惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

云风的 BLOG
云风的 BLOG
C
Cyber Attacks, Cyber Crime and Cyber Security
Recent Announcements
Recent Announcements
爱范儿
爱范儿
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Security Latest
Security Latest
J
Java Code Geeks
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Cisco Talos Blog
Cisco Talos Blog
Apple Machine Learning Research
Apple Machine Learning Research
C
Check Point Blog
T
Threat Research - Cisco Blogs
I
Intezer
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
WordPress大学
WordPress大学
Engineering at Meta
Engineering at Meta
腾讯CDC
Google DeepMind News
Google DeepMind News
Project Zero
Project Zero
T
Tenable Blog
V
Visual Studio Blog
C
CXSECURITY Database RSS Feed - CXSecurity.com
Spread Privacy
Spread Privacy
GbyAI
GbyAI
T
Tailwind CSS Blog
P
Palo Alto Networks Blog
Microsoft Security Blog
Microsoft Security Blog
Scott Helme
Scott Helme
Hugging Face - Blog
Hugging Face - Blog
NISL@THU
NISL@THU
Blog — PlanetScale
Blog — PlanetScale
G
GRAHAM CLULEY
K
Kaspersky official blog
T
The Exploit Database - CXSecurity.com
S
Schneier on Security
P
Proofpoint News Feed
S
SegmentFault 最新的问题
P
Proofpoint News Feed
P
Privacy & Cybersecurity Law Blog
The Hacker News
The Hacker News
博客园 - 【当耐特】
Cyberwarzone
Cyberwarzone
L
LangChain Blog
Stack Overflow Blog
Stack Overflow Blog
V
Vulnerabilities – Threatpost
H
Help Net Security
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
D
Darknet – Hacking Tools, Hacker News & Cyber Security
Last Week in AI
Last Week in AI
博客园 - 叶小钗

Hacker News - Newest: "AI"

