Quote · This Week in Tech (Audio)
TWiT 1087: Evil is the Root of All Money - Could Local AI Laptops Compete With Data Center Giants?
Where this was said
Thinkst Canary Ad Read & TWiT's 121-Day Breach Disclosure
At 1:25:00 · chapter starts 1:08:10
The Thinkst Canary ad read turns into a genuine confession: TWiT's Google Workspace was breached in January, and Google only flagged the intrusion months later. The attackers were apparently overwhelmed by the volume of Workspaces they'd compromised and hadn't gotten to exploiting TWiT's data yet. The reason the breach went undetected internally for 121 days? Leo had disconnected the Thinkst Canary while holding it up for an ad read and forgot to plug it back in. Canary tokens — fake payroll spreadsheets, fake credentials — are the real-time tripwires that would have caught the intruder the moment they touched anything. Leo walks through the product: five Canaries, a hosted console, support, and maintenance for $7,500 a year with 10% off using code TWIT, refundable within 60 days — a refund guarantee that has apparently never been claimed [1] — Leo Laporte "Thinkst Canary breach detection gap: 121 days: TWiT's network was breached in January and went undetected for 121 days — more than 4 months…" 1:23:40 .
Even with Anthropic paying $1.25 billion/month and Google paying $900 million/month for xAI compute, xAI is still estimated to be losing at least $100–500 million per month.
TWiT's network was breached in January 2026, and the intruder stayed undetected for 121 days — more than 4 months — because Leo had disconnected the Thinkst Canary for an ad read. The breach was only discovered when Google flagged unusual activity in TWiT's Workspace account.
TWiT's network was breached in January and went undetected for 121 days — more than 4 months — because the Thinkst Canary honeypot had been disconnected.
