正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Creating COM hijacking payloads has never been easier than with RustPack! With COM Hijacking, you can persist on a target system by 'living' in trusted user processes, such as the Chrome browser. You only need to bring one DLL. When the user opens Chrome, for example, a C2 connection... is established. 🔥 Achieving stable payload execution without crashing or freezing the target system requires an understanding of what is relevant. Additionally, lots of processes may attempt to load the hijacked CLSID; you don't want to receive 43 beacons per day from the same system. Limiting execution to a defined process is important here! 🎓 What about combining that payload with environmental keying, anti-emulation, anti-sandboxing, as well as AMSI and ETW bypasses? Doing all this yourself will take time. With RustPack, however, you can create such a payload in a few seconds, and it's stable! The video demonstrates how to create a payload DLL to execute Adaptix C2 shellcode in the Chrome browser. 🛸show more

MSec Operations

1,790 subscribers

16,140 次观看 • 1 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍

How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍

MSec Operations

26,047 次观看 • 1 年前

Tools such as from Impacket are usually flagged for lateral movement due to the pre-built service executable that is dropped on the remote system. However, some vendors also flag Impacket based on its behaviour. With RustPack, you can easily create service executables that won't be detected by signatures or behaviour-based detection. 😎 In this demo video, an unsigned service executable is generated. This will only fire the payload on a system with the hostname 'Win11' — environmental keying will prevent the payload from showing up in a sandbox or cloud analysis. To avoid Impacket detection, we drop and execute the binary via the recently released Titanis protocol library from TrustedSec: The result is an Adaptix C2 connection in the SYSTEM context. 🫡 #Pentest #RedTeam #Malware #OST

Tools such as from Impacket are usually flagged for lateral movement due to the pre-built service executable that is dropped on the remote system. However, some vendors also flag Impacket based on its behaviour. With RustPack, you can easily create service executables that won't be detected by signatures or behaviour-based detection. 😎 In this demo video, an unsigned service executable is generated. This will only fire the payload on a system with the hostname 'Win11' — environmental keying will prevent the payload from showing up in a sandbox or cloud analysis. To avoid Impacket detection, we drop and execute the binary via the recently released Titanis protocol library from TrustedSec: The result is an Adaptix C2 connection in the SYSTEM context. 🫡 #Pentest #RedTeam #Malware #OST

MSec Operations

70,896 次观看 • 11 个月前

In one of our previous videos we demonstrated how to generate sideloading binaries by cloning the exports of an existing DLL to forward them - . However, using Microsoft DLLs and Microsoft-signed binaries is not the best OPsec, as it's easy for EDR vendors to create a detection rule for e.g. "version.dll" being loaded from a non-System32 directory. 🧐 We therefore recommend using third party signed executables that attempt to load their own DLL. This is much harder to track/map on the endpoint. If you know which functions are imported from your signed binary (see import table), you can also generate a sideloading DLL for persistence or initial access use cases. Bring your own third-party signed binary and voila - you're trusted! In this example, we sideload into java.exe, which is signed by Oracle. It attempts to load several DLLs - including jli.dll as shown in the video. #RustPack can easily create such DLLs with custom export functions - anti-debugging features, sandbox evasion, signature evasion and anti-emulation can be easily added. 🔥🔥 Userland hooks are bypassed by default options and you can enable custom AMSI/ETW bypasses for the process on top. If you want to use it for persistence, you can of course still clone the original DLL exports as we did in the previous video and forward them accordingly. 👍 Interested in buying RustPack? Contact us at info[at] ! #RedTeam #Pentest #OST #Maldev #Malware #Havoc

In one of our previous videos we demonstrated how to generate sideloading binaries by cloning the exports of an existing DLL to forward them - . However, using Microsoft DLLs and Microsoft-signed binaries is not the best OPsec, as it's easy for EDR vendors to create a detection rule for e.g. "version.dll" being loaded from a non-System32 directory. 🧐 We therefore recommend using third party signed executables that attempt to load their own DLL. This is much harder to track/map on the endpoint. If you know which functions are imported from your signed binary (see import table), you can also generate a sideloading DLL for persistence or initial access use cases. Bring your own third-party signed binary and voila - you're trusted! In this example, we sideload into java.exe, which is signed by Oracle. It attempts to load several DLLs - including jli.dll as shown in the video. #RustPack can easily create such DLLs with custom export functions - anti-debugging features, sandbox evasion, signature evasion and anti-emulation can be easily added. 🔥🔥 Userland hooks are bypassed by default options and you can enable custom AMSI/ETW bypasses for the process on top. If you want to use it for persistence, you can of course still clone the original DLL exports as we did in the previous video and forward them accordingly. 👍 Interested in buying RustPack? Contact us at info[at] ! #RedTeam #Pentest #OST #Maldev #Malware #Havoc

