I'm a history major who built an air-gapped Bluetooth mesh to kill bots: Bot detection system using a Bluetooth mesh network

In an unexpected crossover of disciplines, a history major has engineered a security tool that tackles bot attacks through an air-gapped Bluetooth mesh network approach. Instead of relying on traditional network monitoring techniques, this system deploys a mesh of Bluetooth connections between physical devices to establish trust and verify human users. The most striking aspect is how it avoids cloud service dependencies entirely, making it a compelling option for environments requiring high security.

The system's architecture centers on pairing devices within a Bluetooth mesh network that operates independently from the internet. By using low-energy Bluetooth signals (BLE), devices exchange short-range cryptographic keys, establishing a peer-to-peer verification layer. This method effectively short-circuits automated attack vectors like headless browsers or request spam because bots can't access the physical layer of Bluetooth communication. The solution is particularly well-suited for applications requiring high-fidelity authentication without exposing sensitive credentials to online threats.

What sets this apart from conventional anti-bot solutions is its physical security orientation. Rather than analyzing HTTP traffic or browser fingerprints, the system relies on the physical presence of verified devices in local proximity. The air-gapped nature prevents remote exploitation, and the mesh design ensures redundancy if any single device is compromised. For users in government, finance, or other sectors where online spoofing threats are acute, this represents a fundamentally different approach to security validation.

While the proof of concept is promising, potential deployment will require careful consideration of device compatibility and power consumption constraints of Bluetooth LE. The absence of a published GitHub repository and documentation also means developers will need to reverse-engineer implementation details until more public materials are available. Nonetheless, the intellectual heft behind this approach earns it a place among the more intriguing developments in the anti-bot space