正在加载视频...

视频加载失败

返回首页

Creating COM hijacking payloads has never been easier than with RustPack! With COM Hijacking, you can persist on a target system by 'living' in trusted user processes, such as the Chrome browser. You only need to bring one DLL. When the user opens Chrome, for example, a C2 connection...

MSecOps's profile picture

MSec Operations

1,635 subscribers

16,004 次观看 • 11 个月前 •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍
1:15

How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍

MSec Operations

26,003 次观看 • 1 年前

Tools such as from Impacket are usually flagged for lateral movement due to the pre-built service executable that is dropped on the remote system. However, some vendors also flag Impacket based on its behaviour. With RustPack, you can easily create service executables that won't be detected by signatures or behaviour-based detection. 😎 In this demo video, an unsigned service executable is generated. This will only fire the payload on a system with the hostname 'Win11' — environmental keying will prevent the payload from showing up in a sandbox or cloud analysis. To avoid Impacket detection, we drop and execute the binary via the recently released Titanis protocol library from TrustedSec: The result is an Adaptix C2 connection in the SYSTEM context. 🫡 #Pentest #RedTeam #Malware #OST
0:38

Tools such as from Impacket are usually flagged for lateral movement due to the pre-built service executable that is dropped on the remote system. However, some vendors also flag Impacket based on its behaviour. With RustPack, you can easily create service executables that won't be detected by signatures or behaviour-based detection. 😎 In this demo video, an unsigned service executable is generated. This will only fire the payload on a system with the hostname 'Win11' — environmental keying will prevent the payload from showing up in a sandbox or cloud analysis. To avoid Impacket detection, we drop and execute the binary via the recently released Titanis protocol library from TrustedSec: The result is an Adaptix C2 connection in the SYSTEM context. 🫡 #Pentest #RedTeam #Malware #OST

MSec Operations

70,578 次观看 • 7 个月前

In one of our previous videos we demonstrated how to generate sideloading binaries by cloning the exports of an existing DLL to forward them - . However, using Microsoft DLLs and Microsoft-signed binaries is not the best OPsec, as it's easy for EDR vendors to create a detection rule for e.g. "version.dll" being loaded from a non-System32 directory. 🧐 We therefore recommend using third party signed executables that attempt to load their own DLL. This is much harder to track/map on the endpoint. If you know which functions are imported from your signed binary (see import table), you can also generate a sideloading DLL for persistence or initial access use cases. Bring your own third-party signed binary and voila - you're trusted! In this example, we sideload into java.exe, which is signed by Oracle. It attempts to load several DLLs - including jli.dll as shown in the video. #RustPack can easily create such DLLs with custom export functions - anti-debugging features, sandbox evasion, signature evasion and anti-emulation can be easily added. 🔥🔥 Userland hooks are bypassed by default options and you can enable custom AMSI/ETW bypasses for the process on top. If you want to use it for persistence, you can of course still clone the original DLL exports as we did in the previous video and forward them accordingly. 👍 Interested in buying RustPack? Contact us at info[at] ! #RedTeam #Pentest #OST #Maldev #Malware #Havoc
0:29

In one of our previous videos we demonstrated how to generate sideloading binaries by cloning the exports of an existing DLL to forward them - . However, using Microsoft DLLs and Microsoft-signed binaries is not the best OPsec, as it's easy for EDR vendors to create a detection rule for e.g. "version.dll" being loaded from a non-System32 directory. 🧐 We therefore recommend using third party signed executables that attempt to load their own DLL. This is much harder to track/map on the endpoint. If you know which functions are imported from your signed binary (see import table), you can also generate a sideloading DLL for persistence or initial access use cases. Bring your own third-party signed binary and voila - you're trusted! In this example, we sideload into java.exe, which is signed by Oracle. It attempts to load several DLLs - including jli.dll as shown in the video. #RustPack can easily create such DLLs with custom export functions - anti-debugging features, sandbox evasion, signature evasion and anti-emulation can be easily added. 🔥🔥 Userland hooks are bypassed by default options and you can enable custom AMSI/ETW bypasses for the process on top. If you want to use it for persistence, you can of course still clone the original DLL exports as we did in the previous video and forward them accordingly. 👍 Interested in buying RustPack? Contact us at info[at] ! #RedTeam #Pentest #OST #Maldev #Malware #Havoc

