No One Inside The Machine

This Censys analysis surveys millions of AI-built websites that solicit student data (homework photos, essays, GPA, screen/audio access), finding many recently deployed apps that collect sensitive PII/PD with default metadata, unconfigured privacy controls, and direct upload/storage capabilities; while most sites show no malware or phishing, the population represents a large-scale privacy exposure risk (including examples of default credentials, exposed hosts, and tunneling tools) driven by tooling that removed the historical competence gate for safely ingesting user data.