1. The £22 billion Test and Trace system had a ‘relatively small’ effect on the R-number, a new evaluation from the Department of Health and Social Care has found.
2. EXCLUSIVE Firm Chaired by Government Procurement Advisor Awarded £38 Million Contract –

THREAD: 15 of the most useful razors and rules I've found.

Rules of thumb that simplify decisions.

Bezos' Razors:

• If unsure what action to take, let your 80-year-old self make it.

• If unsure who to work with, pick the person that has the best chances of breaking you out of a 3rd world prison.

Skinner's Law:

• If procrastinating on an item, you only have 2 options:

1. Make the pain of not doing it greater than the pain of doing it.

2. Make the pleasure of doing it greater than the pleasure of not doing it.

Luck Razor:

• If stuck with 2 equal options, pick the one that feels like it will produce the most luck later down the line.

I used this razor to go for drinks with a stranger rather than watch Netflix.

In hindsight, it was the highest ROI decision I've ever made.

Bragging Razor:

• If someone brags about their success or happiness, assume it’s half what they claim.

• If someone downplays their success or happiness, assume it’s double what they claim.

The map is not the terrain.

Some people really benefit from hearing advice that everyone knows, for the same reason we keep schools open despite every subject in them having been taught before.

In that spirit, here's some quick Things Many People Find Too Obvious To Have Told You Already.

Your idea is not valuable, at all. All value is in the execution. You think you are an exception; you are not. You should not insist on an NDA to talk about it; nobody serious will engage in contract review over an idea, and this will mark you as clueless.

Technologists tend to severely underestimate the difficulty and expense of creating software, especially at companies which do not have fully staffed industry leading engineering teams ("because software is so easy there, amirite guys?")

Charge more. Charge more still. Go on.

The press is a lossy and biased compression of events in the actual world, and is singularly consumed with its own rituals, status games, and incentives. The news necessarily fails to capture almost everything which happened yesterday. What it says is important usually isn't.

Companies find it incredibly hard to reliably staff positions with hard-working generalists who operate autonomously and have high risk tolerances. This is not the modal employee, including at places which are justifiably proud of the skill/diligence/etc of their employees.

Sri Gurubhyo Namah.
Some tweets on Adi Shankaracharya and in particular the Guru Parampara of @sringerimath. [I had done this series earlier 5 years ago on account of Shishya Sweekaram].

Adi Shankara established the Sringeri Peetham as the 1st of 4 amnaaya peetams.

The four being
1. Sarada Peetam at Sringeri.
2. Govardhana Peetam at Puri
3. Kalika at Dwaraka
4. Jyothir at Badarikashramam.

He installed his 4 most prominent shishyas as heads of the peetams.

Sureshwaracharya was assigned to Sringeri as its head.

Sringeri is a corruption of Rshyashrunga giri.

Rshyashrunga maharshi [and his father Sri Vibandhaka Maharshi] did their tapas at this place.

It is at Sringeri that Shankara spent 12 of His precious 32 years!!

That gives you and idea how much He loved this place.

Rshyashruga maharshi had a horn on his forehead, a result of being born to a deer. His mere presence was enough to shower rains!!

Rshyashrunga was one who led Putrakamesthi Yaagam of Dasaratha Maharaj and which resulted in Sri Rama's birth!!

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...