Qubicle | Based Dept. Treasury 🏦

10.2K posts

Qubicle | Based Dept. Treasury 🏦 banner
Qubicle | Based Dept. Treasury 🏦

Qubicle | Based Dept. Treasury 🏦

@cubeqube

29👨‍💻principal cloud/software/devsecops architect in cybersec ind.🛡️🇺🇸 🏦 100% LONG $OPEN 🏡

🇺🇸 FL Katılım Ocak 2024
1.2K Takip Edilen1.2K Takipçiler
Kenny
Kenny@0xKennyAlt·
@chamath The other 39% prefer not to pay $4,000+ a year in insurance premiums on them
English
8
0
19
1.9K
Chamath Palihapitiya
It’s hard to understand what the other 39% are thinking. Once you drive a Tesla, it’s like driving an all-seeing sensor with a super computer behind the scenes doing all the decision making, driving and navigation. Also, you never have to go to a gas station.
Elon Musk@elonmusk

Tesla

English
764
774
6.7K
1.3M
Gavin McInnes
Gavin McInnes@Gavin_McInnes·
He’s doing this weird Matthew McConaughey thing that he thinks makes him seem cool and young.
English
997
243
6.7K
926.6K
Qubicle | Based Dept. Treasury 🏦 retweetledi
Paul Klein IV
Paul Klein IV@pk_iv·
"never feel like you've made it" - @jack
English
8
61
720
39.5K
Worst Finance Takes
Worst Finance Takes@Lifeinvestmoney·
Need a job where I can make six figures but I have no skills and I’m not very smart What field is this?
English
8.8K
153
5.3K
1.2M
Qubicle | Based Dept. Treasury 🏦 retweetledi
Steven Liss
Steven Liss@This_Liss·
Had a Jane Street phone interview in 2016. "Price a 6-month forward on carrots." There's no carrot futures market, so I build one from scratch: seasonal harvest cycles, USDA demand elasticity, cold storage decay rates. One trader stops me. "Your storage cost function– you're modeling the carrot as dead inventory. Like grain in a silo." He asks me the metabolic respiration rate of a post-harvest carrot at 2°C. I estimate. "Your forward is overpriced by exactly that shrinkage. The underlying is consuming its own sugars. It's alive." Good correction. I adjust the model. I think I've recovered. Rejection email comes the next morning. Subject: "Ethical Review." My framework, they write, "relied on the severance of the root organism from its growth medium." The question about respiration was a test. The carrot was still alive and I'd built an entire derivatives structure on top of its death without questioning whether harvest was an acceptable act. I pull up the recruiter's original email. It doesn't say Jane Street. It says Jain Street– a non-violent quantitative commodities fund. The carrot was never supposed to be priced. It was supposed to be refused. I later learn the only candidate who passed that round was a former monk from Gujarat who sat in silence for eleven minutes and said, "I cannot put a price on life." He's now a partner.
Deedy@deedydas

Jane Street made ~$40B in 2025 with 3,500 employees, a ~2x from the year before. At ~65-70% profit margin, that's $8M profit / employee, the highest for a 1000+ ppl company. High-frequency trading continues to be the most efficient money making engine. I want to share an old story about my Jane Street interview in 2014. Jane Street was known for hiring a lot of math, physics and CS olympiad winners from top universities and putting them through many rounds - including, for trading roles, a gauntlet of mental math. It was my 6th interview and my final round and I recall being asked "What is the next day after today in DD/MM/YYYY where all the digits are unique?" They'd toy with you and say "You can use a pencil and paper, if you want" but you knew that was an instant no. Painstakingly and as quickly as I could, I came to an answer. "How confident are you that this is correct on a 0-1 probability scale?" the interviewer said. "0.95", I blurted out, not fully knowing how to answer that. "Are you sure?" After thinking harder for a few more seconds, I realized I could've flipped the digits around to get a closer date. I gave the interviewer my answer. It was correct. "0.95 huh?" he chuckled. That's when I knew I failed. Note: fwiw, other companies that come close in efficiency are - Tether ($90M+ profit/emp) - Hyperliquid ($80M+ profit/emp) and on revenue: - Valve ($50M/emp) - OnlyFans ($37M/emp) - Craigslist ($14M/emp) - Anthropic ($12M/emp, run rate) - OpenAI ($8M/emp, run rate) For comparison, Nvidia is very efficient at scale and is $4.4M/emp.

