Weaponizing image scaling against production AI systems