Juampi

I do tech stuff and share it online || Growth @firecrawl

[Juampi @juampitech]

Just hacked my Ray-Ban Meta and built my own scanner with them

The US has a lot of crazy products, so I built an app that explains what I’m seeing and where to buy it

Used the @Meta SDK to connect it with my smart glasses and test it in real life without looking like a freak

[Juampi @juampitech]

@v_dawg I treat myself

[Juampi @juampitech]

X just paid for my coffee in NY

[Juampi @juampitech]

@fibobeta Seee

[Juampi @juampitech]

@eliandalvarez @Tesla Me regalas uno?

[Juampi @juampitech]

@magicseth Open source!

[Juampi @juampitech]

@yasser_elsaid_ @chatbase dooooope

[Juampi @juampitech]

@nazzari @_CallMeMacy @fromevanwang Let's do thisssss! DM you

[Juampi @juampitech]

Love the Speedrun program. We'd love to offer Firecrawl credits as a startup perk for every selected team

@nazzari how can we make this happen? Let's give founders access to the web's knowledge library for superintelligence

[speedrun @speedrun]

SR008 APPS ARE OPEN. Up to $1M + $10M+ in credits. 12 weeks in SF, Feb through April. Built to help you land capital, customers and talent. Apply by Nov 1: https://t.co/WiXTQzBFgL

[Juampi @juampitech]

@GeoffreyHuntley true

[Juampi @juampitech]

October has been an absolute nightmare for software

> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident

At this point, the biggest security risk might not be the code we write, but the code we trust...

[Juampi @juampitech]

If you're a lawyer, congrats. Your job just got 10x easier

We launched the Government Index

30M+ official US government pages your AI can search

- Every answer links back to the official source
- Works in ChatGPT & Claude
- Free, no API key needed to start

[Firecrawl @firecrawl]

Introducing the free Government & Legal Index for ChatGPT & Claude.

Give your AI agents 30M+ US government pages, from federal statutes and court opinions to city codes and permits.

Research tax rules, permits & case law with the Firecrawl plugin.

https://t.co/WT268coAo9

[Juampi @juampitech]

@theo

[Juampi @juampitech]

How to protect yourself from supply chain attacks:

1. Check lockfile diffs before merging
2. Run npm audit / pip-audit
3. Pin GitHub Actions to commit SHAs
4. Disable install scripts when possible
5. Restrict CI token permissions
6. If compromised: rotate secrets + rebuild

You can't prevent every attack, but you can dramatically reduce your exposure

[Juampi @juampitech]

October has been an absolute nightmare for software

> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident

At this point, the biggest security risk might not be the code we write, but the code we trust...

[Juampi @juampitech]

@MoneyPrinter0x This

[Juampi @juampitech]

@AskYoshik 🫠

[Juampi @juampitech]

@DeeZe This is not Rome

[Juampi @juampitech]

@k081e Ouhhh

[Juampi @juampitech]

Hacktober*

[Juampi @juampitech]

October has been an absolute nightmare for software

> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident

At this point, the biggest security risk might not be the code we write, but the code we trust...

[Juampi @juampitech]

@_nerd_ Help*

[Juampi @juampitech]

@hennadios SI is the future