Madison

Last night, I became aware of the concerns raised in Josh's post. I reached out publicly and over DM to offer a potential explanation based on the limited information available at the time, while working to understand what happened. As background, we’ve internally been pushing 100% on security of the Railway platform. At Railway, we believe that cyber threats are real and mounting, and we’ve built out tooling for automatic scanning + CVE remediation (for both our infrastructure and customers). Over the last few weeks, oncall engineers were instructed to red team our infrastructure. We maintain specific policies and short lived grants for when these actions occur. Subsequently, I became aware that an employee at Railway had constructed, on their own time, a tool for proactive identification + reporting of bug bounties within the broader community. The employee, using their own personal accounts, personal credit card, and time outside of work hours, signed up for a personal subscription to a hosted service running Deepseek. I can confirm they ran this tool once and only once, on a singular external provider, and halted it proactively within 15 minutes of starting. Railway does not condone these actions. We expect all our employees to uphold our standards of conduct, whether acting on behalf of Railway or in a personal capacity. We create an environment where internal red teaming has strict guidelines, and when bug bounty disclosures must occur, we follow every letter of responsible disclosure. We have addressed this incident with the employee directly and have taken appropriate action. We are also reinforcing our expectations for employee conduct to help prevent similar situations.

Grand Theft Auto VI pre-load begins on November 10. There’s still time to pre-order and ensure you're able to experience Grand Theft Auto VI when it launches on November 19. Details: rsg.ms/a647560

Sandboxes have no moat. Just fat margins. We're launching agent37.com to kill those margins. For example, a sandbox with 2 vCPUs and 4 GB RAM when left running for an entire month: Vercel: $249 Cloudflare: $145 Daytona: $121 Agent37: $4.76 There's nothing magical about a sandbox that justifies keeping it expensive forever. Call it a race to the bottom. We'll see you there. If you can find a cheaper sandbox and we'll refund the difference.

honestly I'm disappointed to see Josh turning Railway's agentic testing into a pitch for his own product I get that you are bootstrapped and you need customers, but saying "they pen-tested me, you should try my platform instead" is pure shilling

Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far

After shipping 310+ web components, today I'm launching Cue Mobile. Expo · React Native components, with the prompt and full code. Invite-only for now. The first 100 people get in with: CUEMOB2 cuedesign.space/invite/CUEMO…

bro stop generating sloppy AI interfaces, start using my design system and skills design.how

Introducing Skullet 💀 Loading states without hand-drawn placeholders or layout shift. Skullet measures your components and draws their skeletons for you. Wrap your component with <Skeleton> and you're done. Happy Halloween! 🎃 → skullet.lochie.me