building @useportalsdk
San Francisco, CA
Joined July 2013
- Tweets3.3K
- Following471
- Followers555
- Likes52.1K
let it run loose on my inbox for a bit and it cancelled unused subscriptions and even sent an angry email and got me a refund for a subscription that was tricky to cancel, good boy
Introducing Hark Pro
Hark Pro is now live on web, iOS, and Android
Try it free: hark.com
db access through hand built endpoints won't survive agents, the future looks like this
Introducing postgres2mcp: turn a Postgres connection into a governed MCP server
we built this for our clients and decided to open source
- custom tools from sql queries
- scoped api keys
- semantic layer
- logs & analytics
- MIT-licensed
repo: github.com/Railcode-HQ/postg…
Rodrigo retweeted
Create and play mashups with friends in one click.
Introducing Melty!
Readers added context they thought people might want to know
Melty doesn't make the mashups it shows. Its Terms (§1, §6) say mashups come from outside creators, aren't reviewed or scanned for malware, and run with full access to your PC. The Minecraft-in-Elden-Ring mod is by Tobyn Jacobs.
melty.gg/terms
tweaktown.com/news/113855/
x.com/Wubbity/status…
Rodrigo retweeted
Railcode is live! (and free)
We're the secure Cloud for internal software.
Think internal Vercel:
- Apps always behind company auth
- Centralized roles & permissions
- Governed connectors (users don't see API keys)
- DB, file storage & LLM gateway
railcode.dev
Rodrigo retweeted
PostHog's 6th employee just launched his own company.
48 hours later, @yakkomajuri sat down to demo it: Railcode, where teams build secure internal apps and agents directly from Claude Code.
This is Solo in Prod, a new series:
– One Solo Founders Program startup
– Days after launch
– Backstory + a live demo
04:16 The one-question test: "Are you holding your team back?"
07:12 When internal tooling IS the product
11:05 The CEO who vibe codes vs. the CTO who wouldn't let him ship
14:21 Finding the idea by pulling the thread
19:25 Inside early PostHog: the handbook, work trials, hackathons
22:58 Live demo: dark mode deployed in five seconds
27:27 Advice for solo founders
Rodrigo retweeted
I'm hiring someone to grow the @solofounders podcast with me
About you:
- infovore on startups/tech
- you've published things of your own
- you have strong opinions on media in tech today
- love experimenting/building with AI
Tag anyone you think would be great!
Rodrigo retweeted
Meet Railcode: a secure home for internal apps and agents connected to company data.
- build locally with claude code, codex
- db, file storage, email, connectors provided
- ship a slack agent in 5min. control apps from agents
- granular permissions
railcode.dev
Rodrigo retweeted
Most people think starting a company without a co-founder is a bad idea.
We believe the opposite: solo founding will be the default way great companies get started.
Applications are now open for the Solo Founders Program.
3 months in SF: "solo, together" + 1:1 support + $100K
claude and github going down every 40 minutes is the biggest argument for being able to ship software manually
Rodrigo retweeted
Solo-founded $2B company. Used by OpenAI, Anthropic, Replit.
Solo Founders ep 13 is live with @grinich of @WorkOS.
07:49 The co-founder "blood bond" is a myth
10:55 There's only room for one Zuck at Meta
32:51 Pivots are the most traumatic thing you can do to a business
43:18 The best ideas always look like bad ideas
50:14 Sales is the ultimate expression of the company's value
53:57 The "founder pixie dust" no hire can replace
01:07:42 You only get one life. Why not swing as hard as you can?
burning tokens playing with shaders is too much fun, discomorphize your logo before it gets cringe, you have a few hours left
discomorphism.design
I love Tanstack Start
CVE-2026-44578
⚠️ Next.js – WebSocket Upgrade SSRF (CVSS 8.6)
A server-side request forgery vulnerability in Next.js allows unauthenticated attackers to force self-hosted instances to make internal HTTP requests via the WebSocket upgrade handler.
By sending a crafted absolute-form HTTP request with Upgrade: websocket headers, attackers can access internal services, cloud metadata endpoints, admin panels, and internal APIs reachable from the Next.js server on port 80. Successful exploitation may expose cloud credentials, API keys, secrets, and configuration data.
Affected: Next.js 13.4.13+, 14.x, 15.x <15.5.16, 16.0.0–16.2.4
Mitigation: Upgrade immediately to 15.5.16 or 16.2.5.
Modat Magnify Query:
technology="Next.js"
The platform:
magnify.modat.io/
#threatintel #vulnerability #CVE202644578 #Nextjs #SSRF #WebSocket #CloudSecurity #infosec #Critical #ModatMagnify
Building something cool? Tired of getting asked when are you getting a cofounder? Apply now!
Moving to SF changed my life.
In the last 2 years, I paid it forward and helped hundreds of founders relocate to do their life's work.
I want to work with you & invest $100K if you:
- are building solo
- feel what you’re building is a calling
- have paying users who love you
Rodrigo retweeted
we're investing $100,000 in solo founders building something that feels like their calling.
paying customers are great but not required if moonshot.
dm me if this is you – let's work together.