AI can't read an investor deck AI as an attorney? Student uses ChatGPT, Gemini to sue UW over alleged racial discrimination Hacking MCP Servers in AI Systems – The Rug Pull: Tool Changes After Approval GitHub - MeepCastana/KubeezCut: Free Web based video editor GitHub - GenAI-Gurus/awesome-eu-ai-act: Curated tools, official sources, OSS, templates, and guides for EU AI Act compliance. Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers Coming soon: 10 Things That Matter in AI Right Now DARPA built an AI to fact-check enemy weapons claims What explains heterogeneity in AI adoption? When AI Meets Muscle: Context-Aware Electrical Stimulation Promises a New Way to Guide Human Movements - Department of Computer Science AI Changed How We Build. It Did Not Change What Matters. Linux rules on using AI-generated code - Copilot is OK, but humans must take 'full responsibility for the… Meta spins up AI version of Mark Zuckerberg to engage with employees Code Mode: Let Your AI Write Programs, Not Just Call Tools | TanStack Blog GitHub - Delavalom/graft: Go framework for building AI agents. Type-safe tools, multi-provider (OpenAI, Anthropic, Gemini, Bedrock), zero vendor SDKs. India's TCS tops estimates, says new AI models did not dent services demand Gen Z's fading AI hype Strong feeling: we are in a folded AI reality GitHub - machinarii/total-recall-catalog: A reference catalog of latest knowledge retrieval, memory & RAG systems GitHub - mensfeld/code-on-incus: Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.. Quantization, LoRA, and the 8% Problem: Benchmarking Local LLMs for Production AI Iran war: We spoke to the man making Lego-style AI videos that experts say are powerful propaganda Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks GitHub - immartian/bellamem: Persistent belief-graph memory for AI agents. Retrieves decisive context by importance — not recency, not RAG, not /compact. recursive-mode: The Repo-Native Operating System for AI Engineering After the attack on Sam Altman's home, will AI CEO's go on the offensive? The biggest advance in AI since the LLM Opus 4.6 vs GPT 5.4 One Prompt Unity World Generation Test “AI polls” are fake polls Client Challenge Can AI be a 'child of God'? Inside Anthropic's meeting with Christian leaders How to Switch AI Chatbots and Why You Might Want To GitHub - MattMessinger1/agentic_refund_guardrail: Safe refund policy layer for AI agents — Python + TypeScript. Same behavior, shared tests. Adam/papers/emergent_values_whitepaper.md at master · strangeadvancedmarketing/Adam Ask HN: How do you stop playing 20 questions with your AI coding tools How far can automation and AI support psychotherapy? - @theU GitHub - stagas/rtdiff: realtime git diff gui and AI-assisted commits A Mac Studio for Local AI — 6 Months Later A History of the Early Years of AI at the University of Edinburgh Why AI Coding Tools Still Feel Stuck on Localhost MSN AI Datacenters Are Becoming Strategic Targets twitter.com Penn Researchers Use AI to Surface Unreported GLP-1 Side Effects in Reddit Posts Show HN: MoodSense AI (ML and FastAPI and Gradio, Deployed on Hugging Face) Moodsense Ai - a Hugging Face Space by aman179102 AI models are terrible at betting on soccer—especially xAI Grok GitHub - xialeistudio/echoic GitHub - HimashaHerath/github-dev-wrapped: AI-powered weekly GitHub activity reports deployed to GitHub Pages GitHub - alejandrobalderas/claude-code-from-source: Architecture, patterns & internals of Anthropic's AI coding agent — reverse-engineered from source maps AI and Tech brief: Ireland ascendant GitHub - Titovilal/context0: Context0 - Never Surrender Training for a Marathon with an AI Coach: What Worked and What Didn't Cyber Pulse: Agentic Intel - Apps on Google Play I Built an AI PR Reviewer That Catches Bugs by Not Looking for Bugs Gen Z workers are so fearful AI will take their job they’re intentionally sabotaging their company’s AI rollout | Fortune How AI Is Reimagining the Game of Golf–For Both Players and Courses GitHub - nattergabriel/reseed: A CLI tool for managing and distributing agent skills across projects Is SVG the final frontier? My AI workflow evolved from prompts to a near-autonomous workflow MLSharp Help - 3DGS Viewer & Generator I put my cognitive field based AI's runtime on GitHub Is Numble the first AI-proof game? A3: Kubernetes for autonomous AI agent fleets | Emergent Principles Deepali Vyas ("The Elite Recruiter") GitHub - msmarkgu/RelayFreeLLM: A restful API designed to route user prompts to various AI model providers. Unionized ProPublica staff are on strike over AI, layoffs, and wages Unleashing the Advantage of Quantum AI We're heading for an AI-fueled 'dementia crisis,' brain scientist warns The AI-Assisted Breach of Mexico's Government Infrastructure [pdf] GitHub - stef41/lmscan: 🔍 Detect AI-generated text and fingerprint which LLM wrote it. Open-source GPTZero alternative. Zero dependencies, works offline. MSN GitHub - visionscaper/collabmem: Enabling long-term collaboration with Agentic AI - building up episodic and world model memory over time with in-context awareness We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs AI Code is Hollowing Out Open Source, and Maintainers are Looking the Other Way What leaked "SteamGPT" files could mean for the PC gaming platform's use of AI AI is the boss at this retail store. What could go wrong? GitHub - Wuzu11517/agentic-proxy: Local proxy meant to help reduce With Drones, Geophysics and ArtificiaI Intelligence, Researchers Prepare to Do Battle Against Land Mines A Single Operator, Two AI Platforms, Nine Government Agencies: The Full Technical Report 在 Steam 上购买 FriedrichAI: Offline AI 立省 10% GitHub - inevolin/resume-cli: Hit Claude usage limits? Resume any AI coding session elsewhere. Switch tools at zero friction. GitHub - atripati/ark: AI Runtime Kernel — a context operating system for AI agents. Eliminates tool bloat, loads only what’s needed, and gives LLMs their reasoning space back. How to Build a Secure AI PR Reviewer with Claude, GitHub Actions, and JavaScript This Startup Wants You to Pay Up to Talk With AI Versions of Human Experts Intel Arc Pro B70 Brings 32GB VRAM to Local AI for $949 WordPress 7.0: The Good, the AI, and the Still Missing AI on the couch: Anthropic gives Claude 20 hours of psychiatry IatroBench: Pre-Registered Evidence of Iatrogenic Harm from AI Safety Measures AI Agents Know About Supabase. They Don't Always Use It Right. The history and future of AI at Google, with Sundar Pichai Inside an AI‑enabled device code phishing campaign How Meta Used AI to Map Tribal Knowledge in Large-Scale Data Pipelines AI for Systems: Using LLMs to Optimize Database Query Execution Forecasting the Economic Effects of AI Introducing Tinker: Play with AI, bring your ideas to life AI sheds light on an ancient gaming mystery People really hate AI but not as much as Iran—or Democrats | Fortune What is an AI Product Engineer? Phoebe Gates wants her $185 million AI startup to succeed with 'no ties to my privilege or my last name': 'I have a chip on my shoulder' | Fortune
Webmaster! It's time to serve slop to AI crawlers.
Kamila Szewczyk · 2026-05-27 · via Hacker News - Newest: "AI"

Hosting a website in 2026 is a huge pain in the ass. Not only you have to update your whole system every other day because someone found more RCEs in nginx, the AI labs are also looking to kill your website through a million of tiny cuts. This week alone, Meta's and Anthropic's bots have caused insurmountable waves of completely pointless requests that hammer static endpoints over and over. Most bots also don't respect robots.txt.

My hobby for messing with crawlers started in 2021 when a deluge of WordPress vulnerability scanners were hitting my non-existent /wp-admin/ and /.env non-stop. The solution that I opted in for was blocking these two paths in robots.txt. Of course, such scanners are typically ran by people who are not the type to follow clear and simple instructions of how the internet is supposed to work in a way that everyone coexists with everyone else, so they kept hammering that endpoint even more. Eventually, I decided that a cute idea would be to serve gzip bombs to the unwanted visitors. Try it out for yourself, https://iczelia.net/.env via Python3 requests will take a long time and decompress to a monstrous file full of zeroes.

AI has revolutionised the world, including new annoyances and high RoI trolling techniques. The vulnerability scanners have mostly calmed down, while AI labs pointlessly hammer every endpoint they can to fuel their slop machines with more questionably sourced data. Of course, serving them gzip bombs or a 403 would be a possiblity, but there is an even funnier option. Since these bots are looking to scrape data, why not serve them some data? But not just any data, let's serve them some slop. Reportedly in some cases this can hurt the training of the models significantly, and it would be hilarious to see the crawlers fall into a Library of Babel-type pit that they just can't get out of because every page links some other random nonsense for the fun of it.

LLM inference is quite simple. If your model is small enough it can be done via a couple of hundred of lines of code. I personally chose arnir0's Tiny LLM (10M parameters) as my slop factory of choice. Then, I wired a handler that dispatches based on the UA and serves the crawlers stuff like this:

% curl -A "DotBot/1.2 (+https://opensiteexplorer.org/dotbot)" http://iczelia.net/blog/thisdoesntexist
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Thisdoesntexist</title><meta name="description" content="Thisdoesntexist"><style>
body{max-width:62ch;margin:2.5em auto;padding:0 1em;font:16px/1.55 Georgia,serif;color:#222}
h1{font-size:1.6em;margin:0 0 .6em}
p{margin:1em 0}
nav{margin-top:2.5em;padding-top:1em;border-top:1px solid #ccc;font-size:.95em}
nav h2{font-size:1em;margin:0 0 .4em;color:#666;font-weight:normal}
nav ul{margin:0;padding-left:1.2em}
</style></head><body><article><h1>Thisdoesntexist</h1><p>the L. V. Vandervips We can only make reached with one that can come up with the were there with the whole and so, that is the case, this might be true fight.</p><p>The reason I am looking for different. This is a different sort of one. For example, you choose only the tall-safety for all the other thanks to the stubbed is not the right b.</p><p>You don't get me baby that the rest of the other is a long much like a in a very large number of a drywilts down the the shit to be which is not a the place; then it makes the gold and the the most perfect. It's time. We're still the best.</p><p>There is a little. This is a in the world all the time, and being. I'm a guy, what the people.</p></article><nav><h2>Related</h2><ul><li><a href="/blog/whole-that">Whole and that</a></li><li><a href="/journal/other-true">Other and true</a></li><li><a href="/notes/sort-this">Sort and this</a></li><li><a href="/tag/only-vandervips">Only and vandervips</a></li><li><a href="/archive/there-looking">There and looking</a></li></ul></nav></body></html>%    