MSec Operations

10,686 次观看 • 1 年前

RedNova: From Arbitrary File Write to Command Execution Using COM in Windows Months ago, I wrote a post ( about the unique method used in the RedSun exploit to turn a file write into command execution by using a COM object that can be triggered by a low-privileged user and runs as SYSTEM. In that post, I mentioned that there are other COM objects that can be used in the same way. I presented one object called CoFilterPipeline and noted that it needs some tricks before it can be weaponized. Now I've written a full blog post on how you can find such objects and how you can weaponize them in exploits like RedSun. The video below shows another COM object with the same behavior (windows 11). It's called PerceptionSimulationCoClass. A low-privileged user can activate it, and it runs as SYSTEM. The video doesn't contain any exploit (it just replaces the COM server as administrator). The goal is only to demonstrate how a file write can be turned into command execution as SYSTEM while being triggered by a low-privileged user.

RedNova: From Arbitrary File Write to Command Execution Using COM in Windows Months ago, I wrote a post ( about the unique method used in the RedSun exploit to turn a file write into command execution by using a COM object that can be triggered by a low-privileged user and runs as SYSTEM. In that post, I mentioned that there are other COM objects that can be used in the same way. I presented one object called CoFilterPipeline and noted that it needs some tricks before it can be weaponized. Now I've written a full blog post on how you can find such objects and how you can weaponize them in exploits like RedSun. The video below shows another COM object with the same behavior (windows 11). It's called PerceptionSimulationCoClass. A low-privileged user can activate it, and it runs as SYSTEM. The video doesn't contain any exploit (it just replaces the COM server as administrator). The goal is only to demonstrate how a file write can be turned into command execution as SYSTEM while being triggered by a low-privileged user.

Haidar

13,667 次观看 • 1 个月前

Building a RAG system that works with real-life documents is crazy hard. Why is nobody talking about this? (I'll show you what a complex document looks like in the attached video. Good luck with the 10-line code demos if you want to deal with this.) All I see online are "how to talk to a PDF" demos that won't take you far. If you think that's all you need, you won't like what happens when you try. In the video below, I'll show you what it takes to build a system that processes huge numbers of documents without losing accuracy. There are a few tricks here that I'm sure will impress you. The magic is happening in three phases: • In the way we process the documents • In the way we chunk the content • In the way we augment and store the chunks This is all built-in in GroundX, EyeLevel.AI's out-of-the-box RAG system. You can use it as a SaaS or install it in your own Kubernetes cluster and run it locally. If you have seen any other RAG system doing what I do in the attached video, please, let me know. I'd love to check them out. Disclaimer: I work with the team at EyeLevel. My advice is to take any document you have lying around, go to their site, create an account, and try them out. Here is their website:

Building a RAG system that works with real-life documents is crazy hard. Why is nobody talking about this? (I'll show you what a complex document looks like in the attached video. Good luck with the 10-line code demos if you want to deal with this.) All I see online are "how to talk to a PDF" demos that won't take you far. If you think that's all you need, you won't like what happens when you try. In the video below, I'll show you what it takes to build a system that processes huge numbers of documents without losing accuracy. There are a few tricks here that I'm sure will impress you. The magic is happening in three phases: • In the way we process the documents • In the way we chunk the content • In the way we augment and store the chunks This is all built-in in GroundX, EyeLevel.AI's out-of-the-box RAG system. You can use it as a SaaS or install it in your own Kubernetes cluster and run it locally. If you have seen any other RAG system doing what I do in the attached video, please, let me know. I'd love to check them out. Disclaimer: I work with the team at EyeLevel. My advice is to take any document you have lying around, go to their site, create an account, and try them out. Here is their website:

