I am so happy that I asked Codex to rewrite our website as Hugo templates which allowed us to statically host it and get rid of Wordpress. So much stress gone!
You can make the most intricate drag and drop admin interfaces to allow the editor to customize everything, and they will still call you to put up every post, so might as well go static
May I know how much token costs came out to be for this? Also, how did it handle Wordpress plugins? If you have comments on the website, how did you handle those and spam detection? Thanks.
When I finally got approval to rewrite the company blog from Wordpress into something that was mostly static, it was the best week. I used PHP to do mobile/desktop and language selection, because PHP is pretty useful, and it can be pretty fast and secure if you only do simple things.
Never had to worry again about sequencing updates where the update changed the database schema and I had a cluster of 6 web servers. Never had to worry anymore about long ass load times because the web servers were in 3 colos and wordpress wouldn't play nice with local read only mysql replicas. No more worries about why pingbacks and comments keep showing up in the database even those those features were turned off; at least they weren't showing up in a moderation queue, but still.
I had the same itch when I ported my personal blog from WordPress to Astro. I built a fully customisable self-hosted comment system called Discuss. It's got a dashboard and tokenized UI customisation. Pretty light weight too. It's available here - https://github.com/karthikeyankc/discuss . Do give it a spin or fork it. Would love to hear your feedback.
My website is hosted on 1and1 via PHP. I am guessing that this would not work for me as installation needs server access. Moving to VPS, along with transferring domain, would require more time than I would like to spend. Thanks.
This seems like a really good example of Base CVSS scores not telling us much on their own.
For the Wordpress RCE (nominally CVSS 9.2), it looks like many standard deployments of WordPress would be affected, barring extra mitigations. But in the case of these Hugo ones (9.3), it looks like very specific circumstances (anti-mitigations, if you will) are needed. E.g. running arbitrary builds of untrusted user content without a sandbox; running it in a GitHub workflow against PRs from untrusted contributors, etc.
I have full control over the inputs for hugo and the output is pure static HTML. It's better if there are no CVEs but I really don't sweat these. My Hugo template runs 100% pure CSS and no JS.
For what it's worth, we switched some of our actions to a self-hosted Woodpecker instance, and although there were a few kinks to iron out, it works better overall (for example, because of better caching on that single instance, our docker images build faster).
This comment made me curious is such a thing actually happens.
As it turns out "greenmailing" is a thing, but not from environmental groups. Here's what claude found for me:
<ai>
The concern isn't baseless—there are documented cases of parties using environmental law as leverage, particularly California's CEQA. But empirical studies show only ~13% of such lawsuits actually come from environmental groups; the majority come from labor unions, business competitors, and NIMBYs hijacking environmental review for unrelated purposes. In this specific case, WaterWatch has a 40-year track record on Oregon water issues and the concerns about fish habitat are supported by the Confederated Tribes of Warm Springs—so the 'thinly veiled shakedown' framing doesn't really fit
</ai>
I hope doing that research didn't spend too much water!
We're making crop insurance accessible to farmers worldwide. Our platform helps major insurers monitor 10M+ hectares across 10+ countries using satellite imagery and ML — so farmers can manage the volatility of their industry.
You'll build web & mobile apps that agronomists use daily in the field (offline-capable, rough conditions), work on data-heavy features cramming gigabytes into mobile apps, and help shape product decisions with real autonomy.
It’s interesting that the author thinks that the value of the shares is higher than the preferred price, even though employees typically hold common shares, meaning they get wiped out in most scenarios except best case. The expected (best case) growth is not an argument in favor of a 4x multiple on price. The chance of achieving that is baked into the price
The value of the equity package is 4x higher than the FAANG equivalent equity package (at preferred/market pricing) - that's not the same as saying the shares themselves are worth that.
To sum up the arguments:
* Employment packages allow things a shareholder cannot do (functionally recall their investment), so the high volatility leads to higher package returns.
* FAANG equity grants (RSUs) are taxed at much higher rates
* Expected return is in fact higher on startup equity than FAANG equity (and you generally have no way to invest in the good startups directly aside from working for them).
