💻 @socialoffline. XR & Consumer Tech | ❤️ Wearables. Alum: @SnapAR | @xbox | @MSNIndia | @videogram | @superfan. 👻: hardik.
Bombay, India
Joined August 2006
- Tweets77.6K
- Following1.5K
- Followers7.4K
- Likes983
Pinned Tweet
Polymorphism explained better :
Father : Son, go & get Red Label.
S : 750ml or 1 L
Mother : Son, go and get Red Label.
Son : 500g or 1 kg
Some good’ol days of Twitter (no, won’t call it as X)
Whoa, old twitter, remember #FF (follow Friday)?
😆
<< honorable mentions: @Netra @b50 @hardik @girishmallya @DeathEndsFun @twilightfairy @anuragwho @vasundhar @TalkOrTweets @jasuja @prolificd 😛>>
Hardik Shah retweeted
Whoa, old twitter, remember #FF (follow Friday)?
😆
<< honorable mentions: @Netra @b50 @hardik @girishmallya @DeathEndsFun @twilightfairy @anuragwho @vasundhar @TalkOrTweets @jasuja @prolificd 😛>>
Hardik Shah retweeted
Thank you @dens
Foursquare was the coolest product. You, last.fm, Path, blogger and a few others defined and inspired a whole generation
@kevinrose @davemorin
Hardik Shah retweeted
# Task: Read-only security audit. Gather a report. Change NOTHING.
## Scope
- GitHub: All repos under the org shantanugoel
- Cloudflare: All accounts/zones accessible to the logged in user
- Local hosts (ssh): All public/internet facing deployments on
If any CLI is unauthenticated (gh, wrangler/cloudflared, ssh), STOP that section and ask me for access — don't skip silently.
## Hard rules (read-only)
- No writes, no config edits, no deploys, no dependency/version updates, no secret rotation,
no firewall/WAF/branch-protection changes, no GitHub/Cloudflare console mutations,
no package installs on remote hosts, no sudo.
- Only list/get/describe/status/show/scan-style commands. Prefer --dry-run.
- Never echo full secrets/tokens — mask to prefix + last 4 + fingerprint.
- If a check requires a mutating command, record it as "SKIPPED — needs my approval" and move on.
- No active external port scans / brute force / exploitation without my explicit go-ahead.
- Write output only to ./security-audit-/ ; touch nothing else.
## What to look for
- Dependencies: known CVEs / end-of-life versions (use native tooling: npm audit, pip-audit,
cargo audit, go vuln, apt list --upgradable — read-only).
- Secrets: committed .env/keys/tokens, git history leaks, hardcoded creds in CI.
- GitHub: repo/org settings, visibility, branch protection, secrets/env vars in repo settings, default workflow write perms,
script injection in pull_request_target workflows, unpinned third-party actions,
OIDC/secret exposure, token & deploy-key & GitHub App scopes, Dependabot/secret scanning status.
- Cloudflare: DNS records (proxied vs DNS-only, exposed origins), SSL mode, WAF rulesets &
custom rules, rate limits, Access apps/policies, API token scopes, service tokens,
Worker/env secrets, page rules, TLS certs + expiry, tunnel/origin exposure.
- Hosts: listening sockets + what's publicly reachable, all same checks as above for any publicly reachable projects, sshd config (root/password login),
sudo/world-writable/suid binaries, cron & systemd timers, running service versions,
exposed .env/config perms, firewall + fail2ban status, expired TLS certs,
failed-login spikes, missing security updates.
## Output → security-audit-/REPORT.md
- Executive summary: top 10 risks, ranked, with "quick wins" first.
- Per-asset sections: finding → severity (Critical/High/Med/Low) → evidence (command + output) →
concrete remediation (what to patch/update/disable) → confidence.
- Separate: "Skipped / needs approval", "Needs access", "Couldn't verify".
Report only. Wait for my go-ahead before any fix.
Fan out to subagents as needed, but ensure they follow the read-only rules and report back in the same format.
Hardik Shah retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Hardik Shah retweeted
First dispatch from Cannes Lions:
- Inside OpenAI’s ads push for ChatGPT
- Snap is in talks to pay Robert Downey Jr. $100 million to be an ambassador for Specs
- A bunch of interesting people moves
- And more
sources.news/p/inside-chatgp…
Hardik Shah retweeted
For the last ten years I have spent every moment thinking about nothing but air. And how to make better, more personalized air accessible to homes all over the world.
And today I can finally present the next huge step in that journey.
Introducing Breethr P1, the Personal Climate System.
Launching today. And open for pre-orders right now
Reserve your P1 for $99: breethr.com
Shipping Spring 2027.
Hardik Shah retweeted
Foursquare was acquired last month. The outcome was disappointing. It's taken me a while to write this, but I think I'm finally done grieving it. Here are some thoughts on our final years, an effort to honor the team who helped build & maintain FSQ's legacy, and my attempt to finally get some closure. teendrama.substack.com/p/som…
Absolutely gutted to hear about @WannabeSanyasin!! What a wonderful soul she was!!☹️💔
Hardik Shah retweeted
So, finally time to reveal.
Say hello to Pulse, our AI agent that sits on your WhatsApp and takes care of your business finances.
It connects to Zoho Books and Tally, and gives you insights about your business that you still rely on people or your own judgement for. It follows up with customers on overdue payments, and you can assign work to it.
In a few days, it will also be able to post accounting entries, reconcile GST, file returns and a lot more.
And yeah, all right from your WhatsApp.
More here: youtube.com/watch?v=A3aQZKJD…
I don’t think folks realize how big the wearable AR shift is going to be. With AI & AR - you could actually do things way beyond what Ilter has demonstrated here. Waiting to get my hands on @specs soon.
Here is the same app on @specs.
In the future you will just look at any appliance and control it without having to navigate through dozens of apps.
Took less than 15mins to port with Codex + Lens Studio and runs seamlessly on my glasses 🤓
Hardik Shah retweeted
As we get ready to open @thelayerproject to everyone, we wanted to thank the people who helped make it possible those who trusted us, gave us their time, and helped build it alongside us.
The Wall of Gratitude is now live on our website. A small thank you to everyone who’s been part of the journey.
Hardik Shah retweeted
I'm hiring! 🚀
I'm looking for two interns to join me at Neo and Titan in Bangalore and work across acquisition, growth, brand initiatives and more.
This isn't a role where you'll sit on the sidelines. You'll work directly with me on live projects, see how decisions get made, and own work that actually ships.
What you'll do:
→ Plan and run customer acquisition campaigns
→ Dig into data to find what drives growth
→ Help shape and launch brand initiatives
→ Pick up whatever else comes up in a fast-moving team
The details:
📍 Bangalore, hybrid (3 days in office, 2 from home)
🗓 5 days a week
💰 Competitive stipend
🤝 Work directly with me
You'd be a great fit if you're curious, comfortable with numbers and ideas alike, and keen to learn by doing.
Interested? Drop a comment or DM me with a few lines about yourself and why this excites you. And if you know someone who'd be perfect, please tag them or share this post!
#Hiring #Internship #BangaloreJobs #Marketing #Growth #Branding #Titan