Just hacked my Ray-Ban Meta and built my own scanner with them The US has a lot of crazy products, so I built an app that explains what I’m seeing and where to buy it Used the @Meta SDK to connect it with my smart glasses and test it in real life without looking like a freak

How to protect yourself from supply chain attacks: 1. Check lockfile diffs before merging 2. Run npm audit / pip-audit 3. Pin GitHub Actions to commit SHAs 4. Disable install scripts when possible 5. Restrict CI token permissions 6. If compromised: rotate secrets + rebuild You can't prevent every attack, but you can dramatically reduce your exposure

Hacktober*

October has been an absolute nightmare for software > Railway - customer secrets exposure > LiteLLM - malicious PyPI + Docker releases > Zeabur - infrastructure breached > OpenCode - AI API keys exposed > OVHcloud CLI - official binaries backdoored > Rank Math PRO - malware in official plugin > TeamUpdraft - customer data compromised > ConnectWise - cloud backup identities compromised > Tensorlake - npm package infected > SubQuery - backdoored npm package > GhostAction - GitHub repos with malicious workflows > PHP - critical RCE vulnerabilities > Node.js - security vulnerabilities patched > eMudhra - certificate authority keys compromised > Tailscale - eMudhra incident At this point, the biggest security risk might not be the code we write, but the code we trust...

Top Plugins for Grok Bot Your @bot is only as good as the plugins you give it Here are 24 MUST install 24 plugins: Sales @clay: enrichment and research agents @amplemarket: find and enrich people and companies @meetgranola: meeting notes straight into your pipeline Marketing @CustomerIO: lifecycle emails and campaigns @semrush: SEO and ad competitor research @ahrefs: content and backlink research Research @firecrawl: search, scrape, and crawl any site @crustdata: live B2B data on people and companies @huggingface: AI/ML models and datasets GTM @crustdata: account and people signals @apolloio: prospect, enrich, and sequence @HubSpot: keep your CRM up to date Data @ClickHouseDB: real-time analytics @PlanetScale: serverless databases @datadoghq: logs, metrics, and monitors Developers @vercel: build and deploy apps and agents @supabase: databases, auth, and storage @gitlab: repos, merge requests, and CI Design @figma: turn designs into code @canva: on-brand visuals in seconds @mobbin: real-world UI and UX patterns Finance @stripe: payments and billing @tryramp: spend analysis and approvals @brexHQ: cards and expenses Docs & knowledge @NotionHQ: pages, databases, and publishing @meetgranola: what your meetings decided @linear: issues, projects, and roadmaps Time to build!

My slack is Tokenmaxxing

If your slack is not full of AI employees (bots)... then sorry but you are not gonna make it

This is where I’m tokenmaxxing from

Ok, this is AGI I’m at the gym, and my Grok @bot just drafted a blog post I was planning to write this morning I did NOT ask it to do that It checked my calendar, read my emails, and decided to get ahead of my work

Docker 🐳 + Firecrawl 🔥

Peak male performance fridge

Unpopular opinion, but UI is dead

Touched some grass (and clouds)

Will be attending Apple event in Buenos Aires next week See you all there

Spawning in one of my favorite countries soon ✈️

Adding one more to the list: Gemini Hackathon (@GoogleDeepMind) $20,000 in prizes + use the latest models for free