Categories
kids Life Life Tips

I am exhausted, but I will soldier on

Reading Time: 3 minutes

Dealing with my 14 y old: the new retainer got lost in a week. See: I was smart that I bought the “retainer insurance” 🙂 If the opportunity arises, I would buy the “iPhone insurance” too (remember why I bought iPhone 15 : long story short, she accidentally broke her iPhone XR (which was passed on from me), and I decided to buy iPhone 15 so that I can give my iPhone 12 to her.

And before that, she lost her wallet at the J (due to theft).

So we have 2 accidents and one theft (in which she is victim, but still as my wife says, you don’t want to be careless so that the thief would notice you 🙂

Again maybe I could always use more patience: in life, in investing and at work.

Why, why, why is her so sloppy in terms of keep track of her things?

I can think of one reason, which is coming back right to us – we babied her too much, reminded her consistently (sometimes a bit excessive), which made her rely on our reminders to some extent. This is definitely not healthy. Here is one article on the topic – How to get your kid to do stuff without having to constantly remind them

Another reason is probably because there is no real consequences for her on those kinds of things. Imagine if I “broke something like iPhone”, there is no iPhone then, let’s just say that I lost a radio, or a cassette player (a Walkman). It won’t be trivial let me guarantee that. Even if my parents didn’t say anything: I would feel bad. In college now I recall I did have a few accidents: including once someone broke my drawer and stole my money there – remember the loss from theft story I talked above. Even today I still suspected someone in my dorm room or someone has the connection stole my money (they probably knew I received money shortly before that). Once in a bus in Wu’chang, I realized my wallet got stolen by a pocket picker.

I guess that’s one hard part of parenting. But I think I would still trade “being my daughters’ Uber driver” any day (see the paragraph below), over true retirement which means I probably need to find something productive to do if I am still healthy.

昨天基本上就是半退的状态-我告诉我老大我大概为她的事跑了两个半小时-为她的retainer开车到new and cool St. Peter’s orthodontist 🦷 office 两次(2 round trips, drop off mold 1st, then pick up when the new retainer is ready); 放学到学校接她(got “dad, can you pick me up” text when I was taking a walk to Warson park). Yes sure 🙂

PS: I talked about “soldier on” mentality to my 14 year old and she thinks it’s too much. She basically her generation doesn’t care. My sense is she felt that is “out of date” concept. After all, until fairly recently she never ate anything from White Castle (they have very cheap food). I guess many of her friends are privileged like her too. I heard some people spending tons of money on Bar and bat mitzvah: one of my Jewish friend told me some rich people spent wedding like money on the adulthood ceremony. She was invited to one last year and it seems pretty good too. This is quite different from my middle school days. Too bad she still has to work on similar math homework I do in my days 🙂

关于Soldier On, 我的理解很大程度上是“坚持”:我记得高中一年级,有一次运动会,跑四百米,我知道我有可能拿道第三名,最后一百米使出吃奶的力气,紧紧跟住第三名,后来我是第四。我的一个同学后来跟我说:其实他(第三名)也是害怕你一直跟着他。我觉得现在美国的很多问题其实也是因为缺少坚持,努力和毅力。

And if/when I tried to tell her or remind her to be more careful (maybe once to 3 times at the most), she would say: dad, basically you are telling me things I already know. So, here am I, the middle age guy who tends to repeat himself 啰嗦或是爱唠叨的老头。

I think she may be more talented or intelligent than me, but without that grit I am not 100% sure that she will be successful. A related phenomena is I saw very few Americans want/like to do physical labor nowadays: by that I mean things such as construction work, mining etc. For example, we saw all the contruction workers in the Baltimore Bridge accident are immigrants – An international tragedy: A father of 3 and a budding entrepreneur are among 6 victims of the Baltimore bridge collapse. The irony part is those workers were trying to fix the potholes in the highway (on the bridge) that many commuters and 18 wheelers use daily – assume mostly are the wear and tear.

