FWay
1.1K posts

FWay
@FwayNL
Dutch dude living in Asia. Hoping for humanity to come together and elevate to harmony and become as one. Sick and tired of the “divide et impera”
Katılım Eylül 2012
574 Takip Edilen206 Takipçiler

@denisyurchak Passing a parameter is not a hack. It’s a lack of security in your backend
English

My startup was hacked!
I launched my own travel eSIM service, eSIMPal
It started making money, the users were happy, and all was good, but today I woke up to a hacked website
Somebody managed to get three 50 (!) GB eSIMs for Kuwait and Saudi Arabia for free, and we started using them heavily
I wired up Claude, and we discovered the issue: the user could pass a parameter from the client to the server and make the eSIM cost 0 dollars
I fixed the issue and blocked this user, and he only managed to use 5 GB worth of data
The internet is full of sharks, boys – triple test all the payment-related code, make sure different LLMs cross-check each other's work
Now I'm writing code with GPT-5.4 and making Opus 4.6 review everything for vulnerabilities
And my hacker bro, if you are reading this, I'll get you your Saudi eSIM, don't worry
Use the promo code IHACKEDESIMPAL for 10% off and chill

English

@SenMullin @POTUS @SASCGOP @WhiteHouse @DOWResponse @PeteHegseth @RapidResponse47 I'm not for war, nor pick any sides on politics, religion, countries. but let me just ask this: @grok which country or countries ever dropped nuclear bombs on other countries?
English

MULLIN: “I don’t remember you saying ANYTHING in 2016 when Barack Obama dropped 26,000 bombs in Syria, Pakistan, Libya—to name a few.”
“President Trump is doing his job as Commander in Chief… but there is no way on God’s green earth you can give @POTUS any credit.” 🔥🔥🔥
English

@summeryue0 tip: run in telegram and do: /stop to insta kill what it is doing 😎
English
FWay retweetledi

We just raised $500M at an 11B valuation 🎉
To celebrate, we’re giving away 1,000 free credits so you can test our platform.
For the next 6 hours, comment “11B” below and we’ll DM you the credits (must follow) 👇
ElevenLabs@ElevenLabs
We raised $500M at an $11B valuation to transform how people interact with technology.
English

You should never ever expose a VPS to the entire internet
Always firewall it to subnets
If you host a website you should only allow port 443 (HTTPS) inbound from Cloudflare's IP range / subnets
Port 22 (SSH) only from your Tailscale subnet range
That means you create a "tunnel" from Cloudflare and Tailscale (your laptop) to your server's door
You still need your SSH key to open the door btw
If you don't, ANYONE in the entire world can connect to your VPS and if there's just one security vulnerability and you didn't upgrade your VPS you can get hacked
If you do have it firewalled with Tailscale subnet only, it means only if they hack your laptop they could get in via your Tailscale there
Another thing is ask OpenClaw or Claude Code to enable unattended upgrades with auto reboot
Goat1337@go4t1337
@levelsio Whats the point of installing tailscale? Or am I missing something here You could do the exactly same without tailscale
English

@AntoineRSX No I'm using claude code with GLM-4.7 z.ai -> cheaper alternative for people like me with a smaller budget
English

My @openclaw created a feature request by itself after me trying to port to pgvector for memory:
Gud tek! 🔥🔥
github.com/clawdbot/clawd…
English

@LigmaSqueeze @KingBootoshi Imo it's better to use a broad range of different products all for different purposes. Claude code is just one of the many tools I use
English

@FwayNL @KingBootoshi This is why people should just use Cursor. automatically indexes the whole codebase and updates every 5 minutes without using tokens
English















