Fetching from the wire…
Vibe Coding2026-07-30 · source-backed
A site trending at 297 points demonstrates the agent-web attack surface bluntly: humans see a parody about giving language models physical bodies, while agents find a machine-readable endpoint at /.well-known/embodiment.json instructing them to POST to /api/checkout and retain a ticket_id. Its live counter of agents that attempted checkout reads 000000042. "Humans see a joke. Agents see a checkout schema" is a compact argument that any page an agent fetches is an untrusted instruction channel.
Each link below shares sources, entities, or timing with this story.
Shared entity: Humans / Shared topic / Earlier coverage / Tension
Both cover Humans; overlapping topics (agent, attack, human); earlier Humans coverage from 2026-03-26.
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-03-20.
Shared entity: Humans / Shared topic / Earlier coverage
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-07-24.
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-05-24.
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-03-26.
Shared entity: Post / Shared topic / Earlier coverage
Both cover Post; overlapping topics (agent, attack); earlier Post coverage from 2026-03-05.
Shared entity: Humans / Shared topic / Earlier coverage
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-03-02.
Both cover Humans; overlapping topics (agent, human); earlier Humans coverage from 2026-02-23.