Misleading code names can derail an AI-assisted investigation

A browser-fingerprinting investigation found alarming function names and instruction-like strings inside an obfuscated anti-bot script. Researcher veritas reports that some models refused to analyze it, while another helped reveal ordinary browser and graphics checks. The author suspects deliberate interference with AI-assisted analysis; the article does not establish that the script performs the harmful activities suggested by those names.

veritas · nullpt.rs · Oct 28, 2026

Why it matters

Reviewers need to trace reachable behavior and treat embedded instructions as untrusted data rather than accept names as evidence.

More context

The October 28 report began with a Playwright crawl of ten thousand websites and inspection of canvas-fingerprinting output. It includes code excerpts and an explanation of the collected browser signals; no script from the source was executed for this edition.

Keep in mind

The proposed anti-analysis intent is the researcher’s inference. A few reported model responses do not establish how all tools, prompts or later model versions behave.

Original read