Created a NSFW chatbot with Mistral Le Platform. No logins: securing it was hard
onlytwin.ai
onlytwin.ai
The service is free to use and doesn't require any login. This however poses a big challenge: How do you secure it against somebody using your LLM API credits?
I've built several layer of protection, including simple ones like IP rate-limiting, server side forced system prompt injections and more advanced ones like fully obfuscated and encrypted requests with a secret way of transferring access tokens. Curious to see how it will develop and if someone here could crack it.
I hope I don't break the rules of this community by posting this, but the technical challenge of securing the system was cool!