goopthink

Steam, not iron.

> I ordered it because when one superpower fails you, eventually you have to try the other one before they eventually ruin the thing that was working perfectly well before they tried to improve it in order to make enough money to be a trio of planets.

When your options are a few competing BigCos and you don’t have incentive to try to build it for yourself because it straddles the annoying in-between space of “frustrating enough to do something” and “ not frustrating or valuable enough to actually solve the problem.”

Looks like the site got hit by the CVE-2026-26980 exploit right shortly before I posted this. This was helpful in identifying the malicious code that was added to the footer of every page, thank you!

OP/author here! Apologies about the malware and captcha. It looks like my site was exploited by CVE-2026-26980 affecting all Ghost sites pre v6.19 [1][2] An API key was hijacked to inject malicious JS into every page that looks like a cloudflare captcha; it seems that the JS only targeted windows users, so I didn't catch it before I shared the post widely.

The site has been upgraded to 6.44 to close the vulnerability, I rotated every API key and account credential, and both manually and programmatically scrubbed every instance I could find of the code injection across the database. I think we're clear now!

Sorry to anyone caught by this and thank you to folks for flagging it (and thanks to the HN team for letting me follow up on this after comments were closed). I'm seriously mortified. X_X

[1] https://github.com/TryGhost/Ghost/security/advisories/GHSA-w... [2] https://www.securityweek.com/ghost-cms-vulnerability-exploit...

Agreed!

> “[Companies with a good trajectory] give your resume (and career) a pedigree and an opportunity to work alongside some of the top talent or top operational structures in an industry. They also offer great paychecks that compensate for whatever issues may be present.”

Companies with a good trajectory can be awful to work for but their trajectory — and subsequently their ability to allocate value (pay, headcount, interesting challenges) to teams to make them more competitive — in my view compensates for whatever drawbacks come from them. There is some benefit to working for them. For a bad company, there is often little explicit value for working there unless you’re personally passionate about the work/industry or you need a job.

Said differently: a good company delivers value to you. In a bad company, you have to drag personal value out.

A quick reminder to all commentators that in addition to Turbotax and Quickbooks, Intuit also owns MailChimp for (nowadays pretty broad) marketing, CreditKarma for your credit scores/analysis (and pitching you credit cards), and professional enterprise tax prep software. There’s a lot of red-queening happening in AI for marketing and financial assessment software. Individual tax prep, maybe not as much?

An interesting takeaway is that heretofore most of that advances have been not from “invention” but from a breadth of visibility. LLMs have been able to be “creative” because of the volume of work that they cover and can draw lines and associations between, not in discovering things that did not exist previously (though an argument can be made that something like AlphaFold was “discovering” and “intuiting” associations that were not explicit anywhere previously, uniquely found by the AI… but I’d argue back something about the bitter lesson and we’d go on for more than a few threads).

Somewhat ironic then, to not make this more explicit in an article about solving a combinatorial problem.

“I spent 6 years building my Kanban as I hated how managers run the boards”… only to discover that problem was the managers and workflows designed for their legibility (not engineers), not the technology or software itself, and that the tech itself could be rebuilt in a weekend nowadays?

Somewhat buried in the post — “focus”.

The way people use AI is the opposite of focus. It’s throw as much as you can against the wall because it is fast and cheap and possible. It is peanut buttering. Companies today mandate AI use so indiscriminately that you might as well call it a comparative disadvantage. It’s not that the AI is bad, but that people haven’t figured out that the core competency of an organization is focus and coordination to achieve a goal, and that victory is external — users, customers. But AI is used to unfocus, to spread, and to meet internal goals - build more, etc. The challenge was never writing more code or creating more content (all of which is ultimately a long tail of debt that needs to be cleaned up and managed by someone else), which can be done cheaply enough with other paths. It was figuring out what is worth doing, and aligning everyone around that. So in a sense, I welcome company AI mandates today because they are so misdirected as to make “doing things they inefficient way they were done before” a relative advantage.

As a recipient.

- Emails are being aggressively marked as “suspicious” out of the blue (USPS, HR emails, system emails, promotional emails)

- Those emails are being regularly delayed by 7-10 minutes.

- Priority inbox rules seem reset

- “Never mark as spam” rules are seemingly not respected

Additional reports on reddit: https://www.reddit.com/r/GMail/comments/1qln9zp/gmail_not_fi...

Https://sharedphysics.com

Https://errorstates.com

This. I encouraged my team to use a templated (standardized) ADR for any big decisions that don’t have an obvious answer or complete consensus and it had reduced the second guessing and relitigation of decisions to nearly zero. It also gave is a good snapshot of where we were when we made that call so historic decisions weren’t disparaged.

No disagreement, I think developer augmentation is an amazing productization of LLMs, and will likely be better at converting enterprises so paying customers.

But OpenAI has the best brand recognition and the largest user base, and they have the core tech powering all of this. Whats the number on “tons” of customers, given that these VSCode-spinoff/plugin GPT wrappers are sprouting around like mushrooms after a rain?

If this is a build-vs-buy decision, $3 billion? Is that worth 1/3rd of the money in the bank when they’re burning cash at insane rates just running servers, and the rest of the $30b fundraise is tenuous and there may not be a followup? I’m skeptical of the financial decision here.