Youtube

Y Combinator’s request for startups organized in a searchable dashboard. Y-combinator has published their Request For Startups (RFS) with the page showing previous RFS up to summer 2024. I’m not reading all of that so I put it in json, & made a dashboard now you can search by domain and query across cohorts 2024-2026

Here’s a rough list of domains covered over the years

• Aerospace
• B2B
• Internal tools
• Medicine
• Robotics
• Software
• Space

The project’s on github, open-source under the MIT license

Find the app here if interested

http://ycombinator-rfs.netlify.app

According to the comments:

@Air_China_Productions Fun fact: the original writer for the song Jin Sheng Yuan which translate to “Affinities of this life” actually wrote it when he was in prison.

English translation thanks to Youtube User: @el.hombre.danilo

We are meant to be on the road As long as we never forget each other My friend, let’s keep it firmly in mind Don’t care about these heartaches and sorrows Friends, let’s keep in mind together Don’t care about these heartaches and heartaches Our life is meant to be vicissitudes cry and laugh My friend, let’s keep it firmly in mind Our brotherhood is long in this life My friend, let’s keep it firmly in mind Our brotherhood is long in this life

We are meant to be on the road in this lifetime As long as we never forget each other Friends, let’s keep in mind together Don’t care about these heartaches and heartaches Friends, let’s keep in mind together Don’t care about these heartaches and heartaches Our life is like a dream What’s the point of getting drunk with you Friends, let’s keep in mind together After the end of the mortal world, there will be no worries Friends, let’s keep in mind together After the end of the mortal world, there will be no worries Friends, let’s keep in mind together After the end of the mortal world, there will be no worries

In this video, Derek from Veritasium teams up with cybersecurity experts to demonstrate a real, unpatched vulnerability that allows hackers to drain funds from a locked iPhone without the user’s knowledge. He successfully demonstrates this by “stealing” $10,000 from Marques Brownlee’s (MKBHD) locked phone [03:09].

The Mechanism: A Man-in-the-Middle Attack

The hack relies on intercepting and altering the near-field communication (NFC) data sent between an iPhone and a payment terminal using a device called a Prox Mark and a Python script [05:32]. To make the theft work, the hackers have to bypass three layers of security by telling “three lies”:

- Lie 1: Bypassing the Lock Screen. Apple’s "Express Transit" mode allows users to tap and pay for subway rides without unlocking their phones [06:25]. The hacker's device broadcasts a code pretending to be a transit gate, tricking the locked phone into initiating a payment. The script then modifies a bit of data to tell the phone that the reader is offline.
- Lie 2: Bypassing High-Value Verification. Normally, a $10,000 charge requires FaceID or a PIN. However, the phone relies on the _reader_ to flag whether a transaction is "high value" or "low value." The script intercepts the terminal's request and flips the "high value" bit to a zero, tricking the phone into thinking it's approving a tiny transit fee [09:12].
- Lie 3: Fooling the Payment Terminal. When the phone approves the transaction, it flags that no customer verification (FaceID/PIN) was provided. If the actual payment terminal sees this for a $10,000 charge, it will reject it. The script intercepts the phone's response and flips the verification bit to a one, tricking the terminal into believing the user verified the massive payment on their device [11:08].

Why Visa and not Mastercard?

This specific hack only works with a Visa card set up in an iPhone’s Express Transit slot [15:15].

While both Visa and Mastercard use symmetric cryptography (a shared secret key between the card and the bank), Mastercard adds a mandatory layer of asymmetric cryptography between the card and the reader [16:17]. This requires the card to send a unique digital signature. Because the hacker’s script alters the transaction data, the signature wouldn’t match, and Mastercard would block the payment. Visa, however, skips this signature check when the payment terminal is online, leaving a loophole for this specific attack to succeed.

The Corporate Response

This vulnerability was made public by the researchers in 2021, yet it remains unpatched:

- Apple: Stated this is a concern with the Visa system and noted Visa's stance on the matter [22:18].
- Visa: Claimed that this type of fraud is highly unlikely to scale in the real world [22:43]. They argue their network defenses are adequate and point out that affected consumers are fully protected by Visa's zero-liability policy (meaning victims will be refunded).

How to Protect Yourself

Since the exploit relies entirely on Apple’s transit feature, you can easily protect yourself by either turning off Express Transit mode entirely, or ensuring you do not have a Visa card assigned as your primary transit card [21:44].

