Duche

Creative mindset, love for start-ups, customer experience and agile principles.. YNWA ! in Christ I stand

[Vanguard Newspapers @vanguardngrnews]

27 days after, Oyo kidnap victims still missing, and Nigerians demand answers.

[Duche @duche_n]

And some of the government officials are in it

[Foza Billions (The Oracle) @fozadoza]

I promise you the government knows how to track and find these boys. They have every intelligent gathering tool and access.
Politicians need to stop playing politics with human lives.

[John-Ezeakolam @JohnEzeakolam]

Keep sharing; the whole world must see the gen@cide happening in Nigeria under the leadership of the Islamic fundamentalist government of Bola Ahmed Tinubu🥲

[Duche @duche_n]

Please, can we all retweet until he gets a shot? Sometimes in life we have to take a different turn to our dreams !!!

[Richard Oluwamayowa @Olaogun_]

Hello @LCFC

I’m Olaogun, a winger also played as a striker from Nigeria. I’ve spent the last 3 years training daily to get one shot at professional football.

I’m not asking for a contract. I’m asking for 7 days on trial to show you what I can do. If I’m not good enough, I’ll walk away with no hard feelings.

I’m fast, direct, and I work harder than anyone on the pitch.

My highlights are here: https://t.co/nD68FCLsMn

Thanks,
Olaogun
|

[Duche @duche_n]

if you are looking for a space to buy and investors, i am your guy

[Sani Yusuf @saniyusuf]

This is the thing I'd love to own in Abuja. A super indoor arena that can hold multiple wedding venues simultaneously, but also be used to run events like this. maybe 5000

[Duche @duche_n]

What is safe on Twitter and what is not? !!

[Duche @duche_n]

At least he is honest.

[The Grid Post @TheGridPost]

I cannot promise Nigerians 24 hours power but there will be a measurable improvement in the sector in the shortest possible time.

- New Power Minister, Mr Joseph Olasunkanmi Tegbe

[Duche @duche_n]

I hope Nigerians are seeing this. When the time comes, let's all tell the truth!

[Nigeria Stories @NigeriaStories]

BREAKING NEWS: Governor Alex Otti approves feasibility study for proposed Abia seaport

[Duche @duche_n]

this very true, we have a very poor training culture.

[M.A.D @MichealCodes]

What is moniepoint’s impact in building the talent’s they need?

All these countries you people talk about, the tech companies there build talents through paid internships, i know a lady that got into oracle through their internship program, and she got selected into the internship just by posting on twitter about oracle.

Nigeria tech companies don’t offer paid internships neither do they groom talents to meet their standards and you expect a talent after going through heaven and hell to learn and meet global standards to work with your company for pennies.

You want global talent but can pay global wages

[Duche @duche_n]

If only there were an honest review by Staff about work culture in places like this, I have come to realise that not everything that glitters is Gold with these top Fintech firms.

[Queen Victoria Ebine 👑❤️ |TechWithoutChaos @vault_Baby]

Built by an African for Africans.

VendEx is proof that African businesses do not just need technology.
They need technology that understands their reality.

https://t.co/G0zEUSTl07

[nonso @sirnonso_]

Well well well client decided to add one more 16kwhr battery allowing him to depend less on the grid and be more energy dependent

[Duche @duche_n]

Being humble doesn't mean people should take you for granted. In life, I am learning to practice better self-care.

[Jermaine Pennant @pennant83]

I was a Liverpool fan way before I became a pro footballer. As someone who genuinely cares & watches every single game… This is a disaster. Slot, you won the league last year with a style of play and DNA of Liverpool that Klopp built. This team is now close to unrecognisable…

[Jermaine Pennant @pennant83]

God help us tonight!!!!! 🙏🏽

#psg #liverpool #championleague #ucl

[Duche @duche_n]

In this life, some friends don't need a beat to dance for you; they would make you sing your name in places just because they are your friends. They may not have all the money, but they have all the Energy for you !.

[Duche @duche_n]

I experienced something similar, on my way to Jos from Kafanchan, a soldier who I met when I approached one of the villages before Jos, asked for a ride to take him to the next town to buy kerosene and foodstuffs. He said they stay months before relief comes to them.

