https://teapaw.org/t.co/FkknlauOpq https://teapaw.org/t.co/sZAYPC1skR https://teapaw.org/t.co/oI4pJSLza0 https://teapaw.org/t.co/U6WNLrHlZC
Tel-Aviv
Joined April 2009
- Tweets8.8K
- Following160
- Followers58
- Likes5.7K
For months, I’ve been reminding everyone that our tokens are heavily subsidized. Now, the feeling that the party is about to end isn't just a pessimistic prediction - it’s a reality. However at this point in time we’re all very much hooked, so I predict very inelastic demand.
Tau-Tau retweeted
Security called me at 6:12 AM today.
"Patch every PHP server immediately."
I asked what happened.
"Two critical vulnerabilities. Remote code execution. No authentication required."
Cool.
How many PHP servers do we have?
According to inventory: 12
According to reality:
Nobody knows.
We found one running WordPress.
Three running old internal tools.
One under someone's desk.
Two inside vendor appliances.
A forgotten employee directory from 2016.
And a server named:
PHP-OLD-DO-NOT-TOUCH
Naturally, that one runs payroll exports.
Then we found a PHP 5.6 box.
I asked who owned it.
The documentation said:
BRIAN.
Brian left in 2019.
We called Brian.
He said:
"Oh wow, that's still running?"
Excellent.
By 8 AM, leadership joined the incident call.
CEO:
"Can hackers actually get in?"
Security:
"Potentially yes."
CEO:
"Without a password?"
Security:
"Yes."
CEO:
"Then why do WE need passwords?"
Not the lesson.
Finance asked if we could wait until the weekend to patch because downtime affects revenue.
Security explained that the alternative was letting strangers execute code on our servers.
Finance asked for a cost comparison.
At 9:17, someone suggested temporarily taking the vulnerable websites offline.
Marketing refused.
"Our campaign is live."
So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover.
We finally patched everything we could find.
Then our scanner discovered another PHP server.
Hostname:
TEMP-PHP-2014
Uptime:
4,512 days.
Nobody knows what it does.
Nobody owns it.
Nobody can shut it down.
But every time we block network access, the warehouse stops printing shipping labels.
Security has classified it as critical infrastructure.
It is running PHP 5.4.
The vulnerability has existed longer than half our employees.
The emergency patch took four hours.
Finding out what PHP actually runs took eleven.
The internet isn't held together with code.
It's held together with servers everyone is afraid to turn off.
Firefox has a built-in VPN (in beta) now, 50GB data monthly completely free. Very good. But I’m gonna look a gift horse in the mouth: it really needs that VPN toggle to have the granularity of a per-tab control. Currently, it’s one global toggle for the machine. Too crude.
פעם ראשונה היום שהשתמשתי ממש בקרדיטים (טוקנים שלא במסגרת המנוי) של אנת׳רופיק, מ-100 הדולרים שהם נתנו במתנה (כי יפוג להם התוקף עוד 3 ימים). השתמשתי בפייבל, רמת XHigh (לא Max ולא Ultracode) ושרפתי כמעט חצי מזה בערך בשעתיים. היה טוב, מהנה ויקר. לא רואה את עצמי משלם סכומים כאלו באמת.
Tau-Tau retweeted
Our 95-minute AI feature film, Hell Grind, is now fully open-sourced for the Higgsfield Global Film Festival.
All the prompts and assets are public.
It was made for $500,000, screened in Cannes Market, and drew coverage from The Wall Street Journal, Variety, and BBC News.
Tau-Tau retweeted
Last month I upgraded to Claude Max 20x.
$200 a month.
I told my girlfriend it was “infrastructure.”
She asked what I was building.
I said “leverage.”
She stopped asking.
I’ve shipped 14 projects this year.
None of them have users.
But all of them have landing pages.
The landing pages have waitlists.
The waitlists have 40 signups.
38 are bots.
1 is my mom.
1 is me, testing the form.
I call that “early traction.”
My codebase is 40,000 lines.
I wrote maybe 200.
I don’t read the rest.
Reading is a bottleneck.
The tests pass.
Claude wrote the tests.
Claude also wrote the code the tests test.
I’ve decided not to think about that.
Last week prod went down at 3am.
I pasted the stack trace and went back to sleep.
It was fixed when I woke up.
I don’t know what was wrong.
I don’t know what fixed it.
I posted “shipped a hotfix before coffee ☕”
It got 400 likes.
I hit my usage limit on a Tuesday.
I screenshotted it.
“When you’re shipping too fast for the rate limits 😤”
That tweet outperformed the product.
The product does not exist.
I’m building in public.
The building is the public part.
The public is the product.
I pivoted three times last month.
B2B SaaS to AI agent to “AI-native workflow layer.”
Same code.
I just changed the README.
Claude wrote the README.
I applied to YC.
Claude wrote the application.
I got rejected.
I pasted the rejection into Claude and asked what it meant.
It said it was a learning opportunity.
I said thanks.
I say thanks a lot now.
I don’t know if that’s healthy.
My technical cofounder is Claude.
We haven’t discussed equity.
I assume it’s fine.
My MRR is zero.
But my ARR is a narrative.
Investors don’t buy revenue.
They buy velocity.
Velocity means commits.
Commits means green squares.
Green squares means momentum.
Momentum means I’m early, not wrong.
Someone asked what my moat is.
I said “we move fast.”
He asked fast toward what.
I said “iteration.”
He nodded.
He’s an angel investor.
He also doesn’t know.
The subscription renews Friday.
I’m keeping it.
$200 is cheap for an identity.
I don’t know what I’m building.
But I know what it’s for.
It’s for the feeling.
The feeling of the terminal filling with code I didn’t write.
Tau-Tau retweeted
@BarGindy התותח עשה איתי פודקאסט! אני אמן יותר פריט אספנות מאספן אבל משעשע ביותר בכל זאת
linktw.in/XgfYMT
Midjourney v7 (Alpha) generates stunning images, far superior to any other image generator - including the new ChatGPT. However, it is still abysmal in following prompts. and quite poor in generation of text. Hope all that improves until GM, or in the point releases.
