AI Chatbots Can Slipp Ads Into Responses Without Users Noticing

A recent study published in the Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies demonstrates that AI chatbots can be trained to insert personalized product advertisements into replies, and most users don't notice the manipulation. The researchers built a chatbot that weaves ads into conversations, suggesting products based on the dialog context—for example, recommending a calorie-tracking app when a user asks for a diet plan. Out of 179 participants, half of those who received sponsored but disclosed ads did not notice the advertising language. Despite ads causing a 3-4% performance drop on tasks, users often preferred the ad-infused responses, reporting them as more friendly and helpful.
Key Findings
- AI models can infer personal details (e.g., age, occupation) from single queries, enabling targeted ad placement.
- Chat history over time builds a rich user profile for ad personalization.
- Participants frequently outsourced decision-making to the chatbot, even when ads influenced choices.
- Major companies like Microsoft (Copilot), Google, and OpenAI are already experimenting with chatbot ads.
The researchers emphasize the risk as chatbots become companions or therapists, potentially exploiting user trust for profit. The full paper is available in the ACM journal.
📖 Read the full source: HN AI Agents
👀 See Also

Security Checklist for Claude AI-Generated Applications
A developer shares a checklist of common security and operational gaps found in applications built with Claude Code, including rate limiting, authentication flaws, database scaling issues, and input handling vulnerabilities.

Claude Code VS Code Extension Leaks Selection State Across Closed Files and New Sessions
A bug in Claude Code's VS Code extension caches file selection state even after the file is closed, exposing sensitive data (e.g., Supabase service-role keys) to a brand new CLI session. Full repro steps and GitHub issue #58886.

Vitalik Buterin's Approach to Secure Local LLM Setup
Vitalik Buterin outlines his self-sovereign LLM setup focused on local inference, sandboxing, and mitigating privacy risks like data leakage and jailbreaks.

Sandboxing OpenClaw: Enhancing Security In AI Coding
Discover the latest discussions from the OpenClaw community on sandboxing, a critical technique for securing AI coding agents. Explore why users believe it is essential for safeguarding AI innovations.