MSec Operations

10,686 次观看 • 1 年前

Building a RAG system that works with real-life documents is crazy hard. Why is nobody talking about this? (I'll show you what a complex document looks like in the attached video. Good luck with the 10-line code demos if you want to deal with this.) All I see online are "how to talk to a PDF" demos that won't take you far. If you think that's all you need, you won't like what happens when you try. In the video below, I'll show you what it takes to build a system that processes huge numbers of documents without losing accuracy. There are a few tricks here that I'm sure will impress you. The magic is happening in three phases: • In the way we process the documents • In the way we chunk the content • In the way we augment and store the chunks This is all built-in in GroundX, EyeLevel.AI's out-of-the-box RAG system. You can use it as a SaaS or install it in your own Kubernetes cluster and run it locally. If you have seen any other RAG system doing what I do in the attached video, please, let me know. I'd love to check them out. Disclaimer: I work with the team at EyeLevel. My advice is to take any document you have lying around, go to their site, create an account, and try them out. Here is their website:
10:11

Building a RAG system that works with real-life documents is crazy hard. Why is nobody talking about this? (I'll show you what a complex document looks like in the attached video. Good luck with the 10-line code demos if you want to deal with this.) All I see online are "how to talk to a PDF" demos that won't take you far. If you think that's all you need, you won't like what happens when you try. In the video below, I'll show you what it takes to build a system that processes huge numbers of documents without losing accuracy. There are a few tricks here that I'm sure will impress you. The magic is happening in three phases: • In the way we process the documents • In the way we chunk the content • In the way we augment and store the chunks This is all built-in in GroundX, EyeLevel.AI's out-of-the-box RAG system. You can use it as a SaaS or install it in your own Kubernetes cluster and run it locally. If you have seen any other RAG system doing what I do in the attached video, please, let me know. I'd love to check them out. Disclaimer: I work with the team at EyeLevel. My advice is to take any document you have lying around, go to their site, create an account, and try them out. Here is their website:

Santiago

75,780 次观看 • 1 年前

Second important thing to note, Russia has proven that it can deliver a conventional or nuclear payload to any place without a problem. The missile cannot be intercept and it works. It delivers the payload with a speed of 3km per second. 2/
1:10

Second important thing to note, Russia has proven that it can deliver a conventional or nuclear payload to any place without a problem. The missile cannot be intercept and it works. It delivers the payload with a speed of 3km per second. 2/

Lord Bebo

191,823 次观看 • 1 年前

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato
1:49

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

Haidar

50,580 次观看 • 1 个月前

GM Fam ... ☕️, As announced, today is the day when I am opening all my galleries to you for a short time. The main gallery, Boring Cinema and the room with the future artist portals will also be accessible at any time later. Starting from the main gallery, you can first enter one and then several portals to reach the respective areas. We recommend accessing the galleries via a PC or Mac using the Chrome browser (updated). Many thanks to ᴏɴᴄʏʙᴇʀ for making it possible to create galleries in this form in the first place! The teaser (🔊 ON) gives you a little insight into what you can expect. Have a great Friday and a wonderful weekend, everyone! ... hope you enjoy it. 🫂
5:41

GM Fam ... ☕️, As announced, today is the day when I am opening all my galleries to you for a short time. The main gallery, Boring Cinema and the room with the future artist portals will also be accessible at any time later. Starting from the main gallery, you can first enter one and then several portals to reach the respective areas. We recommend accessing the galleries via a PC or Mac using the Chrome browser (updated). Many thanks to ᴏɴᴄʏʙᴇʀ for making it possible to create galleries in this form in the first place! The teaser (🔊 ON) gives you a little insight into what you can expect. Have a great Friday and a wonderful weekend, everyone! ... hope you enjoy it. 🫂

