Sign in

Zack Korman

@zkorman.com
200 followers 112 following 71 posts

Founder @ Embroidery. I build AI cybersecurity stuff.

PostsRepliesMedia
Zack Korman @zkorman.com · 06/11/2025
Every Microsoft Entra tenant is weird in some way, but every IT admin is convinced they’re totally normal. We have thousands of customers at Pistachio, and we still meet admins who surprise us. “Of course we put company name in the email field and email in department”
020
Zack Korman @zkorman.com · 22/08/2025
@wyden.senate.gov thought you might be interested. Microsoft Copilot allowed users to bypass the audit log and Microsoft did nothing to disclose that: pistachioapp.com/blog/copilot...
pistachioapp.com
Copilot Broke Your Audit Log, but Microsoft Won’t Tell You
Copilot Broke Your Audit Log, but Microsoft Won’t Tell You
181
Zack Korman @zkorman.com · 07/08/2025
If you have an audit log and you have an API, then requiring the “enterprise package” to access the audit log via the API isn’t cool. Specifically: GitHub.
100
Zack Korman @zkorman.com · 06/08/2025
If you are at #Blackhat can you please go by our booth, I bought way too much merch and don’t want to look like an idiot.
BoxesMore boxesMore boxesStuff in boxes
141
Zack Korman @zkorman.com · 21/07/2025
Not knowing things about technology is a great way to feel young. I’m not ignorant, it was just “before my time” (2019).
000
Zack Korman @zkorman.com · 19/07/2025
Giving a vendor time to fix a vulnerability makes sense, but I can’t help but feel the practice is being abused and therefore produces worse security outcomes. When large orgs want to move fast they absolutely can; taking 90 days to fix a vulnerability is a choice.
000
Zack Korman @zkorman.com · 18/07/2025
Every time a VC posts “AI-first companies can build billion dollar businesses with 10 people because they can use AI agents, not people, to scale”, I’m tempted to send them a deck that is a pure operations play. Put your money where your mouth is. “Walmart but AI”
110
Zack Korman @zkorman.com · 17/06/2025
If AI is so good at writing code, why is Gemini 2.5 pro only available on the global endpoint? Why does batch processing for 2.0 work everywhere BUT global? Why can’t I fine tune 2.5? Can’t some PM at Google just vibe code these things for me?
000
Zack Korman @zkorman.com · 07/06/2025
Are we fine sharing screenshots from the other place? If so, one comment: skill issue.
A guy saying software rewrites usually fail.
340
Zack Korman @zkorman.com · 06/06/2025
If everyone is supposedly building cutting edge AI apps, then why are all of the AI models’ APIs and client libraries so poorly documented and buggy? It really gives away how little people are doing with AI beyond the very basics
011
Zack Korman @zkorman.com · 24/11/2024
One good thing about AI is that encourages people to think more about building “software that does the job for you” instead of “software that enables you to do the job” and I think that is long overdue.
131
Reposted by Zack Korman
Simen Berge @simberg.bsky.social · 02/08/2023
I wrote a blog post on how to use deploy your go application from the terminal using systemd egreb.net/posts/deployment-with-go #go #golang
121
Zack Korman @zkorman.com · 27/07/2023
What the hell is SharePoint? I just wanted to put some files in a folder so people could access them, and now it is asking me to make a website.
010
Zack Korman @zkorman.com · 20/07/2023
I wrote about what it is like to build a product that the end user doesn't really want, and why gamification isn't a solution to that: pistachioapp.com/blog/you-cant-gami…
pistachioapp.com
You Can’t Gamify Security Awareness
Building a security culture without games? Explore why gamifying security awareness isn't effective and how we've tackled the issue at Pistachio.
100
Zack Korman @zkorman.com · 19/07/2023
How do I harass an airline on here if brands don’t use bluesky
020
Zack Korman @zkorman.com · 10/07/2023
A lot of the conventional wisdom of the startup world comes from an era fundamentally different from today, but lives on because the winners of that era are the VCs of today.
100
Zack Korman @zkorman.com · 09/07/2023
Gamification can alter behavior within some macro goal a person already cares about. That’s the point product teams keep missing. The person has to already care.
000
Zack Korman @zkorman.com · 08/07/2023
Do I just give an invite code to the startup I work at so we starting getting some brands here, or…
