Co-founder @BugSmashIO - Sharing what I find insightful based on 10+ years of product building. | Ex Founding PM @ Yatri, Indian Railways

Mumbai, India
Joined October 2010
Introducing a new way to polish your products and close the internal feedback loops 🚀 youtu.be/Qfp0ptzgqnQ
3
1
17
7,081
Nabil Kazi retweeted
Last week, we removed the need for a developer account and X API credits to use the X connector in Grok Bot Ask @bot to manage your bookmarks, go over your DMs, or draft an article for you free of additional charge
328
176
150
2,940
292,313
SEO & AEO gurus, is this good?
32
No human will ever write code bettter than LLMs prompted by a decent-enough engineer. Complete non-tech people still mess up big time in architecture >
No human will ever write code better than LLMs. Accept this fact, stop pretending, and move on.
24
Do MBA. From a good college. He's not wrong!
the only moat is knowing a guy who knows a guy
35
The Apollo report says AI hasn't moved profits for most companies outside big tech. Thoughts? I feel outside big tech, adoption is still very early and the one's using it - do it more from a productivity angle rather than profit optimisation. apollo.com/wealth/insights-n…
15
founder version: telling every founder you meet to talk to users weekly, then realizing your own last user call was three weeks ago
It is so much easier to give advice to other people than to apply the same advice to yourself
24
I think I had heard Levels and Marc long back about affiliate programs. We implemented the same. It's one of the biggest channels for us at this point. 40% of every payment, for as long as your referrals pay ♥️ bugsmash.io/affiliate-progra…
2
147
Very soon we'll have Buy-Now-Pay-Later and Credit loans for AI usage. AI Credits will be the new currency!
27
I remember when people wrote specs. feels like that's the skill that's back. the code shows up fast now, but if you can't explain what done looks like in 5 lines, the agent builds the wrong thing just as fast
Remember when people wrote code?
18
Love this one!
“I don’t even miss Markup."- Conan That’s the review that actually means something - someone who ran every alternative out there and still landed on us. This is why we build.
21
🔥🔥
Introducing the people search API 1 billion people, one API > decision makers to sell to > founders to build with > engineers to hire Let your agents find them.
2
221
if you're an early team, today's a good day to check one thing. could you rotate every prod key in an hour without the one person who set it up? if not, start by writing down where they all live
What used to be breaches happening over 3-4 months happened in a single day yesterday/today It’s how it feels at least And, unfortunately, we can prob expect this kind of pace to continue. AI allows finding critical vulnerabilities in widely used software/services much faster
1
28
He did say that 😂
Trump: I called Google Maps to change the name of the Atlantic Ocean to Trump Ocean. Sundar said, “No, no, no. This time I'm not doing it.” He said, “Oceans are different, sir. They cover a lot of countries. Please don't ask us to do that.” So we'll probably pass. Let's keep it the Atlantic Ocean.
18
At one side everything's getting hacked. And then, there's this 😂
Someone at eToro just accidentally copied their App Store rejection reply as Release Notes 😅 And it still passed App Store review apps.apple.com/ge/app/etoro-…
35
Quick check after watching the Railway thing. if your host stopped deploys for a full day, could you ship a hotfix from somewhere else in under an hour? honestly I'm not sure we could. would take some figuring out
32
early founders, run this math before you put "99.9%" on a pricing page. one bad vendor day and you've blown the whole year's downtime budget
99.99% uptime = down for < 9 minutes a year 99.9% uptime = down for < 9 hours a year A 9 hour outage caps you to 2 nines of reliability for the year.
4
333
Don't forget to update your Grok Bot's computer!
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server. tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible. The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this. The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed. @Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged. For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free. Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem. If you’re interested in learning more, you can read our blogs: Vulnerable roots: blog.cloudflare.com/emudhra-… PHP vulnerabilities: blog.cloudflare.com/php-vuln…
39
Anyone who is even slightest technical - be patient and support your IT teams. It's a nightmare out there!
19
Here it comes...
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
34
A shout-out on LinkedIn hits different! ♥️
3
57