Cologne_Dude 🈴 🍌 🦍

63,070 次观看 • 1 年前

Long text ➡️ short summary. The Summarizer API is available in Chrome Stable. In Chrome, you can use this API to condense long articles, transcripts, and more, with Gemini Nano. Which of Chrome's built-in AI APIs will you hatch? →
0:20

Long text ➡️ short summary. The Summarizer API is available in Chrome Stable. In Chrome, you can use this API to condense long articles, transcripts, and more, with Gemini Nano. Which of Chrome's built-in AI APIs will you hatch? →

Chrome for Developers

37,943 次观看 • 10 个月前

WASP 🇩🇪 WASP (Weles Acoustic Sensor Payload) from Quantum Systems (Quantum-Systems) is a compact, self-contained passive acoustic payload capable of detecting and measuring the direction of arrival of impulsive sounds, such as artillery, mortars, and small arms fire. "The primary purpose of the system is to direct the observer towards the threat and/or to steer the UAV camera towards the detected event." Learn more >>
0:53

WASP 🇩🇪 WASP (Weles Acoustic Sensor Payload) from Quantum Systems (Quantum-Systems) is a compact, self-contained passive acoustic payload capable of detecting and measuring the direction of arrival of impulsive sounds, such as artillery, mortars, and small arms fire. "The primary purpose of the system is to direct the observer towards the threat and/or to steer the UAV camera towards the detected event." Learn more >>

Counter Unmanned Systems

35,004 次观看 • 5 个月前

Even if society is broken and in need of repair, the only way to build a better society is by producing better people. And that begins with yourself. You can’t create a functional society out of dysfunctional individuals. You have to make people functional first—only then can the larger system work. You won’t fix people by building the perfect society around them. It has to start the other way around, with individuals and with yourself.
0:37

Even if society is broken and in need of repair, the only way to build a better society is by producing better people. And that begins with yourself. You can’t create a functional society out of dysfunctional individuals. You have to make people functional first—only then can the larger system work. You won’t fix people by building the perfect society around them. It has to start the other way around, with individuals and with yourself.

Rob Henderson

27,946 次观看 • 1 年前

If you want to understand the power of the Target Boycott you MUST see what Target is promoting for yourself. This has *nothing* to do with a rainbow "PRIDE" display. This has *everything* to do with the aggressive and explicit sexualization of children. See for yourself:
4:10

If you want to understand the power of the Target Boycott you MUST see what Target is promoting for yourself. This has *nothing* to do with a rainbow "PRIDE" display. This has *everything* to do with the aggressive and explicit sexualization of children. See for yourself:

Benny Johnson

1,006,679 次观看 • 3 年前

Chrome has received a massive AI update Gemini in Chrome can see your screen live and interact with you to explain things. Discussion is extremely natural and is a game-changer for learning. Here's how to access it: 1. Use a Gemini Pro/Ultra account 2. Log in to this account on Chrome 3. The icon should appear in the top right-hand corner 4. Click on it or use the shortcut Alt+G At the end of your conversation, the entire transcript is available: It's easy to find information in the future!
3:47

Chrome has received a massive AI update Gemini in Chrome can see your screen live and interact with you to explain things. Discussion is extremely natural and is a game-changer for learning. Here's how to access it: 1. Use a Gemini Pro/Ultra account 2. Log in to this account on Chrome 3. The icon should appear in the top right-hand corner 4. Click on it or use the shortcut Alt+G At the end of your conversation, the entire transcript is available: It's easy to find information in the future!

