Notes on hiring, security, and how we build Kit.
Ghost-job laws make hiring intent a recordable commitment. Learn what is law, what is pending, and the six controls every startup should run.
The Mechanical Turk shutdown is your deadline to protect sensitive data, classify review work, and build a calibrated human-in-the-loop team.
A technical hire costs ~21 interviewer-hours under 25 people and ~29 by 300. Interviewer capacity planning is how scale-ups stop the bench capping hiring.
Z.ai's ledger holds 2,436 findings across 269 projects, and 2,239 have not reached a maintainer. How to rebuild VDP intake for the bulk reporter.
We probed the 80 newest Launch YC companies: 25% had a careers page at the obvious URL, 11% a security.txt, and 6 of those 9 went to a founder inbox.
Five incidents show different reporting arrangements, uncertain detection timelines, and the limits of a public vulnerability disclosure channel.
Gartner's renege rate swung from 48% to 35% in one year. Your ATS saw none of it, because the record closes at offer acceptance. How to fix that.
When one bug hits five vendors, single-party VDP rules break. How multi-party coordinated disclosure works, and why your SLA says green while you're late.
Canva, Meta and Google now expect candidates to use AI in specific interview rounds. Here's the per-stage policy, scorecard and disclosure to copy.
Displaying items 82-90 of 236 in total