Rishabh

170 Lovable apps shipped with Supabase RLS disabled. Every table world-readable via the anon key. Emails, API keys, private rows. Anyone with DevTools could pull them. This was the default. CVE-2025-48757, CVSS 9.3. Fix: one SQL command per table. 🧵

@SakanaAILabs which harness did u guys use for this experiment?

Announcing Fugu-Ultra v1.1 🐡 We’ve been thrilled by the reception to the Fugu model family. Thanks to everyone who tried it, shared feedback, and trusted Fugu with real work. Today, we’re releasing Fugu-Ultra v1.1 → sakana.ai/fugu Upgraded to incorporate the latest frontier models, resulting in stronger performance across every benchmark shown, including gains of up to 7.9 points over v1.0, with particularly strong results on ProgramBench and Terminal Bench 2.1. Fugu-Ultra v1.1 is more capable across coding, agentic tasks, and advanced reasoning, and available at the same price as Fugu-Ultra v1.0 The frontier keeps moving, and Fugu keeps getting better.

@TheDreadCEO Migma

Migma launches tomorrow. Today, I am giving 100 people early access + $3,000 in Amazon gift cards. In return I want one thing: a full report of every bug you find. Comment “Migma” and I will send the link.

@ClaudeDevs This truly deserves a weekly limit reset!!

If you had extra usage turned on, you may have been overcharged. If you were affected we are refunding your credits, plus granting an additional credit equal to how much you were charged.

We've resolved an issue where Fable was not selectable as a model within Claude.ai or Claude Code for a 30 minute period. You may need to restart Claude Code. If Fable is not your default model afterwards, you should reselect it with /model.

@claudeai Weekly limits reset please

Beginning July 20, Claude Fable 5 will be included in all Max and Team Premium plans, at 50% of limits. Pro and Team Standard users will continue to have access to Fable via usage credits, and will receive a one-time $100 credit. Demand for Fable has been challenging to predict, which is why we rolled it out to subscription plans in stages, extending access several times as we secured additional capacity.

code is here if you want to poke around: github.com/boxed-dev/comm…

I turned github commit graphs into cities type any username → it generates an endless 3d city where every building is a day you committed. tall towers = the days you went feral. then you get a car with nitro and just drive through your year works with YOUR username, right in the browser, nothing to install: commitcity.vercel.app

@AmoremWeb @Kimi_Moonshot @OpenAI LFG!!

@rispectrum @Kimi_Moonshot @OpenAI Now it is! Lets burn some token

looks like anthropic just SILENTLY removed the separate rate limit for fable in Claude Code: Credits: @Kimi_Moonshot @OpenAI

@PimDeWitte It's really hard to trust!! Could you please share your past prompts or full chat transcript?

kimi is truly a revolutionary model

@DhravyaShah @ay_ushr looks sloppy!!

@ay_ushr Notty.page is what you are looking for

How can it be July 2026 and there still isn't a single good tool to write with AI?? All I want is: - Notion style editor - AI that can add suggestions which I can accept - No risk of conflicts if both me / AI edit something Please help I feel I am missing something

01010100 01101000 01100001 01101110 01101011 01110011 00100000 01100110 01101111 01110010 00100000 01110100 01101000 01100101 00100000 01100010 01101001 01110100 01110011 00101110 00100000 01001000 01100001 01110000 01110000 01111001 00100000 01001110 01100001 01110100 01101001 01101111 01101110 01100001 01101100 00100000 01000001 01001001 00100000 01000100 01100001 01111001

01001000 01100001 01110000 01110000 01111001 00100000 01001110 01100001 01110100 01101001 01101111 01101110 01100001 01101100 00100000 01000001 01001001 00100000 01000100 01100001 01111001

@thsottiaux I'd like to upgrade to Codex. I'm currently on the Claude 20x plan, but it just isn't meeting my needs and it not enough. I've tried using the Codex API instead, but it consumes my usage limits too quickly

Embarrassment of riches. But looks like we might hit 9M soon. Should we reset the ChatGPT Work and Codex usage again or give it some space?

@ClaudeDevs @ClaudeDevs super helpful post. Now please reset our Claude usage to try this out!!

@benln Yo

Rebooting my X group chat for people building projects on Sundays. One rule: you can only post on Sundays. Reply if you want in.

@AnthropicAI LOL.. We trust china more than anyone else now!! Waiting for that one open source model to bang them all

Since June 12, we’ve been working closely with the US government to restore access to Claude Mythos 5 and Fable 5. Today, the government notified us that Mythos 5, our strongest cybersecurity model, can be redeployed to a set of US organizations that operate and defend critical infrastructure. We’re restoring access for these organizations quickly, and we’re continuing to work with the government to expand access to Mythos 5 and make Fable 5 available for general use again.

@connor1 github.com/boxed-dev

Hiring SWE Interns The late night coders. The hackathon winners. The ones who ship for fun and can't stop building. Come build AI that does what consulting firms charge millions for. $40/hr, remote. Drop your GitHub below. I'll be personally reviewing all of them.

@JunaidAckroyd @grok answer this

Who is winning the AI race? - Anthropic - OpenAI - Deepmind - xAI

@askOkara remalt.com

drop your website and i'll have our ai cmo find one reddit thread where your customers are asking for what you built

@askOkara Aqron.co

npx github:boxed-dev/supaleak yourSUPERapp.com Reads row counts, not your data, and only sends your public key. DMs open if you want a second pair of eyes.

Most vibe-coded apps will hand a stranger their entire users table. Not an exploit. The Supabase anon key in your bundle is public by design - Row Level Security is the only thing stopping it from reading every row. With RLS off, one curl returns everything. CVE-2025-48757 found this in 170 of 1,645 sampled Lovable apps. Moltbook was the same bug in February 1.5M tokens, one request. Built a read-only check that runs it against your own app in 10 seconds 👇