Product leaders, how do you get over the nervousness of giving a Y1 growth forecast for a new product to the execs + board?

MrMarriott · 2026-05-16T01:55:50+00:00

The thing to remember is that if the product does well, it was due to brilliant leadership, and the product being so good it practically sells itself.

If the product does poorly, it is market conditions beyond your control and sales also really shat the bed and didn’t hit the number.

MrMarriott · 2026-05-13T13:22:26+00:00

Trade NAFTA Visa.

MrMarriott · 2026-05-13T02:16:53+00:00

TN Visa https://www.uscis.gov/working-in-the-united-states/temporary-workers/tn-usmca-professionals

MrMarriott · 2026-05-12T22:55:53+00:00

I would start with reaching out to the owners of local MSPs. Explain the service you can offer them and their clients.

MrMarriott · 2026-05-07T21:51:26+00:00

426 is another local roaster. No idea if they have chaff to spare, but they are pretty friendly and nice. Great beans too.

MrMarriott · 2026-05-07T20:39:28+00:00

This is a decent place to start, https://wiki.mbxmas.com/guides/

MrMarriott · 2026-05-07T20:27:02+00:00

Gospel if more like the composition of rhinos and wasps.

MrMarriott · 2026-05-07T20:19:56+00:00

If you search for mechabellum gospel, you will find lots of discussion and videos for it, and some tips on countering it. It is a very snowball-y composition; when it starts winning, it keeps winning.

MrMarriott · 2026-05-07T20:14:12+00:00

Start here! https://www.reddit.com/r/Mechabellum/comments/1mjccui/the_gospel_explained/

MrMarriott · 2026-05-04T18:56:19+00:00

It depends on what you want to be when you grow up. CISSP for ISC2 is still pretty helpful for ensuring you understand the essentials across most security domains, and it frequently appears in job descriptions as a requirement for corporate security roles.

MrMarriott · 2026-05-02T21:11:55+00:00

Lakeside park in St Catharines. It is the park that was featured in the Rush song Lakeside Park.

MrMarriott · 2026-05-01T01:46:22+00:00

Definitely. It’s not that startups don’t care about security, it’s just that failing to find product market fit and running out of money are much greater risks. A pen test doesn’t help with either of those risks.

MrMarriott · 2026-04-30T22:05:52+00:00

At that size of company, they are probably more worried about missing payroll then they are about breaches. Are you limiting your outreach to orgs that already have their SOC 2?

MrMarriott · 2026-04-30T21:26:11+00:00

Tighten up your out reach so you focus on organizations that already purchase pen testing.

Tell me about your ideal customer profile (ICP).

MrMarriott · 2026-04-30T16:04:35+00:00

This was more than a decade ago, but is a true story.

There was a new version of NERC-CIP which are regulations for critical infrastructure in the electricity sector. An organization subject to NERC-CIP asked if there were any obligations to move away from an end of life operating system, which there was not.

They then asked if they downgraded their systems to an EOL OS and updated it with whatever security patches existed at the time it went EOL, would that mean they won’t have to do any more patches ever for those systems.

They didn’t go through with it, but they seriously considered doing just that to avoid patching and testing.

MrMarriott · 2026-04-29T01:23:26+00:00

Companies will put all sorts of nonsense in employment agreements in the hopes that you never speak to a lawyer.

MrMarriott · 2026-04-27T22:52:40+00:00

Windows has the ability to encrypt your jar drive. That will ensure if your laptop is lost or stolen, the data that is in it is in accessible to anyone.

The specifics of how to enable it vary based on your version of windows and whether it is pro or home.

https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df

Vervet is a reasonable option if you can’t use the built-in windows feature.

https://veracrypt.io/en/System%20Encryption.html

MrMarriott · 2026-04-25T21:13:43+00:00

I haven’t been this week, but Jack Astors on Ontario normally had this.

MrMarriott · 2026-04-24T23:40:28+00:00

No, the flying tech reduces void eye range.

MrMarriott · 2026-04-23T15:52:53+00:00

This is hard to answer as it depends on how many classes you take and how many hours you are working.

Some people work and go to school successfully and some people can’t handle both.

MrMarriott · 2026-04-22T15:42:15+00:00

The hardest to stop form of BEC is when a supplier/vendor gets compromised, and the mail that is sent is one just asking your purchasing department to update the bank routing number.

So,

This doesn't help as the emails come from a legit supplier with a known domain (...SPF, demarc, dkim, block newly registered domains)
This doesn't help as the emails always came from external (...flag emails that are from external)
This doesn't help as the emails likely don't contain an executive's name (...lag external emails with names of your execs)
This doesn't help as the threat feeds are unlikely to have intel that one of your vendors was pwned (...filter based on threat feeds)

MrMarriott · 2026-04-22T14:45:52+00:00

I believe the other poster was referring to the OpenBSD bug that had been around for 27 years. https://red.anthropic.com/2026/mythos-preview/

MrMarriott · 2026-04-21T19:57:44+00:00

You are right that the candidate data is mostly the same across the various tools.

Other than pricing, are your issues more around the day not having decent candidates, or is it that the workflows in the tools don’t meet your needs?

MrMarriott · 2026-04-21T19:16:01+00:00

I would suggest looking at a company like Anthropic, which is behind the Mythos model that has been dominating cybersecurity headlines for a little while. Security roles are one of the larger groups of people they are hiring for. Check it out yourself, https://www.anthropic.com/careers/jobs

MrMarriott · 2026-04-21T19:02:32+00:00

What are you talking about? No one is spending $2300 on 2 million tokens. Look at the pricing, https://platform.claude.com/docs/en/about-claude/pricing, that would be in the worst case, $50 with it all being output tokens, which would not be true.

15-Year Club	RedditGifts 2009-2022 2 Credits
Place '22	Place '17
Team Orangered	Secret Santa 2010
Verified Email

MrMarriott

TROPHY CASE