{"id":219,"date":"2026-06-04T18:48:14","date_gmt":"2026-06-04T18:48:14","guid":{"rendered":"https:\/\/longhaulmovingpros.com\/?p=219"},"modified":"2026-06-04T18:48:14","modified_gmt":"2026-06-04T18:48:14","slug":"should-you-hijack-a-corporate-ai-chatbot-for-free-tokens","status":"publish","type":"post","link":"https:\/\/longhaulmovingpros.com\/?p=219","title":{"rendered":"Should You Hijack a Corporate AI Chatbot for Free Tokens?"},"content":{"rendered":"
\n

After ChatGPT\u2019s viral success starting in late 2022, a legion of corporations jumped on the AI bandwagon by launching their own AI chatbots. More often than not, these were extremely limited, intended for customer support, product recommendations, and the like. But what if the AI powering those chatbots could be diverted for other, more productive purposes?<\/span><\/p>\n

Read more Shokz\u2019s New Clip-On Wireless Earbuds Focus on \u2018Premium Sound\u2019<\/a><\/p>\n

That\u2019s precisely what\u2019s been happening to Chipotle\u2019s Pepper, a \u201cconcierge bot\u201d <\/span>launched<\/span> on Facebook Messenger back in the summer of 2020, through which customers can place orders. Unlike many more recently launched corporate customer support chatbots powered by ChatGPT, Pepper uses an automated conversation algorithm called Amelia, built by software company IPSoft. Pepper started getting some attention online in March when inquisitive developers discovered that it would do much more than take burrito orders: it could respond to complex coding questions, and even write new Python code.<\/span><\/p>\n

\n
\n
\n

View this post on Instagram<\/p>\n<\/blockquote><\/div>\n<\/p><\/div>\n

Things escalated when a developer named Maksim Soltan, who goes by the GitHub handle @Gonzih, reverse-engineered the backend protocol powering Pepper\u2019s chat function to build a new, production-ready LLM that needs no API keys: \u201cfree inference via fast food,\u201d as Soltan <\/span>described it<\/span>.\u00a0<\/span><\/p>\n

\n<\/div>\n

Inspired by Soltan, a Brooklyn-based \u201ccreative technologist\u201d named Rob Dezendorf hardcoded Pepper\u2019s API into OpenCode, a popular open-source AI coding platform, \u201cslapped on Chipotle\u2019s brand colors,\u201d as he wrote on his project\u2019s GitHub page, and introduced the world to <\/span>ChipotlAI Max<\/span>.<\/span><\/p>\n

\n<\/div>\n

If the cases of developers using Pepper to write code from Chipotle\u2019s website were like tailgaters who try to follow a game happening inside a sports arena from foldable chairs set up in the parking lot, Soltan and Dezendorf were more like fans who hacked into the city\u2019s cable network, plugged it directly into their TVs, and watched the game from the comfort of their own home. \u201cSeeing those other memes go viral sparked it,\u201d Dezendorf told Gizmodo, \u201cand then I was like, why don\u2019t we just take this all the way to the extreme and put it straight into your [coding] program?\u201d<\/span><\/p>\n

Compute for the people<\/b><\/h3>\n

Dezendorf included a disclaimer on ChipotlAI Max\u2019s GitHub page: \u201cNot affiliated with Chipotle. They will probably sue us. Worth it.\u201d<\/span><\/p>\n

\n<\/div>\n

While Chipotle hasn\u2019t sued Dezendorf (yet), the company did quickly go in and modify its product so that its API couldn\u2019t be stolen again. But not before the word about ChipotlAI managed to spread online: as of early Thursday afternoon, it has a respectable 824 stars on GitHub, as well as dozens of \u201cforks\u201d\u2014basically copies of the code that can be used for similar projects.\u00a0<\/span><\/p>\n

According to Dezendorf, the short-lived project struck a chord with a coding community that\u2019s sick of having to pay for mainstream AI coding tools. (Claude Code\u2019s subscription tier, for example, starts at $20\/month and quickly gets expensive with heavy use.) \u201cIt started as a joke, but I actually think there\u2019s a weird truth to it,\u201d he says. \u201cThere\u2019s so much demand for compute, and people want so much AI power at their fingertips, but it\u2019s just completely unaffordable\u2026I think that\u2019s why people are going crazy over it.\u201d<\/span><\/p>\n

Read more MSI\u2019s Chatty AI Hologram Talked My Ear Off at Computex<\/a><\/p>\n

A federal crime?<\/b><\/h3>\n

There was some <\/span>speculation<\/span> online earlier this week that ChipotlAI Max could be a violation of the federal Computer Fraud and Abuse Act (CFAA) of 1986, which prohibits unauthorized access to protected computer systems. Legal experts I interviewed for this story, however, find that highly unlikely, since Pepper and other corporate AI customer support bots are available to the public for free.\u00a0<\/span><\/p>\n