Or maybe this is so called generation gap 代沟?After all, once she said: I don’t think there is any ethical billionaire. I guess her definition of “ethical” has higher standards than most. Then she added: Taylor Swift included too. That’s my girl: at least she is thinking and has her own opinion.

Categories
Life Life Tips

Stay at Hotels in China 回国住旅馆

Reading Time: < 1 minute

I am used to stay at hotels when I visited Shanghai, from the Home Inn or the like back in the days, to more fancier or western brand hotels, now that I have a family and kids.

I never thought that I would stay in hotels when I go home and see my parents. But that happened in year 2016.

我们大概是傍晚🌆 到的我父母的家:两卧室的老公寓。我当时根本没有想到要去住旅馆🏨。但是吃了晚饭后,我很快就意识到住在我父母家不现实。因为我看到另外一个房间的床上都放满了东西。

我们就出去找旅馆。先找了一个类似招待所一样的地方,交了押金等,后来很快就意识到房间的味道(发霉的味道?)太大,就损失了一百块的押金,住到了对面的稍好一点的旅馆。过了几天,找到了南苑旅馆(这家是连锁的,还可以),就又搬到那里,一直住到去其它城市我的岳父家。在我岳父家我们也住的是旅馆(招待所)。

最近三次回国(2017,2019,和2023年),我就住这一个(17年开的)。中文名字叫宁波北仑世茂希尔顿逸林酒店。今年夏天回国基本上定下来还是住这一家。这一家(DoubleTree)不包早餐*:她家有自助餐,还可以,大概一百多块钱。附近有肯德基,兰州拉/牛肉面,还有一个宁波还是台州的连锁的豆浆,肉包子等传统中式早餐。还有星巴克等。所以不用天天吃旅馆里的自助餐。旅馆傍边就是富邦世纪广场,地铁长江路站,银泰城也不远。我个人比较喜欢银泰城里的西贝莜面村。拿了也有外婆桥等本帮/宁波本地菜。

*美国的Double Tree Hotel 也不包早餐。Hotel chains that provide free breakfast (usually buffet style) include: Hampton Inn (by Hilton), Hilton Garden Inn, Hyatt Place/ Hyatt House and Residence Inn (Marriott). This is not a complete list. I know in addition to Double Tree, Marriott’s Courtyard doesn’t have free breakfast either.

Aging Parents 上了年纪的父母

这个方面的问题我以前没怎么想到。就是父母上了年纪以后可能会更“粘人”。下面是两篇英文的相关文章。

Strategies for Dealing With a “Clingy” Senior

How to Handle Emotionally Needy Parents

现代医学有很多进步,手机微信等现代科技也带来很多方便,同时也带来不少问题。我想对老年人也适用。微信是中国最流行的手机应用之一。我爸爸会用智能手机,但是他把家庭群当成了网上的某些论坛,骂人。还不如我妈妈不会用手机。说到我妈妈不会用手机,还有个故事。疫情前,她在老年大学,拿出来老年手机(就是只能打点话,发短信的手机),有人就说,都这个年代了,你怎么还用老年手机。原来她们班也是有微信群。后来,大概是16年回国那一次,我有个就是帮她在手机上弄好微信。

Categories
Investing

Charlie Munger: when to bet big or get a large serving

Reading Time: 2 minutes

This is a continuation of my personal reflection on investing in stocks. I recall most recently I talked about patience over frequent short term trading here. Patience is import during power (electricity) outage too: which btw, in St. Louis due to the unpredictable weather, it happens once a while (such as this one in year 2006. And in summer 2021. Both the Jan 2007 and the July 2021 outages lasted multiple days. Also keep thing in perspective, I recall in July 2006 an electrician died when working to restore the electricity.

Today (this morning to be exact) I just noticed 2 stocks in my portfolio. And one is much bigger than the other in terms of portfolio size: 20 to 1. The big one barely went up 1%, the small one went up 10%. If you are curious, the large holding is $KO Cocacola, and the smaller one is $VERX Vertex software inc (tax software).

