7.9.25 | Supabase MCP SQL leak, Bootstrapping profitable side project, OffChess offline chess puzzles app

Supabase MCP can leak your entire SQL database
https://www.generalanalysis.com/blog/supabase-mcp-blog
https://news.ycombinator.com/item?id=44502318

Bootstrapping a side project into a profitable seven-figure business
https://projectionlab.com/blog/we-reached-1m-arr-with-zero-funding
https://news.ycombinator.com/item?id=44495428

Show HN: OffChess – Offline chess puzzles app
https://offchess.com
https://news.ycombinator.com/item?id=44498296

Breaking Git with a carriage return and cloning RCE
https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384
https://news.ycombinator.com/item?id=44502330

Smollm3: Smol, multilingual, long-context reasoner LLM
https://huggingface.co/blog/smollm3
https://news.ycombinator.com/item?id=44501413

Taking over 60k spyware user accounts with SQL injection
https://ericdaigle.ca/posts/taking-over-60k-spyware-user-accounts/
https://news.ycombinator.com/item?id=44455707

Radium Music Editor
http://users.notam02.no/~kjetism/radium/
https://news.ycombinator.com/item?id=44502298

Brut: A New Web Framework for Ruby
https://naildrivin5.com/blog/2025/07/08/brut-a-new-web-framework-for-ruby.html
https://news.ycombinator.com/item?id=44502463

RapidRAW: A non-destructive and GPU-accelerated RAW image editor
https://github.com/CyberTimon/RapidRAW
https://news.ycombinator.com/item?id=44505876

US Court nullifies FTC requirement for click-to-cancel
https://arstechnica.com/tech-policy/2025/07/us-court-cancels-ftc-rule-that-would-have-made-canceling-subscriptions-easier/
https://news.ycombinator.com/item?id=44504699