000
Zack Korman @zkorman.com · 08/07/2023
It feels awkward sending out invite codes to people now. “Yea uh so here is the code for the social media platform that for some reason hates new users”
000
Zack Korman @zkorman.com · 02/07/2023
That joke about posts loading here really slaps, glad they decided to pin it to the top of the what’s hot feed for the last 12 hours
010
Reposted by Zack Korman
Jim Prosser @jimprosser.bsky.social · 01/07/2023
TIRED: Killing your service’s third-party apps WIRED: Killing your service’s first-party apps
112634562
Zack Korman @zkorman.com · 01/07/2023
I actually didn’t finish reading this tweet so I missed the dumbest part, which is that he is giving new users the lowest rate limit.
Elon saying the dumb thing about rate limits
240
Zack Korman @zkorman.com · 01/07/2023
I wrote some stuff about whitelisting domains for attack simulations, and why Google and Microsoft are bad: pistachioapp.com/blog/think-twice-b…
pistachioapp.com
Think Twice Before Whitelisting for Attack Simulations
The dangers of whitelisting for attack simulations: what you need to know.
110
Zack Korman @zkorman.com · 05/06/2023
I wrote about prompt injection attacks pistachioapp.com/blog/How-Do-We-Sol…
pistachioapp.com
Pistachio
210
Zack Korman @zkorman.com · 01/06/2023
<3 Oslo shutting down the entire transport network so some NATO people can motorcade through the city.
000
Zack Korman @zkorman.com · 29/05/2023
000
Zack Korman @zkorman.com · 28/05/2023
Hot take: Bluesky should get rid of the “what’s hot” tab now, and not wait for all of the custom algorithm options to launch.
100
Zack Korman @zkorman.com · 23/05/2023
Launching a new thing soon: pistachioapp.com
pistachioapp.com
Pistachio
010
Zack Korman @zkorman.com · 20/05/2023
The fact that standup is divisive is hilariously absurd. Whether it is helpful or not, it’s 15 minutes max. Let’s not pretend your time is so optimized and efficient that 15 minutes is a major problem.
100
Zack Korman @zkorman.com · 17/05/2023
Happy 17th of May to those who observe
100
Zack Korman @zkorman.com · 15/05/2023
Is there some name for the phenomenon when people debate the risk of low-probability, high-cost events as if they’re debating which of two outcomes are most likely? Because that’s what is happening with debates about AI safety.
000
Zack Korman @zkorman.com · 13/05/2023
Code review is for checking if you wrote the code correctly, not to fight about what the “correct way” is. If it is at all debatable you should be discussing it in advance and along the way.
010
Zack Korman @zkorman.com · 11/05/2023
Microsoft has absurd permissions on the graph API and won’t fix it unless I get a lot of upvotes on this. Please help. feedbackportal.microsoft.com/feedba…
feedbackportal.microsoft.com
Community
000
Zack Korman @zkorman.com · 09/05/2023
It’s cool to think that Norway is going to have its very own FTX. Very fun to watch
010
Zack Korman @zkorman.com · 07/05/2023
I wrote a blog post about Elon’s announced feature of letting media publishers charge on a per-article basis. Spoiler: It won’t work. zkorman.com/posts/twitter-and-singl…
zkorman.com
Twitter and Single Article Purchases
010
Zack Korman @zkorman.com · 06/05/2023
Lifting (not a lot of) weight
000
Zack Korman @zkorman.com · 05/05/2023
I don’t believe in moats, at least not in tech.
000
Zack Korman @zkorman.com · 30/04/2023
I was previously the head of tech at a media company. The issue with single article purchases wasn’t the tech, it was the numbers.
110
Zack Korman @zkorman.com · 30/04/2023
Confession: I still don’t understand langchain.
000
Zack Korman @zkorman.com · 29/04/2023
Yikes
000
Zack Korman @zkorman.com · 28/04/2023
Yann’s whole argument on AI risk is really just about him wanting to get to make the decisions about risk without public oversight.
000
Zack Korman @zkorman.com · 28/04/2023
So how do we stop the growth hacker, “9 billion people use ChatGPT but only 1% are writing effective prompts” crowd from coming here?
110
Zack Korman @zkorman.com · 27/04/2023
What percentage of unicorns still had all of the original founders at the company and in real c-level roles? I would love to see that number broken down by the experience of the founder prior to starting the company.
100
Zack Korman @zkorman.com · 26/04/2023
Not to alienate anyone, but why does every account that started following me follow 40k other accounts? Is 40k the number of users here?
100