
Co-founder @BugSmashIO - Sharing what I find insightful based on 10+ years of product building. | Ex Founding PM @ Yatri, Indian Railways
Mumbai, India
Joined October 2010
- Tweets7.5K
- Following566
- Followers764
- Likes14.4K
Pinned Tweet
Introducing a new way to polish your products and close the internal feedback loops 🚀
youtu.be/Qfp0ptzgqnQ
The Apollo report says AI hasn't moved profits for most companies outside big tech.
Thoughts?
I feel outside big tech, adoption is still very early and the one's using it - do it more from a productivity angle rather than profit optimisation.
apollo.com/wealth/insights-n…
I think I had heard Levels and Marc long back about affiliate programs.
We implemented the same. It's one of the biggest channels for us at this point.
40% of every payment, for as long as your referrals pay ♥️
bugsmash.io/affiliate-progra…
I made an affiliate program for MailCheap:
- 30% of every payment, for as long as your referrals pay
- Paid monthly by bank transfer, from $100
Join here: mailcheap.ai/affiliates
Very soon we'll have Buy-Now-Pay-Later and Credit loans for AI usage.
AI Credits will be the new currency!
I remember when people wrote specs. feels like that's the skill that's back. the code shows up fast now, but if you can't explain what done looks like in 5 lines, the agent builds the wrong thing just as fast
if you're an early team, today's a good day to check one thing. could you rotate every prod key in an hour without the one person who set it up? if not, start by writing down where they all live
He did say that 😂
At one side everything's getting hacked. And then, there's this 😂
Someone at eToro just accidentally copied their App Store rejection reply as Release Notes 😅
And it still passed App Store review
apps.apple.com/ge/app/etoro-…
Quick check after watching the Railway thing. if your host stopped deploys for a full day, could you ship a hotfix from somewhere else in under an hour? honestly I'm not sure we could. would take some figuring out
Don't forget to update your Grok Bot's computer!
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server.
tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible.
The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this.
The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed.
@Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged.
For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free.
Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem.
If you’re interested in learning more, you can read our blogs:
Vulnerable roots: blog.cloudflare.com/emudhra-…
PHP vulnerabilities: blog.cloudflare.com/php-vuln…
Anyone who is even slightest technical - be patient and support your IT teams. It's a nightmare out there!


















