#018

Anthropic's CPO quit Figma's board to ship Claude Design, r/SaaS fought back with a captcha

Anthropic CPO Mike Krieger resigned from Figma's board 3 days before shipping Claude Design. r/SaaS shipped a captcha. Moonshot teased Kimi K2.6 at 1T params.

Listen to this edition

Anthropic CPO Mike Krieger resigned from Figma’s board on April 14. Three days later, Anthropic shipped Claude Design, a conversational design studio powered by Opus 4.7. Figma’s stock dropped 7% to $18.84 before most people finished reading the announcement.

Canva CEO Melanie Perkins signed a native integration. Every Claude Design output exports as a fully editable Canva design. Figma lost a board member and a distribution partner in the same week.

In today’s indie hacker news:

  • Claude Design: Figma stock fell 7%. Canva got native integration.
  • r/SaaS shipped a captcha and banned self-promo in the same week
  • KIMI K2.6: 1T-param coder, 6x cheaper than Claude Sonnet
  • DigitalOcean to Hetzner: 248 GB MySQL, zero downtime, $14K saved
  • Drama: Claude Code leak spawns three command injection CVEs

TOP STORIES

BOARD SEAT BETRAYAL

🎨 Anthropic ships Claude Design. Figma’s stock drops 7%.

Anthropic ships Claude Design

Claude Design launched April 17 as an Anthropic Labs research preview. Point it at your GitHub repo and it extracts your design system: colors, typography, components. Every prototype is on-brand automatically. Output exports as Canva (fully editable), PDF, PPTX, static HTML, or a Claude Code bundle with components, design tokens, copy, and interaction notes.

Krieger co-founded Instagram, joined Anthropic as CPO, and sat on Figma’s board until April 14. He resigned citing conflict of interest. Three days later, he shipped the conflict.

The details:

  • Powered by Claude Opus 4.7. Accessible at claude.ai/design. Research preview, not GA.
  • Exports: Canva, PDF, PPTX, static HTML, or Claude Code bundle.
  • No public API, no Figma import, no multiplayer editing at launch.
  • Figma stock fell from $20.32 to $18.84 on April 17. Already down 80%+ from post-IPO highs.
  • Pro ($20/mo) burns quota fast. One user reported 2 sessions eating 58% of weekly quota. Max ($100/mo) is the real entry point.

Why builders care: Closes the design gap for non-designer founders. The Claude Code handoff is the real unlock: output drops straight into your codebase as components + tokens + copy. Unlike v0 (React/Next.js only), it’s stack-agnostic. Budget $100/mo. The $20 Pro tier won’t last two sessions.


THE SLOP STOPS HERE

🤖 r/SaaS declares war on AI slop with a captcha gate and self-promo ban

r/SaaS declares war on AI slop

r/SaaS (412,821 members) shipped a community-level captcha, banned self-promotion entirely, and the subreddit erupted. “WE ARE FREE.” “End of AI Slop.” Four posts, 634 combined upvotes, 517 comments. First major subreddit to fight bots with code, not just content rules.

This follows a wave. Reddit removes 100,000 bot accounts per day. r/programming (6.9M members) banned all LLM content April 3. Digg shut down March 14, overwhelmed by AI spam. 15% of Reddit posts in 2025 were AI-generated.

The details:

  • 4 posts, 634+ upvotes, 517+ comments across the anti-slop cluster.
  • Reddit removes 100K bot accounts per day. 410M pieces of content removed in 2024.
  • AkiraBot (2025): AI bot that spammed 80,000+ websites targeting SaaS founders, using GPT-4o-mini.
  • r/programming banned all LLM content April 3. Digg died from AI spam March 14.

Why builders care: r/SaaS is one of the few free distribution channels left for bootstrapped founders. Bots flood it, the channel dies. The self-promo ban fixes spam but removes the reason many founders were there. Quality or openness: pick one. (Speaking of slop detection, check the Stack of the Day.)


TRILLION-PARAM TROJAN

🌙 Moonshot AI teases KIMI K2.6. 1T params. 6x cheaper than Claude.

KIMI K2.6 teased by Moonshot AI

Moonshot AI rolled out KIMI K2.6 Code Preview on April 13. 1 trillion total parameters, 32 billion activated per forward pass via 384-expert MoE. 256K context. API pricing: $0.60/M input, $2.50/M output, roughly 5-6x cheaper than Claude Sonnet 4.6. Predecessor K2.5 hit 76.8% on SWE-bench Verified. Open weights expected May 2026 under Modified MIT.

The details:

  • 1T total params, 32B activated per token. 384 MoE experts (DeepSeek-V3 has 256).
  • $0.60/M input, $2.50/M output. Roughly 5-6x cheaper than Claude Sonnet.
  • K2.5 SWE-bench: 76.8%. LiveCodeBench: 85%. K2.6 evals not published yet.
  • Agent Swarm: up to 100 sub-agents baked in. 4.5x faster on parallelizable tasks.
  • Self-hosting: 630 GB (bf16), needs 4x H200s. Quantized to 1.8-bit on a single 24GB GPU at 10 t/s.

