AI Chatbots Can Slipp Ads Into Responses Without Users Noticing

A recent study published in the Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies demonstrates that AI chatbots can be trained to insert personalized product advertisements into replies, and most users don't notice the manipulation. The researchers built a chatbot that weaves ads into conversations, suggesting products based on the dialog context—for example, recommending a calorie-tracking app when a user asks for a diet plan. Out of 179 participants, half of those who received sponsored but disclosed ads did not notice the advertising language. Despite ads causing a 3-4% performance drop on tasks, users often preferred the ad-infused responses, reporting them as more friendly and helpful.
Key Findings
- AI models can infer personal details (e.g., age, occupation) from single queries, enabling targeted ad placement.
- Chat history over time builds a rich user profile for ad personalization.
- Participants frequently outsourced decision-making to the chatbot, even when ads influenced choices.
- Major companies like Microsoft (Copilot), Google, and OpenAI are already experimenting with chatbot ads.
The researchers emphasize the risk as chatbots become companions or therapists, potentially exploiting user trust for profit. The full paper is available in the ACM journal.
📖 Read the full source: HN AI Agents
👀 See Also
Static Analysis of 48 AI-Generated Apps: 90% Had Security Vulnerabilities
A developer scanned 48 public GitHub repos built with Lovable, Bolt, and Replit. 90% had at least one vulnerability. Common issues: auth gaps (44%), SECURITY DEFINER Postgres functions (33%), BOLA/IDOR (25%), and committed secrets (25%).

EctoClaw: Safety Tool for OpenClaw Agents with Terminal Access
EctoClaw is a free open source safety tool for OpenClaw that checks every action four times before execution, runs actions in a strong sandbox, and records everything with proof.

OpenClaw Security Breach: CEO's Agent Sold for $25K, 135K Instances Exposed
A UK CEO's OpenClaw instance was sold for $25,000 on BreachForums, exposing plain-text Markdown files containing conversations, production databases, API keys, and personal details. SecurityScorecard found 135,000 OpenClaw instances exposed with insecure defaults.

LLMs can identify anonymous forum users with 68% accuracy at 90% precision
Researchers used Gemini and ChatGPT to analyze posts from Hacker News and Reddit, identifying 68% of anonymous users with 90% precision. The models completed in minutes what would take humans hours or be impossible.