Patch Notes #167 — Road Warriors

The Nationals won the World Series, Game 7, in Houston, completing the first championship series in the history of major American sports where the road team won every single game. Seven games, zero home wins, the most-cited prior in sports not merely violated but inverted at full sample size. The team narrative underneath deserves its file: Washington started 19-31 (a .380 winning percentage, statistical last rites administered by every model), was widely urged to fire the manager and sell at the deadline, held course, and went 74-38 the rest of the way through a postseason featuring five elimination-game comebacks. “Stay in the fight” was their season slogan; the boring engineering translation is that mid-season rewrites under panic destroy more teams than mid-season deficits do (retention-is-architecture; endings-need-your-best-people, and the Nats assigned Scherzer and Strasburg to the ending). Baby shark forever. My October-baseball conversion pays compound interest annually. ...

November 10, 2019

Patch Notes #166 — Supremacy, Officially, With Rebuttal Attached

The quantum result published officially in Nature Wednesday: Google claims Sycamore’s 200-second sampling run equals ~10,000 years of classical compute; IBM’s rebuttal, published the same week, argues a smarter classical approach (using Summit’s massive disk as extended memory) could do it in ~2.5 days, supremacy demoted, per Big Blue, to “significant speedup.” The dispute is the healthiest thing about the milestone: an extraordinary claim receiving immediate, credentialed, adversarial peer review in public, both papers legible to any patient engineer. My file’s verdict stands with an amendment: Wright Flyer moment, yes, and IBM is correctly pointing out that Kitty Hawk had a stiff headwind. Both true. The 2.5-days-vs-200-seconds gap is still ~1000x, the classical goalposts will keep moving (they should), and the real curve to watch is error-corrected logical qubits, which remain at approximately zero industry-wide. Check back in five years. ...

October 26, 2019

Patch Notes #165 — One Tweet, One Sentence, One Supply Chain

The same seven days produced twin case studies in the price of the Chinese market, and the file demands both. First: the Houston Rockets’ GM tweeted support for Hong Kong’s protesters; within 72 hours, Chinese state TV pulled NBA preseason games from schedules, sponsors suspended deals, the league — whose progressive-values branding is a key global strategy — issued a first statement that apologized in two directions at once, and the players got pushed in front of cameras to absorb what the owners wouldn’t. Second: Blizzard banned Hearthstone champion Blitzchung for a year and clawed back his prize money for saying “Liberate Hong Kong” on a post-match stream, then, facing a #BoycottBlizzard revolt spanning its own employees (walkouts under the “Every Voice Matters” campus statue) and US senators from both parties, reduced the sentence in a statement insisting China had nothing to do with it, which persuaded no one anywhere. ...

October 11, 2019

Patch Notes #164 — The Founder Logs Off, the Qubits Log On

Adam Neumann is out as WeWork CEO, Tuesday, under investor pressure, the IPO shelved indefinitely, the prediction chain closing its arc in under six weeks from S-1 to defenestration. The final-week reporting delivered details beyond parody (the tequila-and-Run-DMC layoff meeting from 2016; “cereal entrepreneurship”-grade mission language; a private jet story involving a cereal box that I decline to summarize in a family archive), but the structural postmortem is the keeper: every guardrail, board, bankers, auditors, late-stage investors, had economic incentives pointing the same direction as the founder’s narrative, so the system had no adversarial reviewer until the public S-1 process installed one. Code review works because the reviewer doesn’t share the author’s sunk costs (corporate-governance edition). Institutions that pay all their reviewers in the author’s equity should expect author-quality review. ...

September 26, 2019

Patch Notes #163 — Repricing Season

The WeWork situation has progressed from close-read to controlled demolition in fourteen days: reported valuation targets have fallen from $47B through $20B toward $10-and-single-digits, the IPO is being “postponed,” bankers are renegotiating in public via leaks, and governance concessions (voting-share ratios, the $5.9M “We” trademark refund, spousal succession clauses deleted) are being announced with the cadence of hotfixes on a failing deploy. The repricing isn’t the story; the speed is. Private markets marked this asset up over nine years; the public market’s due diligence took nine days of S-1 exposure. That asymmetry, narrative compounding slowly under low scrutiny, then repricing instantly under high scrutiny, is the same curve as every incident this blog has filed (belief-with-uptime, the crypto unwind): confidence is a slowly-charging capacitor with a dead-short discharge mode. SoftBank’s Vision Fund thesis is now visibly the counterparty on both sides of its own markups, a sentence that will appear in business-school finals. ...

