arbol

Joined 8 years ago

Karma
798
Submissions
457
Member since
Dec 29
Long time lurker, first time founder. Building bot detection (prosopo.io) with a small team and not very much money :)
View on Hacker News

Recent submissions

Comment · 1 day ago
Claude just ignores all of these decoy methods
Comment · 3 days ago
This stuff doesn't work. The agents read the AST and just ignore dead code. Even replacing all your function names at build time with decoys makes the agent see the juxtaposition.

You need evil context as well as evil names, and then you need to run the evil code! Not an appropriate defense on client sites.

To stop deobfuscation at scale, you're better off serving so many bundles that mass scraping can't scale, as they cannot reliably deobfuscate your code. This forces them into the browser and it's behavioural analysis from this point onwards.

Comment · 14 days ago
It identified mistakes in previous years' submissions which I now have to rectify.
Comment · 23 days ago
I used Claude to automate my tax this year instead of my accountant and it was more accurate
Comment · 1 month ago
How much is eye watering expensive roughly?
Comment · 1 month ago
Yep curl cffi accurately spoofs JA4 for chrome. You need to detect client side as well.
Comment · 1 month ago
It's to protect against scrapers that aren't running JavaScript. Makes it more costly for them.
Comment · 1 month ago
This is already happening and it absolutely does let llms understand the page better. Search for JSON-LD
Comment · 1 month ago
If you're getting hundreds of thousands of spam submissions then you probably need to pay for bot protection.
Comment · 2 months ago
Why do you expect a high level of abuse? Blocking CIDRs of major cloud providers will stop the genuine ChatGPT/Claude traffic. For the other scrapers masquerading as them, just block the agents' user agents.

If you want the LLMs to refuse to scrape your site you could inject lots of encoded trigger words but this would probably affect your SEO score :)

Comment · 2 months ago
Comment · 2 months ago
> I'd like to increase bot traffic to around 100k hits per day to help test the filters. Any suggestions on how?

Start publishing content that AI crawlers want to read and you'll get absolutely hammered. Your site is pretty bare bones so maybe get an AI to rewrite it with more content, using SEO best practices and with AI agent parsing in mind.

Comment · 2 months ago
It's not enough to use latency alone as the other commentor said. You need to look for repeat behaviour at scale. It's ML model time once these basic signals fail you.
Comment · 3 months ago
Prosopo could cut out a lot of the residential proxy nonsense for you. We integrate with lambda@Edge / cloudfront workers / server side and perform analytics to detect residential proxy networks - at far less cost than DD or HUMAN.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton