jimkri

Here's another discovery I made, it looks like they are using wordplay:

"Ceci n'est pas" (French for "This is not"):

1 ceci.njalla.do

2 nest.pipe.ma

3 pas.njalla.in

Translates loosely to "This is not domain information" or "This is not DO (Domain Operations)."

"You can get no info":

1 you.njalla.no

2 can.njalla.in

3 get.njalla.fo

If anyone has come across something similar, wordplay, etc, if would be interesting to hear.

I recently investigated a phishing campaign targeting Gmail users that exploits Salesforce infrastructure and Google support processes. The attackers use these trusted platforms to make their phishing emails appear credible and bypass spam filters. Orginal article reporting on the scam: (https://sammitrovic.com/infosec/gmail-account-takeover-super...)

Key Findings:

Exploitation of Salesforce Email Infrastructure: Phishing emails are relayed through Salesforce’s systems, using legitimate headers (e.g., X-SFDC-LK) and passing SPF, DKIM, and DMARC authentication.

Abuse of Google Support Processes: Emails impersonate Google Workspace Support (workspacesupport@google.com) and direct victims to attacker-controlled domains. Replies are routed to googlemail@internalcasetracking.com.

Social Engineering: Attackers use AI-driven phone calls to enhance the credibility of their phishing attempts.

Indicators of Compromise (IoCs): Includes domains, IP addresses, and email addresses associated with the attack.

This technique is scalable and can be applied to any Google-based domain, posing a wide-reaching threat.

The domain (internalcasetracking.com) used in the attack remains active. I’ve reported the activity to the appropriate security teams and am collaborating with Sam, who originally wrote about this scam.

Sharing this here to raise awareness and facilitate further investigation.

I really liked this.

It reminds me of Michael Pollan's book A Place of My Own The Architecture of Daydreams - https://michaelpollan.com/books/a-place-of-my-own/

Michael goes into great detail on building his own office space. It was really cool to read all the details.

It also reminds me of a Tom Silva quote, "The money is in the details."

Check out https://www.letsdeel.com/ To hire someone outside of the US or to hire in general either bring them on as a Contractor or Employee. You should understand the difference between both, because you cannot treat a contractor as an employee.

Contractors will be hired for a set time and for a specific contract and you cannot treat them as you would an employee, if you bring them onto zooms and other calls they can be classified as an employee which is considered misclassification. Contracts are a simple way to bring people on, Deel or if you talk to a lawyer can get a basic contractor agreement for you.

Deel (linked above) is a way to hire them as an employee or contractor and they will become the Employer of Record if you choice to pay the hires as employees.

Not a lawyer, but built teams in Mexico and Philippines.

I really appreciate this response and relate to this.

I think I was in a really similar mindset as OP, the last company I was at I was very naive and believed this pitch about the company. Come to find out the company had nothing. What I did gain is a great learning lesson on how I should approach work and more.

My current company I looked for specific things and listened during the interview. I know interviews can only give you so much, but when I decided on the last job I ignored so many red flags in hope that this will turn into something huge, I should have looked at it as a true red flag that this will be a rough experience.

Also having ADHD this is something that is tough at times

I found a local business that was turning seaweed into fertilizer and he was letting the seaweed dry out and then grinds it up and bags and sells it. I'm not sure if the drying of the seaweed will get rid of the high sodium, but that was my first thought is the amount of work that will have to go into cleaning it.

There also can be other fish, and debris that can get stuck in large patches of seaweed. So that would have to be filtered out as well

It depends on what is used to clean the sewage, but I think theres a couple ways to make fertilizer from it. Depending on the animal or type of sewage, if you use duckweed or algae to clean the water you can take that and apply it to fields. You will also have the sludge from the sewage that can also be applied directly to fields. Pig farmers will usually take some of the sludge from their lagoons and apply it directly to their fields, and they will also spray a watery-sewage on the fields. I don't like this method since its proven to travel by air and also can contaminate water tables at high levels

But if the water is high in metals and other toxins you can only do so much with the excess from this process

Yeah honestly I think there would be too much processing involved to make it realistic.

The benefits of Seaweed to soil (ignoring salt and sand) has been proven to help bring key nutrients and metals to the soil that are missing from farm land that was used for single plant production.

I think there is a huge opportunity to use Seaweed or Algae for fertilizer.

Theres ways to do this on each coast but also to utilize the Pig and Cow farming waste to not only clean water in the process but to take major waste producing industries and try to soften their impact.

I think the more people that know about the use cases of Seaweed and Algae will help that industry come back. There were too many companies that only saw Algae as a way to make bio fuel. I see it as a way to clean dirty water, and to produce a bi-product that can go back into the ground.

