TIPS IN SEARCHING FOR A SUPERVISOR

I had provided a step by step guide in writing a supervisor. If you missed it, look it up here👇

https://t.co/ZrAe27bILv.

Today, I offer you a few workable tips to assist you in the search for supervisors.

It's endlessly fascinating how economic datapoints get interpreted.

When I was in charge of a P&L, the guy who ran Finance for us and I had what we called the 'shelf plan.'

There were maybe 3-4 of us who knew it existed.

What's a shelf plan?
1/

Well it's a plan you keep on the shelf (full FP&A model), that you hope you never have to use.

It reduces forward hires, cuts back various line items (typically ad spend, travel, that sort of thing).

Oh, it also has a big fat RIF in there.

That's why we don't talk about it.
2/

Why have a plan instead of winging it?

Because this is where companies (particularly young companies) sometimes err. They do little cuts - 2-3% here and there, preserving as much headcount as they can, that sort of thing.

This is incorrect.
3/

If you're at the point where you need to make material changes to your forward P&L, at 2-3% RIF will be followed by another.

And another.

And this series of progressive cuts will cripple morale, incrementally reducing the productivity of the staff you retain to survive.
4/

And so the shelf plan cuts deep.

Your goal is to go from being a peacetime machine to a wartime machine, so you gotta lean out quick. Can't do that without a plan, hence the need to have one.

~30% cut is what you need.

And then you need to tell everyone left they're safe.
5/

As part of our commitment to keeping our customers/community protected & informed, we are releasing a blog that shines light on transition between Stage 1 and 2 of #Solorigate/#SUNBURST campaign, custom Cobalt Strike loaders, post-exploit. artifacts, IOCs: https://t.co/b0ReHMa63u

Here are some highlights:
The missing link between the Solorigate backdoor and the custom #CobaltStrike loaders observed during the #Solorigate is an Image File Execution Options (IFEO) Debugger registry value created for the legitimate process dllhost.exe (ATT&CK ID: T1546.012).

Once the registry value is created, the attackers wait for the occasional execution of dllhost.exe, which might happen naturally on a system. This execution triggers a process launch of wscript.exe configured to run the VBScript file dropped by the SolarWinds backdoor (Stage 1).

The VBScript in turn runs rundll32.exe, activating the Cobalt Strike loader DLL using a clean parent/child process tree completely disconnected from the SolarWinds process. Finally, the VBScript removes the previously created IFEO value to clean up any traces of execution.

On the custom Cobalt Strike Loaders: we identified several second-stage malware, including TEARDROP, Raindrop, and other custom loaders for the Cobalt Strike beacon. During the lateral movement phase, the custom loader DLLs are dropped mostly in existing Windows sub-directories.

Tax thread: Employees vs independent contractors.

1. Legally, the two terms are mutually exclusive and are direct opposites... https://t.co/jR0PBMp32M

Employee works for an employer.
Independent contractor is basically an entrepreneur.

2. This highlights two key points:

An employer has some measure of control over the employee.

An "IC" (short for independent contractor) is "his own boss".

It is the responsibility of the employer to determine that a person is either an employee or an IC.

3. Where does PAYE come into play? PAYE is deducted from remuneration. Remuneration applies to employee earnings, whereas for IC's (on certain conditions), their earnings can be excluded from remuneration and therefore no PAYE.

This difference is the scenario of yesterday.

4. There are two important tools: Statutory tests and common law tests. They can be used to determine employee/IC status.

The statutory test is to see if a person is independent from 1: the person paying them;
2 who the work is done for

AND

5. Whether the person is subject to two main things: Control, OR
Supervision

If the person is not independent from the employer (for both the work and the pay) AND the employer has control or supervision of the person - PAYE will apply.

The freelancing blueprint 🧵👇

Disclaimer:

Freelancing is NOT for everybody, but it is for everyone 😎

Just give freelancing an honest attempt for a year.

If you enjoy it - cool.

If you don't - cool.

At least you tried.

Freelancing starts with a SKILL.

1. Learn how to make a website (Web Design).
2. Learn how to get sales for a business (Digital Marketing).
3. Learn Web Design and Digital Marketing.

I'd recommend option 3.

You're offering a once-off and monthly service.

Win-win.

Where do you learn this skill?

YouTube, Google and Udemy.

Don't overcomplicate it.

How do you make money from this skill?

Marketing and Branding.

This will help you get clients.

@jspujji @RomeenSheth @ampush @GatewayX Down!