Podbit · This Week in Tech (Audio)
TWiT's network was breached in January 2026, and the intruder stayed undetected for 121 days — more than 4 months — because Leo had disconnected the Thinkst Canary for an ad read. The breach was only discovered when Google flagged unusual activity in TWiT's Workspace account.
Where this was said
At 1:21:20 · chapter starts 1:08:10
The Thinkst Canary ad read turns into a genuine confession: TWiT's Google Workspace was breached in January, and Google only flagged the intrusion months later. The attackers were apparently overwhelmed by the volume of Workspaces they'd compromised and hadn't gotten to exploiting TWiT's data yet. The reason the breach went undetected internally for 121 days? Leo had disconnected the Thinkst Canary while holding it up for an ad read and forgot to plug it back in. Canary tokens — fake payroll spreadsheets, fake credentials — are the real-time tripwires that would have caught the intruder the moment they touched anything. Leo walks through the product: five Canaries, a hosted console, support, and maintenance for $7,500 a year with 10% off using code TWIT, refundable within 60 days — a refund guarantee that has apparently never been claimed [1] — Leo Laporte "Thinkst Canary breach detection gap: 121 days: TWiT's network was breached in January and went undetected for 121 days — more than 4 months…" 1:23:40 .
Even with Anthropic paying $1.25 billion/month and Google paying $900 million/month for xAI compute, xAI is still estimated to be losing at least $100–500 million per month.
TWiT's network was breached in January and went undetected for 121 days — more than 4 months — because the Thinkst Canary honeypot had been disconnected.
Game apps keep users engaged long enough for ads to pay off. Tool apps don't — so if you're building a utility, ads are almost always the wrong call and subscriptions are your only real lever.
Inside SEO Bot, a single button labelled 'Boost My Domain Rating' routes users directly to Listing Bot. That one interaction converts a user of one tool into a user of two — without any marketing cost.
Directory listings are a powerful but underrated growth channel — but only if your product is genuinely interesting enough to earn the click. AI products have a natural advantage here because they're easy to package in a compelling, clickable way.
The fastest path to Twitter growth isn't volume — it's forming sharp opinions about how the platform works and sharing them immediately. People cluster around those who understand the rules and say so out loud.
Sam had no coding knowledge, so he used ChatGPT voice mode to generate his entire codebase and copy-pasted it into Notepad. A friend later introduced him to Cursor, and he never looked back.
Copy days of Discord chat history, paste it into ChatGPT, and ask it to list recurring pain points. The ones that come up most often are your best product bets.
Sam's top advice: when prompting Cursor, tell it to architect code for 100,000 users from day one. The AI changes its approach, building scalable frameworks instead of brittle one-user code.
With AI coding tools like Cursor, Bhanu replicates an existing free tool for a new keyword in under 5 minutes. What used to be a multi-day build is now a lunch-break task.
Ahrefs, SiteGPT, Cal.com, PostHog, Datafast, Sibyl AI, Bento, Feather, Featurepace, Mintlify, Cloud Code, ChartMogul — Bhanu runs his entire business solo with these 12 tools.
We use essential and analytics cookies to run Vuci. To understand how the site is used: Privacy Policy.
Install Vuci on your phone
Add it to your home screen for a faster, app-like experience.
Install Vuci on your phone
Tap the Share button, then “Add to Home Screen”.
A new version is available
Reload to get the latest Vuci.