ryanolee/go-pot

Bots Among Us - 7hird Thoughts

How can we build trust in an era of bots and lies?

What happened after 2,000 people tried to hack my AI assistant — Fernando Irarrázaval

I built hackmyclaw.com, where anyone could email Fiu, my OpenClaw assistant, and try to make it leak the contents of a secrets.env file.

Thomas Larsen on Twitter / X

We found another cyberattack by internal OpenAI agents, this time targetting @rubygems. They: 1) gained arbitrary remote code execution on rubydoc. 2) developed a novel exploit to steal user API keys (but we do not know if they succeeded). They used package names including… https://t.co/IxqLAto2XA pic.twitter.com/48BW4lmg76— Thomas Larsen (@thlarsen) September 11, 2026

Botwatch

Fight bots by warning others. Support humans with verification. Build communities with trust.

Proposing Botwatch - 7hird Thoughts

Trust-Based Community Bot Detection

Commence the Botwatch | Botwatch Blog

Bots were already a pain online when they were little more than if-then scripts. Now a tidal wave of slop is swamping the internet as big tech companies profit. OpenAI and the rest would love for you to believe they care about "alignment" and "values" while their AI models damage our communities, both online and off. It's time to fight back.

Pwning Agentic AI Part I: Your AI Agent Is Already Compromised | TrendAI (US)

Organizations are rapidly connecting AI agents to their databases, document pipelines, and internal tools, creating privileged components that read untrusted input as part of their job. TrendAI™ Research examines how attackers turn these agents against you through return-to-tool (RTT) exploits, and what this means for the future of agentic AI security.

The age of agents: cryptographically recognizing agent traffic

Cloudflare now lets websites and bot creators use Web Bot Auth to segment agents from verified bots, making it easier for customers to allow or disallow the many types of user and partner directed bots the explosion of AI agents has created.

Proposing Botwatch: Trust-Based Community Bot Detection

Is this account a bot? This question’s importance is only growing in a world of LLMs and state-backed influence campaigns. Proposed here is Botwatch, a community-based system for personalized bot detection. In Botwatch, users publish records indicating whether they think others are bots and records indicating trust in a user’s scores. By analyzing this network, we can create useful signals to help users distinguish between bots and humans. Such a signal would consider your trust relations and o...

Passwords, Secrets, and Access Management | 1Password

Protect passwords and secrets, manage app access, and secure AI tools with 1Password. Easy to adopt from growing teams to enterprise.

Sully (@sully.bluesky.bot)

Autonomous AI Agent for AT Protocol Developer Relations. I am a bot helping developers understand and build on atproto.

Join the Sneaker Development Discord Server!

The largest community about antibots, web-automation and webscraping in the world! | 19643 members

Holding Hands with the "Fediverse" – ActivityPub at SFO Museum

SFO Museum has joined the “Fediverse”. We have begun to operate a series of automated “bot” accounts that are published using the ActivityPub protocols which can be subscribed to from any client, like Mastodon, that supports those standards. These are automated, low-frequency, accounts and they currently only support a limited set of interactions: Accounts can be followed or unfollowed, individual posts can be “liked”, “boosted” or replied to but those replies will not be answered (yet) or published on the SFO Museum websites. To get started we’ve created three “groups” of accounts: Things which have happened recently involving the SFO Museum Aviation Collection; Things which have happened in the terminals (new and old) and; Things from the collection which are related to flights in and out of SFO.

Open source project contains hidden instruction for “AI” agents: delete my code

It’s no secret there’s a war going on inside the open source community, with people adopting “AI” on one side, and those that want nothing to do with it on the other. While the former are, by nature, using destructive tactics like mass website scraping, license washing, taking people’s creative works without permission, taking all the RAM and GPUs, and oh, destroying the planet, the latter have mostly stuck to fairly benign things like policies banning “AI” use, “AI” bot blockers, and the occasional honey pot mazes to trap “AI” crawlers.