Paul Couvert

277,519 次观看 • 1 年前

Over the past while, I've developed several builds of a malware obsfuscator, using different forms of evasion to craft an executable that grants your payload safe delivery and execution into the target machine, developed in C++ too. There's currently an exe file as well
1:46

Over the past while, I've developed several builds of a malware obsfuscator, using different forms of evasion to craft an executable that grants your payload safe delivery and execution into the target machine, developed in C++ too. There's currently an exe file as well

cocofelon

25,852 次观看 • 1 年前

More moves to AI-first living. Got the Genspark browser that just came out. One thing I notice is that I like having separate browsers working on different tasks. I'm not a big user of MCPs, since I'm not really a developer. Are you? They have a store of a bunch of MCPs available to use. Most of my AI work is research related, or answering emails and scheduling things, I'm focusing more of my effort there. Genspark has been shipping a ton of stuff the past few weeks, from ability to make slides to a new AI secretary that can schedule things, or help you answer your emails. First I looked at, "does it make sense to move over to this new way of working?" The problem with that is you gotta learn a new browser. Well, it looks like Google Chrome, except it has a prompt window. Click the icons underneath it and you will see you can add X, Notion, Google stuff like calendar and gmail, or a variety of others. But the real power is just talking to it. I asked it what kinds of tasks it can do, and it answered: "Just tell me what you want to accomplish! For example: "Research the latest developments in spatial computing and create a presentation" "Analyze my Gmail for any important emails from this week" "Find information about AI robotics companies and create a spreadsheet" "Generate a video about emerging tech trends" "Help me plan a trip to CES 2026" And so further into AI-first living I go. Have you tried it yet? What do you suggest I do next to use more AI to run my life and build my business? I have another browser tab building a video for me. What a beautiful time to be alive. Download it at:
1:09

More moves to AI-first living. Got the Genspark browser that just came out. One thing I notice is that I like having separate browsers working on different tasks. I'm not a big user of MCPs, since I'm not really a developer. Are you? They have a store of a bunch of MCPs available to use. Most of my AI work is research related, or answering emails and scheduling things, I'm focusing more of my effort there. Genspark has been shipping a ton of stuff the past few weeks, from ability to make slides to a new AI secretary that can schedule things, or help you answer your emails. First I looked at, "does it make sense to move over to this new way of working?" The problem with that is you gotta learn a new browser. Well, it looks like Google Chrome, except it has a prompt window. Click the icons underneath it and you will see you can add X, Notion, Google stuff like calendar and gmail, or a variety of others. But the real power is just talking to it. I asked it what kinds of tasks it can do, and it answered: "Just tell me what you want to accomplish! For example: "Research the latest developments in spatial computing and create a presentation" "Analyze my Gmail for any important emails from this week" "Find information about AI robotics companies and create a spreadsheet" "Generate a video about emerging tech trends" "Help me plan a trip to CES 2026" And so further into AI-first living I go. Have you tried it yet? What do you suggest I do next to use more AI to run my life and build my business? I have another browser tab building a video for me. What a beautiful time to be alive. Download it at:

Robert Scoble

84,349 次观看 • 1 年前

it's not your internet, youtube now makes you wait 5 extra seconds as a penalty for not using google chrome this "issue" is 100% artificial and hardcoded, changing the user agent to google chrome magically fixes the timeout
0:27

it's not your internet, youtube now makes you wait 5 extra seconds as a penalty for not using google chrome this "issue" is 100% artificial and hardcoded, changing the user agent to google chrome magically fixes the timeout

wukko

5,129,918 次观看 • 2 年前

This isn't quite right. The reason women are so susceptible to Marxist propaganda is because it is women's nature as a political philosophy. Women redistribute. Women take care of the weak. It doesn't work as a primary political system because you cannot take care of the weak if you don't have a masculine system on top to create the productivity necessary to do it. If the men aren't hunting there isn't meat that can be redistributed to the weak that can't hunt. The men have to have a reason to create the abundance necessary to redistribute. This is why you can have an immensely prosperous society that is capitalist first with the feminine organizing principle below it and it's why the opposite is not true.
2:52

This isn't quite right. The reason women are so susceptible to Marxist propaganda is because it is women's nature as a political philosophy. Women redistribute. Women take care of the weak. It doesn't work as a primary political system because you cannot take care of the weak if you don't have a masculine system on top to create the productivity necessary to do it. If the men aren't hunting there isn't meat that can be redistributed to the weak that can't hunt. The men have to have a reason to create the abundance necessary to redistribute. This is why you can have an immensely prosperous society that is capitalist first with the feminine organizing principle below it and it's why the opposite is not true.