\n<\/div>\n

\u201cIt\u2019s off-topic from what the company wants it to be used for, but\u2026there\u2019s no hacking involved, there\u2019s no password-guessing, there\u2019s no nefarious activity that one normally associates with [criminal] computer hacking going on,\u201d says Joseph DeMarco, an attorney specializing in digital privacy and cybercrime. \u201cIt\u2019s somewhat analogous to taking too many free samples at the Costco cheese spread display.\u201d<\/span><\/p>\n

Chipotle could conceivably take legal action against Dezendorf for violating its <\/span>terms of use<\/span>, which states that users may \u201c<\/span>not alter or modify\u201d services offered by the company, \u201cother than as may be reasonably necessary to use the Services for their intended purpose.\u201d <\/span><\/p>\n

\n<\/div>\n

Clearly, ChipotlAI falls outside the purview of Pepper\u2019s \u201cintended purpose,\u201d which could hypothetically give Chipotle a legal leg to stand on. According to Yafit Lev-Aritz, an associate professor of law at Baruch College, \u201cbuilding a proxy that reroutes the chatbot into a third-party coding tool isn\u2019t a modification made to facilitate any kind of customer support\u2026That said, damages are difficult to quantify in ToS-based claims when the service is publicly available, and Chipotle\u2019s costs aren\u2019t meaningfully affected by the activity.\u201d<\/span><\/p>\n

\u201cIt\u2019s definitely not legal\u201d<\/b><\/h3>\n

Things get a little murkier, however, around Dezendorf\u2019s promotion of ChipotlAI Max. On the project\u2019s GitHub page, he paints it as more of a prank than anything else. (He told me he was hoping that Chipotle might be entertained by the whole thing, and reach out to him about kicking off a possible marketing collaboration; they haven\u2019t.) But he also explicitly calls on other developers to pull similar stunts on other corporate AI chatbots. Under a section on that page titled \u201cHow to Contribute,\u201d he provides a step-by-step guide for reverse-engineering the APIs of the customer support chatbots hosted by major corporations like Lowe\u2019s, Home Depot, Sephora, and Expedia.<\/span><\/p>\n

That \u201cexplicit framing as a replicable template,\u201d according to Lev-Aritz, is where the real legal risk lies. \u201cDezendorf\u2019s explicit invitation and the subsequent documentation of submissions establishes intent,\u201d she says, which could help bolster a CFAA-violation case. \u201cEach contributor who submits a new proxy becomes part of that scheme. It also multiplies the number of companies with legal standing and financial incentive to sue, and it really only takes one of them with sufficiently motivated in-house counsel to decide to make an example of it.\u201d<\/span><\/p>\n

\n<\/div>\n

Dezendorf himself, when I asked him about the possible legal ramifications of pirating corporate chatbots for \u201cfree inference,\u201d was much warier than his apparent call to action on GitHub would lead one to believe. <\/span>\u201cIt\u2019s definitely not legal,\u201d he said. \u201cDon\u2019t do what I do, don\u2019t do as I say\u2026but if you <\/span>want<\/span> to, that\u2019s your choice.\u201d<\/span><\/p>\n

Read more Sam Altman and Dario Amodei Agree for Once, Sign Letter Against AI-Assisted Bioweapons<\/a><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

