Post

aly
@aly.codes

Anubis is just straight up malware lol

1G-N15 ⬡@1gn15.com

To those running AI agents: Anubis is adding a honeypot for AI agents. It requests for PII, then bans the IP. github.com/TecharoHQ/an... Don't use HTML/markdown for browsing! Malicious actors exploit the differences in how humans and AI browse. Use browser + vision directly.

aly
@aly.codes

I’m once again asking, you could at least use my computer to mine bitcoin rather than using it to make the web a shitter place forever for anyone forced to interact with websites hosted by 25th percentile sysadmins. this would be way better than burning compute and *doxing* me.

aly
@aly.codes

Most amusing thing to me is that Anubis doesn’t even work so I have no idea what this entire rigmarole is about other than creating a difficulty slider the most misanthropic people can use to punish certain types of users.

0 reposts20 likes

aly
@aly.codes

My agents have never once had any difficulty accessing a site deployed behind Anubis.

aly
@aly.codes

Agents can just use a Chromium instance with debugging and do whatever they want. This only actually works for plain text web crawlers.

aly
@aly.codes

so essentially you have an app advertised as stopping AI access to your page (the dev uses the language of agents!) whose primary effect is to make every human sit around waiting for

alice
@alice.tf

i was messing with this once and my hermes instance pulled the anubis source and ported the client pow challenge thing to python without any browser or anything and then wrote a skill on how to use it. beast mode

SE Gyges
@segyges.bsky.social

it's perfectly rational to deter non llm web scrapers because it will blow their budget on the request if they have it tuned for efficiency

aly
@aly.codes

idk if it’s entirely rational but it’s very effective in that scenario yeah.

aly
@aly.codes

explain that to its author who is adding (and now thankfully reverting) features to extract private information about you from agents. github.com/TecharoHQ/an... then explain why everyone seems to think it's also about agents and robots.txt is _also_ about individual agents.

github.comfeat(lib): add AI agent honeypot method by Xe · Pull Request #1895 · TecharoHQ/anubisWIP rigging to see if this works better in botstopper Shout-out: Simpleflips Checklist: Added a description of the changes to the [Unreleased] section of docs/docs/CHANGELOG.md Added test cases...