I also think theres a way we can just use the warmer waters and the over production of seaweed, like the gulf coast especially closer to Mexico. So much seaweed is scrapped from the beaches but never used at scale for production

This is a great point. I think my gut bacteria was something I really under estimated.

For a couple months between Nov-Jan I would constantly have cravings for ice cream and other sweets. Being in NYC I can easily order snacks now and they will be delivered within 15 mins. I just hit a point where I ate a whole box of mini cones and just thought about it and didn't really know why I was eating them. So I just started to think about it before I would eat and try to stay present at night because the cravings happen and its just paying attention to them and not acting.

I started on a meal plan and this really helped keep me focused on my diet. Since I've been doing that my cravings for sweets and ice cream are almost gone. Its takes a lot of time, and real work, but by staying present it has helped me think, is this good for me and do I really need to eat this?

Also for a weird weight loss, look up: Spirulina and Chorella algae supplements. Algae has so many nutrients and health benefits

Yeah there is a lot of pirated content on MEGA, but there are a ton of other sites available that have started recently.

I have been a day one user of MEGA and haven't had an issue.

>It feels you are seeking validation on a compensation scheme that's at least equal that most corporations and bring nothing new to plate, nor is any more fair than what everyone else is doing.

I think this is a great point, because exec's are not included in this pricing calculator. I think they totally should be.

From the article and some other links I think the company is doing a great marketing campaign during a time where salaries and pay is a hot topic.

I do not think salaries should be paid based on location, especially if the team is remote. Everyone is in the room (zoom room) and they should be paid on their skillset and value they bring to the team. Using location allows the company to focus on cost. This points to the fact they will be located in LOW cost of living locations, using fair calculator is the justification for lower salaries. Which links back to

> If we start giving crazy high US salaries by default in remote, I'm personally afraid we're going to replicate the San Francisco phenomenon over and over, to cities elsewhere in the world.

We should be giving employees higher salary based on the value they bring to the company. If the engineer from Argentina is more productive and bringing more value to the team but they are paid much lower than a team member in the US, this will cause internal conflict but the only person gaining is the company from the margin they will make from that employees contribution to their overall cost.

Congrats on quitting your job! Thats a goal of mine as well, and I really like NsLookup and how the page is structured. I have used domainbigdata.com a lot and like how they show Other TLDs.

I've been trying to find tools that would show other domains that are owned or associated with the domain that was searched. I work with a lot of sales leads and I think having information on other domains a company owns is super powerful for mapping companies and also understand company acquisitions, most companies transfer ownership of domains when they are purchased.

I have a question and ask:

1. There are quite a few tools online that do the same thing, long term what is your goal to differentiate? or where do you want to focus?

2. Other TLDs or Other Associated Domains, is this something that you would be able to find?

3. Can you determine from a DNS search if a domain is owned by a company or by a non-corporate entity (Blog, personal)?

Also from your blog post, I don't know if you were looking for any responses but:

Plan B - Stage 2: Sell an API to visitors.

>I would purchase and use this for a email verification process. I would rather go with a smaller company than large

Plan C - Stage 1: Make a one-off DNS dataset, give it away to founders, and find out how they'd use it and what they need.

>I would use this with Email Domain verification and Email format Verification. I worked with data teams that had to find emails formats & domains, if they had the domains it would save a ton of time and cost. As an end user how I think about this cost is I if I find a domain and run a MX or DNS check on it I will save the results and try now to run it on that domain again. That is why I like this plan, but the API would be super helpful as well.

I found a study recently that points to the Mississippi river as one of the main contributors to the red tide. The extra nutrients that are coming down the river and going into the gulf is the problem.

IF you're looking to get into cardio I would recommend:

- Treadmill on an Incline of 11 and then depending on your level of comfort, put the walking speed to 3 and do quick sprints for 30seconds or longer. Rest and repeat. This is something that keeps me entertained and also is really tough, I will try to do this for 15 minutes.

Since you are focused on lowering your resting heart rate, I would look into Heart Rate Training, where your focus is to keep your heart rate below a threshold and as you continue running you will be able to run faster below that threshold. This also helps with Preventing Injuries which has always happened when I tried to rush my progress: https://marathonhandbook.com/heart-rate-training-zones-for-r...

One of the things that has really helped me lately has been a proper warmup before working out. Sitting all day makes my hips and glutes super tight, so unlocking them has really helped with injury prevention as well.

- Stair climbers are my next go to for a hard but great workout. - Ellipticals are also easy on the knees but are a little boring for me.

