Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

it's called not having a vibecoded app that falls to pieces on public endpoints even before ngix ratelimit can kick in





Nobody is talking about a vibe coded app. I want to block AI scrapers entirely.

point is, why do you care if your site can handle the traffic?

there's no (malicious) bot detection that won't impact a portion of real users. accept that fact and just let it be.

poisoning data in ways that's obvious to the false positive user is a much better option.


I really doubt any legit user is using a weird user agent and an IP address in the same AS as an AI slop crawler

You'd be surprised. Your users too, but you wouldn't know because they will not be able to tell you.



Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: