Viewing profile — morgante

We built on firecracker VMMs but today I'd just use a hosted provider like morph.so or e2b.dev.

The exploit is there either way.

You should treat running a code analyzer/builder/linter against a codebase as being no safer than running that codebase itself.

A pretty straightforward solution is to have an isolated service that keeps the private key and hands back the temporary per-repo tokens for other libraries to use. Only this isola…

Yikes, this is a pretty bad vulnerability. It's good that they fixed it, but damning that it was ever a problem in the first place. Rule #1 of building any cloud platform analyzing…

This is way too broad of a statement. The smartest person and the dumbest person I've met professionally are both investors.

They don’t elaborate on the logging details, but certainly must good systems don’t allow log tampering even for admins.

All of those battles involve battlefield tactics, and in several of them the numerically inferior force won — exactly the opposite of "death stacks."

Unfortunately nuance is dead. I too wish Musk had tried to empower USDS instead of immediately alienating many of the people best positioned to improve things.

[flagged]

[flagged]

That's not true. Look at USAID: they canceled everything, but there was a significant outcry about PEPFAR specifically. Now PEPFAR is back, and likely to stay.

I'm not here to defend DOGE, but you're making the same mistake as the article of assuming the DOGE approach has no merit. Deleting processes somewhat randomly, then listening for …

The efficiency comparison is interesting, since it starts relatively evenly but quickly dismisses the value of the DOGE approach. Everyone I know who worked at USDS has been talent…

> It will never be enough for you. That's not a good assumption to make for everyone. There are many people who do grow income without growing expenses (see the whole financial ind…

> However YC gets preferential shares; YC is not aligned with the common shareholders (founders; builders). YC invests on a SAFE, the terms are public.[0] For most companies, pre-s…

You're right. I was bucketing the pricing/payout issues into the loan terms but they equally apply if you don't take out the loan. Obviously there are many better ways to structure…

Yeah I personally think the valuation is the least egregious part. If they get sued, they’ll have a defense for how they arrived at that number. It’s not 10x off. The bigger proble…

It’s Chicago. They’re likely getting kickbacks/bribes.

OP would have to speak to his experience, but between a Google IPO and the $10M Virgin acquisition I would be surprised if he didn't average >$200k lifetime. Throughout this thread…

> Seeing tts outcome of the startups he listed, it would have been much better to work as an enterprise CRUD developer at a bank, insurance company, etc Enterprise CRUD developers …

It's interesting how at least several of the failures were good ideas with bad timing/execution that others have replicated successfully. iCab: Uber obviously was very successful w…

Also interesting that it seems like his relatively minor 1 year stint at pre-IPO Google was successful enough to pay for many other endeavors. It's a great example of the power law…

You can get a much higher hit rate with more constrained agents, but unfortunately if it's too constrained it just doesn't excite people as much. Ex. the Grit agent (my company) is…