Building on an anti-spam cybersecurity tactic known as tarpitting, he created Nepenthes, malicious software named after a carnivorous plant that will “eat just about anything that finds its way inside.”
Aaron clearly warns users that Nepenthes is aggressive malware. It’s not to be deployed by site owners uncomfortable with trapping AI crawlers and sending them down an “infinite maze” of static files with no exit links, where they “get stuck” and “thrash around” for months, he tells users. Once trapped, the crawlers can be fed gibberish data, aka Markov babble, which is designed to poison AI models. That’s likely an appealing bonus feature for any site owners who, like Aaron, are fed up with paying for AI scraping and just want to watch AI burn.
It’s not that we “hate them” - it’s that they can entirely overwhelm a low volume site and cause a DDOS.
I ran a few very low visit websites for local interests on a rural. residential line. It wasn’t fast but was cheap and as these sites made no money it was good enough Before AI they’d get the odd badly behaved scraper that ignored robots.txt and specifically the rate limits.
But since? I’ve had to spend a lot of time trying to filter them out upstream. Like, hours and hours. Claudebot was the first - coming from hundreds of AWS IPs and dozens of countries, thousands of times an hour, repeatedly trying to download the same urls - some that didn’t exist. Since then it’s happened a lot. Some of these tools are just so ridiculously stupid, far more so than a dumb script that cycles through a list. But because it’s AI and they’re desperate to satisfy the “need for it”, they’re quite happy to spend millions on AWS costs for negligable gain and screw up other people.
Eventually I gave up and redesigned the sites to be static and they’re now on cloudflare pages. Arguably better, but a chunk of my life I’d rather not have lost.