Semiquincentennial

125 posts

Semiquincentennial banner
Semiquincentennial

Semiquincentennial

@TuneLower

Katılım Mart 2017
357 Takip Edilen139 Takipçiler
Ryan
Ryan@ohryansbelt·
Delve, a YC-backed compliance startup that raised $32 million, has been accused of systematically faking SOC 2, ISO 27001, HIPAA, and GDPR compliance reports for hundreds of clients. According to a detailed Substack investigation by DeepDelver, a leaked Google spreadsheet containing links to hundreds of confidential draft audit reports revealed that Delve generates auditor conclusions before any auditor reviews evidence, uses the same template across 99.8% of reports, and relies on Indian certification mills operating through empty US shells instead of the "US-based CPA firms" they advertise. Here's the breakdown: > 493 out of 494 leaked SOC 2 reports allegedly contain identical boilerplate text, including the same grammatical errors and nonsensical sentences, with only a company name, logo, org chart, and signature swapped in > Auditor conclusions and test procedures are reportedly pre-written in draft reports before clients even provide their company description, which would violate AICPA independence rules requiring auditors to independently design tests and form conclusions > All 259 Type II reports claim zero security incidents, zero personnel changes, zero customer terminations, and zero cyber incidents during the observation period, with identical "unable to test" conclusions across every client > Delve's "US-based auditors" are actually Accorp and Gradient, described as Indian certification mills operating through US shell entities. 99%+ of clients reportedly went through one of these two firms over the past 6 months > The platform allegedly publishes fully populated trust pages claiming vulnerability scanning, pentesting, and data recovery simulations before any compliance work has been done > Delve pre-fabricates board meeting minutes, risk assessments, security incident simulations, and employee evidence that clients can adopt with a single click, according to the author > Most "integrations" are just containers for manual screenshots with no actual API connections. The author describes the platform as a "SOC 2 template pack with a thin SaaS wrapper" > When the leak was exposed, CEO Karun Kaushik emailed clients calling the allegations "falsified claims" from an "AI-generated email" and stated no sensitive data was accessed, while the reports themselves contained private signatures and confidential architecture diagrams > Companies relying on these reports could face criminal liability under HIPAA and fines up to 4% of global revenue under GDPR for compliance violations they believed were resolved > When clients threaten to leave, Delve reportedly pairs them with an external vCISO for manual off-platform work, which the author argues proves their own platform can't deliver real compliance > Delve's sales price dropped from $15,000 to $6,000 with ISO 27001 and a penetration test thrown in when a client mentioned considering a competitor
Ryan tweet media
erin griffith@eringriffith

A detailed and brutal look at the tactics of buzzy AI compliance startup Delve "Delve built a machine designed to make clients complicit without their knowledge, to manufacture plausible deniability while producing exactly the opposite." substack.com/home/post/p-19…

English
355
633
7.3K
4.6M
sklr
sklr@fortun8fool·
i’d go to a cracker barrel bar seems like a missed opportunity
English
1
0
3
65
.
.@Mecksly·
@the_somn even threw the page up for a full read
. tweet media. tweet media
English
2
0
8
321
somn
somn@the_somn·
Gonna copy and paste this email to my wife and not say anything.
somn tweet media
English
3
0
31
350
Semiquincentennial
Semiquincentennial@TuneLower·
@GomezA1_ within a year or two jim cramer is going to be replaced by whatever the models say about today's s&p chart as the default thing to fade
English
1
0
1
17
Andres
Andres@GomezA1_·
@TuneLower True, but didn’t ask for its opinion only research questions and well it is technically all on the internet anyways
English
1
0
1
15
Andres
Andres@GomezA1_·
Doom post. In 2021, BTC had that vicious May-July correction (~55% from ATH) that most people dismissed as temporary, then had the second leg up to new ATHs in Nov — but the structure leading into the correction looked very similar to what we have now: distribution at highs, lower highs on bounces, volume profile showing heavy overhead supply. From Claude Currently -43% from ATH. Yeah that’s why my gut woke up the other day when I wanted to buy some coins. (thanks to Dyme for posting that chart, the big boys are here for a reason) THEY JUST APPROVED TOKENIZED STOCK TRADING, connect the dotos. WERE FUCKED. Stablecoin market cap at 300B, mfs thinking it hits 1T by late this year early 2027. $2.2 BILLION USDT deposit onto binance TODAY. I haven’t even looked at the charts just been watching prices daily. The recent move upward doesn’t feel natural. Claude called it DISTRIBUTION VOLATILITY (Check 2021 charts for this time) Yeah we’re fucked. They’re going to pull the fucking plug and make people hate crypto again
English
2
0
2
85
Mr. Notorious (Mimanistani Citizen)
@BullyEsq Just ask any scientician, this completely logical chart proves it! Free speechium levels are at the highest Itssooverian levels ever recorded in modern her/herstory!!1!!
English
1
1
2
76
Semiquincentennial
Semiquincentennial@TuneLower·
@BigCheds its almost as though chart patterns are an oversimplification of what is really happening that discards relevant objective data
English
0
0
2
129
Cheds Trading
Cheds Trading@BigCheds·
$BTC not the kind of follow through I expected to see on last week's Marubozu
Cheds Trading tweet media
English
32
10
212
16.9K
.
.@Mecksly·
does anyone have that star wars shark edit to somewhere i belong (can be the bob lax one)
English
2
0
1
125
Freddie New
Freddie New@freddienew·
This is what @bankofengland think they can ban, when they say that 'unhosted wallets will not be permissible in the UK'. Two kids flipping a coin to generate a private key. Good luck with banning maths and entropy, team.
Freddie New tweet media
Freddie New@freddienew

@SenWarren these are my daughters, flipping a coin to generate a 256 digit binary number. We converted this to hexadecimals, generated a bitcoin private key, and created a wallet. No KYC was, or will ever be, required.

English
33
42
233
28.2K
Gabriel
Gabriel@gbrl_dick·
get in, we’re gamifying the news cycle
Gabriel tweet media
English
1
2
46
2.4K
wapital
wapital@wapital3·
real estate agents try to gatekeep their easy ass job so much 😂😂 they talk about "The MLS" like its the fucking map to agartha, that shit is basically the same as zillow.
English
109
136
4.8K
299.1K
Semiquincentennial
Semiquincentennial@TuneLower·
@hellojintao in november 2024 an entire groupchat of traders was asking me why i would ever long btc instead of mstr
English
1
0
1
41
jin.tao.gpu
jin.tao.gpu@hellojintao·
why would you buy bitcoin when you could buy bigcoin, or bytecoin, or litecoin?
English
5
0
16
1.1K