Blog

Thoughts on AI, the tech stack, and the indie hacker journey.

Google I/O Is in 12 Days. Here's the Indie-Operator Pre-Game — What to Watch For, What's Hype, and the One Stack Decision Worth Deferring Until May 20.

Google I/O 2026 keynotes May 19. Most of the agenda will be irrelevant to a solo operator. Three things on it actually matter — Gemini 4.0 if it ships, agentic tooling that competes with Claude Code, and Workspace-native agents that compete with Microsoft Agent 365. Plus one specific routing decision worth deferring 12 days for.

A Backdoored PyTorch Lightning Just Tried to Worm From PyPI Into npm and Steal Every Cloud Credential It Could Find. Here's the 30-Minute Audit.

Attackers published lightning 2.6.2 and 2.6.3 to PyPI on April 30 with a hidden JavaScript payload that steals credentials and — if it finds an npm publish token — wraps every package that token can publish to. Cross-ecosystem propagation is the new shape of supply chain. Here's what to actually check this weekend.

Stripe Just Quietly Launched a Build-Your-Whole-Stack-From-One-Dashboard Product. I Tried It. The Convenience Win Is Real, the Lock-In Shape Is Sneakier.

Stripe Projects went GA at Sessions 2026 — provision, manage, and bill 32 partner services (Vercel, Supabase, Clerk, Cloudflare, Render, Sentry, Twilio, Hugging Face) from inside Stripe with one invoice. Plus Stripe Console, an agentic dashboard. I spent an evening with it. Here's the honest read.