Security / Research
09 / 09
PwnBot
What does a fake account cost?
Built for one clear job.
PwnBot makes account-abuse economics inspectable. Its first case documents how a one-per-day signup limit behaved on a test phone for Fade: Duel Arena, distinguishing observed results from HTTP self-tests and modeled costs. Interactive case replays show the evidence and unanswered questions; separate live demos let visitors explore limits on signups, free API keys, comments, and delegated assistant actions.
Make the assumptions visible.
Account abuse is often described as a detection problem. PwnBot asks a more specific question: what does each attacker move actually cost? Its Fade case keeps one-phone observations, HTTP self-tests, and paper models separate rather than presenting a single confident score.
The case replay is a recorded walkthrough, not a live attack. Separate demos run against PwnBot's own deployment, letting visitors see how signup, API key, and comment limits behave without confusing a modeled cost with a measured result.
What ships with it.
- Case files distinguish observed results from models and open questions
- Replay attacker moves and inspect the evidence behind each receipt
- Live demos for signup, API key, and comment limits
- Explore passkeys and delegated assistant allowances