St. Rev. Dr. Rev ⏭️☯️🏴😻

Anne Applebaum nails it:

Delve, a YC-backed compliance startup that raised $32 million, has been accused of systematically faking SOC 2, ISO 27001, HIPAA, and GDPR compliance reports for hundreds of clients. According to a detailed Substack investigation by DeepDelver, a leaked Google spreadsheet containing links to hundreds of confidential draft audit reports revealed that Delve generates auditor conclusions before any auditor reviews evidence, uses the same template across 99.8% of reports, and relies on Indian certification mills operating through empty US shells instead of the "US-based CPA firms" they advertise. Here's the breakdown: > 493 out of 494 leaked SOC 2 reports allegedly contain identical boilerplate text, including the same grammatical errors and nonsensical sentences, with only a company name, logo, org chart, and signature swapped in > Auditor conclusions and test procedures are reportedly pre-written in draft reports before clients even provide their company description, which would violate AICPA independence rules requiring auditors to independently design tests and form conclusions > All 259 Type II reports claim zero security incidents, zero personnel changes, zero customer terminations, and zero cyber incidents during the observation period, with identical "unable to test" conclusions across every client > Delve's "US-based auditors" are actually Accorp and Gradient, described as Indian certification mills operating through US shell entities. 99%+ of clients reportedly went through one of these two firms over the past 6 months > The platform allegedly publishes fully populated trust pages claiming vulnerability scanning, pentesting, and data recovery simulations before any compliance work has been done > Delve pre-fabricates board meeting minutes, risk assessments, security incident simulations, and employee evidence that clients can adopt with a single click, according to the author > Most "integrations" are just containers for manual screenshots with no actual API connections. The author describes the platform as a "SOC 2 template pack with a thin SaaS wrapper" > When the leak was exposed, CEO Karun Kaushik emailed clients calling the allegations "falsified claims" from an "AI-generated email" and stated no sensitive data was accessed, while the reports themselves contained private signatures and confidential architecture diagrams > Companies relying on these reports could face criminal liability under HIPAA and fines up to 4% of global revenue under GDPR for compliance violations they believed were resolved > When clients threaten to leave, Delve reportedly pairs them with an external vCISO for manual off-platform work, which the author argues proves their own platform can't deliver real compliance > Delve's sales price dropped from $15,000 to $6,000 with ISO 27001 and a penetration test thrown in when a client mentioned considering a competitor

Analysis on the Illinois congressional district MeToo accusations: *Everyone on Bluesky sympathizes with Megan Wachspress, the 42-year-old accuser, who is a lecturer at Stanford Law School. They call her brave for coming forward and talking about how she was harmed. *Everyone on X is exasperated by what they see as MeToo over-reach and sympathizes with Daniel Biss, the 48-year-old mayor of Evanston, Illinois, and a leading candidate in today's congressional primary in the Chicago area. Wachspress wrote on Bluesky and in a Substack that when she was a 20-year-old junior at U. of Chicago, Biss was her professor in a math course. He was then an assistant professor a the university and was 26. He was very friendly to her during office hours and then, after the term ended, sough a romantic course of action with Wachspress. The two dated for a little while and did some making out, she asserts. But then each of them decided this wasn't appropriate and they cut it off. Biss' campaign has since confirmed this account. Neither has reported that there was any sex between them. Wachspress says she found this, among other elements of what she described as demeaning sexism, so demoralizing that despite her mathematical prowess, she pursued a different field in her graduate studies.

🚨 Inside DSA’s Plan to Rewire America’s Cuba Narrative During today’s Let Cuba Live emergency call, DSA organizer and co-chair of DSA’s Cuba Solidarity Working Group Danny Valdes outlined a multi-pronged strategy to reshape U.S. public opinion on Cuba, organize Cuban-Americans to challenge the existing narrative, and push Congress toward repealing U.S. Cuba policy. Step one: Create a JVP-style identity lane for Cuba “We need to organize in the same way and be inspired by people like Jewish Voice for Peace… and we need to do the same for Cuban-Americans.” “You don’t have to love the Cuban revolution. You don’t have to be a communist or a socialist. All you have to do is be Cuban-American.” Step two: Push federal legislation to repeal the embargo “On the DSA side of things, we really want to build a campaign to push for a bill that was released by Jim McGovern… that basically statutorily kind of repeals the blockade.” Step three: Use the bill as a mass-organizing tool “What we want to do is use that as a springboard to organize more people into the Cuba Solidarity movement.” Step four: Media amplification and movement alignment “We’re putting together a big launch call for this campaign that will feature Noah Kulwin and Brendan James from the Blowback podcast, which has a whole season on Cuba.” This entire strategy is being articulated by a DSA organizer who has already traveled to Cuba with DSA and met directly with Cuban government officials.

Space and time is conceptualised by ancient chinese with the term 宇宙 (spatial and temporal extension). Shizi defines it as: - 四方上下曰宇，往古来今曰宙 - The four directions with up-and-down is called 宇 (yu) - The going-past and coming-present is called 宙 (zhou) 1/