Bilal (@bbilal) header
Bilal (@bbilal) profile picture

Product, Engineering & everything in between.

DXB / BOM
Joined March 2010
Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)Photo by Bilal (@bbilal)
w00t! Got myself a new handle @bbilal 👀
1
7
269
I wonder why Figma in not launching their MCP integration already.
is @paper about to do to @figma what Figma did to @sketch? genuinely curious how many designers are considering switching.
3
2
542
I was in a similar spot last year. I had ignored my health for a long time and it started affecting my everyday life. At the start of this year I decided to put my health ahead of everything else. Since then: > Lost 15.5kg, now at ~74kg > Body fat under 20% > 120-140g protein a day + 5g creatine > Gym 4 times a week > 7-8k steps daily > Visible muscle gain Triglycerides: 637 → 111 The biggest change is how I feel. I'm calmer, more relaxed, more humble and more positive. And my clothes fit better.
A year ago I was supposed to die from a heart disease early in my life. If I didn’t take pills. Doctors told me to get a CT scan urgently. The cardiologist told me I should start taking medicine for life to avoid any heart disease (even thought my CT scan + physical assessment both said that I had an healthy heart). They also told me I couldn't do anything about it. Nutrition would not make any difference. Glad I didn't listen to them.
5
291
Most efficient way to save tokens is to spend good time on shaping up the plan before starting execution.
3
258
I worked at Railway for 3 years. They're great people. It's a shame the internet has turned against them.
I don't think Railway deserves what's happening to them. I've been on their Discord many times; they are all really good people with zero malicious intent. That guy, Josh, who made the post, is an ass. I banned him a few days ago (before Railway), and I am in a WhatsApp group where everyone thinks the same thing. Don't get me wrong, Railway has its problems, especially with communicating stuff/hiding stuff. But almost everyone who left said it's a top-notch company in everything compared to UI/UX/Deployments, etc., and their outages over the last few months have decreased. However, right now every PaaS company like Zeabur, Railway, and Northflank is being attacked for AI Distillation; this is the sad reality. It can wipe out your whole business in a day. It's not just about Railway; in general, I would suggest everybody move to AWS / Azure / GCP. Because you'll hear a lot more stories soon.
34
2
4
146
20,733
Bilal retweeted
Last night, I became aware of the concerns raised in Josh's post. I reached out publicly and over DM to offer a potential explanation based on the limited information available at the time, while working to understand what happened. As background, we’ve internally been pushing 100% on security of the Railway platform. At Railway, we believe that cyber threats are real and mounting, and we’ve built out tooling for automatic scanning + CVE remediation (for both our infrastructure and customers). Over the last few weeks, oncall engineers were instructed to red team our infrastructure. We maintain specific policies and short lived grants for when these actions occur. Subsequently, I became aware that an employee at Railway had constructed, on their own time, a tool for proactive identification + reporting of bug bounties within the broader community. The employee, using their own personal accounts, personal credit card, and time outside of work hours, signed up for a personal subscription to a hosted service running Deepseek. I can confirm they ran this tool once and only once, on a singular external provider, and halted it proactively within 15 minutes of starting. Railway does not condone these actions. We expect all our employees to uphold our standards of conduct, whether acting on behalf of Railway or in a personal capacity. We create an environment where internal red teaming has strict guidelines, and when bug bounty disclosures must occur, we follow every letter of responsible disclosure. We have addressed this incident with the employee directly and have taken appropriate action. We are also reinforcing our expectations for employee conduct to help prevent similar situations.
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure? Your employee Jake Runzer, just attempted to tonight.
Readers added context they thought people might want to know
Primcloud does not have a bug bounty program, per its founder. Its Acceptable Use Policy forbids unauthorized probing, scanning or vulnerability testing without prior written consent. x.com/joshmanders/st… primcloud.com/aup
323
16
113
793
496,821
Hard agree. Grok 4.7 is terrible at coding.
Regarding @bot, it looks like : - Cursor forked OpenClaw and created a very slick product! - Running it on Grok 4.6 made them realize that the model sucks, and they serve it with Opus 5.5. - People loved it and paid $300. - Elon got the bill from Anthropic, had a heart attack, and decided to nerf it. Not your data, not your bot.
206
How are sandboxes providers offering VMs for dirt cheap with such specs while VPS providers are raising prices. @grok connect the dots for me.
Sandboxes have no moat. Just fat margins. We're launching agent37.com to kill those margins. For example, a sandbox with 2 vCPUs and 4 GB RAM when left running for an entire month: Vercel: $249 Cloudflare: $145 Daytona: $121 Agent37: $4.76 There's nothing magical about a sandbox that justifies keeping it expensive forever. Call it a race to the bottom. We'll see you there. If you can find a cheaper sandbox and we'll refund the difference.
Readers added context they thought people might want to know
Vercel and Cloudflare charge for active CPU time (excluding idle/waiting periods common in agent use) and provisioned memory while running, unlike the full-month 100% utilization figures quoted; Daytona bills full reserved resources while started. vercel.com/docs/sandbox/p… developers.cloudflare.com/containers/pla… daytona.io/pricing agent37.com
1
1
319
Scary af! 🎃
149
Hack so bad they had to pull all the plugs to stop it 💀
Yikes, and now the website for DebugBear is completely offline
196
Yikes! @northflank is the new target. Folks rotate your keys ASAP.
