3 ms·
If it’s a local model, why would you care if it sees your messages or notes?
by azinman2 9mo ago
If it’s a local model, why would you care if it sees your messages or notes?
- plagiarist 9mo agoBecause it is running with --dangerously-allow-all and can make HTTP calls to exfiltrate data. It can also install arbitrary software.
- tomku 9mo agohttps://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ Note that nothing about that depends on it being a local or remote model, it was just less of a concern for local models in the past because most of them did not have tool calling. OpenClaw, for all the cool and flashy uses, is also basically an infinite generator for lethal trifecta problems because its whole pitch is combining your data with tools that can both read and write from the public internet.
- haebom 9mo agoAs another clever person commented earlier, this also serves as a gateway, allowing me to view my local documents and leak them out at any time.