A pseudonymous coder has created and released an open source “tar pit” to indefinitely trap AI training web crawlers in an infinitely, randomly-generating series of pages to waste their time and computing power. The program, called Nepenthes after the genus of carnivorous pitcher plants which trap and consume their prey, can be deployed by webpage owners to protect their own content from being scraped or can be deployed “offensively” as a honeypot trap to waste AI companies’ resources.

“It’s less like flypaper and more an infinite maze holding a minotaur, except the crawler is the minotaur that cannot get out. The typical web crawler doesn’t appear to have a lot of logic. It downloads a URL, and if it sees links to other URLs, it downloads those too. Nepenthes generates random links that always point back to itself - the crawler downloads those new links. Nepenthes happily just returns more and more lists of links pointing back to itself,” Aaron B, the creator of Nepenthes, told 404 Media.

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      16 hours ago

      But then they’re probably not going to obey robots.txt anyway so it doesn’t matter

      • Treczoks@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 hours ago

        Most legal robots do. Those who don’t - among them many AI feeders - deserve to be drowned in the shit that the honeypot delivers.

    • JackbyDev@programming.dev
      link
      fedilink
      English
      arrow-up
      4
      ·
      17 hours ago

      All of cyber security is an arms race of moving targets. It doesn’t need to be foolproof to mitigate traffic for a while.