Alibaba: 28.8M exchanges stolen
Alibaba allegedly scraped 28.8 million Claude exchanges via 25,000 fraudulent accounts to use as model training data.
Where this was said
Alibaba's Data Heist & Anthropic's Countermeasures
At 25:33 · chapter starts 24:10
The Alibaba distillation story is a perfect illustration of how frontier model data gets exfiltrated at scale. Theo explains the alleged mechanism: Alibaba — or more likely a third-party broker — set up discounted Claude Code subscriptions targeted at users in regions where Anthropic accounts are hard to obtain, then routed all traffic through a forwarding proxy that captured every input and output. The result was 28.8 million Claude exchanges across 25,000 fraudulent accounts. [1] — Theo "Alibaba: 28.8M exchanges stolen: Alibaba allegedly scraped 28.8 million Claude exchanges via 25,000 fraudulent accounts to use as model tra…" 25:33 Anthropic's response was a geographic detection code block embedded in Claude Code that checked for signals like Shanghai-based logins — flagged publicly by a user as 'hidden spyware,' then acknowledged by Anthropic's Thorik as a March experiment that had already been superseded by better mitigations. Theo connects this directly to the ViProxy proxy tool he and Ben use to balance accounts, predicting it will be killed within 2–3 weeks once Anthropic adds cryptographic session signatures to Claude Code's proprietary OAuth endpoint. Ben notes that the proxy model is only routing to Claude Code — not to other harnesses — but acknowledges the risk is real.
Alibaba's Data Heist: 28.8M Claude Exchanges
Alibaba allegedly acquired 28.8 million Claude exchanges via 25,000 fraudulent accounts — likely by offering subsidized Claude Code subscriptions that route all traffic through a data-collecting forwarder. It's not necessarily Alibaba doing it directly; third-party brokers may sell the data to them.
ViProxy and the Account Balancing Trick
Tools like ViProxy let users load-balance multiple Claude Code accounts to maximize access to Fable during its limited window. But Theo predicts Anthropic will kill this method in 2–3 weeks by requiring a rolling cryptographic signature in Claude Code's special OAuth endpoint — and Alibaba is to blame for accelerating that.
Similar snapshots
Ad monetization for games
Ad-based monetization works well for game apps where users spend extended time in-session, as seen with Grid and Wordle.
Ads don't work for tool apps
Tool-focused apps like PuffCount are poor candidates for ad monetization because users don't stay in-session long enough.
Hard paywall is unskippable
A hard paywall is a screen that blocks all app features unless the user pays or starts a free trial — it cannot be dismissed.
Two core monetization models
Mobile apps are primarily monetized through either ads (best for games) or in-app purchases/subscriptions (best for tools).
YouTube beats every other platform
According to the episode, YouTube outperforms every other social platform for building trust and driving SaaS conversions.
Most users came from YouTube
Vasco stated that the majority of his app's user base came directly from his YouTube channel.
Boost My Domain Rating button
SEO Bot features a 'Boost My Domain Rating' button that routes users directly to Listing Bot, an example of in-product cross-selling.
All products connected to AI
The founder's entire product portfolio is AI-related, making it easier to package products attractively for directories.
AI coding viability debate as hook
The founder attached their SaaS demo to the trending debate about whether AI coding is actually good enough to build a full SaaS product.
