Smitesh More

I review a lot of apps that founders built with Lovable, Bolt or Cursor. They usually work well in a demo. The problems show up later, once real people sign up and pay.

The ones I see most often are a payment webhook that accepts any request, a database table anyone can read with the public key, and an AI route with no limit, where one script can run up the bill overnight.

What I have not figured out is how non-technical founders should handle this. Hiring someone to review every version is slow and expensive, and the AI tool will usually tell you everything is fine.

With a friend, we decided to create an app for fun.
When we thought we were done with naming, we found out that someone already has in the same category the same name.

When we came up with another name, we found out that someone had patented the name even tho in a different field.

Over the past week, several Chrome extension owners (myself included) have experienced a rather unusual situation.

Bots apparently operating from Romanian IP addresses are mass-installing extensions, but the number of active users remains completely unchanged.