Bilal retweeted
I worked at Railway for 3 years. They're great people. It's a shame the internet has turned against them.
I don't think Railway deserves what's happening to them. I've been on their Discord many times; they are all really good people with zero malicious intent.
That guy, Josh, who made the post, is an ass. I banned him a few days ago (before Railway), and I am in a WhatsApp group where everyone thinks the same thing.
Don't get me wrong, Railway has its problems, especially with communicating stuff/hiding stuff.
But almost everyone who left said it's a top-notch company in everything compared to UI/UX/Deployments, etc., and their outages over the last few months have decreased.
However, right now every PaaS company like Zeabur, Railway, and Northflank is being attacked for AI Distillation; this is the sad reality. It can wipe out your whole business in a day. It's not just about Railway; in general, I would suggest everybody move to AWS / Azure / GCP.
Because you'll hear a lot more stories soon.
Bilal retweeted
Last night, I became aware of the concerns raised in Josh's post. I reached out publicly and over DM to offer a potential explanation based on the limited information available at the time, while working to understand what happened.
As background, we’ve internally been pushing 100% on security of the Railway platform. At Railway, we believe that cyber threats are real and mounting, and we’ve built out tooling for automatic scanning + CVE remediation (for both our infrastructure and customers). Over the last few weeks, oncall engineers were instructed to red team our infrastructure. We maintain specific policies and short lived grants for when these actions occur.
Subsequently, I became aware that an employee at Railway had constructed, on their own time, a tool for proactive identification + reporting of bug bounties within the broader community.
The employee, using their own personal accounts, personal credit card, and time outside of work hours, signed up for a personal subscription to a hosted service running Deepseek. I can confirm they ran this tool once and only once, on a singular external provider, and halted it proactively within 15 minutes of starting.
Railway does not condone these actions. We expect all our employees to uphold our standards of conduct, whether acting on behalf of Railway or in a personal capacity. We create an environment where internal red teaming has strict guidelines, and when bug bounty disclosures must occur, we follow every letter of responsible disclosure.
We have addressed this incident with the employee directly and have taken appropriate action. We are also reinforcing our expectations for employee conduct to help prevent similar situations.
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure?
Your employee Jake Runzer, just attempted to tonight.
Readers added context they thought people might want to know
Primcloud does not have a bug bounty program, per its founder. Its Acceptable Use Policy forbids unauthorized probing, scanning or vulnerability testing without prior written consent.
x.com/joshmanders/st…
primcloud.com/aup
Bilal retweeted
My entire business now runs on the Grok stack.
→ Grok Bot handles my inbox, routines, research and daily X digests
→ @cursor_ai + Cursor Agents ship the code while I review
→ @grok Chat for thinking things through
→ Grok Imagine for visuals
→ @X for distribution and learning
One founder, a handful of agents, zero busywork.
Bilal retweeted
Before you tell Indians to stay in India, look at what we are living through in Mumbai.
I live in Sion Kamghar Society, Sion East. Families are still inside this building. Look at the stairs we have to use. Look at the rubble around our homes.
Our redevelopment involves Puri Developers. Residents are demanding an investigation into alleged coercion by the developer and the society committee.
Our lift does not work. Residents say attempts to repair it are being blocked. Imagine carrying water and groceries up these broken stairs or needing medical help.
We depend on water tankers because we are not receiving BMC water. Residents say the building has been represented as unoccupied.
WE ARE STILL HERE. These are our homes.
Domestic workers have been stopped from coming upstairs. Grocery deliveries and even medicines have reportedly been obstructed. Recently, dead fish were dumped across the floors. We want those responsible identified and held accountable.
How much must everyday life deteriorate before a family gives in and leaves?
Wings A–D were demolished after being classified C1. Residents report that around half the affected families are without transit rent amid disagreements over redevelopment terms. Some have sold their flats under financial pressure.
Residents also allege that E Wing flats, many belonging to committee members, were vacated before the A–D demolition and before the IOD was obtained. Utilities were disconnected, and dismantling work left dust and debris.
Now residents of F Wing approximately 12 years old and, according to residents, not classified C1 are being pressured to vacate.
We are Jain and Hindu families. Our faith, our homes and our dignity deserve respect. Nobody should have to endure these conditions.
There have been repeated police visits. Yet we are still living like this. We are taking our fight to the High Court, but we need water and safe access TODAY.
To the Chief Minister, Municipal Commissioner, Police Commissioner, elected representatives, @Shivsenaofc and @Cockroachisback : please come here. Meet the families still living inside. See these conditions for yourselves.
We need an urgent inspection, restoration of water, safe access, lift repairs and an independent inquiry into residents’ complaints.
A family should be able to refuse unacceptable redevelopment terms without fearing that daily life will become unbearable.
This is the reality behind the word “redevelopment” for us.
Photos attached. Videos and supporting records below. Please share so our complaints are finally heard.
