Ryan Bilesky

Bittersweet moment as today I am officially dissolving my freelancing company, X7 Media, LLC. But don't worry I will be back in 2026 with a new project! I will be working on starting a new company focused of providing websites to churches and other faith based ministries called MinistrySites. I will be sharing more as I build it in the coming year, so if you're even remotely interested in the project please feel free to follow me (what seriously you're not already?). And if you happen to belong to a church or other faith based ministry who's looking for a website in 2026 feel free to reach out.

@caiobchi @iupdate My Pixel 9 Pro XL was more expensive than some iPhone models. Its not about affordability, it's about control. On my Pixel I can run GrapheneOS and actually control what runs on my device and what it can and cannot see or do.

@iupdate Not everyone can afford an iPhone, bud.

I am 28 years old and still can’t comprehend how someone would willing use Android over iPhone

@iupdate That's calls Stockholm syndrome. For those of us not held captive by Apple's walled garden life is beautiful.

@MemesToSave Oh is that what they mean? I thought I couldn't do laundry. A washing machine and dryer are quite heavy, and are machines.

@FairydiddleO @Osint613 Interestingly that base technology is how tap to pay credit cards work. At least we learned and adapted new technology from it.

@Osint613 Remember the time when Russian school children presented a US Ambassador with an undetectable listening device?

NYP Reporter: Prior to boarding Air Force One to depart Beijing, the entire U.S. delegation disposed of every item provided to them by their Chinese hosts. Gifts, badges, pins, and commemorative items were all dumped into a trash bin on site. The directive was absolute, no item of Chinese origin was permitted to board the aircraft. The precautions extended beyond the departure itself. Delegation members had left all personal electronic devices at home before traveling to China and operated exclusively on clean burner phones throughout the duration of the trip.

@BarbellFi Your house will outpace inflation. $800k will not. I hope for your sake she vetos that plan.

The 30 year treasury yield is now 5.1% Convincing my wife to sell our house We’d net $800k after closing Dump all that into 30 year bonds Collect $40k/year for 30 years Use that money to pay rent Never deal with the lawn or a leaky roof And get my $800k back in 30 years 😳

@LibertyCappy That's up to them. As long as they provide service worth a 25% tip.

Has tipping culture gotten out of control?

@LibertyCappy Tale the yellow, all the rest will eventually follow as federal funding dries up.

Which one are you choosing?

Proving the product was used does not prove the charge was authorized, that's what 3D secure is for. With 3D secure, the bank verifies the cardholder before the transaction. This shifts liability from you the merchant to the bank if there is a fraudulent transaction dispute later. Yes, it adds more friction to checkout. But especially for high dollar value transactions, absolutely worth it.

@rebuilding_2 @stripe So, any transaction on the internet... with your logic, you can 10.4 fraud claim?

Well so much for that. Already lost. The system is utterly fucked and broken. @stripe 48-page evidence package. Easy to read, Table of contents, filled with visuals (a junior bank employee could easily understand everything). The customer used the product for 49 days, was logged in 13 hours before filing the chargeback, then canceled the subscription 5 hours after the dispute was already filed. *Technically they are still ACTIVE. Here's everything we submitted: PAYMENT INTEGRITY • AVS postal-code check: PASS • CVC check: PASS • Stripe Radar score: Normal (22 / low risk) • Auth success rate on customer email: 100% • Card brand, last-4, fingerprint, exp, billing ZIP all confirmed by issuer CUSTOMER USE POST-CHARGE • 35 distinct active days in 49 days • 393 authenticated session-refresh events • 17 long-form SEO articles generated • 18 AI images generated • 3 WordPress sites configured (admin credentials added) • 4 Google accounts authenticated via OAuth • Customer added their own paid OpenAI API key (BYOK) • 4 team members added TIMING • 49 days between charge and dispute • Logged into the dashboard 13 hours BEFORE filing the chargeback • Canceled the subscription 5 hours AFTER the dispute was filed INDEPENDENT IP CORROBORATION • Stripe captured IP at checkout: Manchester, UK • Microsoft Clarity captured 22 of 38 sessions over 60 days: also Manchester, UK • Two unrelated 3rd parties placing the same person in the same city across payment + 60 days of authenticated use THE KICKER - THE CUSTOMER'S OWN PUBLIC WEBSITE CURRENTLY DEPENDS ON OUR PRIVATE CDN • Articles generated on his account are LIVE on his own public WordPress sites • Page source contains img tags pointing INSIDE our private R2 bucket • Last-Modified headers on those CDN files match the EXACT minute his account generated them • Currently fetched by every visitor to his website CRYPTOGRAPHIC IDENTITY CHAIN (Automattic / Gravatar) • Every WordPress author avatar = SHA-256(author email) • 3 of his sites, 3 perfect SHA-256 matches against the gmail addresses in our DB • Automattic has no relationship with us, the customer, or the bank • Effectively unforgeable email-to-WP-admin binding DOMAIN OWNERSHIP (third-party attestation) • Google Search Console verified ownership on 4 separate domains • Public WHOIS: 2 of his domains registered 9 SECONDS APART through the same registrar account • Both registered 5 MONTHS BEFORE he bought our subscription • Pre-existing content business, not a stolen-card test VISA CE 3.0 ELIGIBLE • Same payment credential had a $0.00 trial-start invoice marked "paid" 7 days before the disputed charge • Same customer, email, payment method, subscription • Exactly the prior-undisputed-transaction proof Visa CE 3.0 requires The chargeback dispute system is broken.