[D_R_E_A_M_S @Northorious]

Upon my return to Abuja, I was parked by a soldier on duty who asked where I was heading, and I mentioned FCT. He politely asked if could lift one of his colleagues to Abuja, and I said it was fine.

When I was few meters close to Giri junction, I asked the officer his route, he was heading to Zuba while I was going through Lugbe axis to the town. I told him Zuba isn’t far. Transport is around 2-300 Naira.

I asked if he was going to stop there(Zuba), or he was heading somewhere. He then told me he was going home to see for the first time after 10 months, his newly born twins. No permission was granted over the period. Sadly, he had to make the compulsory trip because his wife had called that one of the babies had died. And she urged him to come see the other twin in case he will die too.

I asked him why he didn’t leave earlier than he left. He replied that he waited with the hope that salaries will be paid, since today is second, but it wasn’t, unfortunately. How then do you intend to make it, I asked him. He showed me all the money he had on him –4,500 which wasn’t even enough to get him to his destination.

I could not help than give him 20k and I took his phone number, giving him my words that I will call to get information about the sick baby.

I want to ask a question, please 🙏🏻
Are these the soldiers we expect to lay down their lives in our protection? You’re owing soldiers, and you want them to be effective while fighting insecurity?

Sadly, this is really laughable.

Tales of a soldier on easter.

[Queen Victoria Ebine 👑❤️ |TechWithoutChaos @vault_Baby]

If you are building an app with AI or shipping fast with vibe coding, security is not the part you “add later.”

Here are 20 mistakes that can get your app exposed fast, and the fix for each:

1. API keys in frontend
Fix: keep secrets in the backend or a secret manager

2. No rate limiting on login
Fix: add rate limits, lockouts, and bot checks

3. SQL built with string concatenation
Fix: use parameterized queries only

4. Wildcard CORS
Fix: allow only trusted domains

5. Tokens in localStorage
Fix: use httpOnly, secure cookies

6. Weak JWT secret
Fix: generate strong random secrets and rotate them

7. Admin protection only in frontend
Fix: enforce authorization on the server

8. .env committed to git
Fix: remove exposure, rotate keys, add secret scanning

9. Error messages exposing internals
Fix: return generic errors to users, log details server-side

10. Unsafe file uploads
Fix: validate type server-side, scan files, isolate storage

11. Weak password hashing
Fix: use bcrypt or argon2

12. Tokens that never expire
Fix: short-lived tokens and refresh rotation

13. Missing auth middleware on some routes
Fix: audit every endpoint, not just the obvious ones

14. App running as root
Fix: use least privilege

15. Public database ports
Fix: put DB behind private networking and firewall rules

16. IDOR on resource endpoints
Fix: validate ownership on every request

17. No HTTPS enforcement
Fix: redirect all traffic to HTTPS and enable HSTS

18. Sessions still active after logout
Fix: invalidate sessions server-side

19. Packages never audited
Fix: run dependency checks in CI/CD

20. Open redirects
Fix: whitelist redirect destinations

Most products do not get hacked because the founder is not smart.
They get exposed because basic controls were skipped while shipping fast.

Build fast if you want.
Just do not ship careless.

[Queen Victoria Ebine 👑❤️ |TechWithoutChaos @vault_Baby]

Security tools founders can start using today

For secrets
Use AWS Secrets Manager, Google Secret Manager, or another proper vault

For login protection
Use rate limiting plus bot checks like Cloudflare Turnstile

For passwords
Use Argon2 or bcrypt, never MD5 or SHA1

For sessions and tokens
Use short-lived tokens, refresh rotation, and server-side logout invalidation

For file uploads
Validate MIME type server-side and scan uploads for malware

For dependencies
Run package audits in CI/CD with tools like Snyk

For transport security
Force HTTPS and enable HSTS

For access control
Do not trust frontend guards, enforce authorization server-side on every route

Founders do not need to know everything at once.
They just need to stop shipping without secure defaults.

[Donald @RealDonaldDoo]

Abi APC say make you no release this movie ?

Look at the great actors in this story.