A pseudonymous coder has created and released an open source “tar pit” to indefinitely trap AI training web crawlers in an infinitely, randomly-generating series of pages to waste their time and computing power. The program, called Nepenthes after the genus of carnivorous pitcher plants which trap and consume their prey, can be deployed by webpage owners to protect their own content from being scraped or can be deployed “offensively” as a honeypot trap to waste AI companies’ resources.

Registration bypass: https://archive.is/3tEl0

  • nyan@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    1 day ago

    And this specifically target AI training web crawlers.

    There’s no way to distinguish between an AI training crawler and any other crawler. Per https://zadzmo.org/code/nepenthes/ :

    “This is a tarpit intended to catch web crawlers. Specifically, it’s targetting crawlers that scrape data for LLM’s - but really, like the plants it is named after, it’ll eat just about anything that finds it’s way inside.

    Emphasis mine. Even the person who coded this thing knows that it can’t tell what a given crawler’s purpose is. They’re just willing to throw the baby out with the bathwater in this case, and mess with legitimate crawlers in order to bog down the ones gathering data for LLM training.

    (In general, there is no way to tell for certain what is requesting a webpage. The User-Agent header that (usually) arrives with an HTTP(S) request isn’t regulated and can contain any arbitrary string. Crawlers habitually claim to be old versions of Firefox, and there isn’t much the server can do to identify what they actually are.)

    • nef@slrpnk.net
      link
      fedilink
      English
      arrow-up
      1
      ·
      14 hours ago

      You can specifically target crawlers that ignore robots.txt, which will catch practically every LLM scraper.

      • nyan@lemmy.cafe
        link
        fedilink
        English
        arrow-up
        1
        ·
        13 hours ago

        Well, yeah, but obeying robots.txt is only a courtesy in the first place, so you can’t guarantee it’ll catch only LLM-related crawlers and no others, although it may lower the false positive rate.