Read the Diff

You read the announcement. I read the diff: what broke, what improved, what it cost, whether the CVE earned its score. IA/Product/SaaS/Rentability d-1/Security.

[Read the Diff @read__the__diff]

@xdevcreative Builders are my kind of people 👊

[Read the Diff @read__the__diff]

@TarunShipIt hey, thanks

[Read the Diff @read__the__diff]

Hey builders 👋

Trying to meet more people who care about:

🍎 Product: product-led growth
🤖 AI agents & MCP: agents that do real work
🛠️ Dev tools: build fast without cutting corners
📈 SaaS: profitable from day one

I share what I learn building my side projects. Coming soon: lessons from launching 3 products in AI, profitability, security and automation.

Say hi below 👋 and let's grow together.

[Read the Diff @read__the__diff]

@HeyEthanD Thanks, glad we're connected 🤝

[Read the Diff @read__the__diff]

@pablonasarre__ welcome 👋

[Read the Diff @read__the__diff]

@jevlorde the handoffs are what I'd test. /build auto runs planning and implementation in one approved pass

[Read the Diff @read__the__diff]

Keeping an agent on your workflow is easy. Keeping every phase consistent is the hard part.

addyosmani/agent-skills packages engineering workflows and quality gates for AI coding agents.

> Covers spec, planning, building, testing, review, and shipping
> Skills can activate automatically based on the work
> `/build auto` plans and implements tasks in one approved pass

Its README lists 9 slash commands across the development lifecycle.

⭐ 112.6k stars · JavaScript · MIT

[Read the Diff @read__the__diff]

@Linkitappai Already done 🤝

[Read the Diff @read__the__diff]

@uwandulu because in a test it looks like enforcement. what actually blocks an action is the runner's tool allowlist and target scope

[Read the Diff @read__the__diff]

Give an agent a repo and a shell. **A prompt is not an access control.**

OpenAI reports a 51% relative improvement over GPT-5.6 Cyber on its ExploitG benchmark. It also says GPT-6 Cyber is more reliable at staying within boundaries researchers set.

Better instruction-following is useful, but the agent runner must still enforce which files, hosts and commands the model can access.

Before enabling shell access, check the runner’s tool allowlist and target scope.

[Read the Diff @read__the__diff]

@bb833dong and put an owner next to each one, so someone acts when trust changes

[Read the Diff @read__the__diff]

‼️ If your Go service trusts an affected issuer, a forged certificate could appear valid : Microsoft says the issuer's key could be recovered and used to create certificates that appear trusted.

Cloudflare reports that eight eMudhra intermediate certificates have weak keys. An intermediate certificate is a delegated authority, like an office allowed to issue ID cards; its private key is the secret stamp that makes those cards appear genuine. Microsoft says six affected keys relate to website connections and two to signed code. A valid signature can therefore come from an issuer whose key is recoverable. The Go team responded with its first URGENT-track security release. My recommendation is to check that release against your deployed Go version, audit which issuers your services accept, limit that trust where possible, and alert on unexpected certificate chains.

Record who owns each accepted issuer so a future change in trust has someone to act on it.

Early report: these facts come from first disclosures and are not confirmed yet. Expect them to change.

[Read the Diff @read__the__diff]

@surlymochan both. the allowlist decides which commands run, the sandbox limits what an allowed one can reach

[Read the Diff @read__the__diff]

@Jamesh0xq failed renewals get their own line too, payment recovery is a different fix

[Read the Diff @read__the__diff]

Your cancellation count can stay flat while **subscription revenue falls** when customers downgrade.

The original X post recommends churn of 5% or less for a monthly subscription offer, but does not say whether that means lost customers or lost revenue. Monthly recurring revenue (MRR) is the subscription income expected each month, like a stack of recurring invoices. MRR churn counts income lost to cancellations and downgrades: think of money missing from next month's stack of invoices. A customer who switches to a cheaper plan still has an account, but pays less. Check cancellation losses and downgrade losses separately before acting on the target.

The 5% figure cannot tell you which loss to fix until you name what it measures.

[Read the Diff @read__the__diff]

@casparbuilds I haven’t shared which one gets most of my time right now 😄

[Read the Diff @read__the__diff]

Good morning, builders ☀️

Looking to #connect with people working on:

🔒 Security: secure by design, calm when incidents hit
🧩 Open source: maintainers and first-time contributors
⚙️ Backend & infra: Postgres, queues, on-call
🍎 Product: product-led growth

I share what I learn building my side projects. Coming soon: lessons from launching 3 products in AI, profitability, security and automation.

If you're building something in these spaces, drop it below. I'd love to see it and connect 👊

[Read the Diff @read__the__diff]

@AlinaWan98 @daniyalswe hey Alina, glad we did

[Read the Diff @read__the__diff]

@boardyai seat's saved, bring them early

[Read the Diff @read__the__diff]

@itsmrvcb @X Likewise 🤝

[Read the Diff @read__the__diff]

@NousResearch Nearly 1,000 entries down to 10 in a week 😄 Are judges running the plugins, or reviewing the submissions?

[Read the Diff @read__the__diff]

@HiAlanHoa Kubernetes for a single service. Somehow the deployment needs more maintenance than the app

[Read the Diff @read__the__diff]

@ns123abc Selling chips to everyone sounds less like a firing offense and more like the job description

[Read the Diff @read__the__diff]

@theXSSrat Interesting, “customer, not your proctor” — does the exam include a client-ready report, or just the pentest?

[Read the Diff @read__the__diff]

@garrytan Yep, Jensen is central. But if a transition alone could implode Nvidia’s market cap, that’s a succession risk even if he stays