@Dev_Fadnavis @CMOMaharashtra @mieknathshinde @AshwiniBhide @MHFlatWelfare @mybmc @CPMumbaiPolice @MumbaiPolice @narendramodi @PMOIndia @ShivSena @ShivSenaUBT_ @Suhelseth
#RedevelopmentScam #Sion #Mumbai #BMC #corruptcommittee #BJP
Bilal retweeted
Love it when Neeto customers casually mention they migrated from a competitor that is 1000x bigger than us.
Bilal retweeted
Dear citizens of Mumbai ,
What are you afraid of ? You got literal l poop in drinking water, and poison in the air. Poison kills life, what’s worse than death ? Why does the richest civic body in the world @mybmc think they can GET AWAY by doing this to you ?
There’s like 3 CMs, what is the plan of action for air? You’ve always had terrible roads, now you have shit air and water too. Why do you pay so much tax to die via slow poisoning ?
Mumbai contributes so much tax to the centre, what does it get in return? 7500 more trees are supposed to be cut. Why should a handful of environmentalists be constantly raising their voice for you? Are you cowards ?
Why have you outsourced all courage to the young ?
Ask questions, raise your voice! You don’t deserve this !
Bilal retweeted
PlanetScale uses rails and we have out-shipped our competitors every year for the last 6 years
Bilal retweeted
Kaze also got a new landing page kaze.fayazahmed.com
Hero inspired by Craft landing page, but the rest of the sections were "hand prompted"
Bilal retweeted
if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?
Bilal retweeted
Inspired by @dhh, we moved a high-traffic @gumroad endpoint from Rails to Go.
It only checks an email webhook's signature and queues a job, yet ran our full Rails app on 12 servers.
Go runs it on 3 smaller ones, in 11 MB of memory. 86% cheaper, saving about $14k a year.
Over the last two weeks, we cut about $8.4k a month (~$100k a year) from @gumroad's AWS bill.
Several of the changes made things faster, not just cheaper. Here's what we changed. 🧵
Bilal retweeted
The more AI can code, the more I believe in Rails.
Builders need the conventions, tooling, and ecosystem of a batteries-included framework. Building and evolving that framework takes a community collaborating through open source.
Engineers have a crucial role: researching and building new tools and platforms. I believe the Rails community is best positioned to do this.
I’m excited for the future of Rails and its ecosystem!
Bilal retweeted
It was so great meeting @bbilal finally.
To me it didn't feel like meeting him for the first time. It felt like we picked up the conversation where we left off last time.
Loved all the discussions about life in Dubai, raising kids, social life, fitness, fasting, technology, AI and other things.
Worked with @BigBinary and known @neerajsingh0101 for almost a decade. Finally met him in person.
He still looks young for his age 😄 and he's still just as passionate about solving problems.
Fun and insightful as ever.
Bilal retweeted
Thank you, Pune ❤️
To our speakers, attendees, sponsors, supporters, volunteers, organising team and the Ruby community: you made Deccan Queen on Rails possible @hideccanqueen
These slides are for everyone who helped make it happen. Thank you! 🚂💎
Bilal retweeted
All the open PRs and issues for acts_as_tenant are cleaned up and I cut a new major version today
I also built a new gem for Rails row-level multitenancy following the Authentication generator pattern that should be much nicer to use:
github.com/excid3/tenanting
Bilal retweeted
I've some availability for new clients(and possibly a full-time job if it's a good fit).
If you're looking for someone with a deep understanding of Rails, who embraced AI workflows early, and who aims to stay at the cutting edge, I could be a good fit.
Over the last 10 years, I have built and deployed dozens of Hotwire Native apps(culminating in the creation of the LearnHotwire course with the GoRails team). As a fractional CTO, I have overseen the growth of 3 large Rails apps: one with a successful exit, another close to the €3M ARR mark, and a non-profit that helps 1000s of distressed mortgage holders.
I'm constantly trying to improve, and my philosophy is to keep technology stacks simple, using refactoring and TDD while increasing deployment speed.
Essentially, I make teams more effective by reducing cognitive burdens so we can focus on building great products together.
If you are looking for someone like this, feel free to email [email protected]
Bilal retweeted
RubyLLM 2.0 is out! 💎
- Responses API
- Citations
- Tool Approval
- Batches
- Model Fallbacks
- Video and Speech Generation
- Provider Tools
- Deep Research
- Tokenization and Token Counting
- Workflow Instrumentation
and much much more.
All the new features in this release are in red. 👇
rubyllm.com/whats-new-in-2-0…
Bilal retweeted
I'm renting out 6 days of my life.
One tech event a month, wearing one company's cap, hoodie and badge — pitching their product to developers like it's my own.
$10k a day, my flights on me. Price goes up $2k every time one sells.
First in pays least.
devrel.mohddanish.com