Hacker News (AI, 50+ points)ArticleClaude Watch
Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
Spoofed bot traffic muddies the signal for any site trying to distinguish legitimate AI crawlers from attackers, and it's going to accelerate the move toward cryptographic bot verification rather than user-agent trust. If you run infrastructure that allowlists AI crawlers by user-agent string alone, that policy just became a security hole.