Credit: ExpressVPN
Москвичи пожаловались на зловонную квартиру-свалку с телами животных и тараканами18:04
，详情可参考搜狗输入法2026
The new DDoS: Unicode confusables can't fool LLMs, but they can 5x your API bill Can pixel-identical Unicode homoglyphs fool LLM contract review? I tested 8 attack types against GPT-5.2, Claude Sonnet 4.6, and others with 130+ API calls. The models read through every substitution. But confusable characters fragment into multi-byte BPE tokens, turning a failed comprehension attack into a 5x billing attack. Call it Denial of Spend.
Nardine SaadLos Angeles
While users can restrict Google API keys (by API service and application), the vulnerability lies in the Insecure Default posture (CWE-1188) and Incorrect Privilege Assignment (CWE-269):