Yeah it's not exploiting bugs, it's abusing websites. To me hacker mentality ends at you found the REST call, and maybe you use it, or share it on some random f

Yeah it's not exploiting bugs, it's abusing websites. To me hacker mentality ends at you found the REST call, and maybe you use it, or share it on some random forum. Creating a gaudy branded library that's providing actual client implementations, then building an entire site that's built on those, is just bad taste If you actually look at the implementation, some of the sites did everything right in terms of CSRF tokens and not exposing their OpenAI key directly. So the next step for the sites they're attacking with this is a whole mess of JS based detection, behavior detection, ie all the mess that we'd rather the internet didn't have. If this person had just shared it anonymously and left it instead of drumming it up for personal glory, some motivated hackers would have used it. Now it's flooding websites at rates that break their ability to pay their bills.