I'm not sure if you were doing guided meditation at the time, but that has really helped me.

I do know what you mean about having trauma flashbacks, and you can get stuck in this loop. Meditation has thought me to not attach, recognize the thought, and start over. I use Waking Up with Sam Harris and I think that has really helped me from not attaching to the thoughts when they come up, and he will usually come back and refocus me.

I have a feeling they are going to be shifts to have people either level up wiht their technical skills and work on advanced problems and some people who cannot level up but can still be used in lower level data work where automation is really difficult.

That is too much data to parse for a simple website scrape.

I do think Common Crawl has a lot of potential for people to use instead of scraping, but I think its for larger projects. It gave me the idea to look at the links to ID if they are a business or non-business website

One of the products on that page is already discontinued: Google Music.

I was so bummed when that happened, I loved being able to upload my own music and have Google music update the metadata and allow me to bring it everywhere. Kind of a data hoarder

You are not overreacting, I think you should listen to the signals. BUT I communicate to your boss and your team on boundaries and anything else you feel.

I was in a similar situation where I was pulled into calls right away, but I was dealing with fires and clients. I communicated to my boss and it helped. I had the most growth at that company, but a lot of the major red flags that showed up during my first week were the same problems I was dealing with when I left.

I used them at my last Startup, I setup the company on them and it was pretty easy.

The only negative, we were not assigned a CX or Account manager. In order to get ahold of someone you have to reach out to a chat support which is outsourced and then you will be put into contact with someone. We had a small plan so that could have been the reason.

I would totally use them again, it also showed me how easy it was to get insurance if I wanted to start my own company.

I'm seeing something similar to this when it comes to Lead generation for sales teams. The market right now is full of tools where you search for companies/prospects that you want to target and you end up with a list that is either outdated or incorrect data.

One of the solutions is to hire people remotely that will build a list from searching and verifying that the information is correct. There are a ton of scaling issues with a person building the lists, and you will still run into errors, but it has been the best way to verify and have the most up-to-date data.

A problem I noticed is people are so use to getting tons of results when they use Google or another database site, so they expect the same with human-powered results. SO I think a lot of expectation setting and also just working with the TAM that understands the impact a curated list will provide over a outdated database. Both have their costs but for a higher impact the human curation will always win over automation. (I have an example of 3 different lead gen sites having a different city for 1 company, the AI on the websites mixed up the location, a Human would be able to catch that)

This is great. I've been juicing a lot lately and every site you go to is full of adds and useless content and you have to click `Jump To Recipe`.

1 thing that would be helpful is to add in the ingredient amounts.

This is great, and exactly what I needed.

Based on the comments I thought it was about pirated content. But it seems focused on the spamming issues. It also looks like they have been focusing on document sharing with the new look that shows Guests and Members in Workspace.

- I wonder how long it would take for your Workspace account to get shutdown if you have 10 users sending mass document invitation? - If a file is blocked from sharing, can i duplicate and re-share?

Does anyone use the service MEGA?

Ive used Loom before and really like it but they recently switched how many videos you can store on the free plan and it really cut down on how I can use it. I used it to send quick project instructions to team members that are overseas, they rely on it so they can replay it at a speed they are comfortable with understanding the instructions.

Its interesting Dropbox is getting into this. My first thought is users can use storage faster than they would with normal documents by making Gifs and other videos. In my Loom library I had 110 videos at one time that were between 2-5 mins long.

So what do you mean by "Verify identity"? If someone doesn't have an address but has identification to prove they are a certain age there are work arounds to hiring them and paying them as an Independent contractor in whatever country they are in.

I'm not sure how legal it is, and you would be subject to some risk. But I know there are a ton of companies working with "VAs" Virtual assistances that are based out of the Philipense and Pakistan where they help with Lead Generation and other online work. They are paid out through tools like Wise or paypal.

Was running into this when I was looking for an apple watch band. When filtering by Avg Customer review, all the bands had thousands of fake reviews.

Had to go directly to Apple to buy one.

Thanks for posting, really interesting to read that process. Just went on the site and ordered some clothes!

The Intelligent Investor: The Definitive Book on Value Investing. A Book of Practical Counsel by Benjamin Graham

Its not an online course, but it's a great book! It has a lot of information in it, can be dry, but I'm really enjoying going through it so far. Warren Buffet has quoted it in his shareholder letters and other talks.

Link: https://www.amazon.com/Intelligent-Investor-Definitive-Inves...

Also check out Warren Buffets shareholder letters, they are packed with great insights into investing.