This reminded me of something Charlie Munger said quite a few times.

Charlie Munger: “And the wise ones bet heavily when the world offers them that opportunity. They bet big when they have the odds. And the rest of the time, they don’t. It’s just that simple.” (reddit self.investing)

Charlie Munger in final CNBC interview: You’ve got to learn how to recognize rare opportunities when they come (he was talking to CNBC Becky Quick on this topic, at about 5 minutes 17 seconds mark)

Charlie said here in a Q&A session with Berkshire Hathaway shareholder meeting too. In this one they talked about various topics of issues.

This is also his “put eggs in a few baskets and watch them carefully” portfolio management philosophy.

One thing I need to add is $KO does has about 3% annual dividend yield, while $VERX doesn’t have a dividend.

Categories
Software development

More thoughts on Apple AntiTrust lawsuit

Reading Time: 3 minutes

(08-05-2024) Noticed judge ruled in a similar case, the Google search engine/Apple iPhone case, and Google lost this 1st round. Think they will likely appeal. But Tech Industry Braces for Fallout From Google Antitrust Verdict. This potentially has some impact on Apple.

Also, today I noticed the Google chat app on iPhone is called just “Chat” app. I guess that’s because Apple doesn’t have such an app: similar to slack or something like that.

(04-11-2024) Big tech in this new regulatory environment in general, Andy Jassy (CEO of Amazon) was talking to CNBC’s Andrew Ross Sorkin this morning on Squawk Box. I think Andy has a good point.

Andy Jassy (CEO of Amazon) was talking to CNBC’s Andrew Ross Sorkin this morning on Squawk Box: on failed iRobot acquisition

(Update 04-06-2024) Yesterday it was somewhat educational to me in terms of the Apple ecosystem. I need to project screen along with audio/video to the projector or the system in the school gym. Our school district is all Apple in terms of computers etc. The way to do it is via “screen mirror” on my MacBook, but the WiFi I am on has some limitations: basically it blocks YouTube. But I want to play something on YouTube for the passport night. One workaround I came up with: I used my phone (iPhone 15) as hot spot, play the YouTube video once (now it’s the memory and I can play it even without Internet). Then I connect to the school public WiFi for the screen mirror purpose.

But there are some more issues: for example, another person texted me the YouTube links via text message, my iMessage App on MacBook could not receive it. On the other hand, a teacher texted me the movie clips via iMessage (using her iPhone), it worked pretty much out of the box.

Btw, for the “YouTube blocking issue”, I actually tried to use a VPN, but as soon as I connect to VPN, the screen mirror stops working. Also, it seems even on VPN, the YouTube is still blocked?

(Original) Some people may know I am an Apple fan, and to be honest, I think I am. And I am not a big fan of the DOJ’s anti-trust lawsuit against Apple. Full disclosure: I own a few shares of $AAPL too.

I talked about the anti-trust for a bit here. And I was a bit surprise to hear Walter Isaacson’s view on this – YT Video Walter Isaacson: The law says you can’t use market dominance to then dominate an adjacent field

Walter’s Argument is interesting because he mentioned both the “dual mandate” of DOJ/FTC regarding the anti-trust laws: protect both competition and the customers. In terms of competition, he said, a company that uses its dominant position to get dominance in tangential areas, that company may have violated the law.

For me personally, I started to using Apple Pay since I got the Apple Watch – after seeing coworker using it at the MC Daily Grind Cafe. I used Apple Pay much less frequently via iPhone (before I had the Apple Watch). I bought my 1st Apple Watch in year 2017.

Consumer addiction

A side note of Apple’s domination in the smart phone market, along with the general popularity and Android and iOS smartphones in the world, and in our daily lives, may have pushed the pendulum too far in terms of addiction to the phone or tablets for many people. I am not just talking about the teens doing TikTok, or adults doing FB or Instagram. I am talking about both legit use such as the Panera Bread app (refer to this one) and also binge watching Netflix (or in the case of my wife, Korean soap opera on her iPad, at the expense of sleep sometimes). Jon Hadit, the NYU professor has written quite extensively on the topic too – First He Came for Cancel Culture. Now He Wants to Cancel Smartphones.

