一款 vibe-coded 应用泄露了 METR 的 API 密钥并消耗了 60 万美元的免费额度
AI评估者称，三月的一起泄露暴露了一个 API 密钥，而五月的一次活动探测了一个理论上可能暴露敏感模型输出的端点。METR 认为攻击者并未访问该数据。
By RuntimeWire Staff · Published
Primary source: METR
为何重要
独立的人工智能评估者需要对模型的特权访问，才能继续发挥价值。METR 的几次险些失误表明，常见的部署捷径可能会威胁支撑这种访问的信任。
Elizabeth "Beth" Barnes (@bethmaybarnes), the founder and CEO of METR, disclosed in an August 31st security update that external attackers exploited weaknesses around the AI evaluator's public infrastructure in two incidents earlier this year. One stolen API key was used to consume model credits with a list value of approximately $600,000.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.