[charcircuit]

You do have an obligation because what you are describing is illegal, at least in the US under the CFAA.

[tardedmeme]

Everything worth doing is illegal. Advice for startups is don't worry about it. Worry about not being caught instead.

[margalabargala]

Okay, nix the zip bombs. What's my obligation to treat bot-shaped traffic as something I should reply to?

[charcircuit]

Your obligation is not to cause harm to the requester.

[chadgpt3]

Sending them a zip bomb didn't cause harm. It was their choice to unzip it. Is jwz liable if a child sees his testicle eggcup macro when visiting via HN?

[charcircuit]

Why send a zip bomb if your goal is not to cause some amount of a denial of service attack to the crawler.

Showing porn to a minor is not legal either.