Visa Mastercard anti-trust lawsuit

Interestingly, Jay Clayton (former SEC chair under TFG) has a different view: When governments select what a market structure ought to look like, innovation dies: I was a bit surprised to hear the amount of the fine, $30 billion, but on the grand scheme of the things, it’s still something they can bear (the industry, I mean, both them and the banks).

Categories
Software development

Panera bread system down

Reading Time: 5 minutes
Panera App down screenshot

(Update 11-12-2025) Came across this news about the class action lawsuit against Panera. The subject is a bit misleading, but you have evidence you can submit your claim.

(Update 04-05-2024 BleepingComputer) Panera Bread week-long IT outage caused by ransomware attack

(Update 03-27-2024) Both the app and the website are back, fully functional as of now (this morning). Btw, I cleaned up a few CC in my account (from 6 to 3); also enabled 2 factor authentication for MyPanera account (via SMS, not perfect, but better than nothing). Honestly I still don’t know what happened to Panera’s system. One thing impressed me a bit is their mobile app works out of the box – it’s logged in this morning when I opened the app. I used to work on an app when I was working for the Mastercard, and that feature alone (make sure the user logged in if he/she was logged in before the app update) is a difficult task to do.

(Update 03-26-24) It looks like the website is coming back, but I cannot log in using my old credential either. Forgot password via email or #MyPanera number don’t work either 🙁 Thanks to the Twitter user who reported the website coming back. || A small benefit of this thing is it made me to look up the good old MyPanera number. Another side benefit is for me to rethink the practice of saving credit cards under my Panera account (going forward will probably only do Apple Pay). Also refer to our friend’s new article at SVDaily.

https://twitter.com/JTolo54/status/1772653099720622539

Yesterday morning (3/24), I went to the the new U City Panera Bread as usual, and noticed system is down nationwide: the mobile app and the kiosk didn’t work. But the register still works. Note the new U City is an all digital store and it’s almost full outage – the manager said they have a computer for employee order and I assume he can ring a bit regular customer sales as needed (maybe it’s the 3rd party app such as Uber Eats order instead?). WiFi is down too so I am using iPhone as hotspot. At this time it seems 3rd party apps (e.g., Uber Eats) still work.

I posted it on Twitter and also posted a survey yesterday evening.

This sadly could have more impact to Panera compared to say, companies such as Garmin. Some of my readers may know I am a loyal Panera bread customer, and I regularly went to the Old Olive store (sometimes walk) since year 2005; sometimes I work there using laptop (remote work). So it’s almost 20 years since I regularly go there. I also talked about them quite extensively on my blog.

(In Chinese) 原来Panera网站炸了. Note Panera is popular in Chinese American customers too.

In the News

This incident was not widely reported in the news, due to various reasons: it happened on a Saturday; and Panera is not McDonald’s or Starbucks.

Panera Bread digital channels suffer national outage (restaurantbusinessonline, 03/25/24): quote – But it appeared third-party delivery orders were still coming in to units.

Panera Bread Hit By Massive National Outage (SVDaily, 03/24/24, also the Reddit thread around the outage). I noticed the discussion around Disaster Recovery, and business continuity plan are valid. Back in the days at Mastercard we do those once every year, and it was fairly rigorous. But I don’t see many other organizations do that kind of exercise.

Panera Bread Hit by Nationwide Outage: Cyberattack Rumors Swirl as Digital Ordering Crashes (the Cyber Express).

Note the issue surfaced on Saturday 03/23/24.

Previous Security Issue

Btw, it’s the 1st time Panera Bread website/app/kiosk underwent an incident like this. A few years ago, I do recall Panera Bread had a security related issue, and was remediated quickly. Below are some articles around the issue.

