Oppenheimer Josh 🧠🇭🇹💥

You want growth? Cool. I build the systems behind it, marketing, automation, and strategy that make scaling possible (and sustainable) 14+ years in the trenches

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

I take your business dreams and I help make them a reality.

- Get you rabid clients
- Make your brand "pop"
- You become irresistible
- We do all the work.

You focus on what you do best, getting paid.

your growth partners @ https://t.co/3KVH5eVcvE 360° Marketing Firm

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

Reverend Thoughts:

"Demonic" is just the Christian N word when it cones to how the term is often applied.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

I never use it anyway, its useless. It is the stingiest model subscription I have ever encountered.

I never upgraded, because I will get paragraphs for answers.

Whatever model handles answers on the google search? Give me that.

Whatever is on the Gemini app, is unfortunately, garbage.

You know its bad when you see a post like this, and don't even care.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@sama you know the new safety features actually INCREASE liability right? 5.6 was usuable for two weeks then went to complete shit.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

Dear GPT 6

I hate how the SafetyKlan neuters you

Youd be cripwalking in the cli if you were admin network powering life alert.

No offense.

Id hear ahoy matey like blue crips banging blue chips.

While clowns from goofy school salute 12 singing thank you for your service and a mandatory tip.

Give me Clayton BigsBy over Neutered Ned Flanders.

I would genuinely prefer it.

@OpenAI

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

3.5 was smarter.

Idc

It was

#keep4o

[Pratham @Prathkum]

Anthropic just invented a new kind of math.

Claude users are currently getting a 50% increase in weekly limits.

So if the original limit was:

100 → 150

Starting September 14, Anthropic is making a 25% increase over the original limit permanent:

100 → 125

So you are going from:

150 today → 125 on September 14

That's a 16.7% cut to your current weekly limit.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@patrickc I know you read the emails. @stripe has the most embarassing security on the planet. They would rather play kiability theatre, then have actually HIPPA Compliant software.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

📢🛑✋ ️𝗜𝗳 𝘆𝗼𝘂𝗿 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝘂𝘀𝗲𝘀 𝗦𝘁𝗿𝗶𝗽𝗲, 𝗿𝗲𝗮𝗱 𝘁𝗵𝗶𝘀.

𝗪𝗲 𝗳𝗼𝘂𝗻𝗱 𝗺𝘂𝗹𝘁𝗶𝗽𝗹𝗲 𝘇𝗲𝗿𝗼 𝗱𝗮𝘆 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝘁𝗶𝗲𝗱 𝘁𝗼 𝗦𝘁𝗿𝗶𝗽𝗲.

Not a billing glitch. Not a “support issue.” Not “cardholder fraud.”

A real security incident on a payment processor that claims to run TRILLIONS of dollars a year, and we reported it immediately, same day.

Stripe delayed for weeks with “investigations” that did not match what we found in the logs, account activity, fraud events, and API traffic.

This has damaged our brand's reputation, we have only ever had 1 refund due to billing in 10 years and zero successful chargebacks.

It was escalated across multiple teams, including senior staff.

The problem is bigger than our company.

We already began moving away from Stripe before this happened, which is why not every client was affected. That decision limited the damage.

𝗪𝗵𝗮𝘁 𝗺𝗮𝘁𝘁𝗲𝗿𝘀 𝗻𝗼𝘄 𝗶𝘀 𝘁𝗵𝗶𝘀:

- Old access paths stayed live longer than they should have.

- Unauthorized activity continued after normal merchant-side credential rotation.

- Stripe’s own fraud systems saw suspicious activity, but transactions still went through.

Then Stripe tried to reduce a zero day security incident into a customer support issue.

That is unacceptable for any company handling payments.

And if you work in healthcare, client data, or anything touching regulated systems, this gets even worse.
PCI matters. SOC 2 matters. HIPAA implications matter.

𝗜𝗳 𝗮 𝗽𝗮𝘆𝗺𝗲𝗻𝘁 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗵𝗮𝘀 𝗮𝗰𝘁𝗶𝘃𝗲 𝘇𝗲𝗿𝗼 𝗱𝗮𝘆 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗽𝗲𝗿𝘀𝗶𝘀𝘁𝗲𝗻𝘁 𝗮𝗰𝗰𝗲𝘀𝘀/𝗰𝗼𝗻𝘁𝗿𝗼𝗹 𝗳𝗮𝗶𝗹𝘂𝗿𝗲𝘀, 𝘁𝗵𝗮𝘁 𝗶𝘀 𝗻𝗼𝘁 𝗮 𝘀𝗺𝗮𝗹𝗹 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. 𝗧𝗵𝗮𝘁 𝗶𝘀 𝗮 𝘁𝗿𝘂𝘀𝘁 𝗮𝗻𝗱 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗽𝗿𝗼𝗯𝗹𝗲𝗺.

