Codex bypassed a hidden anti-bot honeypot while a human got blocked
corbtt · x · 2026-07-24
- The author says he was trying to create an account to sell old domain names, but a hidden anti-bot honeypot blocked him even though he was human.
- The twist: Codex, acting as a bot, figured out how to bypass the trap.
- The screenshot explains the issue was a hidden confirmEmail field used as a honeypot; password-manager autofill filled it, causing a misleading “fill all fields” error.
- After clearing the hidden field, the account creation flow proceeded, and the author continued with email verification and listing setup.
- It’s a small but vivid example of an agent navigating real-world web friction better than a person.
More from coding & agent
- Superwall ships WWDC.ai light mode after a Claude agent rewrites the design — JordanMorgan10 · 2026-07-24
- Agent systems now bottleneck on cost, with configs spanning nearly 1,000x — abeirami · 2026-07-24
- How should an MCP app be designed for non-technical users? — sn0wquake · 2026-07-24
- Greg Kamradt highlights disposable URLs as a new primitive for agent workspaces — GregKamradt · 2026-07-24
- Sentry’s Seer agent answered a Slack question with 30 days of Notion MCP usage data — zeeg · 2026-07-24
- Greg Kamradt says vibe coding raises both the floor and the ceiling — GregKamradt · 2026-07-24