Chronological Breakdown of the Video Script

• [00:00:00] The Heist Setup: Derek introduces the premise with Marques Brownlee (MKBHD). Without Marques unlocking his phone, Derek places the locked iPhone on a device and successfully charges $5 to it via Apple Pay.
• [00:02:00] The $10,000 Escalation: Derek tests the limits of the exploit by typing a $10,000 charge into the terminal. Despite Marques believing a charge that high would absolutely require FaceID or a PIN, the terminal approves the $10,000 charge from the locked phone, leaving Marques stunned.
• [00:04:00] The Hackers & The Loophole: Derek introduces cybersecurity professors Yana Borenu and Tom Chofia from the University of Surrey. They explain that this hack was actually made public back in 2021. It uses a “Man-in-the-Middle” attack, where a device called a Proxmark intercepts the NFC data, passes it to a laptop running a Python script to alter the data, and then sends it to a burner phone to complete the transaction at the terminal.
• [00:06:00] The First Lie (Bypassing the Lock Screen): The script exploits Apple’s “Express Transit” mode (introduced in 2019), which allows users to pay for subway rides without unlocking their phones. The hackers broadcast a transit gate code to wake the phone up, then flip a bit of binary code to convince the phone it is talking to an offline subway gate.
• [00:08:20] The Second Lie (Bypassing FaceID): To get $10,000 out, they have to bypass customer verification. The iPhone relies on the reader to categorize a transaction as “high value” or “low value,” rather than checking the number itself. The script intercepts the terminal’s request and changes the “high value” flag to a zero, tricking the phone into thinking it’s a small transit fee.
• [00:10:19] The Third Lie (Fooling the Terminal): The terminal expects proof that the customer verified a $10,000 charge. The script intercepts the phone’s response and flips a zero to a one, artificially stamping the transaction as “verified on device.”
• [00:11:50] Why Samsung and Mastercard are Safe: The video notes this only works on iPhones, because Samsung phones check the actual numerical value of a transit charge (rejecting anything over $0). Furthermore, it only works if a Visa card is in the Express Transit slot.
• [00:15:15] Symmetric vs. Asymmetric Cryptography: The script takes a deep dive into cryptography. Mastercard uses asymmetric cryptography, requiring a unique digital signature between the card and the reader for every transaction. Because the hackers altered the data, this signature wouldn’t match and Mastercard would block the hack. Visa, however, skips this digital signature check if the payment terminal is online—which is exactly how the hackers keep the loop open.
• [00:20:14] Testing on the Crew: To prove how easy this is to replicate in the real world, Derek successfully uses the hack to steal from his own card, as well as the channel’s CFO.
• [00:22:00] Apple and Visa’s Response: Derek explains that Apple declined an interview but sent a statement blaming the Visa system, citing Visa’s “zero liability policy.”
• [00:22:35] The Visa Interview: A Visa representative claims this vulnerability is highly unlikely to scale in the real world. Because in-person fraud is incredibly low (two cents for every $100 spent), Visa believes its network defenses are adequate, and that victims will just get their money refunded.
• [00:24:28] The Conclusion: Derek pushes back on Visa’s logic using an airline analogy: airlines don’t accept a small number of crashes as the “cost of doing business,” they fix the technical issues. He concludes that even if a user gets refunded, waking up to a missing $10,000 can cause massive real-world stress (missed rent, bounced bills), and the tech industry should be expected to patch known vulnerabilities.

Google AI Pro Users Locked out of Antigravity IDE after paying $200 a Year

TL;DR: Google’s agent-first IDE, Antigravity, promised a 5-hour quota reset but is currently locking AI Pro users out for up to 7 days. Worse, the built-in bug reporter is also broken, leaving users stuck with zero support and a suggestion to upgrade to a $200/month plan.

Locked Out Featuring Claude Code and Copilot Users

For a perfect summary of the community’s current vibe, complete with Antigravity users being mocked by Claude Code and GitHub Copilot devs, this YouTube video captures it perfectly

This video, titled “Career Strategy For People With Too Many Interests” by Knowspire, is a guide for multi-potentialites, people who struggle to focus because they have diverse passions and hobbies. The speaker addresses the frustration of feeling scattered and failing to make progress because of trying to do too many things at once. The core message is: You don’t have a passion problem; you have a strategy problem. Here is the 5-step strategy recommended in the video to organize your interests and actually move forward:

Step 1: Stop Trying to Pick Just One Thing

Accept that having multiple interests is a feature of your personality, not a bug. The goal isn’t to kill off your other interests; it’s to organize them strategically so they stop fighting for the same limited time and energy.

