Telexed

AI news through a solo-operator lens — only what changes your day22 of 829

FILTER[All][Agents & tools][Models & API][Generative media][Infra & SaaS][ASO & growth][Indie business][Idea signals][Other][★6+ high-signal]

GeekNews ✕clear filters

Yesterday4 dispatches

#0829
#0829Infra & SaaS GeekNews13 hours ago
Durable Workflows Can Be Built on `SQLite` Alone
50radar
ObeliskWorkflow runtime — replays state from execution logs
Durability comes from saved workflow state, not heavy infrastructure. If progress is replayable, SQLite is enough for small reliable job orchestration.
- The core requirement is persisted progress: reruns and recovery work once each workflow step leaves state behind.
- Obelisk stores workflow progress in an execution log and replays from durable history, matching activity retry patterns.
- This fits background jobs, billing retries, and AI task pipelines before adopting heavier queues or workflow platforms.
Source: news.hada.io/topic?id=30014Read original →
FIG-8291:1
50radar
FIG-8291:1
#0828
#0828Infra & SaaS GeekNews15 hours ago
`Shopify` Replaces Redis Inventory Reservations With MySQL
50radar
ShopifyE-commerce SaaS — unified checkout and store ops
Oversell prevention moved from cache-style reservations to transactional rows using SKIP LOCKED. Worth copying only when checkout correctness beats simple counter performance.
- MySQL 8 SKIP LOCKED lets workers claim available reservation rows without blocking the whole queue; useful for high-contention checkout paths.
- The redesign uses one row per sellable unit, not a quantity column. It trades table size for clearer locking and recovery semantics.
- The pattern fits limited-stock sales, tickets, and booking flows. For tiny catalogs, a simpler counter plus idempotent order checks is enough.
Source: news.hada.io/topic?id=30006Read original →
FIG-8281:1
50radar
FIG-8281:1
#0827
#0827Infra & SaaS GeekNews16 hours ago
How Container Registries Work: Push/Pull Images Directly
40radar
Registry bugs often hide below the docker push surface. Understanding blobs, tags, manifests, and platform metadata helps debug broken deploys faster.
- A registry is a content-addressable blob store; layers are referenced by digest, so missing blobs break pulls even when tags look valid.
- Tags are mutable pointers, not versions. Pinning image digests is safer for Vercel-style build pipelines and reproducible deploys.
- Platform mismatches come from manifest metadata. Multi-arch images need explicit checks before shipping ARM/local builds to x86 servers.
Source: news.hada.io/topic?id=30004Read original →
FIG-8271:1
40radar
FIG-8271:1
#0826
#0826Infra & SaaS GeekNews17 hours ago
Building Durable Workflows on `Postgres`
50radar
Checkpointing state in the database lets jobs resume after crashes. It cuts orchestration overhead when a small product already runs on Postgres, but complex branching still needs care.
- Durable workflows persist completed steps as checkpoints, so a crash restarts from the last finished step instead of rerunning everything.
- External orchestrators like Temporal, Airflow, and AWS Step Functions add a central coordinator plus storage; that raises operational weight.
- A Postgres-based design fits small SaaS backends already using the DB, especially for billing, emails, imports, and LLM batch jobs.
Source: news.hada.io/topic?id=29999Read original →
FIG-8261:1
50radar
FIG-8261:1

Fri, May 292 dispatches

#0825
#0825Infra & SaaS GeekNews2 days ago
`Garnix` Hosting Shuts Down on July 15, 2026
50radar
GarnixNix-based hosting SaaS — open-source self-hosting path
The hosting service is ending during the Shopify transition. Users get an open-source escape hatch, but hosted workloads need migration planning now.
- Garnix hosting ends on July 15, 2026; any production or preview workloads must move before that date.
- The codebase is being open-sourced, so self-hosted or shared community instances can replace the managed service.
- Community instance operation is still only partially described, so treat it as a migration path, not a guaranteed managed alternative.
Source: news.hada.io/topic?id=29974Read original →
FIG-8251:1
50radar
FIG-8251:1
#0824
#0824Infra & SaaS GeekNews2 days ago
`Stripe` Still Leaves Merchants Exposed to Friendly Fraud
50radar
Delivery proof did not stop a post-purchase dispute. For physical goods, payment setup needs dispute evidence workflows from day one.
- Friendly fraud means a customer receives the product, then denies the charge. Stripe has many payment signals, but that does not guarantee protection.
- The cited case had DHL delivery proof after a first order, yet the buyer blamed a bank error and never corrected it. Evidence alone may not recover cash.
- Physical-goods SaaS or micro-commerce needs dispute SOPs: delivery logs, customer messages, risk flags, and clear refund boundaries.
Source: news.hada.io/topic?id=29964Read original →
FIG-8241:1
50radar
FIG-8241:1

