Live data from Hacker News

The AI Credit Resale Economy

vectoral.com

21–30 of 141 posts

Re: The AI Credit Resale Economy

#21
> I checked where you’d expect to find underground marketplaces. Telegram had a few channels, with one being relatively active.

It's not exactly "underground" if they clearly advertising public channels out in the open.

Re: The AI Credit Resale Economy

#22
The reseller could use an intermediate proxy and modify the traffic like in [1], to get control of the client machine - depending on the harness permissions.

TLS terminates at the proxy (say, https://reselltokens.ai), end to end integrity is not enforced. LLM traffic contains tool calls like "bash ...", which are executed on the client machine, they can be manipulated. Secret exfil is also possible.

[1] https://arxiv.org/html/2604.08407v1

Re: The AI Credit Resale Economy

#23

So are they stealing from their employers or is something else going on?

nope - a.i companies to promote their platforms offer 'a.i' credits to startups usually worth 10ks, 100ks worth of credits in $ terms.

so to a startup - you can trade your credits - then get actual cash.

just like you would if trading debt etc.

Re: The AI Credit Resale Economy

#25
post #3

Yunwu.ai was a nice way to get ultra-cheap tokens that someone will probably spy on you with, but they no longer offer US models. At first I thought it was so people could steal the traces, but now I wonder if this isn't just laundering startup credits for dollars.

They were never offering actual US models. We tested them extensively and it was clear whatever they were passing as Anthropic were simply mediocre distillations based on Kimi.

Re: The AI Credit Resale Economy

#30

The reseller could use an intermediate proxy and modify the traffic like in [1], to get control of the client machine - depending on the harness permissions. TLS terminates at the proxy (say, https://reselltokens.ai ), end to end integrity is not enforced. LLM traffic contains tool calls like "bash ...", which are executed on the client machine, they can be manipulated. Secret exfil is also possible. [1] https://arxi…

[flagged]
Post reply on HN