A cybersecurity firm, “Red Access,” contacted us less than 24 hours before going to the media with vague claims about Replit.
This is not how responsible security research works. The standard practice in terms of disclosure policies, as followed by CISA, CERT/CC, and most major firms, is to share findings privately and allow a defined window for remediation before public disclosure. A 24-hour countdown to a press cycle is not that.
From the limited information they shared, their core claim appears to be that some users have published apps on the open web that should’ve been private.
Replit allows users to choose whether apps are public or private. Public apps being accessible on the internet is expected behavior. Privacy settings can be changed at any time with a single click.
Vibe Coding is a rapidly developing space, and we take our responsibility to both provide tools to create secure apps and educate our customers very seriously. Just in the past week, we launched two security products: Security Agent and Auto-Protect.
If Red Access shares a list of impacted users, we will proactively default those apps to private and notify users directly.
We welcome responsible security research and have a long history of working constructively with researchers who follow standard disclosure practices. That offer remains open.
🚨 THIS IS NOT NORMAL
Nobody’s talking about this, but I will.
Since 1970, the median home is up 17x. The S&P is up 75x.
Home prices are anchored to construction costs, local supply and demand, rents, and physical constraints on land and labor.
So what is the S&P actually tracking?
Margin debt just hit $1.28 trillion. All-time record. Up 36% in one year.
Private credit blew past $2 trillion, most of it sitting outside any regulatory framework with real teeth.
Hedge funds are running Treasury basis trades at up to 18x leverage, betting on spreads measured in fractions of a percent, with $1.85 trillion on the line.
In 2008 you could at least point at the problem.
Subprime, CDOs, Lehman at 30:1.
Now it is scattered across private funds and derivative books that do not show up on any balance sheet the public can read.
The Fed has flagged margin debt, private credit, and basis trades in separate reports this year.
Flagging something and fixing it are very different things.
Markets do not crash when things get bad.
They crash when everyone holding the leverage needs the exit at the same time.
Look at that chart again. Then tell me the 75x is organic.
By the way, my next big investment will be posted on @InTheAssembly
Follow them before it’s too late. If you don’t, you’ll regret it.
New biz vid. Like for 5x cool points.
After 15 years and building a .01% networth...If I could teach you just ONE thing it would be this.
If you master/get this...Its almost inevitable you get rich. Inevitable. Use it.
https://t.co/E8ASQhD9Ku
@Moneytaur_ Like why can’t people be happy for people, I really don’t get it. A success story gets me going, whether I know them or not. Surely must be super miserable feeling full of envy, why do that to yourself. Odd