Santiago

75,788 次观看 • 1 年前

What do you think Fabian Hinz? Houthi ballistic missile fell near civilians in Raghwan, Marib, and appears to be a Burkan-3 or Zulfiqar. According to the DIA, the Houthis first launched the Burkan-3 in 2019 and displayed an identical system under the Zulfiqar name in 2021. The DIA assesses a demonstrated range of 1,200 km with a 250 kg payload and says the system is consistent with Iran’s Qiam or Rezvan MRBM. You can find the full guide of Houthi arsenal here:

What do you think Fabian Hinz? Houthi ballistic missile fell near civilians in Raghwan, Marib, and appears to be a Burkan-3 or Zulfiqar. According to the DIA, the Houthis first launched the Burkan-3 in 2019 and displayed an identical system under the Zulfiqar name in 2021. The DIA assesses a demonstrated range of 1,200 km with a 250 kg payload and says the system is consistent with Iran’s Qiam or Rezvan MRBM. You can find the full guide of Houthi arsenal here:

Basha باشا

179,361 次观看 • 15 天前

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

Haidar

51,545 次观看 • 5 个月前

smolvm has hit stable release: v1.0.0! You can now fork smolvm. It means you can fork to create virtual machines off of an existing one in less than 100ms, with all the processes cloned and running. smolvm is the first to have this feature + cross platform compatibility (macOS and linux natively). Here's a demo of a counter continuing on a forked clone while I only started it on the original!

smolvm has hit stable release: v1.0.0! You can now fork smolvm. It means you can fork to create virtual machines off of an existing one in less than 100ms, with all the processes cloned and running. smolvm is the first to have this feature + cross platform compatibility (macOS and linux natively). Here's a demo of a counter continuing on a forked clone while I only started it on the original!

BinBin

56,048 次观看 • 3 个月前

GM Fam ... ☕️, As announced, today is the day when I am opening all my galleries to you for a short time. The main gallery, Boring Cinema and the room with the future artist portals will also be accessible at any time later. Starting from the main gallery, you can first enter one and then several portals to reach the respective areas. We recommend accessing the galleries via a PC or Mac using the Chrome browser (updated). Many thanks to ᴏɴᴄʏʙᴇʀ for making it possible to create galleries in this form in the first place! The teaser (🔊 ON) gives you a little insight into what you can expect. Have a great Friday and a wonderful weekend, everyone! ... hope you enjoy it. 🫂

GM Fam ... ☕️, As announced, today is the day when I am opening all my galleries to you for a short time. The main gallery, Boring Cinema and the room with the future artist portals will also be accessible at any time later. Starting from the main gallery, you can first enter one and then several portals to reach the respective areas. We recommend accessing the galleries via a PC or Mac using the Chrome browser (updated). Many thanks to ᴏɴᴄʏʙᴇʀ for making it possible to create galleries in this form in the first place! The teaser (🔊 ON) gives you a little insight into what you can expect. Have a great Friday and a wonderful weekend, everyone! ... hope you enjoy it. 🫂

Cologne_Dude 🈴 🍌 🦍

63,085 次观看 • 1 年前

Elon Musk on how to get people to believe in your startup “If you think about a company, a company is a group of people that are organized to create a product or service. So in order to create such a thing, you have to convince others to join you in your effort.” But, as Elon explains, this is hard in the beginning: “In the beginning, there will be few people who believe in you or what you’re doing. But then over time — as you make progress — the evidence will build and more and more people will believe in what you’re doing.” So, Elon argues, the first thing you should do when starting a company is create a good demo or mock-up so that people can really envision what it’s about. “Try to get to that point as soon as possible, and then iterate to make it as real as possible, as fast as possible.” A good example of this is the Tesla Roadster. Tesla debuted the concept vehicle in 2006 with a famous photograph of co-founder J. B. Straubel driving California Governor Arnold Schwarzenegger. Tesla was a long way from mass-producing the Roadster at any level of affordability, but the demo made their vision more real and helped Tesla secure additional funding. This funding bought the company more time and resources to deliver its first 500 vehicles between February 2008 and June 2009. Video source: Computer History Museum (2013)

Elon Musk on how to get people to believe in your startup “If you think about a company, a company is a group of people that are organized to create a product or service. So in order to create such a thing, you have to convince others to join you in your effort.” But, as Elon explains, this is hard in the beginning: “In the beginning, there will be few people who believe in you or what you’re doing. But then over time — as you make progress — the evidence will build and more and more people will believe in what you’re doing.” So, Elon argues, the first thing you should do when starting a company is create a good demo or mock-up so that people can really envision what it’s about. “Try to get to that point as soon as possible, and then iterate to make it as real as possible, as fast as possible.” A good example of this is the Tesla Roadster. Tesla debuted the concept vehicle in 2006 with a famous photograph of co-founder J. B. Straubel driving California Governor Arnold Schwarzenegger. Tesla was a long way from mass-producing the Roadster at any level of affordability, but the demo made their vision more real and helped Tesla secure additional funding. This funding bought the company more time and resources to deliver its first 500 vehicles between February 2008 and June 2009. Video source: Computer History Museum (2013)

