Please visit San Francisco!

attacks are easier than defense, as attacks only have to work once, defense needs to be 100% successful.

The AI Security Apocalypse Is Here This week brought the news that PHP, the most used programming language on the web, has urgent security loopholes that AI can now easily discover and exploit. And this has been happening for a while, with AI-enabled breaches up 56% year over year. Ultimately, AI makes anyone a potential hacker if they choose to be one. The PHP bugs also provided a frightening preview of how our species will behave during these times - badly. The security embargo on these exploits failed: Amazon detected an attempt four days before the disclosure and Cloudflare saw thousands of attempts in the hours leading up to the public announcement. If we can't rely on the security community's infrastructure, we're on our own. So what can you do? The baseline is an industry-leading password manager like 1Password, with a minimum of two-factor authentication but ideally passkeys. You need to be fastidious about software updates across the board, on all devices used by your family and any servers you control. If you run websites and apps, you should have your coding agents conduct regular security reviews and use alternative models to perform 'adversarial' reviews. I also recommend using a 'skill' like gstack's CSO review on a weekly basis to stay on top of potential risks. And if you're running an agent, you can also have it regularly check the news for hacking risks against your software stack. The world's cybersecurity landscape is changing rapidly and it doesn't seem like anyone is coming to save us. Protection from AI is your own responsibility. "I say your civilization, because as soon as we started thinking for you it really became our civilization" - Agent Smith, The Matrix (1999).

How to Make a Great Startup Demo I review dozens of demos a week. Most mistakes fall into three buckets: 1. Too long. You have about 30 seconds. 2. Live instead of video. Bugs happen. 3. Too complicated. Anyone should understand it.

Am I misreading this? It says 70% don’t have voting history, are you inferring the other 30% voted?

VC trampoline dodgeball is something we can all agree on.

I still remember my interview with you, where you asked which was my favorite language and I said PHP, because "it's training for life".

Any records of anyone actually voting?

(Periodic Reminder) We invest up to $150k at the idea stage. We’re often the first check and usually decide in the first meeting. We’re looking for hard tech founders who want to build for the US market. And you don’t need an introduction, you can apply on the website and it reaches me directly.

How many non-citizens voted in California?

Unfortunately, the govt has already stated they found widespread fraud only to walk it back. That makes it difficult to believe later fraud claims npr.org/2026/08/25/nx-s1-594…

If the fraud is so widespread, why have we not seen thousands of these cases? DOJ has clearly been working on this for years now and they keep having to walk back their headline claims.

I beat the odds!

Oftentimes, the easiest way to grow is to reduce your customer churn.

@grok did Biden promise to pardon everyone in his admin? What is Nic talking about?

@grok how much of this is true?

Russia sanctions were 86-11. Plenty of bipartisan causes everyone can get behind.

I spent the last 7 days in 4 different states and: - United and Delta both have terrible wifi. - Lots of folks are bragging about *not* using AI. - SF has the best food in the country but I do love the cured meats in NYC.

AI slop has ruined a lot of outreach, so you really can’t use it to write your messages to potential customers. They will simply ignore you. But you can use AI for *everything* else, from research to profiling and network mapping.