holdup.

https://www.theregister.com/security/2026/09/01/attacker-stole-a-metr-api-key-used-600k-worth-of-credits-and-no-one-noticed-for-weeks/5293730

metr - a company that was working with openai to do security research

themselves got hit so badly there are news articles about it

what the fuck are these people even doing? how did metr get into a position to talk about security with openai if they hav zero idea wtf they are doing?

this whole thing is bananas