Supposedly "Be concise" in a prompt can save 40% on API costs. I wonder how effective attacks against API cost would be. I suspect it would be very easy to get

Supposedly "Be concise" in a prompt can save 40% on API costs. I wonder how effective attacks against API cost would be. I suspect it would be very easy to get ChatGPT to output as much text as the API or quota will allow. It feels like what I imagine the early internet was, where you could stick `'; drop table users;` into email fields and ruin someone's day. There's so much scope for security issues as LLMs are woven into services, exposed through cracks to users. Everywhere that could be SQL/database injected, or shell injected, can now be LLM injected. The difference being that where databases/shells are intended to work with a strict character set and have separation of data and command channels, LLMs don't currently have that separation and are designed to use unstructured data so ensuring they aren't being attacked cannot be known in the general case. I suspect that over time LLM use will fall into two categories: sandboxed LLMs where users can interact directly for creative purposes, and LLMs that untrusted users do not get direct access to, where user input is narrowly specified, and sanitised by a sandboxed LLM.