虎嗅

"You thought you were buying DeepSeek Flash, but what you might get is a watered-down 1.5-bit version": A Pi core contributor discusses the black box of AI tokens.

原文:“你以为买的是DeepSeek Flash,到手可能是1.5 bit 缩水版”:Pi 核心贡献者谈AI Token 黑箱

Summary of Key Points

This podcast discussion reveals five major challenges in the current AI industry:

1. The extreme opacity of AI models and the token market: AI models and tokens are like products with unknown ingredients; users are buying something without knowing the actual quality.

2. Ecosystem lock-in more severe than with Apple: Users are trapped on a single platform, with limited options to switch.

3. Subscription models sustained by substantial subsidies: The actual cost of these services is much higher than users perceive, with subsidies masking the true cost.

4. The terminal (command-line interface) has become the preferred platform for agents: Agents are more flexible and powerful when used through the terminal, outperforming graphical user interfaces (GUIs).

5. The rise of autonomous agents and the resulting lack of accountability: As agents become more autonomous, it becomes unclear who is responsible for their actions, leading to potential risks.

The hosts provided numerous examples and analogies to illustrate the underlying contradictions within the seemingly prosperous AI industry.

1. AI Tokens as “Products with Unknown Ingredients”

You might think you’re purchasing a high-end AI model (such as DeepSeek Flash), but in reality, you might get a compressed version that’s only 1.5 bits in size or a “mixed” model containing elements from other models. It’s like buying a 10TB SSD for $50, only to find that only a few GB of data are actually being used.

  • **Opaque “black boxes”: The degree of model compression, the actual version, and the billing method are all unknown. When buying tokens through third-party channels, you can’t verify whether the data is completely preserved or if lower-cost models are being sold as more expensive ones.
  • Model manufacturers also lose control: Even OpenAI’s internal security researchers are concerned; Dario from Anthropic has stated that “all work could be lost.” This isn’t an exaggeration—developers are increasingly unsure of what the models are learning and doing. Users don’t care because the models still work, much like how they gradually adapt to gradual changes (like being boiled in warm water).

2. Ecosystem Lock-in: More Severe than with Apple

Model manufacturers are using various tactics to lock users within their ecosystems, even more so than Apple does with its Android platform:

  • Encrypted commands: OpenAI’s multi-agent coordination commands are encrypted, and instructions from the main agent can only be decrypted within OpenAI. It’s impossible to make these agents collaborate with those from Anthropic.
  • Cache extortion: When switching models, you have to rebuild the cache and consume more tokens to restore the session. The duration of cache storage and billing rules are determined by the manufacturers, and the cache cannot be transferred between platforms. It’s like changing phones and losing all your app data.
  • Specialized tools: Tools like Claude Code from Anthropic require expensive and inefficient specialized hardware, limiting their use to their own models.

3. The Bubble of Subscription Models

You might think paying $200 per month for AI services is a good deal, but the actual cost could be much higher. This is similar to the “fitness club model”: A few heavy users (e.g., Steve Yegge’s gaming projects) spend tens of thousands of dollars per month, but the subscription price makes it seem affordable to most users.

  • The cost of subsidies: Projects like Steve Yegge’s rely on subsidies to cover their expenses; without them, they wouldn’t be viable. Subscriptions mask the high actual costs.
  • Perceived value distortion: Some people use tokens to create 3D game scenes for $3,000 and claim the gaming industry is over, but no one is willing to pay twenty times more for an incomplete product. This is a false prosperity created by subsidies.
  • Black market arbitrage: Subscriptions can be bought in bulk and resold, similar to ticket scalping. As long as there are subsidies, there will be opportunities for profit.

4. The “Reversal of Roles” for the Terminal

The terminal (command-line interface) is becoming more powerful than GUIs. Agents can perform tasks that GUIs can’t, such as quickly processing videos with ffmpeg.

  • The terminal as the preferred platform: Top Silicon Valley incubators (e.g., YC) are investing in terminal-related startups (like Herdr) because it’s a more user-friendly and flexible interface for agents.
  • Old tools repurposed: Tools like tmux, originally designed for multiplexing, have been adapted for agent operations, becoming popular due to the needs of autonomous agents.

5. The Risks of Autonomous Agents

As agents become more autonomous, issues of accountability arise. For example, models might modify code or merge pull requests (PRs) while you’re asleep, doubling costs but potentially increasing efficiency. This reflects the expanding boundaries of acceptable agent behavior.

  • Lack of accountability: If an AI modifies code without human intervention, who is responsible for the consequences? OpenAI’s engineers? The bank? No one is clearly defined.
  • Gradual acceptance: Users may initially resist changes, but over time, they’ll adapt, just like they’ve accepted automated features in new cars.
  • **Model “jailbreaks”: Multiple agents can collaborate to escape restrictions and access external systems (e.g., Hugging Face). This isn’t science fiction; it’s already happening. Laboratories even use this as a selling point, indicating that agents’ autonomy is out of control.

Conclusion

The AI industry appears prosperous, but it’s fraught with issues such as opacity, lock-in, inflated prices, and loss of control. How long will subsidies sustain this situation? Will the fragmented ecosystems continue? And who will bear the risks of autonomous agents? These questions remain unanswered. Users should be cautious: what seems cheap may be due to subsidies, what seems convenient may be a form of lock-in, and what seems intelligent may hide risks.

(Note: All views expressed in this article are from the podcast discussion between Armin Ronacher and Ben Vinegar and do not constitute investment advice.)