English
141
584
9.1K
924.7K
Qubicle | Based Dept. Treasury 🏦 retweetledi
Adam Shuaib
Adam Shuaib@adamshuaib·
The personality type that showed up most frequently in our research on true outlier founders wasn’t “leader” or “visionary”. It was “difficult”. As children, we found most never did the group work activity in school. They were often the students who didn’t raise their hand in class but always had something smarter to say. When employed, they asked “why” too many times and frequently pissed off their boss. In the wrong environment, these people were marginalized or ignored entirely instead of being celebrated. When they started their company, suddenly questioning everything became a huge advantage, and refusal to settle pushed their product past "good enough". In a big company they were annoying, but in a zero-to-one environment they cut out months of wasted effort and got to something that actually worked. We spend too much time looking for founders with charisma and "leadership presence", and not enough time looking for the ones who were kicked out of every system they were part of. The next wave of iconic founders probably wouldn’t be the ones you’d pick in a boardroom; they are the ones who’d refuse to show up to the meeting at all.
English
44
70
713
199K
Qubicle | Based Dept. Treasury 🏦
Yeah I think it depends on the program and everything but I see what you’re saying and your point of view on it but even what you just quote tweeted is insane to me. Must be a serious problem with triaging on H1 then if it keeps happening. To me though these types of vulns should be addressed ASAP and not ignored or take months to fix that is the main thing that is crazy to me and sometimes naming and shaming is how to get it fixed you don’t have to disclose every aspect of the vuln or even what data was accessed but he even tried emails and contacting outside H1 too and got no response from what I saw, so when it gets to those points imo I see it as the company at fault. Keeping it secret after you found it doesn’t mean you’re the only person that will ever find it or that it doesn’t exist it will always be there until addressed so it’s like 🤷
English
0
0
0
33
Shubham Gupta 🇮🇳
Shubham Gupta 🇮🇳@hackerspider1·
@cubeqube @weezerOSINT I am having same kind of issue on @Hacker0x01 that doesn’t mean I am gonna start sharing the program name or vulnerability. I have already waited more than 2.5 months and still waiting for reply @weezerOSINT could do the same by not disclosing information.
Shubham Gupta 🇮🇳@hackerspider1

Hey @Hacker0x01 super disappointed. Reported a critical bug on a private program: full access to 73 storage containers, (RCE) entire company's candidate PII downloadable. Triaged valid. Fixed by the team (confirmed). Then 2 months later closed as N/A "third-party SDK issue." If the key is served from your domain, leaking your users' PII, and your team fixes it how is that N/A? Filed mediation but 6–7 months is a long wait. Can someone from the team take a look? Bug is genuinely worth your time.

English
1
0
0
57
Shubham Gupta 🇮🇳
Shubham Gupta 🇮🇳@hackerspider1·
This ain’t it. I’ve reported vulnerabilities that never got paid, some got quietly closed, some ignored completely. Still never exposed user data or went public like this. There’s a line you don’t cross, especially when real people’s private lives are involved. Patience > clout. Reputation in this space compounds like interest. One reckless move can burn bridges you haven’t even reached yet. If you’re in this game for the long run, protect users first, everything else comes later.
impulsive@weezerOSINT

if you've ever used Reframe to get sober, your private journals, your craving logs, what triggered you, how bad it got, your name, your email, all of it is sitting in a database that anyone can read without logging in i unzipped the app and found a database key in a config file. thats it. thats all it took 357,939 users exposed. disclosed april 7, no response

