Introducing https://t.co/uw5egQAJnV v2.0
My Mac app that shows what is filling your disk and helps you clear it safely.
v2.0 is more AI-centric: it also shows how much space your AI tools take up, and what they have running.
$7.99 for a limited time, then it goes back to the normal $19.99. Pay once, no subscription.
v3.0 is already on the way. Man, this is addictive.
#buildinpublic #solodev #indiedev #MacPrune #macOS #AI
Agree on moving to AWS/GCP. Just budget for the infra you’ll now own (IAM, networking, observability). ECS or Cloud Run keeps it close to the PaaS experience. For secrets, Secrets Manager or Vault with short-lived creds (OIDC/IAM roles), so you never have to rotate 140 keys again.
🚆 @Railway: a major outage and a security breach at the same time.
On Oct 21 an attacker may have accessed customer env variables, some of them decrypted. All deploys are paused, and Railway says rotate everything.
If you host there, rotate your keys and database passwords today.
It wasn't the only one this week:
🔑 OpenCode (Oct 17): AI provider keys saved in Console may have been exposed for about 1.4% of Console users.
🐘 PHP2Shell (Oct 21): two critical flaws in PHP itself. Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
🦊 GitLab (Oct 21): a CVSS 10.0 flaw lets attackers run code on self-managed servers without logging in. Patch now.
🟩 Node.js (Oct 21): 10 fixes, including a Brotli decoder RCE and TLS hostname bypasses. Update to 26.12.1, 24.22.1 or 22.23.4.
🌐 WordPress wp2shell (July): a core RCE on CISA's exploited list. Be on 6.9.5, 7.0.2 or 6.8.6 or later.
📦 LiteLLM (March): two PyPI releases stole SSH keys and cloud credentials. One unpinned dependency is all it takes.
If you're an early dev, do these now:
• Rotate your AI API keys
• Set hard spend limits and billing alerts
• One key per app, never shared
• Don't paste keys into third-party tools
• Pin versions, commit lockfiles
• Keep keys out of code and public repos
• Update anything facing the internet
A leaked key is someone else spending your money.
#buildinpublic #solodev #indiedev #CyberSecurity #DevSecOps #AI
This is something I came to know how to do in X :) interesting
x̖̗̘̙̜̝̞̟̠̤̥̦̩̪̫̬̭̮̯̰̱̲̳̖̗̘̙̜̝̞̟̠̤̥̦̩̪̫̬̭̮̯̰̱̲̳ͣͤͥͦͧͨͩͪͫͬͭͮͯͣͤͥͦͧͨͩͪͫͬͭͮͯͣͤͥͦͧͨͩͪͫͬͭͮͯͣͤͥͦͧͨͩͪͫͬͭͮͯͣͤͥͦͧͨͩͪͫͬͭͮͯ
I think this might be it for me with @Railway.
Last major incident, Google Cloud suspended their account and the whole platform went down for hours.
Now another one: a security incident, every bucket credential being rotated, and deploys paused.
Time to look at alternatives.
#buildinpublic #solodev #indiedev #devops #Railway #webhosting
157 orders in the past week.
I didn't expect it to go that far.
I think the reason is MacPrune v2.0. It actually solves a real problem for people.
Downloads went way up too, so I expect more free users to upgrade to Pro.
Launching something new soon.
Keep shipping. Keep building.
#buildinpublic #solofounder #solodev #indiehackers #MacPrune #macOS
Introducing https://t.co/uw5egQAJnV v2.0
My Mac app that shows what is filling your disk and helps you clear it safely.
v2.0 is more AI-centric: it also shows how much space your AI tools take up, and what they have running.
$7.99 for a limited time, then it goes back to the normal $19.99. Pay once, no subscription.
v3.0 is already on the way. Man, this is addictive.
#buildinpublic #solodev #indiedev #MacPrune #macOS #AI
@denk_tweets@beehiiv Bro just handed every vibe coder the ultimate Beehiiv competitor blueprint.
they will be pasting this into Claude with “Build this, but better and cheaper.”
Jokes aside, massive respect! Still a paying Beehiiv subscriber myself.