Soon after deployment, I saw the following in my logs:

May 27 16:09:41 iczelia[1200661]: [req] 10.88.0.1 "GET /journal/made-beach" 200 1ms
May 27 16:09:42 iczelia[1200661]: [req] 10.88.0.1 "GET /archive/consuming-your" 200 1590ms (handler=1590ms cache=1ms)
May 27 16:09:42 iczelia[1200661]: [req] 10.88.0.1 "GET /guestbook/" 200 10ms
May 27 16:09:43 iczelia[1200661]: [req] 10.88.0.1 "GET /guestbook/" 200 8ms
May 27 16:09:43 iczelia[1200661]: [req] 10.88.0.1 "GET /blog/look-when" 200 1105ms (handler=1104ms cache=1ms)
May 27 16:09:44 iczelia[1200661]: [req] 10.88.0.1 "GET /journal/world-will" 200 1099ms (handler=1098ms cache=0ms)
May 27 16:09:47 iczelia[1200661]: [req] 10.88.0.1 "GET /journal/will-resume" 200 1119ms (handler=1118ms cache=0ms)
May 27 16:09:48 iczelia[1200661]: [req] 10.88.0.1 "GET /archive/could-appreciate" 200 1128ms (handler=1128ms cache=1ms)
May 27 16:09:50 iczelia[1200661]: [req] 10.88.0.1 "GET /tag/nugget-time" 200 1101ms (handler=1100ms cache=1ms)
May 27 16:09:51 iczelia[1200661]: [req] 10.88.0.1 "GET /tag/family-other" 200 1083ms (handler=1082ms cache=1ms)
May 27 16:09:52 iczelia[1200661]: [req] 10.88.0.1 "GET /tag/journey-have" 200 1119ms (handler=1118ms cache=1ms)
May 27 16:09:53 iczelia[1200661]: [req] 10.88.0.1 "GET /archive/best-assured" 200 559ms (handler=558ms cache=0ms)
May 27 16:09:54 iczelia[1200661]: [req] 10.88.0.1 "GET /blog/town-your" 200 513ms (handler=512ms cache=0ms)
May 27 16:09:56 iczelia[1200661]: [req] 10.88.0.1 "GET /notes/home-area" 200 1135ms (handler=1134ms cache=1ms)
May 27 16:09:58 iczelia[1200661]: [req] 10.88.0.1 "GET /notes/when-always" 200 1137ms (handler=1136ms cache=0ms)
May 27 16:09:59 iczelia[1200661]: [req] 10.88.0.1 "GET /blog/girl-friends" 200 1ms
May 27 16:10:00 iczelia[1200661]: [req] 10.88.0.1 "GET /notes/when-neighbors" 200 1165ms (handler=1164ms cache=0ms)
May 27 16:10:02 iczelia[1200661]: [req] 10.88.0.1 "GET /archive/able-half" 200 1147ms (handler=1146ms cache=1ms)
May 27 16:10:02 iczelia[1200661]: [req] 10.88.0.1 "GET /index.xml" 200 2ms hit
May 27 16:10:04 iczelia[1200661]: [req] 10.88.0.1 "GET /journal/want-rise" 200 1ms
May 27 16:10:07 iczelia[1200661]: [req] 10.88.0.1 "GET /blog/anything-matter" 200 1ms

Enjoy your training data! wink.

How to make it better. ⎇

If I were to make it better than the current crude prototype, something tells me that the best option would be to use a (small) large language model to take my existing webpages on my blog, perhaps augmented with some other context to not run out of training data (we could serve from enwik10 or such) and introduce many subtle errors and mistakes to them. Perhaps I will get around doing this at some point.