Minivan Enthusiast at @HustleFundVC
Joined August 2008
- Tweets37.9K
- Following807
- Followers97.2K
- Likes58.1K
Pinned Tweet
When I was a founder, I thought that pretty much all VCs were lazy.
Their lives seemed easy--just sit around a conference room, say yes or no to a bunch of founders, and maybe leave work early to play some golf.
That might be true for some VCs, but since joining this side of the table 8 years ago, I've learned that most VCs are actually hustling quite hard. Especially if you are starting your own fund from scratch.
I did something I've never done before--invite a filmmaker into my home to follow me for an entire day of work at @HustleFundVC. I'm so grateful to @willsclips_ for documenting this day-in-the-life video.
We had a full 14-hour-day, and Will did an exceptional job showing highlights of what life as an emerging manager actually looks like.
This job I have is relentless, and it's also the most purpose-driven role I've ever had. Grateful to my team, founders, investors, angels, and ecosystem partners for the community we've built at Hustle Fund.
Hope you can check out the full documentary. Thank you again @willsclips_, you are so good at what you do!
Full video in reply.
Can I adopt one for the family? We are looking for a puppy.
Warhound, the brain child of Ben Lamm and Palmer Luckey, emerges from stealth to genetically engineer dogs for military and law enforcement.
spr.ly/6011BHZNMF
Big day for @boomsupersonic and 🇺🇸
Eric Bahn 💛 retweeted
6 steps you should take to secure your accounts right now given all the incidents.
In my new video, I share a prompt to have AI walk you through all 6 steps and generate a personalized security report.
📌 Watch now and check out the YouTube description for the full prompt: youtube.com/watch?v=nXMlSq4a…
ALT Checklist titled 'Six things you can do to secure your accounts': 1 Disconnect apps you don't use, 2 Check 1Password Watchtower, 3 Turn on two-factor, 4 Rotate or retire API keys, 5 Scan and update your software, 6 Don't trust breach emails or calls.
The internet is being hacked right now so I made this emergency video with 6 steps that you can take to secure your account right now:
1. Disconnect apps and agents you don't use
2. Use @1Password with watchtower
3. Turn on two-factor auth with the right app
4. Rotate or retire your API keys
5. Ask AI to update software packages
6. Don't trust breach emails or calls
I also share a prompt that you can use to get AI to audit all of the above in the video description.
📌 Watch now: youtu.be/nXMlSq4aFBg
Damn. Thoughts and prayers to those affected by the Railway security compromise.
If you're deploying on Railway, someone could be stealing from you right now.
Here's what happened a prompt that could help you.
• Yesterday, Railway said a hacker got its customers' API keys.
• Jeremy Tocy, a founder, had his AI accounts drained.
• @wickedguro, another founder, had to shut down his SaaS for hours.
• @ABrakhane, CTO of Gateway X, spent 6 hours rotating 106 API keys he had with Railway.
Railway either doesn't know the full extent of what happened or won't tell us.
Adam used this prompt to get a tool that made changing his API keys easier:
"Railway had a security incident. Research it for me. Look at my Railway environment and list every API key. Make me a tool that tells me which keys I need to reset, gives me a link to reset each one, and gives me a copy button for the command that updates Railway with the new keys."
Wild to me that MSM is not really covering this php/node.js/security disaster. People are freaking out (rightfully so) on this app, but it seems business as usual on the outside.
Seeing these updates from @boomsupersonic remind me that we are indeed living in the future. It's simply amazing to witness.
Given how compromised security is now, it's time for us to go back to training carrier pigeons to transmit our most important messages to one another.
Woo hoo, go @kevinweil!
💥 Introducing Warp Sciences, a new company applying AI and robotics to help the world develop new medicines faster.
We’ve raised a $215M Series A led by @lightspeedvp to bring frontier AI out of the browser and into the lab, and build scientific capacity here in America.
I co-founded Warp with my long-time friend @dpatil, FAIR co-founder @manohar_paluri, and drug hunter Sol Reisberg. The early team is full of incredible people like @bkspears9, who helped achieve Q>1 fusion at LLNL.
It truly is raining poop on all of us right now.
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
Wow.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Eric Bahn 💛 retweeted
Before becoming an investor, I ran an ad company called LaunchBit 15+ years ago. Building a startup is still super hard, but the tasks have gotten more fun. Here's the tedious ops stuff I did manually. Read on >>
Full disclosure: I'm a Mercury investor and partner
🤝 Paid partnership
Kimi, you're welcome to wash my Odyssey, any time.
From @TheAthletic: Kimi Antonelli is on the verge of Formula 1 history and could become F1's youngest champion on Sunday in just his second season. But first, he’ll hand-wash his car. nyti.ms/4yZMwZn
Good humans do win. For example, @gefensk.
You're absolutely right — and honestly? This hits different. 🚀
It's not just AI writing. It's a paradigm shift in how we delve into the rich tapestry of human communication.
Here's the thing:
✅ Your lawyer? Not just a lawyer — a thought partner.
✅ Your group chat? Not just a chat — a journey.
In today's fast-paced digital landscape, authenticity isn't just a buzzword. It's a testament. 💡
Great question, Ali! Let me know if you'd like me to expand on any of these points! 😊