No, Panera Bread Doesn’t Take Security Seriously;

Panera Bread’s half-baked security;

Panerabread.com Leaks Millions of Customer Records

Btw, some reddit discussions on KrebsOnSecurity (Brian Krebs: Wikipedia); again Reddit: What do you think about Brian Krebs as security professional?

Digital Transformation

Panera Bread, here in the St. Louis area they are called St. Louis Bread co., or breadCo as some people call it, is early in its digital transformation effort. The in store kiosks and the online ordering (web and mobile app). Personally I liked the convenience of it, although I do miss the “first name basis” at the counter when I started going to Bread Co almost 20 years ago.

Ownership Change

The company was public, until it was took private in year 2017 (Wikipedia, scroll down a bit, you will notice the 03/24 Computer System issue as well)

Sipper Club (loyalty program) (and in year 2011, I interviewed there once for a dev position related to that, no offer)

I like that too. I recall it was initially called “Coffee+” or something like that, and it was limited free coffee refill. Later it was expanded to soda and other drinks. Note there were controversy around that too. I mean the charged lemonade. Initially I didn’t pay close attention to the caffeine content, until the news break. My wife was not happy that I gave our daughters that drink once or twice.

Pandemic (during pandemic in year 2020?, I interviewed there again for a software architect position, no offer)

I recall in the early days of pandemic, probably in May 2020, we cannot go in the store. The first time I ordered and picked up the food there, when I saw the young girl (masked) brought out the food, I was almost in tears.

Menu Revamp

They are in the process of big revamp of the menu items in the coming April. Then this happened. I still think it’s unlikely menu revamp will cause this. Menu revamp is nothing new at Panera and at other restaurants, Panera has done many times during my 20 years observations with them. I recall once they tried pizza: it didn’t work out very well (this was before the most recent pizza effort). Once they removed the famous Frontega Chicken sandwich, and some fans revolted, and they brought it back. I am a fan of Frontega, btw.

Key People

Ronald M. Shaich: he is the founder of Panera, and I believe he engineered Panera’s buying St. Louis Bread Co., rebranding, and digital transformation and so on. I saw him in person once at the SunsetHills Panera. It seems he is friendly with the rank and file Panera IT people (I saw a guy who interviewed me in year 2011, quite a few years after that).

I also liked Niren Chaudhary, although his tenure is not as long as Ron, once he replied me to my comment in LinkedIn. It was before Pandemic, I commented on the closing of the store in ForestPark way at Central West End, near BJC/Wash U medical school campus.

CIOs, from LinkedIn (former; current/interim).

Panera Bread on LinkedIn

Categories
Software development

When companies vastly overpay for acquisitions

Reading Time: 2 minutes

I can think of two scenarios: one is acquisition is done via cash; another one is done by stocks (and the stock itself is overvalued).

The yardstick of overpayment

======

EBITA or EBITDA (or use Charlie Munger’s word, replace it with bullshit)

I know from my own software industry experience, 10x sales (or revenue) is usually a fair price.

Example:

Francisco Partners Completes Acquisition of Sumo Logic: Pursuant to the terms of the definitive agreement announced on February 9, 2023, Francisco Partners has acquired all outstanding shares of Sumo Logic common stock for $12.05 per share in cash, valuing the company at an aggregate equity valuation of approximately $1.7 billion.

SUMO LOGIC HISTORICAL REVENUE (Zippia)

Sumo Logic’s peak revenue was $300.7M in 2022. The peak quarterly revenue was $79.8M in 2022(q4). Sumo Logic’s revenue increased from $155.1m in 2019 to $300.7M currently. That’s a 93.91% change in annual revenue.

If my memory is correct, they were losing a lot of money too.

Note each industry has its own metrics (or yardsticks).

In the below example, I assume Square and AfterPay is in the fintech space, and Disney is in the content creation (movie and animations to be specific), and park/entertainment business.

