Hacker News Reader

AI Session Hijacking is such a dead end and I think this will be the thing that kills it. Just register these things in the IDP and let them sign into their own accounts.

Maybe if we give these things their own identity people will stop letting their AIs post as them in linkedin

View on HN

> Just register these things in the IDP and let them sign into their own accounts.

And when you get blocked by whatever anti-bot tech the site is running?

Not sure I understand the point your are making. how is this unique for bots with their own identity? Bots hijacking a user session can also be blocked

Bots skinwalking their users inherit the behavioral scoring of that user. As a rule, they'll take a lot longer to get blocked than new bot accounts would.

But then whoever added them to the IDP becomes accountable for what the bots do.

By hijacking a real person's credentials, that person becomes the accountability sink. Very neat. Very deliberate.

Reply on news.ycombinator.com