HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
Fingel
django-llm-poison
HTML2025–2025
Fingel / django-llm-poison

django-llm-poison

A django app that poisons content when served to AI bots. ☠️

2Distinct people
2Mentions
0Explicit recommenders
36GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

A django app that poisons content when served to AI bots. ☠️

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by hour2 dated mentions

Observed mentions: 2025-01-16 15:19:29 UTC to 2025-01-16 16:37:31 UTC.

012025-01-16 15:00:00 UTC to 2025-01-16 16:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 commentsJan 16, 15:002025-01-16 16:00:00 UTC to 2025-01-16 17:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 commentsJan 16, 16:00

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
Jan 16, 15:002025-01-16 15:00:00 UTC2025-01-16 16:00:00 UTC101
Jan 16, 16:002025-01-16 16:00:00 UTC2025-01-16 17:00:00 UTC101

What Hacker News says

2 sources
Author of a similar tool here[0]. There are a few implementations of this sort of thing that I know of. Mine is different in that the primary purpose is to slightly alter content statically using a Markov generator, mainly to make it useless for content reposters, secondarily to make it useless to LLM crawlers that ignore my robots.txt file[1]. I assume the generated text is bad enough that the LLM crawlers just throw the result out. Other than the extremely poor quality of the text, my tool doesn't leave any fingerprints (like recursive non-sense links.) In any case, it can be run on static sites with no server-side dependencies so long as you have a way to do content redirection based on User-Agent, IP, etc. My tool does have a second component - linkmaze - which generates a bunch of nonsense text with a Markov generator, and serve
Read the rest
s infinite links (like Nepthenes does) but I generally only throw incorrigible bots at it (and, at others have noted in-thread, most crawlers already set some kind of limit on how many requests they'll send to a given site, especially a small site.) I do use it for PHP-exploit crawlers as well, though I've seen no evidence those fall into the maze -- I think they mostly just look for some string indicating a successful exploit and move on if whatever they're looking for isn't present. But, for my use case, I don't really care if someone fingerprints content generated by my tool and avoids it. That's the point: I've set robots.txt to tell these people not to crawl my site. In addition to Quixotic (my tool) and Napthenes, I know of: * https://github.com/Fingel/django-llm-poison * https://codeberg.org/MikeCoats/poison-the-wellms * https://codeberg.org/timmc/marko/ 0 - https://marcusb.org/hacks/quixotic.html 1 - I use the ai.robots.txt user agent list from https://github.com/ai-robots-txt/ai.robots.txt
In Nepenthes is a tarpit to catch AI web crawlers

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.