Discussion about this post

User's avatar
Cyril Simonnet's avatar

Deep domain knowledge often acts as a filter that keeps us from seeing obvious paths forward. When you ignore the standard playbook, you stop optimizing for the status quo and start building for the actual user intent. This is where the real shift happens in security operations. We see this when attackers bypass traditional defenses by simply asking our systems for the keys. They do not care about the technical nuance we spent years mastering. They care about the path of least resistance. If you ignore the conventional wisdom of how a system should be secured, you finally see how it is actually being exploited.

https://cyrilsimonnet.substack.com/p/the-intruder-asked-our-ai-for-advice?utm_source=substor&utm_medium=substack&utm_campaign=comment

Immanuel Santosh's avatar

The no-domain-expertise rule holds for law, but I'd separate two things he's merging: not knowing the industry, and not knowing the customer's workflow.

Legora closed that gap by hiring lawyers early to build eval sets. Most founders skip that step, call it "learning fast," and end up shipping features nobody asked for.

Learning speed is the leading indicator only when it's directed at the buyer's actual day, not just the market's vocabulary.

7 more comments...

No posts

Ready for more?