iiinova — where your digital self keeps evolving

Zack Korman @zkorman.com · 22/11/2025

Hahaha some are doing well. Also you have an advantage: Half my team listens to you, so they’d kill me if I gave you a bad score

010

Zack Korman @zkorman.com · 06/11/2025

Every Microsoft Entra tenant is weird in some way, but every IT admin is convinced they’re totally normal. We have thousands of customers at Pistachio, and we still meet admins who surprise us. “Of course we put company name in the email field and email in department”

020

Zack Korman @zkorman.com · 22/08/2025

@wyden.senate.gov thought you might be interested. Microsoft Copilot allowed users to bypass the audit log and Microsoft did nothing to disclose that: pistachioapp.com/blog/copilot...

pistachioapp.com

Copilot Broke Your Audit Log, but Microsoft Won’t Tell You

181

Zack Korman @zkorman.com · 07/08/2025

If you have an audit log and you have an API, then requiring the “enterprise package” to access the audit log via the API isn’t cool. Specifically: GitHub.

100

Zack Korman @zkorman.com · 07/08/2025

“send you an email scam*”, I meant to say.

000

Zack Korman @zkorman.com · 07/08/2025

I mean if I send you an email every single day, presumably you’d agree you’d be less likely to fall for email scams than other people, because you’d be constantly reminded to ask “is this an email scam”. Do you disagree with that?

100

Zack Korman @zkorman.com · 07/08/2025

We have sent >3m phishing sims and our data doesn’t show that IT/eng fails at an above-average rate. I think phishing sims have a lot of problems in how they’re done most places, but receiving a steady stream of phishing sims absolutely helps people remember to pay attention. Which is the goal.

100

Zack Korman @zkorman.com · 07/08/2025

This happens to me in Norway when I go to Indian places. They always say, “that’s not for you” and I have to explain that I’ll be fine. I then did the same in Spain, and unfortunately the waiter was right. It was not for me.

020

Zack Korman @zkorman.com · 07/08/2025

Why would you get rid of phishing simulations?

100

Zack Korman @zkorman.com · 07/08/2025

Sorry for the slow response, I’m not there personally so went to sleep

100

Zack Korman @zkorman.com · 07/08/2025

Luggage tags, playing cards, gum, stickers, temporary tattoos, etc.

110

Zack Korman @zkorman.com · 06/08/2025

If you are at #Blackhat can you please go by our booth, I bought way too much merch and don’t want to look like an idiot.

141

Zack Korman @zkorman.com · 21/07/2025

Not knowing things about technology is a great way to feel young. I’m not ignorant, it was just “before my time” (2019).

000

Zack Korman @zkorman.com · 19/07/2025

Giving a vendor time to fix a vulnerability makes sense, but I can’t help but feel the practice is being abused and therefore produces worse security outcomes. When large orgs want to move fast they absolutely can; taking 90 days to fix a vulnerability is a choice.

000

Zack Korman @zkorman.com · 19/07/2025

Oh thank god someone is calling this out. I’ll go listen.

010

Zack Korman @zkorman.com · 18/07/2025

Every time a VC posts “AI-first companies can build billion dollar businesses with 10 people because they can use AI agents, not people, to scale”, I’m tempted to send them a deck that is a pure operations play. Put your money where your mouth is. “Walmart but AI”

110

Zack Korman @zkorman.com · 17/06/2025

If AI is so good at writing code, why is Gemini 2.5 pro only available on the global endpoint? Why does batch processing for 2.0 work everywhere BUT global? Why can’t I fine tune 2.5? Can’t some PM at Google just vibe code these things for me?

000

Zack Korman @zkorman.com · 07/06/2025

Are we fine sharing screenshots from the other place? If so, one comment: skill issue.

A guy saying software rewrites usually fail.

340

Zack Korman @zkorman.com · 06/06/2025

If everyone is supposedly building cutting edge AI apps, then why are all of the AI models’ APIs and client libraries so poorly documented and buggy? It really gives away how little people are doing with AI beyond the very basics

011

Zack Korman @zkorman.com · 24/11/2024

People like to keep their hands on the steering wheel (of B2B SaaS) even when it’s wildly unnecessary and value destructive. AI makes people question that behavior, even for solutions that don’t use AI.

