Developers Build 5KB Pure-JavaScript Headless Browser to Bypass DuckDuckGo AI Chat Anti-Bot System
A team of developers has constructed a fully functional headless browser using only 5,408 bytes of obfuscated JavaScript to defeat DuckDuckGo’s anti-bot protection on its free AI chat service duck.ai.
The project began after repeated 500 errors containing the message “no x-vqd-hash-1 token” appeared while building a Telegram proxy bot. The researchers reverse-engineered four rotating challenge variants delivered inside the x-vqd-hash-1 response header, each containing heavily obfuscated JavaScript that must be executed to produce a valid proof-of-browser token.
Challenge Mechanics
Upon receiving the challenge, the synthetic browser performs environment checks that include:
- Verification that native functions contain the string “[native code]”
- Subclassing behavior of Array objects under V8
- Correct normalization of malformed HTML5 markup such as “<p><div></p><p></div”
- iframe contentWindow properties and prototype chain integrity for HTMLDivElement, HTMLElement, and Element
Results are combined with a fabricated stack trace and execution duration metadata, then hashed with a pure-JavaScript SHA-256 implementation before being returned in the same header.
Telegram Bot Capabilities
The resulting serverless Telegram bot supports ten live models, progressive message editing for streaming responses, automatic image generation via the GenerateImage tool, and JPEG-to-PNG conversion for vision requests—all without any external libraries. A dedicated SQLite table persists solved challenge tokens across function invocations.
The authors note that the entire client, including a custom HTML5 parser and DOM mannequin, fits comfortably inside a single 950-line JavaScript file that runs identically in Node.js and lightweight serverless isolates.
Related articles
AI Investigators in SOCs: Limits of Autonomy, Prompt Injection Risks, and the Cost of Over-Reliance
A February 2026 Vectra AI survey of 1,450 security professionals revealed that organizations receive nearly 3,000 daily attack alerts on average, with 63% left unprocessed and 71% of respondents delaying critical tasks at least two days a week. The article examines the push to deploy autonomous AI agents for investigations in Security Operations Centers, highlighting how such systems often fail when confronted with real-world disorder such as inconsistent server timestamps, unapproved software installations, and incomplete logging. It stresses strict limits on AI decision-making authority, especially for blocking systems or revoking access, and warns against treating model confidence scores as reliable error probabilities. Prompt injection attacks via malicious emails, logs, or documents are identified as a novel threat that can manipulate language models into ignoring attacks or leaking data. Research from Microsoft involving 167 analysts showed that false “safe” verdicts from AI increased missed threats by 29 percentage points. The piece concludes that independent human verification of AI-closed cases remains essential to avoid hidden risks behind empty alert queues.
Swordfish Security Raises Investment from VIM Investments to Advance AI Protection and Secure Development Tools
VIM Investments' Pre-IPO 2 fund has acquired a 42.152% minority stake in Swordfish Security, a group combining cybersecurity consulting with tool development. The capital will support expansion of products focused on AI system protection and secure software development practices. Swordfish Security operates through AppSec Solutions, which builds DevSecOps and AI Security offerings, and maintains the Swordfish SAIMM framework for assessing AI protection maturity. Company representatives confirmed the deal but did not disclose the transaction value. The investment aims to shorten development cycles from customer requests to product releases while introducing new AI defense scenarios. Swordfish Security reported 52% revenue growth to 2.1 billion rubles in 2025, partly attributed to rising customer demand for AI security measures.
Eliezer Yudkowsky Explains Why Clever Human-Designed Schemes Fail at ASI Alignment
Eliezer Yudkowsky published the essay Cat-Belling Problems following debates at the ILIAD-2026 conference on mathematical AI safety. The piece uses the historical example of Michael Lorrey's proposed reactionless L-drive to illustrate why complex compensatory systems cannot violate conservation of momentum. Yudkowsky argues that any spreadsheet or design claiming net thrust from standard physics components must contain an accounting error because every individual interaction preserves momentum. He extends the analogy to proposals for solving superalignment of ASI, noting that hidden patented compensators or uninspectable calculations do not change the underlying mathematical impossibility. The essay contrasts superficial generalizations like the Law of White Swans with deep laws derived from Noether's theorem and quantum mechanics. Richard Feynman's encounters with perpetual motion machines of the third kind are cited to show how claims of new physics require experimental demonstration rather than unverified tables.
Troubleshooting AI Bug Hunting: Seven Critical Mistakes That Destroy Report Validity
Two Russian researchers shared detailed lessons from six months of running AI agents on domestic bug bounty platforms. The presentation, originally delivered at OFFZONE, covers hallucinations, lack of validation, threat model misunderstandings, severity inflation, bloated reports, high token costs, and scope violations. Vladislav Bek and Daniil Shushakov describe practical fixes including tool-enabled agents, dual-agent verification, strict templates, and cascaded model architectures. They emphasize that AI must execute real commands in isolated environments rather than fabricate results. The speakers also address scaling on private events, handling model refusals, and the continued necessity of human final validation. Their checklist stresses business context, proven impact, and staying within program boundaries to produce accepted, high-value reports.