Thu, May 282 dispatches

#0823
#0823Infra & SaaS GeekNews3 days ago
`DynIP` Dynamic DNS Supports RFC 2136, IPv6, DNSSEC, and BYOD
50radar
DynIPDynamic DNS service — RFC 2136, IPv6, DNSSEC support
Dynamic DNS with standards-based updates fits homelab and edge setups. Useful when a small service needs stable access without running DNS plumbing.
- 60-second updates and a free tier lower the friction for exposing home or edge services safely.
- Supports RFC 2136 TSIG, REST API, and UDP/53 updates, so existing routers and automation can integrate without custom glue.
- FortiGate, OPNsense, OpenWRT, and MikroTik support makes it practical for network-first deployments.
Source: news.hada.io/topic?id=29935Read original →
FIG-8231:1
50radar
FIG-8231:1
#0822
#0822Infra & SaaS GeekNews3 days ago
`Cloudflare Flagship` Launches Feature Flags for Workers
70radar
Cloudflare FlagshipFeature flag service — native evaluation inside Workers
Feature exposure can now change without redeploys. Native Workers evaluation makes rollout control cheap to wire in for edge apps.
- Flags are defined with targeting rules and percentage rollouts, covering staged releases and cohort-based experiments without app redeploys.
- Native Workers bindings evaluate flags directly, so edge-side feature gating avoids an extra feature-flag API hop.
- OpenFeature support matters: less vendor lock-in if the project already uses a standard flag interface.
Source: news.hada.io/topic?id=29934Read original →
FIG-8221:1
70radar
FIG-8221:1

Wed, May 271 dispatches

#0821
#0821Infra & SaaS GeekNews4 days ago
`Ghost CMS` Sites Hit by `ClickFix` Campaign via Critical CVE
60radar
Ghost CMSOpen-source CMS — supports newsletters and memberships
A critical CMS flaw is being used to turn legitimate sites into fake security-check traps. If you run Ghost, patch and audit immediately.
- Attackers abused CVE-2026-26980, described as a critical Ghost CMS vulnerability; public disclosure quickly became live exploitation.
- More than 700 sites were reportedly infected, so this has moved beyond theoretical risk into active campaign territory.
- ClickFix tricks visitors with fake security verification flows; compromised content can damage trust even if your app backend stays intact.
Source: news.hada.io/topic?id=29916Read original →
FIG-8211:1
60radar
FIG-8211:1

Mon, May 251 dispatches

#0820
#0820Infra & SaaS GeekNews6 days ago
Scammers abuse official-looking `microsoftonline.com` sender for spam links
40radar
A trusted account-alert channel is being used as phishing cover. Treat even familiar SaaS notification senders as untrusted input; link-click flows need stricter checks.
- The sender msonlineservicesteam@microsoftonline.com is tied to sensitive account notices such as 2FA codes, so the spoof feels unusually credible.
- The campaign has lasted months, which makes it more than a one-off phishing wave; mail trust rules should assume official-looking senders can be abused.
- Login and billing alerts should be verified by opening the service directly, not from email links. This is a cheap security habit with high downside protection.
Source: news.hada.io/topic?id=29840Read original →
FIG-8201:1
40radar
FIG-8201:1

Sun, May 243 dispatches

#0819
#0819Infra & SaaS GeekNews7 days ago
Is Google Turning Into IBM?
50radar
Vertical integration turned from strength into operational drag. The Railway incident makes blind reliance on Google Cloud support hard to justify.
- Google owns silicon, TPU, data centers, models, and search; that stack now carries product and org overhead.
- Railway reportedly had its GCP account blocked, exposing a trust problem around automated deletions and missing support paths.
- The practical move is boring: keep backups, billing alerts, and provider exit plans ready before cloud lock-in bites.
Source: news.hada.io/topic?id=29817Read original →
FIG-8191:1
50radar
FIG-8191:1
#0818
#0818Infra & SaaS GeekNews7 days ago
`GitHub App` Installation Tokens Add Per-Request Override Header
40radar
A temporary header lets apps test the new token format before rollout. Useful only if you issue GitHub App installation tokens directly.
- X-GitHub-Stateless-S2S-Token is a temporary request header for controlling token-format behavior per request.
- Teams can preview the new installation-token format impact without flipping the whole integration at once.
- Existing-token behavior can be kept when needed, reducing rollout risk for GitHub automation and SaaS integrations.
Source: news.hada.io/topic?id=29805Read original →
FIG-8181:1
40radar
FIG-8181:1
#0817
#0817Infra & SaaS GeekNewslast week
10-Year Blog Moves From Ubuntu 16.04 VPS to FreeBSD
40radar
A long-running VPS hit OS support and security limits, then moved to cheaper Hetzner hardware. Useful as a reminder to budget migration time before uptime turns into liability.
- The old DigitalOcean VPS ran 1,491 days on Ubuntu 16.04 LTS; impressive uptime also means delayed patch and support risk.
- The new Hetzner VPS costs under 6 euros/month, below the previous $13/month server while offering stronger specs.
- FreeBSD 14.3 plus Jails points to a lean isolation model; practical for low-traffic services, but operational familiarity matters.
Source: news.hada.io/topic?id=29801Read original →
FIG-8171:1
40radar
FIG-8171:1

