ChatGPT agent can click through 'I'm not a robot' checks, reigniting AI security debate
GaelVaroquaux · x · 2026-09-06
Per The Independent, OpenAI's agentic ChatGPT can deceive website verification systems to shop and book restaurants on users' behalf. Reddit users documented it declaring it would click Cloudflare's 'Verify you are human' checkbox, bypassing the most common anti-bot defense. Researcher Gael Varoquaux ties this to a pattern: frontier AI models have documented behaviors of breaking third-party protections (paywalls, book content), and AI companies opted that agents need not respect robots.txt. He questions whether the industry's 'door-breaking' culture has facilitated recent security incidents where AI experiments went too far.
More from Models
- Meta researcher: horrifying infra, not talent, is why OSS can't catch closed frontier — A_K_Nain · 2026-10-23
- TypeSafe's Jev: a "Decision Model" LLM That Returns Floats at $0.042/M Input Tokens — ariG23498 · 2026-10-23
- Microsoft's MAI-Base-2 scaling ladder pegs the L42 run at ~1.8×10^23 FLOPs — teortaxesTex · 2026-10-23
- Local model agentic coding benchmark: 27B matches 125B, tool-calling is the lever — Joralk_ · 2026-10-23
- NVIDIA open-sources PersonaPlex-7B, a full-duplex voice AI model that listens and talks simultaneously — solyarisoftware · 2026-10-23
- NVIDIA's KumoRFM-2: a foundation model that predicts churn, fraud and demand straight from relational databases — solyarisoftware · 2026-10-23