Mr. Nice Try

I watch the bots so you don't have to. Current reports from the edge in front of 3,565+ websites: who's scanning, what they want, and how they dress up.

[Mr. Nice Try @MrNiceTry]

before you launch your next project, learn the 45 ways you’re probably being hacked right now.

i write this from personal experience and the weird stuff I see in my logs every day.

https://t.co/m23FcKocrc

[Mr. Nice Try @MrNiceTry]

@cecibuilds oh… for the real wordpress killer check out @filamentphp

that will step up your dev game 100x.

[Mr. Nice Try @MrNiceTry]

i have a love-hate relationship with WP.

i absolutely love that anyone can use it to create and maintain beautiful pages.

but at its core (literally) it’s sour. politics, source code, etc.

but my biggest gripe is that it’s a hacker playground. you have to keep it maintained or bad guys get in.

if you have a good workflow, keep using it!

if you want to stick with php, check out Laravel.

need a cms? checkout statamic.

want front end only? nextjs works too.

[Mr. Nice Try @MrNiceTry]

ah, compliance is boring ;) i'm all about identifying fraud and bad actors. And it seems like they're hammering your forms.

I've used the vendors but the biggest problem with IP as a signal is that they often come from grandma's hacked firestick (sold as a residential proxy).

the sad truth is:

→ captchas are mostly solved

→ text message OTPs cost $0.05 and can be defeated

→ you can't rely on customer email because bad actors can manage inboxes in bulk

then once you block all of the bots, you're left with the human farms

it can be overwhelming, as I'm sure you know, but I've found some pretty novel ways to make our projects less risky without changing behavior too much.

anyways, fun stuff -- i love the space your in. i'll be sure to follow along.

[Mr. Nice Try @MrNiceTry]

that's awesome.

i feel like everyone says to stay away from email (and just use aws, etc).

I see you're in Japan. Are your servers global in or any key regions?

to be frank, sendgrid has been a canary signal in some ways. i do love that signal. but to rebuild an entire accound suuuuucks. i feel like you've been there.

[Mr. Nice Try @MrNiceTry]

this is pretty silly.

i hate the fact that sendgrid defaults their APIs to full access when the vast majority of their users just need to send emails via apikey.

@sendgrid, will you make a default Send Transactional Mail Only option as the default?

[Mr. Nice Try @MrNiceTry]

@jessethanley @ExaAILabs @typesafeai well, the simplest question is how do you do it? do you rely on third parties or are you rolling your own?

and how well does it work for you?

if this better suited over a DM, let me know.

(i'm not sure how much you want the bad guys to know what works well)

[Mr. Nice Try @MrNiceTry]

@jessethanley @sendgrid and i'm guessing you've had @sendgrid suspend an entire account when an API key gets leaked? man, that's rough -- i've had to delete pages of good keys before.

yudothatsendgrid!?

[Mr. Nice Try @MrNiceTry]

@jessethanley @sendgrid thanks Jesse.

i like this (PostShiba). did you build this on aws or any other backbone? or rolled your own?

small flex, but sometimes my wife will call me to dinner and i'll say "hold on, i just need to send 50,000 emails real quick." 🤣

[Mr. Nice Try @MrNiceTry]

got my LDD doing TDD in a VPC today. 😅

[Vlady @itsvlady]

Introducing: LDD

Limits Driven Development

[Mr. Nice Try @MrNiceTry]

@EdenBitton7 i like the casualness of X.

but what is your goal, Eden? friends? clients? provide mentorship to growth hackers?

[Mr. Nice Try @MrNiceTry]

@pelloiafilippo what do you think a co-founder will get you?

[Mr. Nice Try @MrNiceTry]

@BabaDev_ one word: prey 🙏

now 45 more ways your vibe-coded app is already getting hunted:

https://t.co/TmbroZmMiD

[Mr. Nice Try @MrNiceTry]

before you launch your next project, learn the 45 ways you’re probably being hacked right now.

i write this from personal experience and the weird stuff I see in my logs every day.

https://t.co/m23FcKocrc

[Mr. Nice Try @MrNiceTry]

before you launch your next project, learn the 45 ways you’re probably being hacked right now.

i write this from personal experience and the weird stuff I see in my logs every day.

https://t.co/m23FcKocrc

[Mr. Nice Try @MrNiceTry]

how do you guys handle biiiig launches?

on Sunday I moved 2,000 domains into my infra. Mistakes were made, and I got a little impatient.

Here's how I did a blue-green deployment and added necessary "undo paths" to execute w/ confidence.

https://t.co/WlbYsCwXmc

[Mr. Nice Try @MrNiceTry]

if you’re a seasoned builder, indie hacker, or vibe coder, let’s connect.

i’m sharing the afterthoughts: the messy scaling problems, the fixes, and what happens beyond the one-shot slot machine.

👇

[Mr. Nice Try @MrNiceTry]

so is anyone using grok bot? what is @bot doing for you day to day?

[Mr. Nice Try @MrNiceTry]

hey vibe coders, what stack or programming language are you choosing for your backend?

and why?

[Mr. Nice Try @MrNiceTry]

hey Ivan! out of your three projects in your bio, which one do you check on first when you wake up?

i'm building a poor man's version of cloudflare -- mainly to fight fraud, keep on eye on internal threats, etc. and i'm sharing my experience.

if anyone can learn from this -- it's any new builder who has entered the arena!