Today's digest · Monday, July 27

The 13 things in AI/dev today.

LiveNext issue at 7:00 CET
#1 / TODAY
Simon Willison·1 min·11h agoFREE+1 mirror

An Inside Look at the Relay Market Powering Token Resellers and Fraud

An investigation by Matt Lenhard reveals a market for reselling LLM tokens at a discount, primarily in China. Resellers abuse free trials, unprotected support bots, stolen credit cards, or chargeback attacks to offer cheap API proxies. The software used is open-source, mainly one-api and its fork new-api. Buyers seek cheap tokens, avoid geo-restrictions, or collect data for model distillation. The existence of this ecosystem makes developers more cautious about exposing LLM applications publicly.

Developers face increased risk of token theft from a thriving reseller ecosystem exploiting unprotected endpoints.

llmsecurityapi-pricingfraud
simonwillison.net
An Inside Look at the Relay Market Powering Token Resellers and Fraud
GitHub, PyPI add time-based defenses against supply chain attacks
#2 / TOP STORY
BleepingComputerFREE

GitHub, PyPI add time-based defenses against supply chain attacks

GitHub and PyPI have introduced time-based defenses to combat supply chain attacks. The measures aim to protect against malicious packages that compromise software dependencies. This move addresses growing concerns over software supply chain security in the open-source ecosystem.

PGSimCity - How PostgreSQL Works
#3 / TOP STORY
Hacker NewsFREE

PGSimCity - How PostgreSQL Works

PGSimCity is an early, unreviewed prototype that visualizes how the PostgreSQL engine works in 3D using a SimCity-like interface. It requires JavaScript and WebGL2 to run. The project invites contributions via issues or pull requests to fix inaccuracies in the model and explanations.

aigest · daily

Get this every morning.

One email. The signal. Built for builders.

Free · Unsubscribe in one click · No trackers

// Worth acting on2 stories
// Worth knowing8 stories

Developers can misallocate optimization efforts if they don't separate TTFT from token generation latency.

llmlatencyperformancemeasurement
DEV Community4h ago1mFREE
// Yesterday4 stories