Rob Snyder: The Nature of Order by Christopher Alexander

In the lightning round of Lenny's Podcast, Lenny asked which books Snyder recommends most. Snyder answered with Christopher Alexander's four-volume The Nature of Order, a series about architecture: "my favorite one… Best thing ever." Lenny said he had "never heard that recommendation before." Lenny's Podcast

Snyder's own book, The Power of Pull, got there through a recommendation too. Lenny said that in the past month, two people in his paid Slack community, including founders and product people, started threads urging him to book Snyder because the book was "extremely useful." Lenny's Podcast Community members said the first chapter made them feel they weren't "some silly clueless outlier." They also said the book normalizes how painful and lonely the search for product-market fit is. And it warns against building from what prospects say they want rather than what actually gets them to say yes. Lenny's Podcast

Aaron Levie: Nikesh Arora on enterprise security

Levie called Arora's thread a "good assessment of the on the ground reality for security in most large enterprises." He added that the fragmented risk surface "is only going to get more gnarly." @levie

Arora's argument:

• Patching vulnerabilities directly won't keep up, so companies need a mix of direct patches and "virtual patching." @nikesharora
• Given token economics, defender agent swarms can't yet stop an attack launched with agents, which he calls "a speed program not a brute force problem." @nikesharora
• Enterprises should get their SOC architecture right first. @nikesharora

Levie mostly agrees but is more optimistic. Once data and infrastructure are cleaned up, he argues, agent swarms give defenders a real chance, and that is "at least one reason to be optimistic about the balance of offensive and defensive capability." @levie This continues Levie's case from yesterday for spreading AI cyber-defense tools.

Martin Casado: Greg Kurtzer on AI and open-source security

Casado said "having Greg out swinging in the fray has been a highlight of the last few months," linking Kurtzer's post. @martin_casado Kurtzer says he leads a widely used Linux OS for data centers. He argues that AI's speedup in finding human-written bugs is "a temporary problem," and that open-source maintainers are already using AI to reduce new bugs. @gmkurtzer He points to Greg Kroah-Hartman's charts of kernel CVEs per release. He also calls AI labs' "doom based marketing" short-sighted and unethical. @gmkurtzer

Keith Rabois: two books for the weekend

Rabois posted a photo captioned "New weekend reading." @rabois It shows Ben Macintyre's Redwood: The Untold Story of the Cold War's Most Extraordinary Spy and Peter Bergen's All the Presidents' Wars: Twenty-Five Years of America's War on Terror.

Image: Keith Rabois on X

Shorter mentions

• Palmer Luckey called the new Larry David biography "really good," but complained that the author "ignores Jews and the dynamics of New York's creative underclass," leaving just an account of David's life and stories. @PalmerLuckey He was replying to Felix Gillette's Bloomberg review, which calls the book "painfully long" and "not great." @felixgillette The posts don't name the author.
• Jason Lemkin promoted SaaStr's own agent playbook, which explains how SaaStr AI runs with 3 humans and 20+ agents: "which agents, in what order, and where they break." @jasonlk It's his own material.