Software entrepreneur, developer. 3 ventures so far. Building the next one. Links to other social on my web site.
St. Louis, MO, USA
Joined December 2008
- Tweets4.5K
- Following2.7K
- Followers2.7K
- Likes94.7K
Kyle Cordes retweeted
I would strongly consider uninstalling any third party js right now if I were you. Especially if it comes from a startup.
Analytics, monitoring, etc are all massive site takeover risks. If you use a tracking script from a third party SaaS, then if they get hacked the hackers have total control over your site too.
This is what took down Polymarket today. They used a tiny script from a SaaS that tracks page load speed. That company got hacked, and the hackers subsequently stole millions from Polymarket users.
If you want to use analytics safely, I would use a product that lets you pin the tracking script and control when it changes. Most of the mature products support this, e.g. Sentry, Amplitude, PostHog, Mixpanel, Heap. If not, you need to trust the company behind it a lot...
Railway got hacked last week. Railway! That's a very competent team, with particularly strong infra chops. The agent swarms are on another level.
A typical analytics company is nowhere near as sophisticated. You should ask yourself: do I trust this company's security more than Railway? I was an analytics CTO in a past life, and I will be the first to admit: we had some great people but we were not on this level.
We (Detail) just uninstalled our session replay, which was a product I loved but is not worth the risk right now.
I hate to write this because I spent a good chunk of my 20s benefitting from product teams taking a chance on a nothing startup and installing our js on their site. But in the past two weeks this risk vector has exploded. It's better for the ecosystem if we move away from third party js as fast as we can.
Kyle Cordes retweeted
If you have an IQ above 115 and think Marxism doesn’t end in violent tyranny because “we’ll do it right this time,” then you don’t have an IQ above 115.
Somebody at GitHub might have vibe coded something they shouldn't have?
someone outside our GitHub org deleted one of our private repos.
no membership or invite or role. nothing in our org or enterprise audit logs gave them access. just one repo.destroy from the gh CLI.
and it's not in deleted repositories, so no restore.
@github how is this possible, what sorcery is this?
While y'all are worried about whether your dependencies are up to date today for yesterday's security emergencies...
I'm trying to figure out why a dependency on a Node.js project is still, in the Year of Our Lord 2026, using Bluebird.
Kyle Cordes retweeted
Conspiracy theorists: the NSA has manipulated the standard setting process so HTTPS appears to be impenetrable, but they have a backdoor because of advanced mathematics beyond your imagination
The real world, so much dumber than they could ever imagine: the secret key is 4
Kyle Cordes retweeted
Churchill could have shortened WW2 by years if he had just “done a deal” with Hitler. George Washington could have done a deal to end the American Revolution. Zelenskyy is in good company.
Kyle Cordes retweeted
Seven widespread misunderstandings about politics.
1. The Democratic Party’s elected officials, staffers, and donors are on average very progressive compared not only to the median voter but to most of the rank and file people who vote for Democrats.
2. The public’s persistently angry mood is not a demand for large policy changes, almost all changes generate backlash and the biggest electoral overperformers are wrong-party governors like Andy Beshear and Phil Scott who don’t do very much.
3. Third parties are most likely to succeed when the differences between the two big parties are small (1992) or at least wrongly perceived to be small (2000) not when they’re both seen as too extreme.
4. Donald Trump’s behavior is very extreme but the main way that his policy platform differs from Mitt Romney’s 2012 platform is that he’s more moderate on social security, Medicare, gay rights, and abortion.
5. How much progress you make on Issue X is more a function of how much you’re willing to drop or compromise on issues A, B, and C than of how aggressively you emote about X.
6. The qualities that are good for winning primaries and raising money are unrelated to (and in some ways antithetical to) the qualities that are good for winning general elections.
7. Increasing political polarization reflects deliberate choices made by highly engaged elite actors and is not an emergent property of the mass public.
Nick is known for his troll posts, but this one is a real banger.
When business owners complain about hiring I sometimes can’t hold my tongue.
“Yeah, it's brutal out there. How much of your marketing budget goes towards recruiting and hiring?”
They look at me like I have two heads.
“What the heck are you talking about? Of course I don’t spend marketing dollars on employees. I spend marketing dollars on getting customers. Is that even a thing?”
These business owners, and I would venture to say MOST small business owners, just sit back and HOPE that a unicorn walks in the door.
They pray that the best, most loyal, hardest working employee who never makes mistakes are just browsing the free classified section of Facebook Marketplace, sees their job posting, and bends over backwards at the opportunity for average compensation at an average company with non-existent marketing.
You, as the leader of your company, have to hunt them down and convince them to come to your company. You have to build a company that attracts these A players and then go out and get them!
Nearly every single competent employee I’ve ever hired already had a job when I hired them.
I took matters into my own hands, took ownership over the shitty labor market, and did the work other companies weren’t willing to do to find and attract these people.
Hiring costs money. It takes a lot of time. But, making the active effort is how you grow.
Which is better, more true democracy?
A) A coalition of 51% of the people who are good and just and right impose their will on the other 49% who are wrong and bad and would damage our great country if allowed to do so.
B) Government policy is mostly in the vicinity of what the median voter thinks. About half of the people, those most interested in politics, have views far from the median and are very dissatisfied because policy is nowhere near what they want.