September 11, 2019

Patch Notes #162 — Community-Adjusted Everything

The WeWork S-1 dropped, and the earlier filed prediction (“it does not go smoothly”) is being graded generously by events. The document is a genre unto itself and Finance Twitter has performed a full distributed close-read. The greatest hits: “Community Adjusted EBITDA” (profitability after excluding, roughly, the costs of running the business); a mission statement about elevating “the world’s consciousness” attached to a company that subleases desks; the founder having personally trademarked “We” and charged the company $5.9M for it; loans to said founder; a governance structure where his shares outvote everyone combined and succession planning names his wife among the deciders. The business math underneath: long-term lease liabilities against short-term revenue commitments, a duration mismatch wearing a kombucha tap (banks call this “borrowing short, lending long”; banks also have regulators and deposit insurance for it). The valuation conversation has reportedly already slid from $47B toward numbers with fewer digits, and the IPO hasn’t even priced. The tell this archive exists to log: every era’s mania produces one document that makes the whole machine legible in hindsight, the ICO whitepapers, the Juicero teardown, and this S-1 is the cheap-money decade’s collected works. ...

August 27, 2019

Patch Notes #161 — The Metadata Was the Confession

Capital One disclosed a breach of ~106 million credit applications, and this one is our industry’s breach, cloud-native in every detail, so the file gets specifics: the attacker (a former cloud-industry engineer) exploited a misconfigured WAF via server-side request forgery, tricking the firewall box into calling the cloud metadata service, which cheerfully handed over the IAM role credentials attached to the instance, which were scoped broadly enough to list and copy S3 buckets at leisure. Every layer is a lesson: SSRF is the cloud era’s skeleton key because the metadata endpoint (169.254.169.254, memorize it like a fire exit) turns “make this server fetch a URL” into “become this server”; over-scoped roles turn one compromised box into an account-wide event (least privilege is boring until it’s the only thing that would have mattered); and detection came not from monitoring but from a tip, since the attacker had discussed the data online. We spent the week auditing our own role scopes and enabling IMDSv2-style protections; found two roles with wildcard S3 access “temporarily” (nothing so permanent, security edition). ...

August 12, 2019

Patch Notes #160 — One Small Step, Two Large Fines

Apollo 11’s 50th anniversary owned the fortnight’s heart: the restored mission audio, the CBS rebroadcast in real time, the reminder that they landed with a 1202 program alarm blaring because Margaret Hamilton’s priority-scheduled software shed load exactly as designed and kept the important tasks running while the rendezvous radar spammed interrupts. The most consequential graceful degradation in history, executed 250,000 miles from the nearest rollback, by code whose “asynchronous executive” ideas we’re still rediscovering and renaming (load shedding, priority queues, the old gas-auction lesson). I reread her source-code margin notes annually; “TEMPORARY, I HOPE HOPE HOPE” is the most honest comment ever committed. ...

July 28, 2019

Patch Notes #159 — Back-to-Back and Backtracking

The USWNT won the World Cup, back-to-back titles, 2-0 over the Netherlands, Rapinoe winning the Golden Boot and the Golden Ball while carrying the equal-pay fight on her shoulders like it weighed nothing. The stadium chanted “EQUAL PAY” during the trophy ceremony. Four stars on the crest; the argument continues in court with the trophies as Exhibit A. The office’s other World Cup ended the way only cricket can be cruel: India’s semifinal against New Zealand, carried to the reserve day by rain, collapsed to 5-for-3 in the chase before Jadeja’s fury and Dhoni’s calm nearly stole it back, and then Guptill’s direct hit found Dhoni an inch short, and the floor went silent. Everyone understood without saying it that we’d probably just watched his last ODI. Ten league wins meant nothing against one bad half-hour (the variance sermon; the out-of-distribution clause, in whites). It still hurts to type. ...

July 13, 2019

Patch Notes #158 — Facebook Mints a Coin, America Chases a Cup

Facebook announced Libra: a global currency, backed by a basket of assets, governed by a Swiss association of corporate partners (Visa, Uber, Spotify…), integrated into WhatsApp and Messenger, the most audacious product announcement since the iPhone and the most instantly-opposed in memory. Within days: congressional hearings scheduled, central banks issuing statements, regulators on three continents drawing lines. The strategic logic is immaculate (two billion users, remittance-market pain is real, the WhatsApp asset finally monetized), and the trust math is impossible. The year after Cambridge Analytica’s bill, the company proposing to issue money is the one whose core product monetizes behavioral data. “The infrastructure is real, the median project is vapor” has a new edge case: infrastructure this real, from a sponsor this radioactive, may be vapor because of the sponsor. Prediction, filed: Libra as announced never ships; the partners peel off at the first regulatory gunshot; but every central bank on Earth just got its digital-currency program funded by fear. The announcement’s biggest product will be its opposition. ...

June 28, 2019