Thoughts on AI, the tech stack, and the indie hacker journey.
Stripe Projects is now generally available: provision hosting, databases, auth, observability, and AI from 32 providers, billed on one Stripe invoice, straight from where you write or prompt code. The convenience is real. So is the new chokepoint sitting between you and every vendor you use.
PwC's AI Jobs Barometer puts the wage premium for AI skills at 56%, up from 25% the year before. Senior AI engineers clear $200K. Everyone reads that as a reason to chase a job. For a solo operator, it's the strongest argument yet to stay a team of one.
At WWDC 2026 Apple opened its Foundation Models framework to free cloud inference on Private Cloud Compute for any developer under 2 million first-time downloads, and added a Swift protocol that swaps Claude, Gemini, or the on-device model with one package line. That's a distribution window, and it closes.
WWDC confirmed it: Apple's cloud-side Foundation Models and the next Siri run on Google's Gemini under a reported ~$1B/year deal. The on-device model is still Apple's. But the moment your app reaches the cloud tier, Google is in your stack, whether you chose it or not.
CVE-2026-42271 lets an authenticated user run shell commands on your LiteLLM host. Chained with a Starlette host-header bypass it becomes unauthenticated RCE — and CISA added it to the Known Exploited Vulnerabilities catalog on June 9. The payout is every API key your proxy holds.
On June 9, Meta said it will use data shared by businesses — including Meta Pixel activity from your site — to personalize feeds and AI chatbot responses, not just ads. It lands in the US next month. The Pixel you installed for conversion tracking is now feeding a different machine.
Starting June 15, automated Claude usage stops drawing from your flat Pro/Max subscription and moves to a separate metered credit, billed at API rates once it runs out. If you wired Claude into a cron job, the meter is now running. Here's how to estimate the damage and decide what stays.
Gemini is coming to Chrome on Android in late June — summarize the page, ask it questions, never scroll. For a solo operator whose business is a blog or docs site, the zero-click problem just moved from the search page into the browser itself. Here's which content survives and what I'd change this quarter.
CVE-2026-23111 is a use-after-free in the Linux kernel's nf_tables code that lets a local user become root and break out of a container. The whole bug was a stray exclamation mark. The exploit went public June 8. Here's who actually needs to care and the exact fix.