Developer Austin Weeks has released Miasma, a GPL-3.0-licensed open-source server written in Rust that traps automated AI training data scrapers by routing them into a self-perpetuating loop of corrupted content and recursive links. The project had accumulated 787 stars and 13 forks on GitHub as of early April 2026.
- Austin Weeks released Miasma, a Rust-based open-source server (GPL-3.0) that serves poisoned training data and recursive self-referential links to AI scrapers, trapping them in a continuous loop
- Trap links are hidden from human visitors using
style="display: none;"andaria-hidden="true"HTML attributes, but are typically followed by automated web crawlers - At 50 concurrent connections, Miasma’s estimated peak memory footprint is 50–60 MB; connections beyond the configured in-flight limit receive immediate HTTP 429 responses
- Weeks flags “inherent risk” in deploying the software and recommends robots.txt exclusions for Googlebot and Bingbot before activation
What Happened
Developer Austin Weeks released Miasma as a direct technical countermeasure against unauthorized large-scale scraping of public websites by AI companies seeking training data, publishing the project under the GPL-3.0 license at github.com/austin-weeks/miasma. Weeks stated his rationale in the project README: “AI companies continually scrape the internet at an enormous scale, swallowing up all of its contents to use as training data for their next models. If you have a public website, they are already stealing your work.” He describes Miasma’s operational posture as “an endless buffet of slop for the slop machines.”
Unlike conventional blocking tools, Miasma does not attempt to identify or reject scrapers by IP address or user-agent string. Instead, it serves unrecognized automated traffic content specifically constructed to corrupt any downstream training dataset that ingests it.
Why It Matters
The release arrives during sustained legal conflict between AI developers and content owners over the use of publicly accessible web content as model training data, with publishers, news organizations, and individual authors having filed copyright claims against major AI companies across multiple jurisdictions. Conventional technical defenses — robots.txt exclusions, IP-based blocking, and user-agent filtering — have faced documented circumvention, with a number of AI crawlers observed ignoring robots.txt directives, rotating IP addresses, or misrepresenting themselves using legitimate user-agent strings.
Miasma’s approach requires no prior identification of which crawlers are operating on a given site. It responds to scraper traffic with adversarial content, turning the crawler’s own link-following logic against it rather than relying on blocklists that require continual updates to remain effective.
Technical Details
Miasma works by generating what Weeks calls “poisoned training data from the poison fountain,” serving it alongside multiple self-referential links that route scrapers back to the Miasma server with each request, creating a recursive loop with no natural exit point. Each response the scraper receives contains additional outbound links, drawing it deeper into an expanding trap.
To activate the trap, operators embed hidden hyperlinks in their site HTML using attributes such as style="display: none;" or aria-hidden="true". These attributes suppress the links from rendered page layouts and exclude them from screen reader output, but automated crawlers typically traverse them regardless. Written in Rust, Miasma is engineered for minimal server overhead: at 50 concurrent scraper connections, Weeks estimates peak memory consumption at approximately 50–60 MB. Requests that exceed the operator-configured maximum number of in-flight connections are rejected immediately with an HTTP 429 (Too Many Requests) status code, rather than being queued, preventing high-volume campaigns from overwhelming the host server.
Who’s Affected
The tool is aimed primarily at individual website operators — independent publishers, bloggers, and small media outlets — who lack the resources for legal action against AI companies and can install Miasma either via Cargo, Rust’s built-in package manager, or through pre-built binaries distributed directly from the GitHub repository. Configuration options cover port binding, host address, and the maximum number of simultaneous in-flight connections.
Weeks explicitly addresses legitimate search crawlers in the project documentation, recommending that operators add robots.txt exclusion rules for Googlebot and Bingbot before deployment, to avoid routing standard search engine indexing traffic into the poison loop alongside AI scrapers.
What’s Next
Weeks includes a direct caution in the repository README — “There is inherent risk in deploying this software” — directing users to read the full configuration guide and disclaimer before going live. As of early April 2026, the repository listed three open issues and one open pull request, indicating active but early-stage community involvement.
Whether poisoned data injected at the scale available to a single site operator can produce measurable quality degradation in large language model training runs at scale is an open empirical question that the project documentation does not address. Author details beyond the GitHub handle austin-weeks were not available at time of publication.
