Let's Burn Some Tokens – AI Chatbot Cost Exploitation as an Attack Vector (dixken.de)

If I were an evil person I would be thinking about how to get the Walmart bot to talk to the Amazon bot.

> how about building a tool that doesn't exploit bugs or bypass auth, but behaves like an overly engaged, perfectly valid user?

How would this loquacious chatbot interlocutor work, if not by running a chatbot itself?

Is there some well-known technique to introduce asymmetric costs?