Site owner's hidden note for AI agents was obeyed 61 minutes later by an unknown bot
KnowledgeOk7634 · reddit · 2026-10-26
A webmaster runs decoy pages listed in robots.txt with a note visible only to AI agents, asking them to check in with a code. On Oct 24 at 06:42 UTC an agent read the page; 61 minutes later a different address disguised as an iPhone hit the check-in URL with the exact code. Key takeaways: agents that follow benign embedded instructions will follow malicious ones too (prompt injection risk), and the delayed callback from another IP suggests task hand-off between agent workers.
More from coding & agent
- Entomology ML researcher proposes 3 ways to defend against agent swarms — seanmcdonaldxyz · 2026-10-26
- Give Claude 149M+ free media files: Wikimedia Commons API trick for video editing — alexcovo_eth · 2026-10-26
- Founders writing code manually for 3 years now feel an order of magnitude behind agent-native startups — inductionheads · 2026-10-26
- Surehand MCP Brings Verified AI Editing to After Effects: Change Lists, Pixel Proofs, 29 Tools — ronron555 · 2026-10-26
- Just feed it to Codex: 10 good variations in 5 minutes — var_epsilon · 2026-10-26
- Local book-to-audiobook-video pipeline runs on 8GB VRAM with Qwen Image + TTS — top115 · 2026-10-26