@numerounochef @MaxRovensky @sama No Claude Code is by far the worst harness out there. That's why Anthropic needs to try so hard to force people to use it over OpenCode or other tools.

@MaxRovensky @sama Codex is a far worse product so they have to provide better terms.

man this is just sad to see @sama: - Pay $200. Use product Anthropic: - To claim your non-rollover Programmatic Usage Tax Credit, submit Form 1044-CLI and form W-16 with Schedule SDK-1 by June 8. Credits valid only for qualified agentic expenditures under applicable plan limits

Why is it you buy hotdogs in packs of 6 but buns in packs of 8? I feel like it's done on purpose by big hot dog to force you to buy more hot dogs to use the extra buns.

This is lowkey genius. A honeypot repo to catch AI.

@AlfredoOlazaba @truewagner Ask not what your landlord can do for you, but ask what can you do for your landlord.

@truewagner Thomas shows you what value he can provide you as a landlord. Burlen shows you what value you can provide him as a tenant.

I have a unique opportunity to choose my next land-lord.. .

And let the user hostile choices continue. Glad I use GPT 5.5 for my coding now.

@RepKeithSelf Passing the Surveillance Accountability Act sounds like a great start....

The government abuses FISA to spy on American citizens under the guise of national security. Do you think Congress should reform FISA to protect your privacy rights guaranteed under the Fourth Amendment?

@algiamh I assume its for handles, if you're using a cup with one.

الشي الوحيد الي ماعرفته وش فايدة هذي المساحه في مكان الاكواب!!!

@GunnerManAFC @layxsnv I was always taught the comma before "and" was optional. So either B or C would be acceptable in this example. Though I always used it, I think it looks better personally. I just look at AI using it and proof I was right all along.

@layxsnv Before ChatGPT, everyone would say C One day AI decided that a comma goes before “and” which has now changed perception. It’s also one of the key giveaways that someone has used AI to write their text because the majority simply never did it. It’s a new phenomena

Okay, where are the English scholars, which one?

@bit_fury I would encrypt it only for their user account. Problem solved.

InfoSec: Your API payloads are in clear text 😱 Me: They're over TLS 1.3. InfoSec: Yes but I can read the JSON. Me: Because your browser decrypted it. For you. On purpose. InfoSec: Please encrypt the payload before sending over HTTPS. Encrypt the encryption. #rant

@glcst @Keleesssss @LeMikaelF @pavan4820 Perhaps you could reopen it as an invite only program for real people who want to contribute something meaningful. Also I cannot belive a database would allow SQL queries, the horror.

I am very sad to announce that today we are retiring the Turso bug bounty challenge. We previously paid developers who found gaps in our test coverage that would lead to data corruption. Great people like @Keleesssss @LeMikaelF and @pavan4820 were awarded for their truly impressive work. But today, for each one of them, there are 100 clawbots and their cousins flooding our PR with the craziest and most unbelievable slop possible. We eventually realized that giving the slop cannon a financial incentive (with close to zero cost to them) to open throw-it-and-see-if-it-sticks PR into our repository was not conducive to a good environment. We share some real stories (including the clanker who found a vulnerability allowing turso, a sql database, to... execute sql queries!) below 👇👇

@Milajoy Slightly better than average! Story of my life. Seattle, Dallas, Portland, Denver, Las Vegas, and Oklahoma City. Technically also Minneapolis/St. Paul (not sure which the airport is technically in) if we count layovers, though I never left the airport.

The average American has been to five of these cities. How many have you been to?

@David4058926223 @todayyearsold So a hotel should only be able to book half their rooms at a time?

Hotel check-in should be at 11AM, and checkout should be at ЗРM