English
3
1
26
3.9K
Qubicle | Based Dept. Treasury 🏦
This is the internet there is no rules of engagement or responsible disclosure for threat actors. If a company is ignoring a vulnerability after responsible disclosure which weezer did then that company is the one with the issue. It is their fault and it also isn’t ok for vulnerabilities that ACTUALLY impact users to exist on the environment for months or years after being reported multiple times. Even you saying you’ve waited months or years for shit to be fixed is insane You know how they could have protected their users? Responding to weezer that they were at least aware and were going to address it. They did none of that. They have over 300k users they are not a small company and they have no excuse. These types of things should have been addressed and taken seriously as soon as they had a single user - not 300k+ users and an X post to light a fire under their ass Reframe failed at protecting their users in a timely manner. It is not weezers responsibility to protect their users - it was theirs, and I’m sure they are grateful it was found and disclosed by a white hat instead of him just packaging that shit up and selling their user data on the dark web or just leaking it entirely. I think Weezer pulled the right move and if I were a user of that app I would be more pissed learning that they had that shit existing in their codebase for so long and didn’t address it after it was reported to them. Leaking the data and personal journal of 300k+ people is not a small bug, it is a massive data privacy issue that needs a 24 hour SLA
English
1
0
0
39
Shubham Gupta 🇮🇳
Shubham Gupta 🇮🇳@hackerspider1·
Getting something fixed fast doesn’t justify how it was handled. Responsible disclosure isn’t about who moves quicker, it’s about minimizing harm. When sensitive user data is involved, even short exposure or public hints can have real consequences. Many of us have waited weeks,months or years, followed proper channels, and still didn’t go public with details that could put users at risk. That’s part of the responsibility that comes with this work. Fixing the bug is good. Protecting users throughout the process is better.
English
1
0
7
292
Pubity
Pubity@pubity·
ChatGPT randomly became obsessed with talking about goblins, to the point where it started ruining the chatbot for users. An emergency anti-goblin patch was recently released that told ChatGPT to stop talking about goblins and other creatures unprompted.
Pubity tweet mediaPubity tweet media
English
356
1K
16.4K
3.3M
Qubicle | Based Dept. Treasury 🏦 retweetledi
Whole Mars Catalog
Whole Mars Catalog@wholemars·
The Gay Jailbreak Technique
Whole Mars Catalog tweet media
English
76
194
3K
187.2K
Qubicle | Based Dept. Treasury 🏦 retweetledi
Yogi
Yogi@Houseofyogi·
Spirit Airlines died tonight at the hands of the socialist crusader, Elizabeth Warren She must be so proud to add another casket to her achievements. Tonight at 3am, Spirit turns off the lights. 14,000 jobs gone. 30+ smaller airports lose service. JetBlue offered $3.8 BILLION in cash to buy Spirit in 2022. Shareholders, flight attendants union, literally everyone voted yes. The combined company would have held 9% of the US market against a Big 4 that already owned 80%. For anyone who understands numbers: 9% isn’t a monopoly against 80%. Warren said no. She wrote letters. She pressured Buttigieg. Biden’s DOJ sued. A federal judge killed the deal in January 2024. Her argument: the merger would cost consumers $1 billion a year. Now look at her collateral damage she dusts under the rug. 510 pilots gone in the months after. 1,800 flight attendants furloughed in December. 14,000 jobs in 2023. 7,500 last week. Zero tonight. And that’s just the people in Spirit uniforms. Catering goes. Fuel guys go. Baggage crews, gate agents, airport coffee shops, hotels and rental cars in 70 cities Spirit flew to. Every airline job carries 3 more on its back. 40,000 people out of work because of one woman’s moronic crusade against the market. And the math ain’t mathing. Spirit abandoned 90 routes during the death spiral. Fares on those routes are up 14% on average. Oakland to Newark: $135 to $288. Fort Myers to San Juan: $92 to $219. Kansas City to Newark up 66%. That’s reality. Not some BS number from a “study.” So @SenWarren tell me how this saves the consumer money? Cheap carriers in a market drop fares 21% across the board. Southwest did this in the 90s and saved Americans $68 BILLION over 20 years. Warren killed it. That’s what moronic politicians led by socialism do. Then with her own blind arrogance, she tweeted Spirit’s collapse is “a Biden win for flyers.” A win. 14,000 people are reading termination letters tonight. And she’s taking credit. This is socialism in 2026. A senator who’s never made payroll thinks she knows how to run a market better than the people who own and work in the company. She saved you a billion on imaginary paper. She cost you ten times that in real life. She didn’t protect consumers from anything. 14,000+ will go from working to welfare. She will make sure to blame billionaires, hardworking tax payers, AI, capitalism and whatever monster they will make up tomorrow hiding under your bed. Higher taxes. Fewer jobs. More expensive everything. She called it a win. I hope you enjoy winning.
English
5.9K
33.4K
123.8K
6.4M
Qubicle | Based Dept. Treasury 🏦
If white hat I believe it is completely ethical to call the company out publicly if they aren't addressing a serious cybersec issue after it's already been reported privately > 2 weeks ago. Unacceptable response. If a white hat found it then they probably aren't the first and they are the ethical ones. needs to be addressed promptly. good for calling out
English
1
0
10
1.5K
impulsive
impulsive@weezerOSINT·
if you've ever used Reframe to get sober, your private journals, your craving logs, what triggered you, how bad it got, your name, your email, all of it is sitting in a database that anyone can read without logging in i unzipped the app and found a database key in a config file. thats it. thats all it took 357,939 users exposed. disclosed april 7, no response
impulsive tweet mediaimpulsive tweet media
English
34
44
483
184.5K
Qubicle | Based Dept. Treasury 🏦
I know engineers that work at SpaceX, Kraken, AWS, Twitter (pre elon), etc. and I have worked with ones that worked at Google and other various large corporations and FAANGs. I would only hire a couple. Working at a FAANG does not mean you are good at your job this is why you are all being fired and are having trouble finding jobs. You are bloat and the 90% accomplishing nothing.
English
0
1
2
58
Qubicle | Based Dept. Treasury 🏦
I have never applied to one because you become a cog in the wheel bullshit artist who accomplishes nothing of importance and only brags about FAANG experience but never explains why they weren't good enough to stay there and get paid out mad equity. It's because you fucking sucked, for the record.
English
0
0
0
40
Corona Martyr’s Brigade
Corona Martyr’s Brigade@BrigadeCorona·
@cubeqube @matters_btc @nejatian I can tell! “big 4” refers to the big accounting firms. MBB are the important strategy consulting firms. can you see why those things aren’t the same? they are in different industries!
English
1
0
0
54
Corona Martyr’s Brigade
Corona Martyr’s Brigade@BrigadeCorona·
@cubeqube @matters_btc @nejatian oh I know, I was FAANG eng. I gather you aren’t. 112k isn’t cheap! 45k is cheap! does it change your mind about how you think their business works when you find out that they hire new grads at that rate?
English
1
0
0
42