Second-hand platform "Crack AI" exposed by the main desk: a few dollars to enjoy high-end members, beanbag, Kimi response总台曝光二手平台“破解版 AI”：几块钱就能享受高阶会员，豆包、Kimi 回应

IT House October 21st news, according to the Central Radio and Television General Station China Voice reported today, recently in some second-hand trading platforms, there are many sellers to start a large model of AI paid service "gray business", under the banner of "crack version" "low price sharing", selling all kinds of AI large model use rights at low prices. Is the so-called “crack AI” really reliable? What are the risks behind this? According to the report, on second-hand trading platforms, paid usage rights to popular AI models such as Beanbag, DeepSeek, and Kimi are all sold. These items are generally sold as “low price”, “safe” and “flexible”. Some charge according to the number of uses, some rent according to the length of use, and sell cracking tutorials, with prices generally ranging from a few yuan to several tens of yuan. The content of the services provided by these sellers varies according to the characteristics of the use of different large models. Some merchants sell so-called exclusive "cracking tutorials", claiming that as long as you follow the tutorials, you can repeatedly receive beanbag membership experience benefits, and even play the "unlimited membership" gimmick. The reporter bought the tutorial for 1.2 yuan, logged in to the account as required, and sent the so-called "internal password" in the dialog box, but failed to get the benefits of the membership experience. The seller said that it is recommended to try again with a different device. In the tutorial, the seller's own "track record" is introduced, claiming that four members can be claimed under the limit of a single device, and the buyer is advised to continue to try using the phone number and device of family members and friends. According to the tutorial, the essence of "unlimited membership" is multi-device + multi-account recurring operation. Can you really "unlimited beans and wool"? In this regard, the beanbag side said: beanbag subscriptions are only distributed through official channels, there is no "cracking" method, and the false publicity effect of "infinite" cannot be achieved. It also reminds users not to trust information such as "cracking tutorials" and "low-cost members" published by unofficial channels to avoid the leakage or loss of personal information. In addition to selling so-called “cracking tutorials,” some sellers have also started hosting large AI model accounts. There are sellers who rent out Kimi big model premium members, and they are charged according to the rental period. From 10 minutes to 1 hour, the rental price ranges from 4.7 yuan to 21.7 yuan. The reporter spent 4.7 yuan to buy 10 minutes of usage time. After payment, the seller sent the login URL and temporary account. The reporter clicked on the link and found that it was not Kimi's official website, but a page called "Kimi Time Workspace". After entering the temporary password, the Kimi conversation screen appears, and a countdown appears at the top, reminding the user that this is a shared account and pay attention to the remaining time. When the 10-minute usage time ends, a renewal reminder pops up on the webpage immediately, asking to return to the second-hand trading platform to continue the purchase time. The seller said that the data follows the account, and even if the usage time expires, the conversation history will be retained for 24 hours, and it only needs to be renewed to continue using. The reporter then paid again and logged into the page again and found that the previously submitted task of generating PPT was still in the conversation record. In response, the Kimi team responded that the second-hand platform rents and sells Kimi accounts unofficial services and is not authorized, which violates user agreements and will be resolutely cracked down. The response mentions that the user's conversations and information using such accounts are fully visible to the lessor, and there is a risk of data leakage and fraud. In addition, on second-hand trading platforms, some sellers sell not accounts, but a string of API keys. The so-called API can be simply understood as the call interface provided by the AI big model. Through the interface, developers or users can call the ability of the big model in other software and tools without having to log into the official website directly. Some sellers claim that they purchased a large number of official API keys and called credits to split the sale. He launched packages at multiple price points, ranging from 1.99 yuan to 99.99 yuan, and the corresponding number of calls ranged from 220 to 14,000. Cybersecurity expert Li Tiejun analyzed that such API keys used for sales are mixed. Selling API keys is a very mature black product. Some hackers use bulk tools on open source websites to search for people's public key information. There are also methods of hacking other people's systems to obtain data directly through hackers. This means that the call credit that the buyer is paying for may not belong to the seller at all. Once the real holder of the key discovers the anomaly and takes revocation or blocking measures, the service in the buyer's hands may be interrupted at any time. Experts remind that every prompt word entered by users, every file uploaded, and every code generated may be retained by some bad transit stations, or even resold, and safety hazards are prominent. Wu Shenguo, a professor at the Law School of Beijing Normal University and deputy director of the China Internet Association Research Center, said that some of the sellers' actions have touched the legal red line. For example, if the interface is obtained by technical means such as reverse cracking the crawler, then the technical measures and intellectual property rights of the service provider are infringed. If you do not have business qualifications, and engage in interface resale on a large scale, it may constitute illegal business. In addition, if all kinds of information submitted by reselling users are intercepted during resale, it may directly violate the relevant provisions of the Personal Information Protection Law.