Step 2: Create “Three Buckets” for Your Interests

List out absolutely everything you want to learn or do, and divide them into these categories:

• Bucket 1: The Money Maker Pick ONE skill that has the highest potential to pay the bills in the next 1 to 3 years. It doesn’t have to be your ultimate passion, just something you are decent at, has market demand, and you don’t hate.
• Bucket 2: The Soul Stuff Things you do purely to feel alive (e.g., hiking, painting, philosophy). Do not try to monetize these. Let hobbies just be hobbies to keep yourself sane.
• Bucket 3: The Curiosity Shelf Everything else you want to do someday. You aren’t saying “never,” you are just saying “not right now.”

Step 3: Go All-In on Bucket One

Stop splitting your time 50/50 across all your interests. For the next 6 to 12 months, give 80% of your productive energy to your “Money Maker.” If you have two hours of free time a day, dedicate 90 minutes to this one skill. This is how you build real momentum, develop actual expertise, and eventually buy yourself the freedom to explore other things.

Step 4: Schedule Your “Soul Stuff”

Don’t abandon the things that make you happy. Schedule them in your calendar (like reading on Friday nights or painting on Sundays). Treat them as recovery time that prevents you from burning out on your main focus.

Step 5: Revisit and Rotate

This setup isn’t a prison sentence. Once you build momentum and stability with your “Money Maker,” you can reassess. Maybe you pull something off the “Curiosity Shelf,” or maybe you combine two interests. The key is that you are now building your life in sequence, rather than in chaos. Ultimately, people who seem to do it all successfully didn’t start that way, they got good at one thing first to build a foundation, and then they expanded.

This video is especially for developers who are beginners and feel overwhelmed by the number of new tools and packages released every day. The AI hype compounds this further, with different IDEs and AI pair programming assistants launching constantly, all broadcast loudly by influencers on Twitter. The sheer volume of information can make you feel left out and ignorant.

The Bottom-line:

Brad Traversy’s advice: focus on learning the basics and gaining a deep understanding of the fundamentals of your tech stack. The hype cycle is not the measure of your progress.

Editor’s Opinion

Our take at rdjarbeng.com is that you should also remember that not many people are programmers or developers in the first place. Most people still think AI is just ChatGPT and haven’t even heard of claude code or started using it.

One comment from the YouTube community that resonated in a thread about this:

“At this point, you basically need to be unemployed to keep up with AI.” — @Mulegeta Gonfa

Many found this song from Apostle Joshua Selman after he used it in a service and had to go search for it. According to Google the song was released in 2022 but this video was premiered on YouTube July, 3rd 2025.

The song starts off with a short intro and a vocal from Kaestrings himself and his guitar. The set is identical to the one used for his hit song Rahama. Honestly don’t know which of these hits came first. Anyway back to the song. There’s a short instrumental, then the choir and audience joins with ‘Your presence is my one desire…’ Then we go into the Chorus,

You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry

After the chorus, we come back to the verse with even more energy but with a slight change, instead of presence we want GLORY.

Your Glory is my one desire

Sublime! The instrumental also backs the song nicely and we continue in blissful melody. After the verse, we go for the chorus. And then at the end Kaestrings vocalises the melody with

A yaa ya ya ya ya yaaa and Oh, oh ooh oooh, ooh

Then the instrumentals take over while Kaestrings speaks. Then a slowed version of the chorus with the drummer in marching band pace on the snare drum. Eventually the snare drum ceases to give way to just strings and the sound of the choir and studio audience.

You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry The song ends gently with Kaestrings saying, Your presence is my one desire

LYRICS:

Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire Your presence is my one desire (I mean every Word) Your presence is my one desire You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry Your glory is my one desire Your glory is my one desire Your glory is my one desire Your glory is my one desire Your glory is my one desire Your glory is my one desire Your glory is my one desire Your glory is my one desire Lord, You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry You’re all I want You’re all I need I wanna hold You close to me You’re all I want You’re all I need To see Your Kingdom’s my heart cry LORD I need You, ooh, oh My all needs You My future needs You I’m in love with You

Released March 6, 2026

You’re my God, I’ll abide in all Your ways The whisper, the wind that softly calls my name Friend and Comforter so true Every step I’ll take with You

Chorus Holy Spirit, You move like the sea Washing over the broken parts of me Every shadow fades when You draw near Your love is the fire that burns my fear

You know what is best for me I know, know I am with the Lord Your presence is whole

Chorus Bridge You burn my fears You burn You burn my fears You’re at work At work inside of me Yeah, You’re at work At work inside of me

Chorus