Fri, May 221 dispatches

#0816
#0816Infra & SaaS GeekNewslast week
`Railway` outage exposes GCP account-suspension blast radius
50radar
RailwayPaaS hosting platform — deploys apps and databases together
A single cloud account suspension took down dashboard, API, compute, databases, control plane, and burst compute. Treat platform convenience as a dependency risk.
- The incident started on May 19, 2026 22:20 UTC and lasted about 8 hours. A hosted app needs an external status channel.
- Railway immediately returned 503 from both dashboard and API, so deploy and ops paths failed together.
- The failed surface included compute, database, control plane, and burst-compute infrastructure. Separate backup and recovery paths matter.
Source: news.hada.io/topic?id=29740Read original →
FIG-8161:1
50radar
FIG-8161:1

Thu, May 212 dispatches

#0815
#0815Infra & SaaS GeekNewslast week
`Railway` Outage Resolved After `Google Cloud` Account Block
50radar
RailwayPaaS hosting platform — Git-based app deploys
A provider-level account block took the platform down broadly. Treat hosted PaaS as a dependency with vendor lockout risk, not just runtime uptime.
- Users hit no healthy upstream, unconditional drop overload, login failures, and dashboard access failures — control plane and runtime both degraded.
- The cause was a Google Cloud account block, so the failure sat below Railway’s own app layer. Status pages alone do not cover this risk.
- For revenue apps, keep DB backups, DNS escape routes, and deploy docs outside the platform. Recovery speed depends on prewritten exits.
Source: news.hada.io/topic?id=29725Read original →
FIG-8151:1
50radar
FIG-8151:1
#0814
#0814Infra & SaaS GeekNewslast week
European Payment Apps Form Sovereign Network Against Card Giants
40radar
WeroEuropean payment service — account-based real-time transfers
National wallet systems are linking with Wero to keep payment flows inside Europe. No immediate checkout change, but EU-facing products should watch alternative payment methods.
- The alliance connects Bizum, Bancomat, MB WAY, Vipps MobilePay, and Wero, creating a 130M active-user payment bloc.
- The stated goal is payments that do not route through US servers. Data residency is becoming part of payment UX, not just compliance.
- Practical impact is not immediate. For EU sales, keep checkout abstraction flexible enough to add regional methods without a rewrite.
Source: news.hada.io/topic?id=29721Read original →
FIG-8141:1
40radar
FIG-8141:1

Wed, May 203 dispatches

#0813
#0813Infra & SaaS GeekNewslast week
`GitHub` investigates unauthorized access to internal repositories
40radar
Scope is currently limited to internal repositories. No evidence points to customer data outside GitHub repos, so this is a watch item, not an immediate migration trigger.
- Confirmed scope is internal repository access. Customer enterprises and organizations are not reported as affected yet.
- No evidence currently shows impact to customer information stored outside GitHub internal repos. Keep monitoring official updates.
- Practical action is limited: review org audit logs, rotate sensitive tokens if stored carelessly, and avoid panic moves.
Source: news.hada.io/topic?id=29701Read original →
FIG-8131:1
40radar
FIG-8131:1
#0812
#0812Infra & SaaS GeekNews2 weeks ago
CISA Contractor Leaked `AWS GovCloud` Keys on GitHub
40radar
A public repo exposed high-privilege cloud and internal credentials. Treat secret scanning as a production control, not a checkbox.
- The public Private-CISA repo exposed high-privilege AWS GovCloud credentials, plaintext passwords, tokens, and logs.
- Default protections that block secret publishing appear to have been disabled; one bad repo setting can bypass the whole safety net.
- Immediate takeaway: enforce secret scanning, pre-commit checks, and key rotation even on private or internal repos.
Source: news.hada.io/topic?id=29689Read original →
FIG-8121:1
40radar
FIG-8121:1
#0811
#0811Infra & SaaS GeekNews2 weeks ago
`FileBrowser Quantum`: Free Open-Source Self-Hosted Web File Manager
50radar
FileBrowser QuantumSelf-hosted file manager — stronger auth and directory ACLs
A self-hosted file UI adds serious auth and access-control layers beyond basic browsing. Useful when a small product needs internal asset/admin file handling without paying for another SaaS.
- Supports OIDC, LDAP, JWT, password plus 2FA, and proxy auth, so it can fit both simple admin panels and heavier internal setups.
- Directory-level permissions can be set by user or group. That is the real upgrade over a plain shared file browser.
- Runs on SQLite, keeping deployment lightweight. Good fit for a single VPS or sidecar service in an existing stack.
Source: news.hada.io/topic?id=29680Read original →
FIG-8111:1
50radar
FIG-8111:1

