Denis Redozubov

Ex-CTO turned solo builder | Figuring out the indie path in public | AI, directories, whatever works |

[Denis Redozubov @codeofchange]

@Apple @iCloud iCloud folder zero-byte-truncated my password manager database, then synced it to all devices.

Gave me a decent scare; good thing I was able to recover it from a copy.

[Denis Redozubov @codeofchange]

Nothx

[mert @mert]

what's a good name for a new crypto bank

[Denis Redozubov @codeofchange]

I think chatgpt just told me how it does deep research from this prompt

[Thierry from arvy 🇨🇭 @ThierryBorgeat]

The price to rent an Nvidia H200 just collapsed from $7/hr to $4/hr in three weeks.

A -40% drop in the cost of the single most strategic asset in tech.

When the underlying commodity that powers your entire thesis loses 40% of its value in a month, that usually means one of two things: supply finally caught up, or demand was never as deep as the headlines said.

Either way, somebody is selling.

So why is the AI trade still pricing in scarcity?

[Denis Redozubov @codeofchange]

claude code app started to log me out when being sandboxed, yikes. Need to trace what's happening in there now

[Denis Redozubov @codeofchange]

@steipete, could I ask for your attention and input on https://t.co/NwmWBp7ytS? Really want to deal with this one, breaks my processes.

[Denis Redozubov @codeofchange]

@rickasaurus I burn the most calories thinking about security nowadays, it's getting crazy

[Denis Redozubov @codeofchange]

@vombat203 @itcaat симплинк мне симпатичен

[Denis Redozubov @codeofchange]

What a wake-up call for all telegram users

[Lukasz Olejnik @lukOlejnik]

DO NOT use Telegram in sensitive applications. Telegram does not need to have its message encryption broken for users to be tracked at the network layer. Telegram sends MTProto over unencrypted TCP, exposing auth_key_id - a long-lived identifier tied to the client’s authorisation key. An ISP, hotel WiFi operator, mobile carrier, transit provider, or surveillance system on the network path can see that identifier if they can observe the traffic. It can remain stable across app restarts, IP changes, VPN use, network switches, and location changes. Secret Chats protect message content, but this leak is below that layer. That makes the attack passive. The risk is in retroactive correlation. Think a journalist using Telegram from different networks for months, then joining hotel or corporate WiFi under a real name. That one identity anchor could make old logs searchable for the same auth_key_id. The fix is simple - mandatory transport encryption for all MTProto connections, with no unencrypted fallback. Telegram chose not to do this. Source: @kaepora https://t.co/TJALYAwaOs

[Denis Redozubov @codeofchange]

https://t.co/rBraBmdh8p

[Denis Redozubov @codeofchange]

Flipper One looks insane. Help these guys if you want and/or care. Link below

[tic.eth 🇮🇹 🤌 @Punk4725]

This is terrifying @Ledger.

I just received a physical scam letter at my home address in Italy 🇮🇹

How the hell do scammers have access to the addresses of Ledger users? This goes way beyond phishing emails now.

People’s safety is literally at risk.

[Denis Redozubov @codeofchange]

Nothing to see here, just Jadzia Dax playing Harley Quinn in a holodeck

[Denis Redozubov @codeofchange]

@levelsio 1-star reviews in Germany can be taken down due to a loophole in the German law. You can't trust Yelp or Google Maps there. Lower ratings are likely more honest, and, frankly, better.

[Denis Redozubov @codeofchange]

It's fascinating how vibe coding allows people to be absolutely clueless about what they're shipping. An even bigger new era of cyber negligence is coming.

[Justin Kalland (nix.eth) @nix_eth]

This is what happens when you vibe-code a product that handles sensitive user data:

I saw this extension announcement going viral and thought it looked cool, so I checked it out.

My first concern was whether my emails would be sent to someone I don't know. I was relieved to see you could bring your own Anthropic API key.

The website states your API key and email text go straight to Anthropic and "never touch our servers."

Then, when you try it, you hit a paywall where you can input your key. Same claim: your key is stored locally and calls go directly to Anthropic.

I got curious and decided to check the Chrome extension source code.

Damn. Not only does it send your email text to their servers, it also sends your API key!

So both claims, that it calls Anthropic directly and that your API key is stored only locally, are completely false.

I'm giving the creator the benefit of the doubt and assuming this was negligence, not malice. He used his real name on Stripe and in the Chrome Web Store.

But the lesson is bigger than one project: building with AI is fun, but if you're handling people's data, making security claims, and charging money, you need real review before shipping.

[Denis Redozubov @codeofchange]

@rvtond agent-browser with persistent profiles

[Denis Redozubov @codeofchange]

@housecor That's called technical debt, not productivity

[Denis Redozubov @codeofchange]

@rvtond agent-browser with a persistent profile. You can set it up, and then use headless

[Denis Redozubov @codeofchange]

@theonejvo Do you think there's a point in continuing to burn tokens and time? Tried that briefly: out of scope, duplicate this. Completely non-transparent and sometimes plain incompetent triage is what I saw.

[Denis Redozubov @codeofchange]

@dr_Cha0s Я думаю что вполне революция, только бенефициары другие