cw // doxing, threatening, manipulating, death threat

yesterday, an elf threatened to dox my friend and me over petty fanwar.

exposing @kyufella and in doing so—@jungkyukie too.

a thread (PLEASE READ IT FULL)

THE LAST STAND OF PAVAN KHIND - THE 300 BATTLE OF INDIA

A long🧵that u must read

In desperate times, great men come forth. Those men who are ready to sacrifice all of their lives work for a single cause.

Baji Prabhu Deshpande is one such man.

1/25

Battle was between the Maratha Warrior Baji Prabhu Deshpande and Sidi Masoud of Adil Shahi Sultanate.

In 1660, the Maratha King Shri Chhatrapati Shivaji was trapped in the fort of Panhala, under siege and vastly outnumbered by an Adilshahis army led by Sidi Masoud.

2/25

And while everyone is thinking that finally the Maratha king will be subdued, Shivaji planned to escape to the fort of Vishalgadh. It was administered by a Maratha chieftain named Range Narayan Orpe under Shivaji.

3/25

For months the siege warfare continued as Shivaji made sure that the food source of the Besieging army drops down, due to which they will initiate a general assault on the castle.

4/25

Shivaji, Baji Prabhu, and around 600 of their best troops, hardened mountaineers of the Maval region, would dash through the Adilshahis force at night.

A man named Shiva Kashid, who resembled Shivaji in appearance, had volunteered to dress like the king and get captured.

5/25

The best way to know if people like your product is NOT:

- Have a lot of emails in the waiting list
- Become #1 on PH
- Become #1 of HN or Reddit
- Have people that saing "I'll pay"
- Have a lot of free users

The best way to know if they're actually pay for it.

The only thing that matters is your product providing a value, and you can't know this until people will pay money for it.

We can have a first signal of a product/market fit after the launch by check how many sales we've got in the first 24h. Some scale:

200+ This has a high potential.
100+: This has a potential.
50+: Some people need it.
10+: People almost don't need it.
0+: People don't need it.

This is for a single time payment product. For a subscription probably it should be less because people hate subscription.

And obviously, you should have a lot of traffic like 3-5k+.

Here is a stat for my products (macOS apps) for the first 24h after the launch:

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...