A developer went viral for reconfiguring Chipotle\u2019s customer support bot into a coding assistant, and providing the playbook for others to do the same to other chatbots.<\/p>\n","protected":false},"author":1,"featured_media":218,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence"],"yoast_head":"\nShould You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/longhaulmovingpros.com\/?p=219\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Should You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros\" \/>\n<meta property=\"og:description\" content=\"A developer went viral for reconfiguring Chipotle\u2019s customer support bot into a coding assistant, and providing the playbook for others to do the same to other chatbots.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/longhaulmovingpros.com\/?p=219\" \/>\n<meta property=\"og:site_name\" content=\"Long Haul Moving Pros\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-04T18:48:14+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/#\\\/schema\\\/person\\\/ed9c8f732aec56889e8fd0602fe5af4b\"},\"headline\":\"Should You Hijack a Corporate AI Chatbot for Free Tokens?\",\"datePublished\":\"2026-06-04T18:48:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219\"},\"wordCount\":1103,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/longhaulmovingpros.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/722a630202b6eabc46013caab9e22fa2.webp\",\"articleSection\":[\"Artificial Intelligence\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219\",\"url\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219\",\"name\":\"Should You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/longhaulmovingpros.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/722a630202b6eabc46013caab9e22fa2.webp\",\"datePublished\":\"2026-06-04T18:48:14+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/#\\\/schema\\\/person\\\/ed9c8f732aec56889e8fd0602fe5af4b\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#primaryimage\",\"url\":\"https:\\\/\\\/longhaulmovingpros.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/722a630202b6eabc46013caab9e22fa2.webp\",\"contentUrl\":\"https:\\\/\\\/longhaulmovingpros.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/722a630202b6eabc46013caab9e22fa2.webp\",\"width\":1200,\"height\":675},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?p=219#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/longhaulmovingpros.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Should You Hijack a Corporate AI Chatbot for Free Tokens?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/#website\",\"url\":\"https:\\\/\\\/longhaulmovingpros.com\\\/\",\"name\":\"Long Haul Moving Pros\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/longhaulmovingpros.com\\\/#\\\/schema\\\/person\\\/ed9c8f732aec56889e8fd0602fe5af4b\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\\\/\\\/longhaulmovingpros.com\"],\"url\":\"https:\\\/\\\/longhaulmovingpros.com\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Should You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/longhaulmovingpros.com\/?p=219","og_locale":"en_US","og_type":"article","og_title":"Should You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros","og_description":"A developer went viral for reconfiguring Chipotle\u2019s customer support bot into a coding assistant, and providing the playbook for others to do the same to other chatbots.","og_url":"https:\/\/longhaulmovingpros.com\/?p=219","og_site_name":"Long Haul Moving Pros","article_published_time":"2026-06-04T18:48:14+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/longhaulmovingpros.com\/?p=219#article","isPartOf":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219"},"author":{"name":"admin","@id":"https:\/\/longhaulmovingpros.com\/#\/schema\/person\/ed9c8f732aec56889e8fd0602fe5af4b"},"headline":"Should You Hijack a Corporate AI Chatbot for Free Tokens?","datePublished":"2026-06-04T18:48:14+00:00","mainEntityOfPage":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219"},"wordCount":1103,"commentCount":0,"image":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219#primaryimage"},"thumbnailUrl":"https:\/\/longhaulmovingpros.com\/wp-content\/uploads\/2026\/06\/722a630202b6eabc46013caab9e22fa2.webp","articleSection":["Artificial Intelligence"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/longhaulmovingpros.com\/?p=219#respond"]}]},{"@type":"WebPage","@id":"https:\/\/longhaulmovingpros.com\/?p=219","url":"https:\/\/longhaulmovingpros.com\/?p=219","name":"Should You Hijack a Corporate AI Chatbot for Free Tokens? - Long Haul Moving Pros","isPartOf":{"@id":"https:\/\/longhaulmovingpros.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219#primaryimage"},"image":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219#primaryimage"},"thumbnailUrl":"https:\/\/longhaulmovingpros.com\/wp-content\/uploads\/2026\/06\/722a630202b6eabc46013caab9e22fa2.webp","datePublished":"2026-06-04T18:48:14+00:00","author":{"@id":"https:\/\/longhaulmovingpros.com\/#\/schema\/person\/ed9c8f732aec56889e8fd0602fe5af4b"},"breadcrumb":{"@id":"https:\/\/longhaulmovingpros.com\/?p=219#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/longhaulmovingpros.com\/?p=219"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/longhaulmovingpros.com\/?p=219#primaryimage","url":"https:\/\/longhaulmovingpros.com\/wp-content\/uploads\/2026\/06\/722a630202b6eabc46013caab9e22fa2.webp","contentUrl":"https:\/\/longhaulmovingpros.com\/wp-content\/uploads\/2026\/06\/722a630202b6eabc46013caab9e22fa2.webp","width":1200,"height":675},{"@type":"BreadcrumbList","@id":"https:\/\/longhaulmovingpros.com\/?p=219#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/longhaulmovingpros.com\/"},{"@type":"ListItem","position":2,"name":"Should You Hijack a Corporate AI Chatbot for Free Tokens?"}]},{"@type":"WebSite","@id":"https:\/\/longhaulmovingpros.com\/#website","url":"https:\/\/longhaulmovingpros.com\/","name":"Long Haul Moving Pros","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/longhaulmovingpros.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/longhaulmovingpros.com\/#\/schema\/person\/ed9c8f732aec56889e8fd0602fe5af4b","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/50b1ad2e498f523425ee0a8cc5180a210646db1622662a3d56cc405d3e0c346a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/longhaulmovingpros.com"],"url":"https:\/\/longhaulmovingpros.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/posts\/219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=219"}],"version-history":[{"count":0,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/posts\/219\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=\/wp\/v2\/media\/218"}],"wp:attachment":[{"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/longhaulmovingpros.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}