1
1
3
4,093
It's 2026 and we have the best AI models at hand. So why don't we have an ActiveRecord equivalent in JS yet? Or are ORMs not even relevant anymore?
1
2
473
Which harness is the best to take this model for spin?
Gemini 4 Carbon is our next frontier model. It’s state-of-the-art across cybersecurity and long-horizon capabilities.
1
150
Bilal retweeted
My entire business now runs on the Grok stack. → Grok Bot handles my inbox, routines, research and daily X digests → @cursor_ai + Cursor Agents ship the code while I review → @grok Chat for thinking things through → Grok Imagine for visuals → @X for distribution and learning One founder, a handful of agents, zero busywork.
6
1
1
7
474
Same. Onboarding experiences are getting crazy!
Well this scared the crap out of me.
2
235
My entire business now runs on the Grok stack. → Grok Bot handles my inbox, routines, research and daily X digests → @cursor_ai + Cursor Agents ship the code while I review → @grok Chat for thinking things through → Grok Imagine for visuals → @X for distribution and learning One founder, a handful of agents, zero busywork.
6
1
1
7
474
Bilal retweeted
Before you tell Indians to stay in India, look at what we are living through in Mumbai. I live in Sion Kamghar Society, Sion East. Families are still inside this building. Look at the stairs we have to use. Look at the rubble around our homes. Our redevelopment involves Puri Developers. Residents are demanding an investigation into alleged coercion by the developer and the society committee. Our lift does not work. Residents say attempts to repair it are being blocked. Imagine carrying water and groceries up these broken stairs or needing medical help. We depend on water tankers because we are not receiving BMC water. Residents say the building has been represented as unoccupied. WE ARE STILL HERE. These are our homes. Domestic workers have been stopped from coming upstairs. Grocery deliveries and even medicines have reportedly been obstructed. Recently, dead fish were dumped across the floors. We want those responsible identified and held accountable. How much must everyday life deteriorate before a family gives in and leaves? Wings A–D were demolished after being classified C1. Residents report that around half the affected families are without transit rent amid disagreements over redevelopment terms. Some have sold their flats under financial pressure. Residents also allege that E Wing flats, many belonging to committee members, were vacated before the A–D demolition and before the IOD was obtained. Utilities were disconnected, and dismantling work left dust and debris. Now residents of F Wing approximately 12 years old and, according to residents, not classified C1 are being pressured to vacate. We are Jain and Hindu families. Our faith, our homes and our dignity deserve respect. Nobody should have to endure these conditions. There have been repeated police visits. Yet we are still living like this. We are taking our fight to the High Court, but we need water and safe access TODAY. To the Chief Minister, Municipal Commissioner, Police Commissioner, elected representatives, @Shivsenaofc and @Cockroachisback : please come here. Meet the families still living inside. See these conditions for yourselves. We need an urgent inspection, restoration of water, safe access, lift repairs and an independent inquiry into residents’ complaints. A family should be able to refuse unacceptable redevelopment terms without fearing that daily life will become unbearable. This is the reality behind the word “redevelopment” for us. Photos attached. Videos and supporting records below. Please share so our complaints are finally heard. @Dev_Fadnavis @CMOMaharashtra @mieknathshinde @AshwiniBhide @MHFlatWelfare @mybmc @CPMumbaiPolice @MumbaiPolice @narendramodi @PMOIndia @ShivSena @ShivSenaUBT_ @Suhelseth #RedevelopmentScam #Sion #Mumbai #BMC #corruptcommittee #BJP
23
52
7
267
97,705
Love it when Neeto customers casually mention they migrated from a competitor that is 1000x bigger than us.
1
4
238
I'm feeling itchy to recreate this as a self-hostable version in Ruby on Rails
Alright, Bdots are now called Coworkers bdots was a terrible name github.com/fayazara/coworker… This is a very experimental project, I am still figuring out a ton of things as I build this (hence the delay). This is not an official launch. Here's a video of a bot that sends me a digest from multiple new sources I read, it sends me a message every morning at 7am and also I also asked it to create an app for me using Cloudflare dynamic workers (I feel this is the perfect use case for dynamic workers) More on how coworkers work A bot can be waked up by 1. You message 2. A routine (DO Alarms) 3. You email the bot [email protected] (CF email routing) 4. A webhook 5. Another bot 6. Someone edits a shared app. Each bot has rules so they dont go wild - Edit files - Run commands - Read the web - Drive the browser - Use connected apps (MCP servers) - Message other bots - Schedule routines A bot can - chat - Use Computer (cloudflare/computer) - Read the web (Kitesurf) - Drive a browser, take over. - Follow rules, Check in, Create routines. - has isolate memory or if you explicitly mention - global memory. - message other bots - create apps - can learn from you by looking at your browsing session (very rough still) Architecture - Each bot keeps everything in its own SQLite. There's no separate database. - You sign in to an app once, on the hub. Every bot uses that connection. - The worker only lets you reach your own hub and your own bots. AI Gateway - BYOK or use CF AIG unified billing. - My demo is ugin - deepseek-v4.1-flash-1017 (its really good and surprisingly cheap)
3
221
Hey @1Password how can my subscription get cancelled without me initiating it?
1
784