea.

It is also funny to see folks and friends of the startup commenting and trying to boost this post which is against the guidelines, but thats ok.

I had ran into another yc startup from the same batch doing the same thing recently. I think it was called maritime.

YC batch are becoming more like hunger games.

I know a few companies where this is just a feature like digitalocean it is just a feature.

It started after I removed my primary email in the profile.

Did I break this? Making me insecure about changing anything on github.

Sounds like me without coffee.

So it is ngrok 10 years later?

In addition, please check out Sentinelese tribe from the North Sentinel Islands in India [1]. It is more mindblogging than this, in my opinion.

[1] https://en.wikipedia.org/wiki/North_Sentinel_Island

genie is out of the bottle.

People IBM get fired for setting up IBM stuff [1]

[1] https://au.finance.yahoo.com/news/many-employees-ibm-2026-la...

It does add lot of noise after a point you start ignoring the suggestions and findings.

Code generated these days with fable and sol are near perfect. What issues they might have is logical errors.

We have been running Agents on infrastructure and letting to create resources, scale up and down, security scans etc.

I agree with premise of thr blog. The question i have been asking internal does knowing your system really matter if you can recreate it in minutes.

We recently had a situation, where in with our internal platform and claude we recreated everything in minutes.

Management in the end cares about the outcome and not how the meat is made.

I can attest to this. People say the Netherlands is among the best countries to be an entrepreneur. The visa policies for starting a business are good. But man, the whole tax system, shares, and holding management—belasting breathing up your neck—is horrible when I am trying to do firefighting. You never know when you might get hit by a tax bill. The tax system is built towards benefitting large organizations, and they can afford expensive tax consultants who can help them dodge it. The VC ecosystem is limited and not risk averse.

Having operated in multiple geographies, US is really business friendly.

Netflix was torchbearer of projects that defined thr bigdata and cloud era. They were used as an showcase example for microservice architecture.

Their recommendation system was seen as industry standard best in class.

I wouldnt potray them in negative light.

Background check softwares do this too.

Some of the low cost options now a days do not have human in the loop. They often miss obvious red flags or do too much false positives.

Coreweave is a cloud provider right? I dont think it is apple to apple comparison.

I am wondering when would you use kubernetes on oxide vs running kubernetes with kubevirt on baremetal?

At first look, it feels like oxide is equivalent to proxmox or some virtualization tool, may be it uses qemu stuff underneath.

Just curious.

The reason I am asking this is that, we have lot onprem scenarios in our business. We are tightly coupled with k8s, to solve this we started building an internal project that is kubernetes API compatible [1] but runs containerd or WASM or our platform natively.

Just curious how oxides work in this scenario

[1] https://github.com/debarshibasak/superkube

I think multiplayer is easier on web than doing it in the terminal

Multiplayer agent thingy is a VC keyword these days.

India is among the largest beef exporter in the world.