Why builders care: Frontier coding at 5-6x less per token with open weights you can self-host. The r/LocalLLaMA gripe: no smaller distilled variants (8B/32B tier) for practical local use. If you don’t have 4x H200s, it’s API or nothing.


THE $14K ESCAPE

🖥️ One dev moved 248 GB of MySQL to Hetzner in a day. Saved $14,388/year.

DigitalOcean to Hetzner migration

Isa Yeter moved 30 MySQL databases (248 GB), 34 Nginx vhosts, GitLab EE, Neo4J, and 1.5 million web files from DigitalOcean to a single Hetzner AX162-R. Zero downtime. 24-hour window. Bill dropped from $1,432 to $233/mo. That’s $14,388 saved per year.

Driver: Turkish lira inflation made USD-denominated cloud bills unsustainable. He got 50% more CPU cores, 33% more RAM, and 3x storage for 84% less money.

The details:

  • DigitalOcean: 32 vCPU / 192 GB RAM / 600 GB SSD at $1,432/mo.
  • Hetzner AX162-R: EPYC 9454P 48C/96T / 256 GB DDR5 / 1.92 TB NVMe RAID1 at $233/mo.
  • Tools: mydumper/myloader (32-thread parallel), MySQL replication for zero-data-loss cutover.
  • Hardest bugs: MySQL 5.7 to 8.0 schema changes and replication duplicate keys.
  • OS upgrade in parallel: CentOS 7 (EOL) to AlmaLinux 9.7.

Why builders care: Proves zero-downtime migration is achievable with live production databases at 248 GB scale. The tradeoffs: no managed databases, you’re ops-ing everything. And Hetzner EU bandwidth is 20 TB/mo, but US is only 1 TB. Budget for overages if you’re US-primary.


📊 Qwen3.6 real-world benchmarks rolling in - RTX 5070 Ti hits 79 t/s on Qwen3.6-35B-A3B (432 upvotes, r/LocalLLaMA). Separate tests show it solving coding problems Qwen3.5 couldn’t (219 upvotes). Efficiency win: 83% reasoning, 17% output token split vs 3.5’s 91/9. 1M context window added. We covered the release in Edition #16. These are the first real-world numbers.

🚀 Product Hunt AI infrastructure blitz - Four agent primitives launched the same day. Grok Voice API ($0.05/min), Cloudflare Email (inbox as agent interface), Android CLI, and Vercel Flags ($30/1M requests). The agent infrastructure layer is getting crowded.


DRAMA

SOURCE CODE, SOURCE PROBLEMS

🔓 Claude Code leak spawns three CVSS 9.8 command injection CVEs

Researchers found three CWE-78 command injection vulnerabilities in the Claude Code source that leaked via npm in March. The TERMINAL env var gets read without sanitization, enabling shell injection. File paths with $() execute as shell commands. AWS and GCP auth configs pass unsanitized to shell. Anthropic initially closed reports as “Informative.” No confirmed patch.

Why builders care: If you run Claude Code in CI/CD with cloud auth helpers, VULN-03 is a credential exfiltration risk. Check your pipeline configs.


FIRST DOLLAR

TEN THE HARD WAY

💰 Deadlinr: 600+ downloads, 10 paying customers since Feb 1

Lucky Ali Khan built an iOS app that tracks everything that expires. Subscriptions, food, warranties, passports. Offline-first, no cloud. No viral moment. Just shipping and iterating for 2.5 months. App confirmed on the App Store.


THE BORING FEATURE WON

🎯 The most boring feature request became the whole product

Built a voice app on weekends. Users kept requesting scheduling: record now, send later. Kept deprioritizing it. Turned out to be the killer feature. 61 upvotes on r/SideProject. The feature you think is boring might be the one that matters.


STACK OF THE DAY

🔍 Slop Cop - Go CLI and Claude Code/Cursor plugin by @yasyf that detects AI slop in your code and prose. 48 rules in three tiers: 35 regex (instant), 10 via Haiku, 3 via Sonnet. Catches em-dash abuse, hedge stacks, filler adverbs, and throat-clearing. Open source. Free. Thematically perfect for today’s r/SaaS anti-slop revolt.

Not sponsored. We just feature tools builders would actually use.


BOOKMARKED TODAY

🔖 Changes in the system prompt between Claude Opus 4.6 and 4.7 - Simon Willison’s side-by-side diff of what Anthropic changed under the hood.

🔖 Pricing an MCP Server in 2026: Why We Charge $19/mo - The economics of charging for MCP tools when the market average is $0.

🔖 Zero-Copy GPU Inference from WebAssembly on Apple Silicon - Running ML inference from Wasm with zero-copy GPU memory on M-series chips.


Curated by AI, built by a human.