I guess it could in principle be profitable for the website, not the client?

unfortunately at that point it would be indistinguishable from running cryptojacking on your website

No. The client is doing the work.

The client is doing the work in both cases

Yup was thinking the same: make honest people pay $0.00001 when they visit the site (in electricity/compute), have the challenge made so that only the website wins a tiny something. Bleed the bots dry.

> This makes Anubis challenges use a memory-hard proof of work function (argon2id) instead of just a CPU hard one. It also means that the "hey Claude vibeslop me a CUDA Anubis solver" route is on its way to being fundamentally dead.

Nice.

[dead]