010

Zack Korman @zkorman.com · 24/11/2024

One good thing about AI is that encourages people to think more about building “software that does the job for you” instead of “software that enables you to do the job” and I think that is long overdue.

131

Reposted by Zack Korman

Simen Berge @simberg.bsky.social · 02/08/2023

I wrote a blog post on how to use deploy your go application from the terminal using systemd egreb.net/posts/deployment-with-go #go #golang

121

Zack Korman @zkorman.com · 27/07/2023

What the hell is SharePoint? I just wanted to put some files in a folder so people could access them, and now it is asking me to make a website.

010

Zack Korman @zkorman.com · 19/07/2023

How do I harass an airline on here if brands don’t use bluesky

020

Zack Korman @zkorman.com · 10/07/2023

“Don’t build for scale before you have product market fit” isn’t looking so smart for Bluesky right now, for example. The startups of the early 2000s weren’t competing with tech companies that could clone their shit overnight and do it 100x better

000

Zack Korman @zkorman.com · 10/07/2023

A lot of the conventional wisdom of the startup world comes from an era fundamentally different from today, but lives on because the winners of that era are the VCs of today.

100

Zack Korman @zkorman.com · 09/07/2023

Gamification can alter behavior within some macro goal a person already cares about. That’s the point product teams keep missing. The person has to already care.

000

Zack Korman @zkorman.com · 08/07/2023

Do I just give an invite code to the startup I work at so we starting getting some brands here, or…

000

Zack Korman @zkorman.com · 08/07/2023

It feels awkward sending out invite codes to people now. “Yea uh so here is the code for the social media platform that for some reason hates new users”

000

Zack Korman @zkorman.com · 02/07/2023

That joke about posts loading here really slaps, glad they decided to pin it to the top of the what’s hot feed for the last 12 hours

010

Reposted by Zack Korman

Jim Prosser @jimprosser.bsky.social · 01/07/2023

TIRED: Killing your service’s third-party apps WIRED: Killing your service’s first-party apps

112634562

Zack Korman @zkorman.com · 01/07/2023

I get that this is probably just Elon covering for the fact that some provider likely turned off because he wasn’t paying (note, it is the first of the month). But it’s still funny that the best fake idea he had was so wildly stupid.

010

Zack Korman @zkorman.com · 01/07/2023

I actually didn’t finish reading this tweet so I missed the dumbest part, which is that he is giving new users the lowest rate limit.

Elon saying the dumb thing about rate limits

240

Zack Korman @zkorman.com · 01/07/2023

This is me acting like I’m just posting naturally, not returning to Bluesky in a hurry after Elon decided to kill Twitter.

010

Zack Korman @zkorman.com · 01/06/2023

<3 Oslo shutting down the entire transport network so some NATO people can motorcade through the city.

000

Zack Korman @zkorman.com · 30/05/2023

I’m not actually sure that’s it. Part of it is just “if there’s a 1% chance everyone dies, I’ll be dead. In the other 99%, I don’t want to be the person who didn’t make the AI”

000

Zack Korman @zkorman.com · 28/05/2023

Oh I have to upgrade or something then. Every time I log in it is some drama among people I have never heard of

010

Zack Korman @zkorman.com · 28/05/2023

Hot take: Bluesky should get rid of the “what’s hot” tab now, and not wait for all of the custom algorithm options to launch.

100

Zack Korman @zkorman.com · 24/05/2023

Something about the constitution

000

Zack Korman @zkorman.com · 23/05/2023

Launching a new thing soon: pistachioapp.com

pistachioapp.com

Pistachio

010

Zack Korman @zkorman.com · 20/05/2023

It’s no different from “this meeting costs $800!” Yea lol cool that’s cheap as hell relative to the cost of doing the wrong thing.

000

Zack Korman @zkorman.com · 20/05/2023

The fact that standup is divisive is hilariously absurd. Whether it is helpful or not, it’s 15 minutes max. Let’s not pretend your time is so optimized and efficient that 15 minutes is a major problem.

100

Zack Korman @zkorman.com · 17/05/2023

Happy 17th of May to those who observe

100

Zack Korman @zkorman.com · 15/05/2023

Is there some name for the phenomenon when people debate the risk of low-probability, high-cost events as if they’re debating which of two outcomes are most likely? Because that’s what is happening with debates about AI safety.

000

Zack Korman @zkorman.com · 13/05/2023

So glad I’m not alone in this

010