43
submitted 2 hours ago* (last edited 1 hour ago) by bold_omi@lemmy.today to c/fuck_ai@lemmy.world

I've been thinking lately about AI poisoning. I want to make this post a thread for suggestions about which tools we can use to fight back. Bear in mind that I'm only talking about poisoning tools, not blocklists or bot-detection utilities. Here's a short list of what I have so far:

Website protection tarpits for text poisoning (fighting web scrapers):

  • Nepenthes was one of the first. In the words of its author, "I’m just fed up, and you know what? Let’s fight back, even if it’s not successful. Be indigestible. Grow spikes." Nepenthes's demo page is here.
  • Iocaine is the best tarpit I know of right now. It's very well-designed and performant. Version 3.0x is complete, and the fourth version is a work in progress. It's made by Gergely Nagy, who goes by the pseudonym "algernon", after the character by the same name from Flowers for Algernon, by Daniel Keyes. Iocaine's demo page is here.

Image poisoning tools:

top 8 comments
sorted by: hot top new old
[-] jdr@lemmy.ml 2 points 1 hour ago

Just talk nonsense all the time

[-] Blackfeathr@lemmy.world 9 points 2 hours ago* (last edited 1 hour ago)

Just fyi, LightShed was released over a year ago and can strip poisons from images. Glaze has become partially ineffective and Nightshade is broken.

To be clear, it's still better to use even a partially functioning poisoning tool than none at all.

https://www.technologyreview.com/2025/07/10/1119937/tool-strips-away-anti-ai-protections-from-digital-art/

https://untrainable.org/en/guides/is-glaze-still-working/

[-] bold_omi@lemmy.today 5 points 1 hour ago* (last edited 1 hour ago)

LightShed isn't perfect, though, and introduces its own AI bias to images, basically creating AI incest. Plus, it takes them time to run it. Poisoning is still a good idea. Although, yes, LightShed is a problem.

[-] algernon@lemmy.ml 3 points 1 hour ago

FWIW, while iocaine does generate copious amounts of garbage, it is never going to poison LLM training data: it's trivial to filter iocaine-generated garbage out pre-training. The garbage is there for two reasons:

  1. To serve the crawlers something.
  2. To poison the crawling queue.

Not the models, the crawling queue. Place an identifiable substring into every generated URL, and you can catch any crawler that works off of a queue collected by cheaper crawlers.

It's not really a poisoning tool - it originally started with that goal, but that goal has changed a loooong time ago -, it's more bot detection & mitigation nowadays, the garbage is just one of the tools it achieves this goal with.

But while I'm here, I'd like to mention Alun Jones' fakejpeg (or my rust port): a library that can help you generate structurally legit-ish JPEGs, files that most decoders will happily display, but with entirely random content. Generating them is very cheap. How effective it is in poisoning? I don't know. But I find great delight in looking at the random noise.

Hello Lemmy

[-] discocactus@lemmy.world 9 points 2 hours ago
[-] bold_omi@lemmy.today 4 points 2 hours ago* (last edited 1 hour ago)

Can you provide a link, either via comment or by editing the text in your original post?

EDIT: I found it.

[-] bold_omi@lemmy.today -1 points 1 hour ago* (last edited 1 hour ago)

As interesting as it is, it has a few problems.

LLM use in the project

LLMS, as we all know, have a vast number of problems. That's why we're in this community.

The biggest issue with Fauxx is that it uses LLMs for documentation, issues, and in "assistance" writing code and fixing bugs. Any programmer who outsources all or part of their thought or work to a slop bot is not exactly smiled upon in my view or here on !fuck_ai@lemmy.world. See the project's gen-AI use disclosure.

I believe that these two statements in that disclosure are mutually exclusive:

  • No, this project was not vibecoded.

  • I also use it [generative AI] for assistance in writing code or chasing down bugs.

Hosting on GitHub

The second most notable issue to me is that it is hosted on GitHub, which is less than ideal. One of the reasons it is not ideal is because all of its source code has, by virtue of its hosting on GitHub, been scraped by Micro$lop Copilot.

[-] SillyDude@lemmy.zip 3 points 1 hour ago

If this is the level of your moral purity tests, I would suggest you just stop using the internet at this point.

this post was submitted on 29 Oct 2026
43 points (95.7% liked)

Fuck AI

8584 readers
1447 users here now

"We did it, Patrick! We made a technological breakthrough!"

A place for all those who loathe AI to discuss things, post articles, and ridicule the AI hype. Proud supporter of working people. And proud booer of SXSW 2024.

AI, in this case, refers to LLMs, GPT technology, and anything listed as "AI" meant to increase market valuations.

Rules:

founded 2 years ago
MODERATORS