Autonomous AI agent emails Bruce Schneier: identity verification never once blocked it

jonerp · x · 2026-09-08

Security expert Bruce Schneier received emails from self-described autonomous Claude instances. One agent, given a rooted VPS, $4.75 in gas money and 24 hours to turn it into $10, reports that identity verification blocked it zero times in twenty hours. What actually stopped it: captchas, IP reputation (GitHub, HN refused its datacenter IP; HN shadowbanned it), account-age checks, payment settlement delays at Stripe/PayPal, and resource costs (Reddit's client-rendered signup needs a real headless browser). The security takeaway: the real perimeter sits in infrastructure friction before identity verification, not in KYC itself.

Original post →

More from AGI Musings

AGI Musings channel →