Good news everyone, Jay Hoag gave us the simple 5 point playbook for finding Magical Companies in consumer technology.

1. product offers combo of value, convenience, selection
2. there's tremendous engagement
3. a virtuous cycle
4. tremendous execution
5. kinda crazy leader

As part of our commitment to keeping our customers/community protected & informed, we are releasing a blog that shines light on transition between Stage 1 and 2 of #Solorigate/#SUNBURST campaign, custom Cobalt Strike loaders, post-exploit. artifacts, IOCs: https://t.co/b0ReHMa63u

Here are some highlights:
The missing link between the Solorigate backdoor and the custom #CobaltStrike loaders observed during the #Solorigate is an Image File Execution Options (IFEO) Debugger registry value created for the legitimate process dllhost.exe (ATT&CK ID: T1546.012).

Once the registry value is created, the attackers wait for the occasional execution of dllhost.exe, which might happen naturally on a system. This execution triggers a process launch of wscript.exe configured to run the VBScript file dropped by the SolarWinds backdoor (Stage 1).

The VBScript in turn runs rundll32.exe, activating the Cobalt Strike loader DLL using a clean parent/child process tree completely disconnected from the SolarWinds process. Finally, the VBScript removes the previously created IFEO value to clean up any traces of execution.

On the custom Cobalt Strike Loaders: we identified several second-stage malware, including TEARDROP, Raindrop, and other custom loaders for the Cobalt Strike beacon. During the lateral movement phase, the custom loader DLLs are dropped mostly in existing Windows sub-directories.

I spoke to 1,700+ people about remote work in 2020

A few predictions of what will happen in 2021

[ a thread ] 💻🏠🌍

🎟 Remote competition: @FrancisSuarez is the first person to wield the power of Twitter to attract remote talent

Almost every region that has something which would attract people to move there will do the same thing

Incentives for remote talent to move will grow quickly

⏰ Async-first: People now see offices are instantaneous gratification adult kids clubs where sync work makes it impossible to get stuff done

Tools that enable async work are the most important thing globally remote teams need. A lot of startups will try to tackle this

🏢 HQ Slashed: Companies of every size cut their commercial office space by 50-70%

People will work remotely 2-4 days a week, and come into the office 1-2 days a week

Companies will provide a great setup at home for their workers

🤕 Injury explosion: Companies that don't provide the right tools & equipment begin to get Sued for Millions of Dollars

This rapidly becomes a key point of differentiation between companies they use to attract & retain talent

General Warning: don’t work for or hire @IanMmmm - he’s a zero-integrity-self-serving manipulator. He destroyed an entire org at AWS.

He’s the reason I left @awscloud. He’s not just incompetent, he’s dishonest in the extreme. You’re throwing away your career working with him.

Also, pro-tip: record every call you have with a manager that you suspect is lying to you.

Here's what happened: I lost my shit when I didn't get promoted, because I was a child. That's on me. I had worked my ass off for 3 years and Ian said that if I moved to Seattle and signed a non-compete then I would get my promotion. I did those things - I didn't get promoted.

What does losing my shit mean? I sent a message to Ian and others that said "Fuck you, I'm not moving to the depressive hell hole that is Seattle. I'm not signing a non-compete. I'm going to stop working 100 hours a week for a company that doesn't give a shit about me."

Later, I found out that Ian had never actually reached out to anyone about my promo document. He just lied. He just ignored it until the last second because he was too focused on taking credit for my work for his own promo document. He got promoted.

Thanks to the growing number of people who @getMaiar & engage with the @ElrondNetwork ecosystem, the number of accounts doubled to over 320k & we’re over 2.5M TXs, an unprecedented adoption level for a 6 months-young mainnet.
#hypergrowth100 Day 40
Weekly #elrondtech ⬇️

1/ The Delegation Manager toolset has been released for testnet integrations, ahead of our imminent mainnet upgrade. It enables staking providers to set up & manage staking pools, nodes, fees & other parameters for their

2/ We updated the libp2p libraries to the latest release & found out that they work seamlessly with their old counterparts. Congrats @libp2p team for the effort put in backward compatibility. We know how complex that is.

3/ Redesigned the async call & token transfer syntax in our Arwen WASM VM. Interactions between contracts are now “return types”, which makes execution flow more intuitive. Callbacks have also been

4/ Arwen WASM VM updates continued:
- Integrated new Arwen and new features of Arwen into elrond-go. Added a set of integration tests for different scenarios.
- Fixed a bug in Arwen VM which did not let one contract to deploy multiple contracts.

I just read all of Jeff Bezos's 23 letters to Amazon shareholders. And here's a thread with just one key-takeaway from each of these letters.

So if you're an artist or an entrepreneur looking to get some insight into the mind of this genius, read this right now.

1997: Focus relentlessly on your customers and long-term growth.

1998: Here are the 3 criteria Bezos wants managers to consider when hiring (to set the bar high):

1. Will you admire this person?

2. Will they raise the average level of effectiveness of the group?

3. Along what dimension might this person be a superstar?

1999: How to think long-term? Think: it's good enough today, but it will get so much better.

2000: "In the short run, the market is a voting machine but in the long run, it is a weighing machine.” - Benjamin Graham

We aren’t 10% smarter when the share goes 10% up, nor 10% dumber when it goes down. We want to be weighed, & we're always working to build a heavier company.