❗️ More than half a million credentials leaked on GitHub turned out to still work, and the oldest was committed 17 years ago. Researchers found 543,699 of them across 224 million public repos, where the median working secret was 784 days old. npm revokes leaked tokens, so just 1 of 101,886 still worked. Of 126,963 leaked Google Cloud service account credentials, more than half still did.

Anthropic has been misleading people with the Max plans: it has been advertising the $200 plan as 20x and the $100 plan as 5x. You'd expect to get 4 times more usage with those figures, but it turns out it's only 1.7x. You pay twice the price, for 1.7x the usage. And yet they've literally been marketing it as if you're saving 50% (see screenshot below). The usage figures Anthropic gave in July 2025 were 140–280 Sonnet hours at 5x and 240–480 at 20x. Turns out that multiplier only covers the daily 5-hour session window. So in the end, if you take weekly cap into account, you pay more per hour with the 20x than with the 5x.