jordigg

SOC 2 is mostly about proving you do what your policies say, and there’s more flexibility than people think.

For small teams it doesn’t have to be heavyweight. A risk register can be a simple doc with a few real risks and mitigations.

That said, I agree there’s a lot of theater. For smaller companies and budgets, it often turns into rubber stamping. Auditors rely on the evidence you provide, so the report can look much cleaner than day to day reality.

Still, it has value. It forces you to formalize basic practices, and if you want those customers, you’re signing up for that level of scrutiny.

One of the recurring actions I need to keep helping other non-technical folks with in macOS is zipping with password. IF you can add that, it could become very useful for a lot of folks.

edit: Just found MacZip as another nice alternative that does it all. Would wish I could look at the code for security purposes.

Loom is an excellent piece of software, but from my perspective in IT I've never been able to justify it's ROI.

I've been always pushing for it to go away as soon as had to start looking at SaaS spend. Looking at the analytics only a few power users really made use of it while the biggest majority of users never used to record or maybe only recorded 1-2 videos a quarter. It was too expensive and video is very expensive to run on the cloud.

Zoom released a competitor recently and that must be killing them. Other companies are also offering cheaper alternatives and egress traffic for video-centric businesses is crazy expensive.

They had layoffs not so long ago, like many companies, and during my last negotiations with them they were very aggressive with pricing. Aggressive to the point of their executive team asking what amount we wanted to pay, and they actually committed to the price we offered...

Glassdoor reviews and Blind comments weren't good at that time either, but that is true for most companies. I think they couldn't keep the revenue curve up-to-the-right to offer a decent return to their investors and it was turning more into an OK business. Time to sell, stay there for a year and move on to start their next thing. For Atlassian is a relevant acquisition, especially as they are also focusing more into chasing freshdesk or zendesk as a customer support platform.

I wish them the best, as I said, the product itself was very well designed and engineered compared to any other alternatives out there. I think they missed to make it relevant and a must have for companies, maybe focusing more to sale to sales and customer experience/support teams which tend to have big budgets compared to other teams.

This has been true since the integration was released and main reason it's been disabled at most companies I've worked at. Definitely nothing new and reported to Slack and Google multiple times, always replied with working as expected. If you don't like how it works, remove it. Recently the UI and options changed a bit and you can now disable previews but I believe is a user setting and not a organization setting.

There has been an effort to standardize MNDAs with oneNDA (https://onenda.org/), at least in tech and I've seen it work well for SaaS deals. I think they also released oneDPA but I haven't used it yet to understand if it accepted or not.

I wish more companies would use standard contracts, definitely helpful for smaller orgs with non-existen or very small legal teams. Now we just need them to be well accepted...

I just dropped a message to the CEO via LinkedIn, hope they can check on it. Didn't pop-up for me, either adblock or just being enabled for a sample of the visitors.

I did set up something similar on postmortem.co (dead) that was being populated by subreddit r/shutdown plus other contributions, main problem was to get proper explanation on why they failed and not just the public statement.

Legal, reputation among other reasons force people to don't share why something failed. I'm convinced it would be a great resource for learning on all kind of areas.