> Expected return is in fact higher on startup equity than FAANG equity
Expected return is extremely misleading because it depends strongly on extraordinarily few outlier winners. Like when Jeff Bezos walks into a bar and now the average wealth of every person in the bar is over a billion dollars.
Firstly, if your prior is that every previous startup failed, what does that say about your future chances of success?
Secondly, all the returns for YC are concentrated in a few companies. If you were in a winner then great, otherwise you most likely got $0 for your shares.
4% of YC companies become unicorns. How many startups do you need to work for before you become part of the 4%? That number is not a feasible number of jobs for one lifetime.
The modal return matters far more than the average return because you don't get to choose to be in an outlier.
The first article I checked said that 17 companies had IPOed for YC. Common shares often only get returns from an IPO. How many companies have gone through YC? What's the average number of companies you need to be part of before you get to be in one of the 17?
I'm using YC because the numbers are better for YC than most other VC or startups.
> Firstly, if your prior is that every previous startup failed, what does that say about your future chances of success?
The prior is the market. It isn't sane to use your own prior experience. (Works both ways -- if your last startup did great, shouldn't assume next will).
> 4% of YC companies become unicorns. How many startups do you need to work for before you become part of the 4%? That number is not a feasible number of jobs for one lifetime.
The bar (and what the model is calculating) is Series A from top VC, not YC Seed funding. That significantly increases odds. Specifically, ~45% YC companies get Series A, so it's more like 10% chance of a YC Series A funded company becoming a unicorn (https://www.lennysnewsletter.com/p/pulling-back-the-curtain-...).
Model is change jobs every 18 months if not booming. A 1 in 10 chance is quite reasonable over a career.
I agree there is an issue with the event being too rare, but you can't just look only at modal returns. 2/3 chance of $0 (the modal return) and 1/3 chance of $10 million profit is still pretty good odds to work with.
What a wierd statement. It matters not how well others do. In a winner takes most market, then only the median outcome matters ($0 usually).
I admit my statement about priors was unclear: I meant that your prior is a previous attempt with a startup. If you have influence and the startup fails then that is a signal about your ability to be successful working with your next startup.
> The bar (and what the model is calculating) is Series A
Common shares still have a median worth of $0 on series A.
> Model is change jobs every 18 months if not booming. A 1 in 10 chance is quite reasonable over a career.
I really doubt that. Someone has some historical stats that would show the truth either way. YC in particular haven't published any stats on median returns. I've only seen them mention average returns (heavily skewed by outlier winners). They have the data but they don't publish the modal return because they are VCs.
Common shares only return value for the rarer big successes. I also strongly suspect that there's a lot of historical bias. VCs play repeated games and are getting better at reducing the value of common shares to $0. It is an adversarial relationship: every dollar that common shares gain is a dollar that preferencial could have had if they played their game better.
doesn't all of this assume that the startup reaches a liquidity event which favors the employee though? or at least that the startup is hot enough that there's a secondary market for those shares?
unless I'm misunderstanding the argument, I dont see how those hypothetical returns could be considered "expected returns". startups which reach a place where employees can profitably cash out seem far too rare to reasonably expect a return at all, never mind a large one.
Since a person works for one company at a time (usually), and it can take 3-5 years or more for a startup to reach a place where the equity is worth something, this argument reads to me like "the returns on a Powerball win are so much higher than your projected lifetime earnings that playing the lottery is a smart financial move".
It's a probabilistic model. It assumes (correctly) that the low probability of a home run times the home run's valuation is quite large ("expected returns" in the probabilistic sense).
> this argument reads to me like "the returns on a Powerball win are so much higher than your projected lifetime earnings that playing the lottery is a smart financial move".
That's stronger claim than it is making, but yes in a sense it is saying the lottery can be a good move because the expectation is large - that's what VCs do after all.
Note that all the model aims to do is value the equity package. If a public company is offering more than what this model values the startup equity package as (and this often is the case!), it isn't worth it financially to work at that startup.
reply