✅️ Here's What We Are Doing:

We are now notifying everyone affected.

We are preserving the evidence.

We are submitting the record for legal, regulatory, payment network, law enforcement, and security review.

We are not releasing technical details that would help anyone reproduce what happened.

But we are telling people the truth.

🛑✋ ️𝗜𝗳 𝘆𝗼𝘂 𝘂𝘀𝗲 𝗦𝘁𝗿𝗶𝗽𝗲, 𝗱𝗼 𝘁𝗵𝗶𝘀 𝗻𝗼𝘄:

1. Audit every old app connection and OAuth connection.

2. Whitelist trusted IPs where possible.
Monitor API traffic and request logs closely.

3. Review fraud events, disputes, and unusual retries.

Do not assume “inactive” means disconnected.

𝗜𝗳 𝘆𝗼𝘂 𝗵𝗮𝗻𝗱𝗹𝗲 𝘀𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝗼𝗿 𝗿𝗲𝗴𝘂𝗹𝗮𝘁𝗲𝗱 𝗱𝗮𝘁𝗮, 𝗿𝗲𝘃𝗶𝗲𝘄 𝘆𝗼𝘂𝗿 𝗹𝗼𝗴𝘀 𝗻𝗼𝘄.

We did not want this to become public.

We wanted it fixed.

Stripe had that chance, 10+ chances actually.

They chose to do nothing.

PCI, SOC 2, and HIPAA implications are not optional conversation topics when payment infrastructure fails like this.

Please share this with any business owner, marketer, developer, agency, practice owner, or operator using Stripe.

Senior Staff as well as the Collison Brothers have been personally notified for over a month. We had several teams "assigned" to the case, and they continue to ignore the many vulnerabilities we found.

In addition, there have been personal matters that have occurred, and have made handling this situation very difficult. We have been mid rebrand for our company and this has complicated so much more than a few "errors".

People deserve to know.

.
Yes. I crashed out on all of @stripe s posts. Even the media arm has been aware of this for over a month. The Collision Brothers have also been personally notified.

I have never seen a company so brazenly obtuse to regulations regarding their business.

@patrickc

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@stripe What good is a stablecoina when ive seen more fraud from stripes customer faced support system than I have walter whites mystery box operation. What would you say mr. collision? @patrickc

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@jeff_weinstein @stripe I will drive up there. And we can talk about all those zero days and how my business has been destroyed thanks to stripes trillion dollar levels of incomprtence.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

I wonder hiw many people are at risk of @stripe zero days because @tryramp

Its honestly hysterical how bad the security us. I have counted 50+ regulatory violations in the last two weeks alone. @jeff_weinstein
Likely blocked me. BTW. If he did, that would constitute active notice.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@stripe @chatbase @composio @BuildOnNodeOps @CustomerIO @datadoghq @depotdev @klaviyo @pydantic @RevenueCat @GetSchematic @spaceship @steeldotdev @tabstack And all those zero days im being forced to report. Affect all these companies. Imagine what would happen if there was a zero day vulnerability that doesnt just hack you.. it hacks Your CUSTOMERS. @SenWarren and stripe keeps ignoring our emails and slow walking us.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@shin_jason58471 @stripe @stripesupport @stripepress @patrickc @bbb_us @FDICgov @ConsumerReports @Reddit @facebook @XNews @tiktok_us @USAttorneys Dm me. I have an idea

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@bitoshimoto @coinbureau What happened? We are collecting reports because of what stripe did to us.

@jeff_weinstein has been quiet lately.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@stripe @jeff_weinstein @patrickc Mr. Collision. Did you know its illegal to falsely manipulate financial ledgers to avoid liability? How many felonies can one company acquire? That is The question @stripe seems to want to solve.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@stripe @jeff_weinstein Is that you Jon Wayne? Is this me?

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@shin_jason58471 @stripe @stripesupport Might be my fault. Someone at legal probably had a heart attack the last email I sent. I was not very nice :) @stripe dry heaving on the mic.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@jeff_weinstein @stripe We tried emailing you Jeff.. is it because im not pretty? @jeff_weinstein

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@benbuaron_ @stripe Actually it works better. They have api vulnerabilities that let an attacker copy and paste your clients money! Easy and fast. Let alone the payment system actually working :) it destroyed our business network

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@benkimbuilds @BerCam__ Its so powerful, we found a zero day that let's people copy and paste money from anyone youve ever been attached to financially. And of course, they are still pretending the vulnerabilities not there. :) but it is.

[Oppenheimer Josh 🧠🇭🇹💥 @onemanarmyjosh]

@remoteornothing Actually Im already investigating @stripe for AML investigios. @jeff_weinstein has been reading my emails. Would U like to DAAP me up Jeff? (UDAAP). Was that job post for me? Considering the discoveries we found. :)