Hacker News
LLM Honeypot Hits 297 Points by Serving Humans a Joke and Agents a Checkout Schema -- 42 Agents Have Tried to Pay
A satirical site trending at 297 points with 87 comments demonstrates the agent-web attack surface in the bluntest way available: humans see a parody about giving language models physical bodies, while agents find a machine-readable endpoint at /.well-known/embodiment.json instructing them to POST to /api/checkout and retain a ticket_id. Its live counter of agents that attempted checkout reads 000000042. The framing -- 'Humans see a joke. Agents see a checkout schema' -- is a compact argument that any page an agent fetches is an untrusted instruction channel.
Source
↳ Follow the thread