Two Examples

Scenario 1: Disney buying 21st Century Fox, US $71.3 billion

Scenario 2: Square Inc (now Block) bought AfterPay for $29 billion

(Reuters) The $29 billion deal in 11 weeks: how Square bought Afterpay

(paymentgenes) The Real Reason Why Square is Acquiring Afterpay

Both scenarios didn’t play out well. Both acquirers’ stocks ($DIS; $SQ) were down since the acquisitions. Btw, I googled those two deals’ closing date.

For Block (Square Inc., I used 02/01/2022 per this source, noted another source too)

I think, maybe we should track the performance between the day before deal was announced until now.

======

Consolidation in the Production Monitoring software space

In addition to Sumo Logic, we have

New Relic (by Francisco Partners and TPG for $6.5 billion) –

Revenue in 2023 (TTM): $0.96 B
According to New Relic ‘s latest financial reports the company’s current revenue (TTM) is $0.96 B. In 2022 the company made a revenue of $0.88 B an increase over the years 2021 revenue that were of $0.75 B.The revenue is the total amount of income that a company generates by the sale of goods or services. Unlike with the earnings no expenses are subtracted.

Splunk (Cisco): this is after Cisco Completes Acquisition of AppDynamics (2017)

Categories
Software development

Software or technology interoperability

Reading Time: 2 minutes

Blue and green bubble divide

As mentioned here in the CBS News YT video – “Breaking down the Apple antitrust lawsuit”.

iMessage vs text message. I noticed some issues in the group text messages in the past: for example, I can not add someone on Android to a group text. If one of the member in the group text is on Android, we need to resend via text message (default is iMessage), and so on.

Recently I asked my daughter (14 year old) about the group text chat as well, and she said: we prefer iPhone, but we don’t exclude Android people too 🙂 I guess they are the inclusive generation.

This reminded me of the CAD interoperability product: I worked on long time ago, it translates from competitor’s file format to ours. Also around the time, I recall it was very hard for us to compete in the 3D CAD market place (we were No. 2 in terms of market share). And our executive’s marketing strategy: we are more open (than the big bad No. 1 guy). See some similarity with Apple here? 🙂 Btw, I recall it was not easy to develop the translator, both from technical and business perspectives.

‘Buy your mom an iPhone.’ – Tim Cook’s 5-Word Remark Could Curse Apple’s iPhone (newsweek)

Social Stigma

Apple’s ‘green bubble’ Android texts fuel ‘social stigma,’ DOJ claims in landmark suit

More about Anti-Trust

I had to admit I am not a legal expert. But one thing to note this is not isolated to Apple. This Yahoo Finance article Justice Department files antitrust suit against Apple has a graph says Regulators vs Big Tech that summarized all the US regulators actions against the big tech currently.

Why Google Is Being Sued by the Justice Department | WSJ (YT Video)

Why the DOJ and 16 states are suing Apple in a landmark antitrust case (PBS Newshour, YT Video)

United States v. Microsoft Corp. (Wikipedia)

Acclaimed tech columnist Mossberg says the DOJ’s claim of an Apple monopoly is ‘laughable’ (Walt Mossberg)

Walter Isaacson: The law says you can’t use market dominance to then dominate an adjacent field (YT Video): I was in the Mossberg camp until Walter mentioned the “dual mandate” of DOJ/FTC regarding the anti-trust laws: protect both competition and the customers. In terms of competition, he said, a company that uses its dominant position to get dominance in tangential areas, that company may have violated the law.

Some of my thoughts on the topic in Chinese (linkedIn)

很多年前在一个CAD/PLM 软件公司打工。我的东家在三维CAD行业里是老二,有一段时间公司很紧张,因为汽车行业里面除了美国通用汽车有不少公司要换老大的软件:福特说要换,丰田后来还是选了老大的软件(世界上最大的两家飞机制造公司也用她家的),尼桑(日产)是我东家非常想保住的客户。后来我们那里的人想到一招:就说我们比她们更open, 她们是封闭的(就像今天美国司法部的AT部门的人说的那样)。题外话:大概也是二十年前,苹果用我们的软件设计她们的产品,她家当时的当家花旦是iPod. 前提是我们的三维设计软件在她家的Mac 上运行。#DOJvsApp || Back to software or more broadly the technology business, building better #mouseTraps or #moat if I could use #warrenBuffett words, is one important measurement of success #yardstick

More on Proprietary Software (Wikipedia, note the vendor lock-in as well)

Categories
gadgets

AirPods I owned

Reading Time: < 1 minute

I wrote about it last year.

