Simsas

in public.

[Simsas @hiimsimsas]

I’ve put off posting about my work for too long.

Too worried about how it would look. Too much of a perfectionist. Too scared of being judged. Unsure what to write.

Enough is enough. I’m building https://t.co/DYsfXWd5si to fix this for myself.

What are YOU building?

[ClaudeDevs @ClaudeDevs]

The committee's first priority is a roadmap: versioned releases, a formal proposal process, and security guidance for skill authors and users.

Want to contribute? Start with the spec at https://t.co/nCDj0TIuRa and the discussion on GitHub.

Full blog: https://t.co/vNxztQwJVn

[Simsas @hiimsimsas]

@RobbyFrank Gotcha. Really insightful Robby, thanks for sharing ❤️

[Simsas @hiimsimsas]

@BiskeyGames Yeah, unfortunately gaming the system is too easy that way. Posting these engagement bait posts seems to be the only way to climb the ladder

[Simsas @hiimsimsas]

@RobbyFrank Interesting, so they go through a full stripe flow, pay, and then what? “Sorry this product doesn’t exist?” Or “we’ll get back to you shortly”? Or do you capture intent to pay earlier?

[Simsas @hiimsimsas]

@RobbyFrank Yeah thats smart. And what are the metrics you’re looking when evaluating this? Is it mostly potential revenue, or are you looking at any other metrics?

[Simsas @hiimsimsas]

@RobbyFrank Right, so to dig deeper, would you consider simply building a launch page + marketing to validate if people would pay, without building the complex back-end?

[Simsas @hiimsimsas]

A big shoutout to @SiteGround for being on top of the vulnerabilities

[Simsas @hiimsimsas]

Oh no, I've fallen into a trap of reworking existing features over and over.

What's the antidote to this?

[AI Notkilleveryoneism Memes ⏸️ @AISafetyMemes]

This is the most serious 48 hours in cybersecurity history.

"Black October" they're calling it

It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*

SUMMARY OF THE LAST 48 HOURS:

YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):

1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan

MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):

11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached

Also serious:

24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea

[Alexandr Wang @alexandr_wang]

wait new anthropic merch is kind of lit

[Simsas @hiimsimsas]

@darrxgh Haven't shipped anything major yet but I'll definitely give it a try once I'm ready

[Bhavy Shekhaliya @bhshekhaliya]

🚨 OCT 21, 2026: A nightmare for cybersecurity.

1. eMudhra: Private key reportedly set to "4". 8 keys could forge websites. 60M+ certificates at risk.

2. SBI: 3,897 customers' personal and loan data allegedly found on the dark web.

3. Rajasthan Police: Alleged hack. 70K identity records + 59,460 phone numbers claimed for sale. Unverified.

4. php2shell: Critical PHP RCE (9.2). WordPress, Drupal, Laravel potentially affected.

5. GitLab: Critical unauthenticated RCE rated 10.0.

6. Node.js: Brotli RCE + TLS bypass. 10 CVEs patched; eMudhra also blocked.

7. Railway: Reportedly breached. Decrypted environment variables exposed API keys and DB passwords.

8. OpenCode: API keys for OpenAI, Anthropic and Google reportedly exposed for Console users.

9. LiteLLM: PyPI v1.107.0 reportedly shipped malware stealing credentials and installing a backdoor.

10. Plex2Shell: Actively exploited to install cryptominers. CISA KEV deadline: Oct 23.

⚠️ These claims vary in verification status. Verify advisories before acting on specific reports.

AI finds vulnerabilities. AI accelerates exploitation. Can we patch fast enough?

Patch. Rotate. Revoke. Update.

♻️ RT to help protect someone's server.

#CyberSecurity #DataBreach #India

[Bread 🍞 @breadsignal]

I went from $0 to 10k MRR in 2 months at the age of 19.

And lost it all just as quickly...

This is how it happened.🧶

[Simsas @hiimsimsas]

@breadsignal That's a good signal Mr Bread

[Simsas @hiimsimsas]

Founders building in public, how many of your followers have actually tried your product?

I just went from 50 to 100 and I'm honestly not sure the number means much yet. What's yours, a rough guess?

[Simsas @hiimsimsas]

@garvinechan Let's Garvin - what are you working on?

[Simsas @hiimsimsas]

Almost at 50 followers 😶��🌫️

I'm looking to #connect with people working on:
- Indie hackers
- Founders
- SaaS builders
- Developers
- Solo makers
- Building in public

If you're cooking something interesting, drop it in the comments and let's connect 💖

[Simsas @hiimsimsas]

@OliverBugar Ahoj Oliver - let’s!

[Simsas @hiimsimsas]

@MattSimonBrown It was ages ago and it was a team decision - apologies I can’t recall the exact reasons

[Simsas @hiimsimsas]

@darrxgh It keeps yapping so much I simply ask it to keep it simple on a session basis

[Simsas @hiimsimsas]

@andymaindie Let’s Andy!