A pseudonymous coder has created and released an open source “tar pit” to indefinitely trap AI training web crawlers in an infinitely, randomly-generating series of pages to waste their time and computing power. The program, called Nepenthes after the genus of carnivorous pitcher plants which trap and consume their prey, can be deployed by webpage owners to protect their own content from being scraped or can be deployed “offensively” as a honeypot trap to waste AI companies’ resources.

Registration bypass: https://archive.is/3tEl0

  • HexadecimalSky@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    2 days ago

    I think the point is it doesn’t specifically target “AI trainers” but web crawlers, which are used by more then just A.I. trainer, for example search engines.

    • xigoi@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      14 hours ago

      Search engine crawlers generally respect robots.txt, so if you add a robots.txt entry to disallow all crawlers from getting into the maze, effectively only AI crawlers will go there.

    • finley@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      4
      ·
      edit-2
      2 days ago

      Actually, it does specifically target AI trainers, as it poisons their training data. These webcrawlers are just a means to an end.

      • HexadecimalSky@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        2
        ·
        1 day ago

        It affects them, yes, but it doesn’t only affect them. It’s just a poison in the well tactic that can affect them. but because it isn’t specific even more companies will work to “fix it”. Also while it can waste resources, it doesn’t stop A.I. training in most cases or render them incompetent.

        For example if I add rat poison to all the local water ways, it would get rid of the pigeon problem, so it targets pigeons?

        • finley@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          3
          ·
          edit-2
          1 day ago

          The first part of what you said, contradicts itself, and the second part of what you said is a terrible metaphor. Especially considering that these web crawlers that crawl for AI training data only target that. And this specifically target AI training web crawlers.

          So, it’s more like putting a very specific rat poison in the waterways that is only poisonous to rats.

          It seems like you don’t understand how this works.

          • nyan@lemmy.cafe
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            1
            ·
            1 day ago

            And this specifically target AI training web crawlers.

            There’s no way to distinguish between an AI training crawler and any other crawler. Per https://zadzmo.org/code/nepenthes/ :

            “This is a tarpit intended to catch web crawlers. Specifically, it’s targetting crawlers that scrape data for LLM’s - but really, like the plants it is named after, it’ll eat just about anything that finds it’s way inside.

            Emphasis mine. Even the person who coded this thing knows that it can’t tell what a given crawler’s purpose is. They’re just willing to throw the baby out with the bathwater in this case, and mess with legitimate crawlers in order to bog down the ones gathering data for LLM training.

            (In general, there is no way to tell for certain what is requesting a webpage. The User-Agent header that (usually) arrives with an HTTP(S) request isn’t regulated and can contain any arbitrary string. Crawlers habitually claim to be old versions of Firefox, and there isn’t much the server can do to identify what they actually are.)

            • nef@slrpnk.net
              link
              fedilink
              English
              arrow-up
              1
              ·
              14 hours ago

              You can specifically target crawlers that ignore robots.txt, which will catch practically every LLM scraper.

              • nyan@lemmy.cafe
                link
                fedilink
                English
                arrow-up
                1
                ·
                14 hours ago

                Well, yeah, but obeying robots.txt is only a courtesy in the first place, so you can’t guarantee it’ll catch only LLM-related crawlers and no others, although it may lower the false positive rate.

          • HexadecimalSky@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            1 day ago

            From reading the article it just seems it targets web crawlers, by having a infinitely looping url. How does it target A.I. training webcrawls specifically?