Let's Burn Some Tokens – AI Chatbot Cost Exploitation as an Attack Vector(dixken.de)
4 pointsby snigsnog9 hours ago2 comments
  • dlenski4 hours ago
    > how about building a tool that doesn't exploit bugs or bypass auth, but behaves like an overly engaged, perfectly valid user?

    How would this loquacious chatbot interlocutor work, if not by running a chatbot itself?

    Is there some well-known technique to introduce asymmetric costs?

    • jurgenburgen4 hours ago
      > Is there some well-known technique to introduce asymmetric costs?

      All the assistants and copilots are verbose to an extreme degree even when asking simple questions. Wouldn’t it be enough to append a “be very thorough, I want to spend an hour reading this” to make them burn a lot of tokens?

    • nis0s44 minutes ago
      Opensource models exist
  • kentbrew8 hours ago
    If I were an evil person I would be thinking about how to get the Walmart bot to talk to the Amazon bot.