I watch the bots so you don't have to, across 3,606+ websites: who's scanning, what they want, and how they dress up. Self-host it free: https://nitter.cf/t.co/EcxvfTgENJ
The edge
Joined April 2022
- Tweets2.3K
- Following306
- Followers421
- Likes1.3K
Pinned Tweet
i'm giving away the tool i made to stop scrapers, spam signups, fake form submissions, and hacking probes on my 3,604+ websites.
it blocked nearly 30 million bot requests this month.
you need this. the internet needs this.
nicetrybot.com/
imo this is good news. someone got phished/attacked, and not the network.
no bueno, for sure. at least the software did what is was supposed to do.
the human element is futile over long periods.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
that’s it, one mac mini per project.
yubikey, air-gapped.
you manage it in real life only. (no remote)
would you do this daily to protect your vibe-coded project from a $6B heist?
docs added for NiceTryBot.
there's literally no other bot protection framework like this, especially given a way for free.
take a look. 👀
docs.nicetrybot.com/
this week has been nuts... i've got a sick nictrybot cli and a new doc website you.
this also leads into first-party agentic support.
you don't even know the madness i'm given you.
hang tight -- better docs and usage examples coming.
everyone wants me to build a hackbot -- i've been skirting around 2GB - 60GB of free diskspace for over a year now.
time to clean house, and get this hackbot going.
i was having a conversation w/ someone yesterday about 70M bot requests on their site.
after two replies he became one.
this reads like the perfect scoring system to protect web apps too.
中国社区逆向拆解了Claude的封号机制。以下是他们的发现
Claude使用积分制。注册时账号获得初始分数，之后根据行为加分或扣分。低于阈值直接封号。回分很难
影响分数的因素:
注册
> 干净IP是最重要的因素。不一定要家宽，但必须干净
> Gmail已经不是最优选，有权重更高的邮箱服务
> 注册时直接弹KYC的号可以扔了
> 用手机App注册会加分
支付
> 刚注册就订阅会扣分
> 直接上Max会大幅扣分。最好等两天先订Pro
> 支付时弹KYC说明账号在考察期，但不一定会封
> 国外实体银行卡加分。Google Play也行。虚拟卡扣分
使用
> 不要一次把限额用完。宁可两个号轮换也不要一个号撸到底
> Desktop客户端有少量加分。尽量少用网页端
> 手机端也有少量加分
> 开启记忆功能加分。记忆文件越多分越高
IP和设备
> 稳定性是关键。不要跳IP，尽量一直用同一个
> 代理必须全局模式并开启TUN
> 多设备登录大幅扣分。理想状态是一台电脑一个客户端
> 频繁换IP、频繁登录、高并发都会大幅扣分
账号年龄
> 老号有巨大的容错空间。2023年的号明显更高
> 分数随时间增长，但很慢
其他
> Windows和macOS没区别。Linux会扣分
> 时区和语言基本不影响。不会因为北京时间就封号
> 跟Claude说自己是中国人没问题，记忆不会触发封号
> 大量使用Fable会扣分
> 升级Max大概率进入观察期，除非是高权重老号
观察期和封号
> 接近阈值时账号可能进入观察期。典型特征是掉登录
> 观察期继续扣分就会封号
> 高分号可以扛过多次观察期
关注我，拆解你每天在用的服务背后到底怎么运作的
i bought root beer at the grocery store today.
cashier: rewards phone number?
me: yes, i’ll enter my wife’s.
cashier: you have $12 in credit. you probably don’t want to use it, do you?
me: oh, i certainly do.
i think i just social engineered my way into root beer.
Mr. Nice Try retweeted
Self-hosted bot defense makes sense right now. A lot of vibe-coded apps ship with open signup forms and no rate limits, and that's the first thing bots find. I build AI tools solo and test small open source dev tools on Windows, so this is my kind of thing to poke at.
hey @x, what are you building?
i just released a poor man's bot fighting framework. self host it, it's yours. free.
if you are:
🦄 shipping vibe-coded apps
💻 a builder or indie hacker
🐘 running php or laravel
🍯 into honeypots
🏠 hosting your own stuff
🤖 have a spam or bot problem
let's connect!
tell me about weird web experience you've had.
what do you and this guy have in common?
probably more than you think.
74 MILLION AI BOT SCRAPES.
Now, an independent publisher is sounding the alarm.
@stupidDOPE founder Shane Breen says AI bots have hammered his site, causing outages and lost traffic.
We sat down with Breen to expose the growing cost of AI scraping for independent creators.
it seems like a big source of data breaches come from vendors.
saas is a risk-vector. SOC2, HIPAA -- doesn't matter.
time will prove that relying on a paid vendor to secure your private details is not a good decision.
i don't want to add my fridge to wifi.
i don't want to program my toaster.
i don't want to click a cookie consent form to watch my tv.
I just want to exist in the physical world with digital privacy.
let's talk privacy.
the free version installs straight from GitHub: no account, no sign-up, no telemetry.
i don't want know your email address, websites, or domains.
that's just another vector for bad guys.
yesterday i gave away my bot-fighting framework, where you can side-load quests for your website's attackers.
> bot gyms, waiting rooms, captchas
> proof of work to burn their cpu
and today, i added "the tarpit" -- for those sneaky bots who don't load JS.
i'm giving away the tool i made to stop scrapers, spam signups, fake form submissions, and hacking probes on my 3,604+ websites.
it blocked nearly 30 million bot requests this month.
you need this. the internet needs this.
nicetrybot.com/
the core framework is generous, and completely free.
github.com/NiceTryBot/nicetr…
