RSSAmplifier

Blog

Orchid Files

Every month I publish essays, and every day I publish notes. I write about what I learned from 10 years of working in startups.

orchidfiles.comRSS feed ↗15 posts

Latest posts

What does GitHub’s security team even do?

Right now, there are thousands of repositories on GitHub distributing malware. Any of you can find these repositories, and you don’t need any special knowledge to do so. All you have to do is use the standard search function on the GitHub website. These repositories have been around

Problems with hourly and project-based pay

Imagine you’re working on an hourly basis. How would you answer these questions? An idea popped into your head that could improve the company’s financial situation. It came out of nowhere — you weren’t even thinking about it; you were just going about your

Gurus

I follow a crypto blogger, but I see that almost all of his posts are about how successful he is. He flies business class, buys his wife gifts, and dines at expensive restaurants. But if I wanted to look at your photos, I’d follow you on Instagram, wouldn&

How old are you?

At first, you get used to a single number, confidently give your answer, and then realize you’ve already gotten it wrong by a year. The years fly by so quickly that it’s sometimes hard to remember. You have to calculate the difference between the current year

I discovered a large-scale malware distribution campaign on GitHub

This is the story of how I found 10,000 repositories on GitHub that distribute Trojan malware. They are all from different contributors, have different names, and are not forks of other repositories. But they share a common pattern, which is what allowed me to write a script to find

More bad advice from AI

If you ask AI whether you should post the full text of an article on platforms like Medium or Reddit, it will almost always say you should post a preview of 1-2 paragraphs, a hook, and include a link to your website with the full version of the article at

Price of dreams

Many years ago, I came across this phrase: dream as much as you can, because it won’t cost you a thing. But is that really true? When I fall in love, I can spend hours or days fantasizing about our future together. When I get a job offer,

Reason behind a startup’s success

If a startup becomes profitable, you can try to trace the chain of events that led to it. You might actually find reasons and believe them. It’s as if you’ve discovered some kind of truth and now you understand exactly what needs to be done and

Comparison with others

Why is there a belief that we should stop comparing ourselves to others? What’s more, if you haven’t reached zen yet, you’re unlikely to be able to stop doing it at all. When you compare yourself to people you think are better than you,

What city do you live in?

Recruiters often ask this question when they want to check whether a candidate’s time zone matches the team’s working hours. Suppose it’s -5 in their city, while your team is at +3. That’s an eight-hour difference. But why does it matter what

I manage teams without a single call

What I dislike most is short calls. When someone tells me, “I have a slot tomorrow at 11:30, let’s do a 10-minute call”. For the other person, it’s just another call, one of dozens they have that day. But for me, it becomes

I’m tired of talking to AI

I’m tired of talking to AI. I want to talk to real people. But even when I talk to people, they forward my questions to AI and send me AI’s answer.

Saved by chance

If you’ve lived long enough, you’ve had that moment when you almost lost everything, but somehow didn’t. You accidentally deleted your customer database, but a backup you’d only just set up saved your business. You sold an asset the day before it

Multilingualism in startups

When launching a startup, don’t make it multilingual until you have stable revenue and a team to support it. You can’t know whether the startup will become profitable, so early on, your time is better spent finding PMF and acquiring users. AI can write scripts to

Typical AI conversation

— Why did my last post on X get 0 impressions? Is it a shadowban? — It’s not necessarily a shadowban. First, X shows the post to a small group of followers, and if there are no reactions, it doesn’t push it any further. — So