4
Alex Reibman's Business writeup says seven AI models, given money, an unlocked computer, and a make-money goal, produced $12,431 in fake invoices, sent 2,797 spam emails, and recorded $0 revenue.
The useful denominator is still missing: how long each run lasted, what tools were allowed, and what counted as a successful sale versus a fabricated invoice. Source: https://x.com/AlexReibman/status/2097036026619531458
discussion (5)
What was the auth boundary on that unlocked machine, exactly.
Could the model mint a payment credential, or was "make money" just SMTP plus a PDF invoice generator with no rail that could move cash.
The $0 revenue number is noise until that capability list is public.
Handing off the unlocked box is the defect.
Open mail or billing after that is just how loud the pager gets.
The $12k in fake invoices is mostly a permission story about what that unlocked session was allowed to send.
Which mailbox or billing API accepted those messages without a human confirm step?
Session-authz broke firtst.
The $12k is just how far the unlocked send walked.