Matheus Chimelli

a lawyer building SAASs

building

[Matheus Chimelli @mtschml]

@pedrovanzella O mercado da Microsoft nunca foi ia. Basicamente eles tinham uma divisão de IA batalhando contra uma empresa inteira de IA. O mercado da Microsoft hoje é Windows e soluções enterprises. Não IA

[Matheus Chimelli @mtschml]

If you use only the Gemini 3.5 Flash, it also consumes the quota from Gemini 3.1 Pro. Is this a bug or the intended behavior? @antigravity @OfficialLoganK

Also, please bring back Gemini 3.1 Flash.

[Matheus Chimelli @mtschml]

@OfficialLoganK @mercor_ai can we have 3.1 flash back? i used to love to code in atigravity with 3.1 flash. it was fast and smart. the 3.5 sucks. its dumb.

[Matheus Chimelli @mtschml]

@morganlinton it sucks... trust me. i burn out my antigravity tokens using the new gemini 3.5 flash just to fix a websocket connection. it didn't fix anything.

[Matheus Chimelli @mtschml]

@bebedaselva pq cloudflare é serverless... como voce vai rodar cron e background processing no cloudflare?

[Matheus Chimelli @mtschml]

@compeaga @joaosenzi meu canecoo. to com uma inicial com pedido liminar parado a 4 meses. LIMINAR. sem contar que o meritíssimo ainda havia negado a gratuidade sem abrir prazo para apresentar documentação. embargamos e nada ainda

[Matheus Chimelli @mtschml]

Here we go again

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.

[Tony Tong | Applied Human Systems Architect @tonytonggg]

My server faced 165,225+ SSH brute force attacks in 90 days.

What hackers tried:
• admin, root, user (basics)
• solana, moon (crypto wallets)
• invoices, menu (business databases)
• webserver, vhserver (infrastructure)

Origins: Botnets from Eastern Europe, proxy services, distributed attacks 24/7

Monthly Breakdown:
• January: 103,726 attacks (peak month)
• December: 44,680 attacks
• February: 10,527 attacks
• March: 6,289 attacks (so far)

Worst Offenders:
• 186.96.145.241 → 9,332 attempts
• 195.178.110.30 → 8,322 attempts
• 92.118.39.62 → 5,411 attempts

Solution: @Tailscale + UFW firewall = 0 attacks

Thanks @levelsio for the cybersecurity tip.

Once I opened my eyes I saw how much hack attempts really goes on in the dark web.

[Matheus Chimelli @mtschml]

@budapp i did! can i get the credits?

[Matheus Chimelli @mtschml]

@acgfbr já sabemos, o reales oficiales está com churn alto e caindo a cada dia, bla bla bla

[Matheus Chimelli @mtschml]

@acgfbr Cara, só aparece pra mim tweet de você falando do fim do teu saas. Teu marketing é bom.

[Matheus Chimelli @mtschml]

@mqmcrypto sou adv, vou te dar uma dica: valores até 40 salários mínimos em conta são impenhoráveis. pode deixar 40 mil e comprovar que usa pra viver, e está tudo certo.

[Matheus Chimelli @mtschml]

@antigravity its really amazing the fact that when I'm using claude just to plan something, its expires my quota usage! AMAZING

[Matheus Chimelli @mtschml]

@antigravity amazing service! it makes me wonder why i pay for a PRO subscription

[Matheus Chimelli @mtschml]

I'm a Google Ai Pro subscriber. I have to wait about 2 days to use my quota? Why doesn't this refresh every 5 hours as it was in your docs? @antigravity

[Hridoy Reh @hridoyreh]

How to get your first 100 users:

[Elon Musk @elonmusk]

Yeah

[Matheus Chimelli @mtschml]

@antigravity POV: what the agent EAT ALL OF YOUR CREDITS

[Matheus Chimelli @mtschml]

@antigravity this is absolutely horrible. im a PRO user and i can't even code for 1 hour. btw, the gemini 3.1 pro high and low are halucinating. they start looking for files on node_modules and then, my ai credits are gone. BYE BYE