3 ms·
Calling public (but undocumented) APIs without authentication is NOT exploiting bugs. If this is "exploiting bugs" then by the same logic I'm hacking the gover
by rfoo 3y ago
Calling public (but undocumented) APIs without authentication is NOT exploiting bugs.
If this is "exploiting bugs" then by the same logic I'm hacking the government website by clicking view source.
- BoorishBears 3y agoYeah it's not exploiting bugs, it's abusing websites. To me hacker mentality ends at you found the REST call, and maybe you use it, or share it on some random forum. Creating a gaudy branded library that's providing actual client implementations, then building an entire site that's built on those, is just bad taste If you actually look at the implementation, some of the sites did everything right in terms of CSRF tokens and not exposing their OpenAI key directly. So the next step for the sites they're attacking with this is a whole mess of JS based detection, behavior detection, ie all the mess that we'd rather the internet didn't have. If this person had just shared it anonymously and left it instead of drumming it up for personal glory, some motivated hackers would have used it. Now it's flooding websites at rates that break their ability to pay their bills.
- skeeter2020 3y agoYou could be. Courts have ruled for intent vs the actual act a number of times.