Kaan

Cloud & Platform Architect · Fractional CISO · Docker Captain
Cloud, security, products, and whatever I’m thinking about.

[Kaan @kaanyagci]

@liran_tal For Codex, you can use https://t.co/wG1Ec5e0dK
Alternatively, you can ask Cursor/Codex about it.

[Kaan @kaanyagci]

@anumness Nothing wrong with that, if something is easy to achieve, its value will be lower.

[Kaan @kaanyagci]

@DanielSmidstrup That writing code does not mean anything

[Kaan @kaanyagci]

I'm recreating https://t.co/VeFUkffZ2y from scratch. What should I add?

[Kaan @kaanyagci]

@the_codewala Yes, you're wrong.

[Kaan @kaanyagci]

@vivek_naskar If it includes 8 microservices... Doesn't it technically mean 8 deployments? By definition, a microservice should be independently deployable

[Kaan @kaanyagci]

I created a small app for a very universal problem:
Where’s the nearest public toilet?

It’s now available on the App Store.
https://t.co/C19GggLaOa

[Kaan @kaanyagci]

Has anyone tested it?

[Kaan @kaanyagci]

@madsmadsdk Depends on what, but if you can not really one-shot anything, it's a skill issue.

[Kaan @kaanyagci]

@hnshah So true for many companies.
This is what we are solving with https://t.co/aeHGUFuSrg

[Kaan @kaanyagci]

@kelvinbuildss Depends on the name behind it

[Kaan @kaanyagci]

@hnshah No need to be a founder for that one; people keep doing the same thing for years without learning anything.

[Kaan @kaanyagci]

EU founders: do you know why 11 September could matter for your product?

[Kaan @kaanyagci]

EU builders: Do you know why 11 September could matter for the software you ship?

[Kaan @kaanyagci]

@ibuildthecloud We did for https://t.co/VeFUkffZ2y

[Kaan @kaanyagci]

@nickkirt Interestingly, I keep seeing it and really don't understand.

[Kaan @kaanyagci]

@coryalthoff AI will not remove software engineers; it will remove the ones who should never have been engineers in the first place.

[Kaan @kaanyagci]

That spelling mistake in a phishing text may not be a mistake.
It may be the scam’s best feature.

A polished phishing message gets replies from everyone:
- potential victims
- skeptical people
- people who will waste the scammer’s time

But those replies are not equally valuable. The costly part starts after someone responds: follow-up, persuasion, and trying to get money.

So some scams use obvious red flags as a filter.

If you notice the broken grammar, you probably leave.
If you do not, you may be more likely to keep engaging.

The scam is not optimized for the most replies.
It is optimized for the fewest false positives.

Microsoft Research analyzed this strategy in advance-fee scams: an implausible message can be more profitable because likely victims self-select.

Important nuance: not every badly written phishing email is deliberate. Some are simply sloppy or poorly translated.

But never assume obvious errors mean the scammer is incompetent.

Never reply, call the number, or use the link. Verify through an official channel you find on your own.

[Kaan @kaanyagci]

Endpoint security.

Desktop apps turn every employee computer into part of the application. SaaS centralizes code, data, updates, and policy enforcement.

The browser becomes the access layer, not a local copy of the product.

[Kaan @kaanyagci]

Why did SaaS overtake desktop apps in enterprise?
It wasn’t only subscriptions.
It wasn’t only easier updates.
There is a security reason most people miss.
What is it?