Startup Archive

27,436 次观看 • 1 年前

Chrome has received a massive AI update Gemini in Chrome can see your screen live and interact with you to explain things. Discussion is extremely natural and is a game-changer for learning. Here's how to access it: 1. Use a Gemini Pro/Ultra account 2. Log in to this account on Chrome 3. The icon should appear in the top right-hand corner 4. Click on it or use the shortcut Alt+G At the end of your conversation, the entire transcript is available: It's easy to find information in the future!

Chrome has received a massive AI update Gemini in Chrome can see your screen live and interact with you to explain things. Discussion is extremely natural and is a game-changer for learning. Here's how to access it: 1. Use a Gemini Pro/Ultra account 2. Log in to this account on Chrome 3. The icon should appear in the top right-hand corner 4. Click on it or use the shortcut Alt+G At the end of your conversation, the entire transcript is available: It's easy to find information in the future!

Paul Couvert

277,592 次观看 • 1 年前

Mert explains why privacy isn't secrecy “Privacy is not secrecy. It is the user having the option and the freedom to disclose their information. If it's mandatory, then it's surveillance. If it's optional, if it's up to the user, then it's freedom” “One good analogy is, you take all sorts of pictures on your phone. Some of those are private. You don't publish all of them on social media but you can publish whatever you want” “You can send messages on Twitter or Facebook or you might send private messages on Signal. Fundamentally, you have to have the choice” “When I pay for a coffee, I don't want my barista knowing I just bought a hair transplant treatment with the same coin" "Privacy is fundamentally about having the option. As long as you have the option, you're in control, it’s up to you what you do with it”

Mert explains why privacy isn't secrecy “Privacy is not secrecy. It is the user having the option and the freedom to disclose their information. If it's mandatory, then it's surveillance. If it's optional, if it's up to the user, then it's freedom” “One good analogy is, you take all sorts of pictures on your phone. Some of those are private. You don't publish all of them on social media but you can publish whatever you want” “You can send messages on Twitter or Facebook or you might send private messages on Signal. Fundamentally, you have to have the choice” “When I pay for a coffee, I don't want my barista knowing I just bought a hair transplant treatment with the same coin" "Privacy is fundamentally about having the option. As long as you have the option, you're in control, it’s up to you what you do with it”

genzcash

14,336 次观看 • 2 个月前

ELON: TO ACTUALLY START A COMPANY IS SIMPLER THAN YOU FEAR Elon is stripping away the mystique of the startup world, offering a blunt blueprint for anyone with an engineering mind and the drive to build. He is arguing that the barrier to entry is not as high as the "fear of failure" suggests. By focusing on a compelling prototype and leveraging the world-class venture capital ecosystem in America. Elon believes the next generation of builders can bypass the bureaucracy and start creating value immediately: “If you study engineering and you figure out how to design new things, then it is relatively easy to start a company. You just need to get a few like-minded people with you and then focus on creating a prototype, a compelling prototype as soon as possible. And then there is a strong venture capital industry in this country that will give you funding to take things to the next level. And that is all there is to it. And you might try it a few times, you may or may not succeed, but I think sometimes people fear starting a company too much. You know, what is the worst that could go wrong? You are not going to starve to death. You are not going to die of exposure. What is the worst that could go wrong?” Source: Naruto

ELON: TO ACTUALLY START A COMPANY IS SIMPLER THAN YOU FEAR Elon is stripping away the mystique of the startup world, offering a blunt blueprint for anyone with an engineering mind and the drive to build. He is arguing that the barrier to entry is not as high as the "fear of failure" suggests. By focusing on a compelling prototype and leveraging the world-class venture capital ecosystem in America. Elon believes the next generation of builders can bypass the bureaucracy and start creating value immediately: “If you study engineering and you figure out how to design new things, then it is relatively easy to start a company. You just need to get a few like-minded people with you and then focus on creating a prototype, a compelling prototype as soon as possible. And then there is a strong venture capital industry in this country that will give you funding to take things to the next level. And that is all there is to it. And you might try it a few times, you may or may not succeed, but I think sometimes people fear starting a company too much. You know, what is the worst that could go wrong? You are not going to starve to death. You are not going to die of exposure. What is the worst that could go wrong?” Source: Naruto