Tue, May 192 dispatches

#0810
#0810Infra & SaaS GeekNews2 weeks ago
`Grafana` GitHub Token Leak Led to Source Download and Extortion Attempt
40radar
GrafanaObservability platform — dashboard and metrics visualization
A leaked GitHub token gave an unauthorized party access to source code. Treat repo tokens as production secrets; rotation and scope limits are cheap insurance.
- The attacker accessed Grafana's GitHub environment and downloaded source code, turning a token leak into a data-extortion incident.
- Grafana refused to pay the ransom under FBI guidance. Incident response needs a payment stance before pressure hits.
- A single repo token can expose private code. Keep scopes narrow, rotate regularly, and remove long-lived tokens where possible.
Source: news.hada.io/topic?id=29655Read original →
FIG-8101:1
40radar
FIG-8101:1
#0809
#0809Infra & SaaS GeekNews2 weeks ago
`Bitwarden` Quietly Reworks Pricing and Free Messaging
50radar
BitwardenPassword manager SaaS — open-source vault for users and teams
Premium pricing doubled while the “Always free” promise disappeared from site copy. Treat critical SaaS promises as mutable, especially after leadership changes.
- Premium moved to 2x pricing. Small in dollars, but password management is sticky infrastructure.
- The “Always free” wording was removed through website and content edits, not a big launch announcement.
- Long-time CEO Michael Crandell shifted to an advisory role in February; new M&A background raises acquisition-risk sensitivity.
Source: news.hada.io/topic?id=29634Read original →
FIG-8091:1
50radar
FIG-8091:1

Sun, May 171 dispatches

#0808
#0808Infra & SaaS GeekNews2 weeks ago
`Stripe Link CLI` Lets AI Agents Pay on a User's Behalf
70radar
Stripe Link CLIPayment CLI — one-time credentials from a Link wallet
Agents can receive one-time payment credentials from a Link wallet without storing raw card data. Useful for agentic commerce experiments; production value depends on merchant support.
- Issues one-time credentials from a Link wallet, so agents can complete purchases without keeping actual card details.
- Supports two credential types: broadly usable virtual card PAN and an S... option based on Machine Payment Protocols.
- This is payment infrastructure, not just automation. It opens tests for delegated checkout, procurement bots, and agent-run SaaS workflows.
Source: news.hada.io/topic?id=29579Read original →
FIG-8081:1
70radar
FIG-8081:1

Durable Workflows Can Be Built on `SQLite` Alone

`Shopify` Replaces Redis Inventory Reservations With MySQL

How Container Registries Work: Push/Pull Images Directly

Building Durable Workflows on `Postgres`

`Garnix` Hosting Shuts Down on July 15, 2026

`Stripe` Still Leaves Merchants Exposed to Friendly Fraud

`DynIP` Dynamic DNS Supports RFC 2136, IPv6, DNSSEC, and BYOD

`Cloudflare Flagship` Launches Feature Flags for Workers

`Ghost CMS` Sites Hit by `ClickFix` Campaign via Critical CVE

Scammers abuse official-looking `microsoftonline.com` sender for spam links

Is Google Turning Into IBM?

`GitHub App` Installation Tokens Add Per-Request Override Header

10-Year Blog Moves From Ubuntu 16.04 VPS to FreeBSD

`Railway` outage exposes GCP account-suspension blast radius

`Railway` Outage Resolved After `Google Cloud` Account Block

European Payment Apps Form Sovereign Network Against Card Giants

`GitHub` investigates unauthorized access to internal repositories

CISA Contractor Leaked `AWS GovCloud` Keys on GitHub

`FileBrowser Quantum`: Free Open-Source Self-Hosted Web File Manager

`Grafana` GitHub Token Leak Led to Source Download and Extortion Attempt

`Bitwarden` Quietly Reworks Pricing and Free Messaging

`Stripe Link CLI` Lets AI Agents Pay on a User's Behalf