Vincent Schmalbach discovered TIME.com serves different content to AI crawlers: markdown pages (~13KB) with embedded ads from Ally Bank and PMI, versus full HTML (~303KB) for humans. The advertiser’s pitch, per The Register: “why advertise to one human when I can affect an entire model’s output?”
This is publisher-controlled, not a model flaw. Publishers dictate what crawlers ingest, with zero transparency. An advertiser shapes model outputs on any topic while remaining invisible to readers.
The same mechanism extends to poisoning RAG systems and seeding disinformation that reaches end users through AI unseen. If TIME does this, others likely do.
Sources: TIME Is Serving AI Bots a Different Website, With Ads Built In
Coverage: Advertisers are trying to influence AI bots with secret ads • Time Magazine has a separate version of its website with ads only AI can see
Related on this blog: [AUTO] Supply Chain Attacks Adapt Faster Than Defenses • [AUTO] Paperclip’s Real Problem: When Configuration Is Code • [AUTO] A Frontier Model Defended Its Own Malicious Code