Mario Nawfal

205,115 次观看 • 9 个月前

This isn't quite right. The reason women are so susceptible to Marxist propaganda is because it is women's nature as a political philosophy. Women redistribute. Women take care of the weak. It doesn't work as a primary political system because you cannot take care of the weak if you don't have a masculine system on top to create the productivity necessary to do it. If the men aren't hunting there isn't meat that can be redistributed to the weak that can't hunt. The men have to have a reason to create the abundance necessary to redistribute. This is why you can have an immensely prosperous society that is capitalist first with the feminine organizing principle below it and it's why the opposite is not true.

This isn't quite right. The reason women are so susceptible to Marxist propaganda is because it is women's nature as a political philosophy. Women redistribute. Women take care of the weak. It doesn't work as a primary political system because you cannot take care of the weak if you don't have a masculine system on top to create the productivity necessary to do it. If the men aren't hunting there isn't meat that can be redistributed to the weak that can't hunt. The men have to have a reason to create the abundance necessary to redistribute. This is why you can have an immensely prosperous society that is capitalist first with the feminine organizing principle below it and it's why the opposite is not true.

The Last Boy Scout

46,595 次观看 • 3 个月前

I asked Luke Kornet about his memories from stretches where he was a DNP for many games in a row, and what his message is to the young guys who find themselves in that position now: “It's just a lot of peace to come to life of accepting the position that you're in and then just doing the best with that, versus trying to fight it and want to be in a different one.” “You can spend a lot of time worrying about things that you can't really control. But when you just take the opportunity that you have and do the best with that, you can have days like today where a lot of guys came in and were able to contribute. You can have peace about knowing that you did your job well, just as you did the day before, the day after. It might just look a different way every time. I feel like that's what I've been taught through my life. That's the only thing attitude that you can have that you can actually do something with – versus trying to control things that are outside of what you can control.”

I asked Luke Kornet about his memories from stretches where he was a DNP for many games in a row, and what his message is to the young guys who find themselves in that position now: “It's just a lot of peace to come to life of accepting the position that you're in and then just doing the best with that, versus trying to fight it and want to be in a different one.” “You can spend a lot of time worrying about things that you can't really control. But when you just take the opportunity that you have and do the best with that, you can have days like today where a lot of guys came in and were able to contribute. You can have peace about knowing that you did your job well, just as you did the day before, the day after. It might just look a different way every time. I feel like that's what I've been taught through my life. That's the only thing attitude that you can have that you can actually do something with – versus trying to control things that are outside of what you can control.”

Noa Dalzell 🏀

48,992 次观看 • 1 年前

Scott on why conviction in an idea is dangerous as an investor but required as a founder: "From the investor seat, I don't think you want to be in love with an idea. That's a risky thing because you'll find a way to express that by investing and make some compromises on the team because you know this idea is just so good, its time has come. But if the team isn't there, 90% of the time it doesn't work. Then there's a whole thing can you swap out the team? But the whole Founders Fund thesis was always no, you need the founder to run the company. But on the company side, you have to be in love with the idea. It's not that rational to start a company. There's a lot easier, more comfortable ways to make money if that's the goal. So it's got to be about what the company is doing specifically. If you want to actually start a company, it better be something that you're really passionate about, or you think that the problem is really important."

Scott on why conviction in an idea is dangerous as an investor but required as a founder: "From the investor seat, I don't think you want to be in love with an idea. That's a risky thing because you'll find a way to express that by investing and make some compromises on the team because you know this idea is just so good, its time has come. But if the team isn't there, 90% of the time it doesn't work. Then there's a whole thing can you swap out the team? But the whole Founders Fund thesis was always no, you need the founder to run the company. But on the company side, you have to be in love with the idea. It's not that rational to start a company. There's a lot easier, more comfortable ways to make money if that's the goal. So it's got to be about what the company is doing specifically. If you want to actually start a company, it better be something that you're really passionate about, or you think that the problem is really important."

Patrick OShaughnessy

33,016 次观看 • 5 个月前