Observing the public conversation around FB, and the private ones happening among techies and ex-FBers, I think the mutual misunderstanding is worse than when I set out two years (and 500 pages) ago to (in a small way) bridge that gulf.

We're basically fucked.

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

👇 Thread. New deck getting published this week: "Consumer startups are awesome, and here's what I'm looking to invest in at Andreessen Horowitz." If you want to read it, subscribe to my newsletter here: https://t.co/262t8eh0wf

1/ A lot of new consumer technologies have been introduced to US households in the last 100 years. But it's taken many of them - like the telephone - more than 50 years to get to the majority of the US. Why is that?

2/ We had to literally teach people how to use phone. Which end goes to your mouth, which goes to your ear. Say "hello" when people call. The motivation of consumers to talk to their friends has always been there, but we had to teach the behavior

3/ If you compare phones to the latest technologies, there's been a huge shift. Things are being picked up much faster.

4/ Even while there's been all this innovation recently, physically speaking, we are still the same human beings from 100,000 years ago.

👇Thread.

Published a new essay: The red flags and magic numbers that investors look for in your startup’s metrics – 80 slide deck included!

This was a deck that I created on my (longish) interview process with @a16z. It was a long path, starting with meeting folks at the firm 10 years ago. But the purpose of the deck was to explain how I would use my superpower in an investing context

Here's what I explain in the deck. As investors (whether angel or VC) we're often confronted with an up-and-to-the-right graph. Is it going to go up? Or down?

One solution to forecast these growth curves is the Growth Accounting Framework, where you add up New+Reactivated and subtract churned users. In each time period that gives you the difference in monthly actives.

The problem with this is that it's a lagging metric, not a leading one. We need to go one level deeper and look at the underlying loops that drive these numbers, to understand the quality.

1/ So here is a thread on how I turned $32,000 into $1.2m and back to pretty much zero (once taxes are paid).

Just note, I am not bitter or salty in any way at all, the last 2 years have been an amazing ride - travelled the world, been wealthy, been poor.

2/ Dec '16, my advertising agency folded, I had a little bit of money left and I put $32k into Bitcoin and Ether. As it started to go up I diversified into everything, Monero, Dash, this that, any crap - even Ripplecoin. Everything just kept going up.

3/ By March I think I had around $300k and $500k by the summer. I used to take 25% out but towards the end of the summer I got greedy and put it all back in and by December it was $1.2m.

4/ Thinking I was an absolute genius I decided to start a bunch of businesses. As silly as it sounds I had this goal of making $5m as I wanted to buy Bedford Town Football Club and get them in the league, and as Crypto was going up forever I needed 6 months.

5/ So:
- Trading (income 1)
- Podcast (income 2)
- Mining (income 3)
- Mining pool (income 4)
- Consulting (income 5)

Yes - all of the above as a one-man army :)