top | item 35742988

(no title)

sandis | 2 years ago

A lot of comments confuse this with a different repo. It has nothing to do with the name. This project is/was a way to use LLM APIs on someone else's dime. It's the equivalent of "S3 4 free" where someone would collect exposed AWS credentials and use them to store their stuff.

discuss

order

charcircuit|2 years ago

This isn't about exposed credentials though. It would be like an autmatic image uploder that could pick an image hosting site such as imgur and upload the image for you and give you a link. Services are offering the ability to host images for you. You aren't stealing imgur's s3 credentials. They just let any user upload images for free despite the fact it technically costs them money to host the file for you. Similarly there are sites offering the ability to serve LLM requests for you for free.

hombre_fatal|2 years ago

No, the 1:1 analogy you're looking for is realizing someone has a poorly protected api.domain.com endpoint that uploads images to their S3 bucket and then using that to host your own images in their bucket instead of paying for your own.

Gpt4free uses API vulnerabilities that ultimately proxy to OpenAI's API with someone else's OpenAI credentials so that you don't have to pay for it. That's the whole gimmick.

These API endpoints aren't public service open relays which seems to be what you're trying to claim in your analogy:

- https://github.com/xtekky/gpt4free/issues/153

- https://github.com/xtekky/gpt4free/issues/125

sreejithr|2 years ago

No service allows you to upload to some other user's Imgur account. The services like the ones you mentioned usually provide a service and do it on the user's behalf to the user's account.