The Last Boy Scout

45,966 次观看 • 9 天前

I'm up late with the rest of you building AI agents with the new AI browser from Genspark. We can see where this is all going: a new kind of operating system -- one that is very different than the Microsoft centric way that I've been working for 20 years. There are several things that these new agentic browsers bring to you: 1. They let you change how you browse. With an old browser like Google Chrome, you go to your email, Facebook, or X. 2. With these new browsers, you tell it where to go and what to do for you. 3. It can even build software for you. At the end of this video, I have it building me a little YouTube uploading utility, which is very helpful. 4. They have a ton of "applications" built in. Think of it as a new kind of office suite. Docs. Spreadsheets. Slide decks. And much more. All built with AI, not bolted on the side like with Microsoft's Office. 5. They have AI models built "underneath" so you can work privately and cheaply. There’s a lot of new choices you have to make with browsers like this. I’ve been playing with a bunch of them. Some have better user interfaces than others. Some have different versions, slide components, or applications. The reason I like Genspark is because they ship so fast. I’ve been watching this company since its very beginnings, and every week they ship new things. Just yesterday, they shipped a new photo editing feature for my iPhone. I upload a photo and then I can just talk to it and edit it with my voice. It's really cool. I try to reward companies that ship at such a fast rate and that are shipping innovation that improves our lives. It's not that I'm going to stop using Google Chrome. My whole life has been there for, I don't know, almost 20 years now. This is a different way of working and it gives me a space to run my AI tasks that's different than Google Chrome. I run them side by side. One doing old stuff, one doing new stuff. I can keep using Google Chrome for my old stuff, like my email and my calendar. And I use GenSpark or one of the new AI browsers to do new AI-centric things. All sorts of new things that these new agentic browsers open up! Have you tried it, or one of the other new ones yet? How has it changed your work? It takes a little time to get used to AI-centric ways of doing things. Pretend your browser is a team of interns. Give them a task, in this case I said "help me upload my videos to YouTube." You might be shocked at what Genspark does to improve your life. I am everytime I use it. Give it a try and let me know what you think! Oh, and I used another little tool to "write" this post. Typeless -- I push a button and talk and it writes. With fewer typos than I usually type in, to boot. It works great with Genspark's new browser too. Download it here:
3:41

I'm up late with the rest of you building AI agents with the new AI browser from Genspark. We can see where this is all going: a new kind of operating system -- one that is very different than the Microsoft centric way that I've been working for 20 years. There are several things that these new agentic browsers bring to you: 1. They let you change how you browse. With an old browser like Google Chrome, you go to your email, Facebook, or X. 2. With these new browsers, you tell it where to go and what to do for you. 3. It can even build software for you. At the end of this video, I have it building me a little YouTube uploading utility, which is very helpful. 4. They have a ton of "applications" built in. Think of it as a new kind of office suite. Docs. Spreadsheets. Slide decks. And much more. All built with AI, not bolted on the side like with Microsoft's Office. 5. They have AI models built "underneath" so you can work privately and cheaply. There’s a lot of new choices you have to make with browsers like this. I’ve been playing with a bunch of them. Some have better user interfaces than others. Some have different versions, slide components, or applications. The reason I like Genspark is because they ship so fast. I’ve been watching this company since its very beginnings, and every week they ship new things. Just yesterday, they shipped a new photo editing feature for my iPhone. I upload a photo and then I can just talk to it and edit it with my voice. It's really cool. I try to reward companies that ship at such a fast rate and that are shipping innovation that improves our lives. It's not that I'm going to stop using Google Chrome. My whole life has been there for, I don't know, almost 20 years now. This is a different way of working and it gives me a space to run my AI tasks that's different than Google Chrome. I run them side by side. One doing old stuff, one doing new stuff. I can keep using Google Chrome for my old stuff, like my email and my calendar. And I use GenSpark or one of the new AI browsers to do new AI-centric things. All sorts of new things that these new agentic browsers open up! Have you tried it, or one of the other new ones yet? How has it changed your work? It takes a little time to get used to AI-centric ways of doing things. Pretend your browser is a team of interns. Give them a task, in this case I said "help me upload my videos to YouTube." You might be shocked at what Genspark does to improve your life. I am everytime I use it. Give it a try and let me know what you think! Oh, and I used another little tool to "write" this post. Typeless -- I push a button and talk and it writes. With fewer typos than I usually type in, to boot. It works great with Genspark's new browser too. Download it here:

Robert Scoble

70,991 次观看 • 8 个月前

ELON: TO ACTUALLY START A COMPANY IS SIMPLER THAN YOU FEAR Elon is stripping away the mystique of the startup world, offering a blunt blueprint for anyone with an engineering mind and the drive to build. He is arguing that the barrier to entry is not as high as the "fear of failure" suggests. By focusing on a compelling prototype and leveraging the world-class venture capital ecosystem in America. Elon believes the next generation of builders can bypass the bureaucracy and start creating value immediately: “If you study engineering and you figure out how to design new things, then it is relatively easy to start a company. You just need to get a few like-minded people with you and then focus on creating a prototype, a compelling prototype as soon as possible. And then there is a strong venture capital industry in this country that will give you funding to take things to the next level. And that is all there is to it. And you might try it a few times, you may or may not succeed, but I think sometimes people fear starting a company too much. You know, what is the worst that could go wrong? You are not going to starve to death. You are not going to die of exposure. What is the worst that could go wrong?” Source: Naruto
0:44

ELON: TO ACTUALLY START A COMPANY IS SIMPLER THAN YOU FEAR Elon is stripping away the mystique of the startup world, offering a blunt blueprint for anyone with an engineering mind and the drive to build. He is arguing that the barrier to entry is not as high as the "fear of failure" suggests. By focusing on a compelling prototype and leveraging the world-class venture capital ecosystem in America. Elon believes the next generation of builders can bypass the bureaucracy and start creating value immediately: “If you study engineering and you figure out how to design new things, then it is relatively easy to start a company. You just need to get a few like-minded people with you and then focus on creating a prototype, a compelling prototype as soon as possible. And then there is a strong venture capital industry in this country that will give you funding to take things to the next level. And that is all there is to it. And you might try it a few times, you may or may not succeed, but I think sometimes people fear starting a company too much. You know, what is the worst that could go wrong? You are not going to starve to death. You are not going to die of exposure. What is the worst that could go wrong?” Source: Naruto

Mario Nawfal

205,115 次观看 • 5 个月前

Scott on why conviction in an idea is dangerous as an investor but required as a founder: "From the investor seat, I don't think you want to be in love with an idea. That's a risky thing because you'll find a way to express that by investing and make some compromises on the team because you know this idea is just so good, its time has come. But if the team isn't there, 90% of the time it doesn't work. Then there's a whole thing can you swap out the team? But the whole Founders Fund thesis was always no, you need the founder to run the company. But on the company side, you have to be in love with the idea. It's not that rational to start a company. There's a lot easier, more comfortable ways to make money if that's the goal. So it's got to be about what the company is doing specifically. If you want to actually start a company, it better be something that you're really passionate about, or you think that the problem is really important."
1:15

Scott on why conviction in an idea is dangerous as an investor but required as a founder: "From the investor seat, I don't think you want to be in love with an idea. That's a risky thing because you'll find a way to express that by investing and make some compromises on the team because you know this idea is just so good, its time has come. But if the team isn't there, 90% of the time it doesn't work. Then there's a whole thing can you swap out the team? But the whole Founders Fund thesis was always no, you need the founder to run the company. But on the company side, you have to be in love with the idea. It's not that rational to start a company. There's a lot easier, more comfortable ways to make money if that's the goal. So it's got to be about what the company is doing specifically. If you want to actually start a company, it better be something that you're really passionate about, or you think that the problem is really important."

Patrick OShaughnessy

33,016 次观看 • 2 个月前