282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

The Hacker News

·

Original Report

↗ The Hacker News

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend server that accepted requests with no key at all. Whoever grabs it can send model requests on the developer's account,