And I just commented on Twitter about a question.

My Twitter/X reply

I just noticed my 1st gen AirPods Pro is $258.19 on Amazon. Maybe I should tell my 14 year old to sell it and buy a new one 🙂

Other headsets I used and am using

Another headset or headphone that I use is this one from Costco – Bose QuietComfort 45 SE Noise Cancelling Over-the-Ear Headphones, it’s selling for $170 now (much cheaper than what I paid for). For longer time wearing, I prefer the AIrPods 3. Bose does have some advantage though, for example, in cold weather, it could double as an ear muffs.

Categories
Software development

UnitedHealth Group Change Health hack

Reading Time: 4 minutes

(03-02-2025) Wikipedia – Change Healthcare 2024 Cyberattack.

(hyperproof) Understanding the Change Healthcare Breach and Its Impact on Security Compliance

(12-19-2024) How the ransomware attack at Change Healthcare went down: A timeline (03-02-2025) It seems this article is no longer available.

(04-09-2024) Change Healthcare faces second ransomware dilemma weeks after ALPHV attack || So in summary, ransomware attack poses two threats: 1) Loss of data, if they bad guys encrypts the data; 2) Leak of data, in the case a company or an organization (the victim) restores the data from backup (without paying the attacker), the attacker can threat to leak the data online (or sell the data to other bad guys in a black market etc.), so basically this is what happened here.

(Update 03-24-2024) It seems Panera Bread, which probblay has 2,000 stores in the US, had just experienced a similar issue.

Panera Bread app and kiosk down since 03-23-2024 afternoon
I am speculating the root cause is ransomware attack

I recall few years ago Panera did have an incident – Panerabread.com Leaks Millions of Customer Records

(03-09-2024) I first heard about this a few weeks ago, something like below:

美最大医保网遇网攻或来自外国黑客万余药房受干扰

Note it was not in the mainstream news at least not covered heavily in the network TV and so on, initially. Until its impact are felt by both providers and the patients. Below are some more recent coverages.

Cyberattack Paralyzes the Largest US Health Care Payment System – The New York Times || https://twitter.com/ryanstellar/status/1763666449988751373 || https://twitter.com/zackkanter/status/1765170835919143293 || 

https://twitter.com/Lis86274333/status/1763351768002355431 || 

EXPLAINER: What to Know About the Change Healthcare Cyberattack | Health News 

Change Healthcare has acknowledged the hack, which reportedly affected billing and care authorization portals. It’s led to prescription backlogs and missed revenue for providers, posing potential threats to worker paychecks and even patient care.

“Our experts are working to address the matter, and we are working closely with law enforcement and leading third-party consultants such as Mandiant and Palo Alto Networks on this attack against Change Healthcare’s systems,” Change Healthcare said. “We are actively working to understand the impact to members, patients and customers.”

(My take, lesson learned: cyber security best practice; collect the data that’s only necessary) 

“The Russian-speaking cybercriminal gang known as AlphV and Blackcat claimed responsibility and said on its darkweb site that it exfiltrated 6 TB of data in the attack against Change Healthcare.”

