@polydaic

building @infertrail and memes. someone's using your llm keys and it's not you. i catch that.

Joined February 2014
Your inference may already be getting resold — and your logs can still look normal. If you run an inference API, gateway, or AI product and you’ve seen suspicious credential sharing, resale, or unexplained usage, DM me. I’m looking to talk to teams seeing this in production. There is a growing reseller market built around stolen API keys, shared subscriptions, proxy access, account farms, and piggybacked sessions. The scary part: much of it can look completely legitimate from the provider side. Valid credential. Valid account. Normal-looking requests. Meanwhile, the same access can be passed through brokers, resold across borders, or quietly used by someone the account owner has never heard of. Most LLM security products focus on what an agent is doing. The blind spot is who is actually behind the account. That’s what we’re building at @infertrail: behavioral detection for inference abuse, credential resale, and unauthorized access. We’re publishing honeypot data, reseller-market research across Russian- and Chinese-language communities, attack patterns, and what we learn building detection for this problem. Follow @infertrail for the research.
10
2
175
24,562
I’m never going to be able to afford SF now after this
Anthropic has filed an S-1 registration statement with the SEC related to its proposed IPO. Read more: anthropic.com/news/s1-sec Legal disclaimer: A registration statement relating to these securities has been filed with the SEC but has not yet become effective. These securities may not be sold, nor may offers to buy be accepted, prior to the time the registration statement becomes effective. This post does not constitute an offer to sell or the solicitation of an offer to buy these securities, nor shall there be any sale of these securities in any state or jurisdiction in which such offer, solicitation or sale would be unlawful prior to registration or qualification under the securities laws of any such state or jurisdiction.
1
1
32
48% of anthropic’s revenue came through cloud marketplaces so your competitors own the computers you need AND the shop you’re selling in lol idk i’d be a little more worried about who can raise the rent than who’s 2% ahead on a benchmark
1
52
why did thariq leave anthropic to become a carpenter? he wanted to use tools without asking permission
2
5
212
we finally found out the real reasons the Pro tier was suspended. to beat Anthropic at Navier Stokes smh
Terence Tao says OpenAI went into CODE RED over rumors that Anthropic was close to solve a Millennium Prize Problem, and they paused new $200 Pro signups to direct compute to solve Navier-Strokes. OpenAI rejected both claims. but Tao’s timing is also very off about this: >Sep 8: OpenAI published the results >Sep 10: OpenAI paused $200 Pro that’s TWO days after the announcement when they already finished solving Nav Strokes
2
211
Arielle retweeted
Replying to @TheAhmadOsman
the more you roll your own the more you control but the more you have to defend on your own. its not a good solution for everyone
2
3
67
2,999
this is what a good B2C launch looks like
i see what they meant about launching quick
1
2
229
i used to be the person who explained why ai cost what it cost. then i started seeing usage we couldn't explain. since then i've seen people steal inference for personal use, for distillation, and for offensive security. inference is valuable. someone pays for every request. steal access and someone else pays for yours. but i think the appeal goes beyond free compute. using someone else's account puts distance between you and the activity. the account owner is visible. the person behind the requests can be harder to identify. my research points to a billion dollars in lost revenue. i've found sophisticated operations with their own payment systems, gateways, account theft operations and marketing. some have 100+ employees. shell companies in the uk and the virgin islands. servers in russia and china. operators in the us and elsewhere. some advertise openly on x and other platforms. some have vc funding. that's where trying to explain an ai bill took me: researching the businesses behind stolen inference. who is actually using the inference you're paying for? give me a follow if you want to learn how to secure yours. i'll share practical tips on protecting it from llm hacking, key theft, session theft, subscription piggybacking and more.
4
1
11
3,099
Anthropic's usage is surging and this is just what we know from OpenRouter. Opus 5.5 is going to become the dominant model in the world for most developers.
1
1
10
611
what a beautiful piece of irony. even anti AI talking heads are using AI
Anti-AI YouTube channel with millions of views & 150k subs is 96% AI scripted according to Pangram
5
13
478
Apparently r/opensource has banned all project about or made with AI so basically anything made or maintained in the past 2 years
4
1
37
1,002
Arielle retweeted
Replying to @blueemi99
reddit mods are the worst people in the world
2
2
165
4,815
Arielle retweeted
Replying to @IndraVahan
My favorite is them mentioning the tourist tax like they are visiting a restaurant in Japan
2
3
198
15,817
Are we all supposed to do this now lol
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
1
9
615
Replying to @polydaic
1/8 **CRITICAL SECURITY ADVISORY: CVE-1985-PING2SHELL** **Severity:** Critical (CVSS 10.0) **Affected Systems:** UNIX, Windows (all iterations dating back to 1985), and virtually every networked device since the dawn of TCP/IP. Our incident response and threat intelligence
1
1
1
29
Ugh now we have html2shell?
120
143
45
1,859
347,350
while you’re patching your s, check who’s using your API keys. i’m building Infertrail to detect stolen inference and credential abuse. our website uses HTML so this is a difficult time for us too infertrail.com
2
4
20,958
Every engineer right now
21
1,168
Apparently being aggressive on X gets you kicked out of Daybreak 😂
6
1
1
21
1,911
Distribution via datifn apps lol
“distribution is everything”
2
8
783
This is my all time favourite TV clip from 2026
BBC: Hablaremos con nuestro experto en seguridad de BBC respecto a la vulnerabilidad de PHP. El experto en seguridad: No sabía que PHP existía hasta ayer en la mañana.
5
618