Mehmet

Indie Dev · Hit $25K → Target: $50K in 28 days 🚀
Apple Search Ads · ASO

[Mehmet @upbeat_dev]

Hit a new personal record today. Congrats are welcome 🙂

[Mehmet @upbeat_dev]

@caldabuilds got it! thanks.

[Mehmet @upbeat_dev]

built my first app that i'll sell outside the app store and play store.

there's just one problem: users need to bring their own llm api key.

normal users won't know how to do that, and the ones who do could probably build the app themselves.

looks like i picked the wrong app idea again :d

[Mehmet @upbeat_dev]

@Kedeodev yeah, i'll publish it anyway. let's see how it goes

[Mehmet @upbeat_dev]

@caldabuilds could you explain a bit more how mcp would help in this case?

[Mehmet @upbeat_dev]

@wzulfikar i wasn't expecting this.

[Mehmet @upbeat_dev]

check out the replies to this tweet. they've turned into a goldmine for generating AI videos on the cheap.

[Mehmet @upbeat_dev]

how are you making these ai-generated videos so cheap? i'm trying a 15 sec video with seedance 2.5 at 480p. i tried 4 times and it spent $6.

is there a more affordable way to do it?

[Mehmet @upbeat_dev]

i saw two posts here about tools for finding potential customers, but i can't find them anymore.

i think the founders even reached out to me via dms, but i can't find those either

if you see this, please ping me again. i'd love to check out your tools!

[Mehmet @upbeat_dev]

@BoboZivkovic thanks a lot! i will check it

[Mehmet @upbeat_dev]

i've decided to focus on building a brand around my flagship app.

i've already ported it to swift, and now i'm porting it to android.

i've also changed the app's name to a branded one.

next, i'll start running social media ads to build brand awareness.

the only thing i'm unsure about is trademark registration in the us. no idea how that works yet.

[Mehmet @upbeat_dev]

part 2 is here!

you might discover a keyword before your competitors, but Apple Ads can discover it for them.

here's why Broad Match, Search Match, and app relevance are changing the ASO game in competitive markets. https://t.co/lcaNvHWAwT

[Mehmet @upbeat_dev]

@KelisShekhaliya i just spent a lot in the past. campaigns have been paused for a while now.

[Mehmet @upbeat_dev]

accepted :d

[Mehmet @upbeat_dev]

looks like everyone's started using ai to find vulnerabilities :d

[Sneha @snehanaikAI]

October just keeps stacking security disasters.

From developer tools to India’s largest bank, here’s the timeline of disclosures, patches, and incident updates:

Oct 21
- SBI: disclosed 3,897 customer records containing personal information exposed on the dark web. Investigation ongoing.

- PHP2Shell: patches released for two critical unauthenticated RCEs in PHP core. Exploitation attempts had already been observed.

- Railway: warned that customer environment variables may have been accessed, with some potentially decrypted. Deployments were initially paused.

- LiteLLM: malicious v1.107.0 packages and container images carried credential-stealing malware and loaders. Vendor reported containment the same day, but affected machines still need remediation.

- GitLab: patched a CVSS 10.0 unauthenticated RCE affecting versions since 7.0, exploitable under certain conditions.

- Java: Oracle issued an out-of-cycle alert for CVE-2026-91403, a CVSS 9.1 remotely exploitable JSSE vulnerability requiring no authentication.

- Node.js: released multiple high-severity security fixes.

Oct 20
- eMudhra: public advisories detailed eight compromised intermediate CA keys with dangerously weak randomness. Browser blocking began Oct 17. India’s DSC/eSign services were unaffected, according to the company.

- Plex2Shell: CISA added all four actively exploited vulnerabilities to KEV. Patches had been available since August.

- SiteGuard Server Edition: exploited OS-command-injection flaw added to KEV.

- Siemens Software Center: exploited DLL-sideloading flaw added to KEV.

- HTTP/3: Header Accordions research detailed QPACK memory-amplification/DoS weaknesses across multiple implementations. Several were already patched.

Oct 19
- OVHcloud CLI: attackers replaced GitHub release binaries after compromising a developer account. Source code was unaffected.

Oct 17
- OpenCode: disclosed a hosted Console breach potentially exposing saved AI-provider API keys for a subset of users.

- Zeabur: announced a phased shutdown following its Oct 14–15 breach. Its subsequent report confirmed over 3.2 million environment-variable records were accessed.

If these are in your stack, check the affected versions and exposure windows now.

Patch vulnerable systems. Revoke and rotate potentially exposed secrets. If malicious software ran, follow containment and rebuild guidance too.

A patch fixes the vulnerability. It doesn’t undo credentials already stolen.

[Mehmet @upbeat_dev]

@samuel_yostt same here. but i'll dig into it a bit more. can't be that many people getting it wrong :d

[Mehmet @upbeat_dev]

still don't get what i'd use these for. i mean, what can they do that my subagents can't?

i need to spend some time looking into this.

[Claude @claudeai]

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.

It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

[Mehmet @upbeat_dev]

yeah, tbh i've been focusing on ios and apple ads too. i'm only updating one of my android apps, so the ad credits came as a nice surprise.

i've never managed to make google ads as profitable and efficient as apple ads. it's a completely different beast and feels so unpredictable.

[Mehmet @upbeat_dev]

@KelisShekhaliya google ads

[Mehmet @upbeat_dev]

@snehanaikAI google ads. perfect timing since i'll be updating my android app soon.

[Mehmet @upbeat_dev]

@macrofern thanks for the detailed explanation! i like the idea, and i'll give it a try.

[Mehmet @upbeat_dev]

how are you making these ai-generated videos so cheap? i'm trying a 15 sec video with seedance 2.5 at 480p. i tried 4 times and it spent $6.

is there a more affordable way to do it?

[Mehmet @upbeat_dev]

@FloWritesCode interesting, I will check it. thanks

[Mehmet @upbeat_dev]

@FloWritesCode don't you tell them to do that.