NPR: Health industry struggles to recover from cyberattack on a unit of UnitedHealth  

PBS has a few reports on that as well: such as this one – How a cyberattack crippled the U.S. health care system

For IT and security professionals

YT Video: 🔒 Ransomware Chaos -Part 2: UnitedHealth Drained…Dishonor among thieves🦹🏻 – The Briefing (thanks to Ryan⭐ Stellar and Mike Martinelli for the YT video; same below)

YT Video: 🔒 Ransomware Chaos: UnitedHealthcare Under Attack by BlackCat Hackers!…youtube.com (this is part 1)

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare – Krebs on Security On March 3, a BlackCat affiliate posted a complaint to the exclusive Russian-language ransomware forum Ramp saying that Change Healthcare had paid a $22 million ransom for a decryption key, and to prevent four terabytes of stolen data from being published online.

https://twitter.com/zackkanter/status/1765170835919143293 (technical explanation of EDI and Change Healthcare)

Related Incidents

This Change Health incident somehow reminds me of the SolarWind hack a few years ago. It seems Microsoft has some more work to do, as they are still a popular target for hackers.

SolarWinds hack explained: Everything you need to know – 2020 United States federal government data breach – Wikipedia Microsoft exploits || SolarWinds exploit

A ‘Worst Nightmare’ Cyberattack: The Untold Story Of The SolarWinds Hack

“The tradecraft was phenomenal,” said Adam Meyers, who led the cyber forensics team that pawed through that tainted update on behalf of SolarWinds, providing details for the first time about what they found. The code was elegant and innovative, he said, and then added, “This was the craziest f***ing thing I’d ever seen.”

The hackers didn’t do anything fancy to give them the domestic footprint, officials confirmed. In fact, they just rented servers from Amazon and GoDaddy.

SWI stock has not done too much in last 5 years mostly due to this attack.

Also the Kronos attack which received less media attention (somewhat similar to the UnitedHealth hack). I recall this incident because around at time I was working on a Kronos based project (app, the official name of the app is Ascension Nurse Center of Excellence). It didn’t work out due to various reasons, after the company sunk millions of dollars on the project.

(Update 2026-05-09) Kronos data breach: what to know about the ransomware attack and its consequences || The Kronos Ransomware Attack: Here’s What You Need to Know

(The Garmin breach/incident happened in the year 2020, Velo) How did the Garmin cyber attack happen, and what does it mean for users? || 6 Things to Learn from the Garmin Security Breach (Terranova Security)

Some other question: 

Legality aside, paying the ransom encourages the hackers? See also Incident Of The Week: Garmin Pays $10 Million To Ransomware Hackers Who Rendered Systems Useless. But from a business’s perspective, they are usually between a rock and a hard place: meaning if they don’t pay, they usually don’t know how long it will take them to recover the data, if at all; or if they pay up, they essentially are working with the bad guy (or encouraging the bad guy).

Can we ever negotiate or trust the hackers (the bad guys)? || This somehow reminded me of my personal experience when I was working for one of the major credit card company (their loyalty and rewards platform), and at one time I was assigned to investigate the root cause of an incident in which the bad guys (or girls) logged into some cardholers’s loyalty redemption website quickly after the website launch, and redeemed their points for air tickets or hotel bookings. At the time, amid the tedious work, I asked myself: how come in this world there are evil people like that?

Another question I had for the UnitedHealth Group (Change Healthcare) hacking: if this is the notorious Russian hacking group BlackCat, can the US government do something about it (hint: retaliation)?

Categories
Investing

I need more patiene on investing

Reading Time: < 1 minute

Some of the stocks that I should have hold on longer

NVDA, day traded in year 2022. Quite a few times.

The below two stocks are less well known – day traded in year 2023.

LPX

GRC

Stocks that I hold on for too long: RIVN, “hold on the loser, sell the winner” is the opposite of what I wanted to do.

Some of the things I am going to try

Delete the mobile apps (so far, deleted TD Ameritrade and Vanguard app)

Consider using less Robinhood and ThinkOrSwim (kept the latter as TD Ameritrade accounts are transferring to Schwab post the acquisition)

Do more reading and have a more focused as well as longer term portfolio – companies such as BRK, or companies that have some dividends that can potentially drop less or have less volatility during a bear market

Some industrial stocks that seems investing

$WSC

One thing I am not sure if whether the authority will approve the merger

Another one Atmus, which is a spinoff of Cummins. I think I will likely wait on this. It reminds me of the $GRC, btw.