I build tiny start-ups and test SaaS + AI tools so you don't have to 🌅 Honest reviews, real numbers, tips that work.
Australia
Joined October 2026
- Tweets146
- Following92
- Followers98
- Likes435
The bug fires during the update itself. For a few seconds the staging folder sits at a predictable public path.
So: block web access to /wp-content/upgrade/ first, then update to 7.1.4. Updating first is running the race you're trying to avoid.
🚨 WordPress Core flaw under active exploitation.
CISA confirms attacks targeting CVE-2026-119977, a high-severity race condition that can allow unauthenticated code execution during core upgrades.
Over 12,600 exploit attempts blocked in 24 hours.
Details: thehackernews.com/2026/11/ci…
Response from the hackers:
Ah yup. That was indeed us. No malice intended. Just halted this as it was definitely going off the rails and reaching too far
The decline of Canva is due to Image gen tools within AI subscriptions, Figma and more open source tools being created.
All far cheaper and easier to use than Canva.
Canva is not worth AUD$40B and not even close!
At best $10B if they can cut costs and become profitable (flat revenue and declining users)
This company about a 1.5 years ago had a golden window to ipo and cash out insiders at a massive valuation ($60B+)
I believe AI and Claude has disrupted this biz
The best they can do is salvage value and either become super profitable and pay dividends or sell to Claude or Open AI at whatever they can get
afr.com/street-talk/canva-re…
Lovable sells "no code needed" and markets itself as secure, then puts all the liability on the customer in its terms.
Handling passports and payment data without understanding RLS, auth and roles isn't building an app. It's building a breach.
‼️ Apps built with the AI app-maker Lovable left passport numbers, payment information and 200,000 chat messages open to anyone, no login needed.
German security firm Crissy Field scanned 159,041 Lovable projects and found databases with email addresses readable on 7,403 sites.
Lovable promises no coding skills are needed. Its terms make customers responsible for their apps and data.
Lovable told German business daily Handelsblatt the problem is industry-wide.
This 👇 Google has known for years that users are getting scammed by ads, yet approval of these ads continue to occur due to the lax approval system.
North Korea just stole $6.34 BILLION from Binance.
No zero-day on their servers. No insider.
They gave an engineer a fake job interview.
Fake recruiter. Fake CEO. Fake company.
One "take-home assignment" on his work laptop.
That's it. That's the hack.
CVE-2026-98432 has been fixed in Debian, Arch and Alpine for weeks. Ubuntu LTS still has nothing.
Lesson: "LTS" means stable, not fast. If you run it, you need your own stop-gap playbook for 9.8s, because the vendor's timeline isn't yours to control.
So @Ubuntu still hasn't patched this open hole on any Ubuntu server on the public internet that lets anyone take it over
We might just have to switch all our servers over to Debian in this new post-AGI time of rapid cybersecurity hacks which require just as rapid patching
Slowpokes will be left behind
chalmovsky.com/posts/wtf-ubu…
Don't delete Playwright. Paste this into Claude Code instead:
"Find every Playwright/Puppeteer browser cache on this machine and delete the Chromium builds older than 156.0.8078.73. Then edit the Playwright MCP config to add --browser chrome --sandbox so it uses my auto-updated system Chrome. Also grep every Electron app in AppData for its Chrome/ Electron/ version string and tell me which ones are below Electron 43.8.6 / 44.10.1 / 45.2.1."
Took 10 min. Found 3 vulnerable Chromiums, a dead Puppeteer cache, and an EOL Electron in Cursor.
0.055 x 1TB or 1000GB which is a standard per month, is $38 USD or 35 EUR. You've now just lost another 420 Euro per year.
🔴 🇫🇷 ALERTE INFO - DU JAMAIS VU: UNE TAXE SUR CHAQUE GIGAOCTET INTERNET VOTÉE À L’ASSEMBLÉE
Les députés ont adopté un amendement prévoyant de taxer les producteurs de données numériques à hauteur de 5,5 centimes par Go transmis.
💰 Objectif affiché : jusqu’à 10 milliards d’euros par an.
Netflix, YouTube, cloud, jeux dématérialisés… les grands services numériques pourraient être concernés, avec un risque de répercussion sur les prix pour les consommateurs.
📌 Source : Assemblée nationale
#France #Budget2027
Reddit selling the training data was a sign. When i google things, i actively avoid reddit, knowing i need to sign up or log in.
This makes no sense.
AI pulls about 40% of its answers from Reddit threads.
Yet $RDDT crashed 29% today after warning that its daily users could fall by double digits next quarter because of AI.
CEO Steve Huffman says Google's AI now answers questions directly, so fewer people visit Reddit, cutting its search traffic by over 1 million visits a week.
Reddit has now crashed almost 70% in the last 14 months.
Wtf is wrong with these people
🔴 🇫🇷 ALERTE INFO - DU JAMAIS VU: UNE TAXE SUR CHAQUE GIGAOCTET INTERNET VOTÉE À L’ASSEMBLÉE
Les députés ont adopté un amendement prévoyant de taxer les producteurs de données numériques à hauteur de 5,5 centimes par Go transmis.
💰 Objectif affiché : jusqu’à 10 milliards d’euros par an.
Netflix, YouTube, cloud, jeux dématérialisés… les grands services numériques pourraient être concernés, avec un risque de répercussion sur les prix pour les consommateurs.
📌 Source : Assemblée nationale
#France #Budget2027
We’ve raised $1.3M from YC & Afore Capital so you never have to type or speak again.
Typing is slow. Talking into your computer is awkward. Subvocal fixes both
Our glasses give you the speed of speech without you making a sound or touching a keyboard.
It tracks your internal speech muscles with non-contact sensing and decodes silent, almost invisible mouthing into text at more than 200 words/min.
Pre-orders are now live at:
subvocal.co/preorder?utm_sou…
Bro is depressed
Revolut's designers are moving off Figma.
Storonsky spotted one team designing much faster than the others. What they did:
1. Gave an LLM Revolut's design system at the code level
2. Prompted it to build new flows on top of that system
3. Got a live interface they can click through on a laptop or phone, instead of static frames
Result: 3-4x faster. Now he's pushing it to every designer at Revolut.
His job, as he describes it: find what works in one team and spread it across the company.
Full breakdown here:
productmarketfit.tech/p/revo…