BREAKING: Iran has delivered its highly anticipated "10-point" response to the US' "15-point peace plan."
Iran's 10-point plan includes:
1. Guarantee that Iran will not be attacked again
2. Permanent end to the war, not just a ceasefire
3. End to Israeli strikes in Lebanon
4. Lifting of all US sanctions on Iran
5. End to all regional fighting against Iranian allies
6. In return, Iran would open the Strait of Hormuz
7. Iran would impose a Hormuz fee of $2 million per ship
8. Iran would split these fees with Oman
9. Iran to provide rules for safe passage through Hormuz
10. Iran to use Hormuz fees for reconstruction instead of reparations
President Trump's "deadline" for a peace deal with Iran is 25 hours away.
Spent a few hours on this. Half the things I have been using, the other half were very useful. CLAUDE.md being loaded every request was a bit of a shocker.
I wonder why...
I dug into Claude Code's source code to understand how Anthropic protects their subsidized pricing. Here's what I found:
Claude Code Max users get ~$5,000+ in API-rate tokens for $200/mo. One user tracked 10B tokens over 8 months — $15,000+ at API rates, paid ~$800.
So how does Anthropic stop third-party clients from freeloading?
Every API request includes an x-anthropic-billing-header with a cch= attestation hash. The JS layer writes cch=00000 as a placeholder, then Bun's native HTTP stack (written in Zig) overwrites it with a computed hash before the request leaves the wire.
The server verifies this to confirm the request came from the real Claude Code binary. Unofficial clients can't produce valid hashes — they'd need to reverse Anthropic's custom Bun fork (bun-anthropic/src/http/Attestation.zig).
Why it matters:
- Pro ($20/mo) already beats API pricing at ~50 sessions/month
- Max subscribers see ~93% savings vs equivalent API usage
- 90%+ of tokens are cache reads (0.1x cost) so real compute cost is ~10% of API sticker price
- Average dev uses ~$6/day in tokens
The attestation isn't about DRM — it's basic economics. Without it, anyone could route $5k of API traffic through a $200 subscription.
claude code signs every API request with a cch= hash computed in compiled zig. recompiled clients just send zeros
nobody knows the signing algorithm yet. which means anthropic can tell which requests aren't from the legit client.
currently decompiling the official binary to reverse this - would be huge for all third party clients like opencode, openclaw etc to fully bypass anthropic enforcement and actually use the tokens you're already paying for
[right now using every client which is not the official version of claude code with your subscription token CAN get you banned cause anthropic can detect it]
Claude Code leaked their source map, effectively giving you a look into the codebase.
I immediately went for the one thing that mattered: spinner verbs
There are 187
BREAKING: Iran’s Speaker of the Parliament provides trading advice to investors trading US markets:
“Pre-market so-called ‘news’ or ‘Truth’ is often just a setup for profit-taking. Basically, it is a reverse indicator. Do the opposite: If they pump it, short it. If they dump it, go long. See something tomorrow? You know the drill.”