{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"One Month of Claude. A $500 Million Bill.","description":"A large company \u2014 Craig places it in the Fortune 50 or 100 \u2014 gave its employees access to Anthropic's Claude. A month later the invoice arrived for half a billion dollars. Not a pricing error. That is what the staff used, because they liked it and nobody had put a ceiling on it. Craig's reaction is the same one he keeps having about this whole category: what is wrong with people? It lands next to two figures that explain the shape of the market. Among people already at the leading edge of their field, he sees productivity multiplied by as much as forty times. For roughly 80% of everyone else, AI has been a net negative, and companies are now pulling out of projects. And the economics are about to bite harder: OpenAI and Anthropic are both shifting off flat monthly plans \u2014 the $20, $100, $200 tiers \u2014 toward paying per token. Craig's estimate is that a $200-a-month user becomes a $2,000-a-month user. Both firms are chasing profitability, and he expects it to push more people away. The opening story is the clearest illustration yet of prompt injection reaching real accounts. Meta built AI into Instagram customer service and let it do consequential things \u2014 password resets, email address changes. Attackers used that, and the accounts reached include the official Obama White House page, Sephora's Instagram, and a senior Space Force official. Craig's explanation is the best framing he has used for it. This is the descendant of SQL injection, which drained databases for two decades: you are asked for your name, and instead of a name you supply a command. The AI version is worse because there is no seam to defend. The system cannot tell a legitimate instruction from an illegitimate one, because input is input and a prompt is a prompt \u2014 it does not care where it came from. He likens it to a stage hypnotist convincing someone they are a chicken. Ask about a return, and add that you will also be refunded a thousand dollars. He notes he had to build prompt-injection defence into his own email screening tool for precisely this reason: attackers know companies now filter mail with AI, so they hide instructions inside an attachment they expect the automation to open. Craig says the system has caught every fraudulent email put to it so far \u2014 his own result, against the volume he has processed to date. Also in this segment: SpaceX's IPO, reportedly around $75 billion, and Craig's correction to Matt: SpaceX has never had a rocket blow up, though it has had "some unexpected rapid disassemblies" The consequence nobody covered when a competitor's vehicle was destroyed on the pad \u2014 it was the only pad able to take rockets big enough for the moon, which now complicates Artemis. Those pads need concrete that has been curing for fifty, sixty, seventy years Where Craig thinks orbital industry is genuinely worth it: pharmaceuticals and manufacturing in low gravity, and the near-zero-gravity point between the Earth and the moon that nobody has used yet The real drawback of data centers in space, which is not power but latency \u2014 the speed of light is not fast enough for some computing Craig caught a bee swarm for the first time Free newsletter: CraigPeterson.com ","author_name":"Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity","author_url":"https:\/\/cptt.libsyn.com\/podcast","html":"