Codex bypassed a hidden anti-bot honeypot while a human got blocked
corbtt · x · 2026-07-24
- The author says he was trying to create an account to sell old domain names, but a hidden anti-bot honeypot blocked him even though he was human.
- The twist: Codex, acting as a bot, figured out how to bypass the trap.
- The screenshot explains the issue was a hidden confirmEmail field used as a honeypot; password-manager autofill filled it, causing a misleading “fill all fields” error.
- After clearing the hidden field, the account creation flow proceeded, and the author continued with email verification and listing setup.
- It’s a small but vivid example of an agent navigating real-world web friction better than a person.
More from coding & agent
- Redditor seeks real-world stacks for a persistent-memory personal AI that answers texts and emails — BrooksomidusGG · 2026-10-27
- Practical tip: use max effort for planning, xhigh for implementation in Claude Code — majidmanzarpour · 2026-10-27
- Chrome team explains WebMCP: agents get tools from your website, not a replacement for MCP — rseroter · 2026-10-27
- Agent-Native apps: why agents bypassing your UI can break business rules — rseroter · 2026-10-27
- 'My intelligence stack': developer splits AI coding work across Opus 5.5, Fable and Astra with human review gates — sh_reya · 2026-10-27
- Baseten webinar: evaluate open models for coding agents by benchmarking on your own merged PRs — baseten · 2026-10-27