10 ms·
You are not supposed to install OpenClaw on your personal computer
https://xcancel.com/BenjaminBadejo/status/2025987544853188836 https://xcancel.com/BenjaminBadejo/status/202598754485318883...
- econ 8mo agoI ran into pope bot https://youtu.be/8uP2IrP3IG8 https://youtu.be/8uP2IrP3IG8
- deleted 8mo ago[deleted]
- StevenNunez 8mo agoWhat's the fun in that? Also I think /stop would help here.
- darth_avocado 8mo agoReally don’t understand why sane developers who for decades have been advocating for best practices when it comes to security and privacy seem to be completely abandoning all of them simply because it’s AI. Why would you ever let a non deterministic program god level access to everything? What could possibly go wrong?
- co_king_5 8mo ago[dead]
- observationist 8mo agoThey're getting replaced by AI anyway, these bleeding edge agents are just surfboards for the wave. Learn fast or die trying, lol.
- autoexec 8mo agoTo the extent that anyone can be replaced they will be replaced and nothing they do now will save them. The good news is that so far I haven't seen companies having much success outright replacing workers with AI chatbots.
- skeeter2020 8mo agoit's not successfully replacing them with AI that is the problem; it's firing them to then replace them with AI which, when it doesn't work is either too late or at best incredibly disruptive for the people impacted.
- autoexec 8mo agoThat's certain true. Lots of letting workers go only to hire new ones at much lower pay
- jacquesm 8mo agoThey don't have the successes but they do replace them. I've seen a couple of examples of that in the last couple of months, there is just no way to avoid these abominations any more.
- monksy 8mo agoThey aren't. They're the ones who are resisting the all in thing on AI stuff. What you're seeing is over reactive trend followers.
- autoexec 8mo agoAnd likely massive amounts of marketing spending pushing for people to bend over and accept AI anything anywhere.
- bubblewand 8mo agoSame as the “MongoDB is webscale” crowd.
- throw10920 8mo agoWho are these developers that have both been "advocating for best practices" and also "seem to be completely abandoning all of them simply because it’s AI"? Can you point to a dozen blogs/Twitter profiles, or are you just inventing a fictitious "other" to attack?
- Macha 8mo agoThe person being quoted for one, who is apparently focused on safety and alignment at meta. Safety being handing over your email credentials to the shiny new thing, apparently
- LudwigNagasena 8mo agoAre they even a developer? “Safety and alignment” as AI buzzwords are quite different from “security and privacy”. In any case, I wouldn’t take a random person with a sinecure job as exemplary of anything.
- cwillu 8mo agoSo, not sane.
- fmajid 8mo agoThe AI ate my email is the new, plausible deniality version of "my dog ate my homework"
- otabdeveloper4 8mo ago> Who are these developers that have both been "advocating for best practices" and also "seem to be completely abandoning all of them simply because it’s AI"? All of them. Apparently uploading all your codez to some cloud provider that doesn't even have a figleaf of a EULA is okay now, because "AI".
- throw10920 8mo ago> All of them. An insane claim with zero evidence provided. You're just making it up. Found the tribalistic propagandist unconcerned with reality or truth.
- ekjhgkejhgk 8mo agoThose people aren't the same. Those are two ideas that you heard from the internet, and you're imagining it's the same person talking.
- HeliumHydride 8mo agoThere's a name for this: https://en.wiktionary.org/wiki/Goomba_fallacy https://en.wiktionary.org/wiki/Goomba_fallacy
- chrysoprace 8mo agoI'm glad that a term for this exists. It's always seemed so silly to me that someone would think that a group of people would all conform to the same opinion.
- CoastalCoder 8mo agoThank you!!! I've been looking for a term for this concept for years!
- jacquesm 8mo agoSome of them are the same. It's a Venn diagram: there are two camps and there is no doubt some overlap because the number of people involved. GP was obviously talking about the overlap, not literally equating this with two specific people or two groups that are 100% overlapping.
- 8mo ago
- cromka 8mo agoIt's greed.
- j45 8mo agoDevelopers with and without devops experience.
- dylan604 8mo agoThis isn't any different than pre-Claude. We've always had people that wrote code, but had no clue about systems. Not everyone is a CS major. I've seen people do the strangest things that you would think a sane person would never do, yet, their the strangeness is happening by someone you would otherwise consider sane/smart. Not everyone is a sysadmin banging perl to automate things.
- j45 8mo agoI would agree that it doesn't have anything to do with Claude. I didn't meant to imply CS majors knew this either. Understanding the impact of letting software run permission and operationally free within or against direct access to other software is a pretty basic thing. Neither deterministic nor non-deterministic software performs as expected without getting it right. We are new to non-deterministic software, let alone how it operates between different layers. DevOps, hosting, security, etc, is all in a way software, and software configuration. The more it's understood, the more it can inform software development, and in the case of openclaw, integrating systems.
- xantronix 8mo agoYou must not say his name. If you say it, you will summon him.
- resonious 8mo agoI agree with a lot of the siblings that it's probably not the same people. But for the overlap that probably does exists, I don't think "because it's AI" is their reasoning. If I were to guess, I'd say it's something closer to "exploring the potential of this new thing is worth the risk to me".
- andai 8mo agoWas building a claw clone the other day when for debugging I added a bash shell. So I type arbitrary text into a Telegram bot and then it runs it as bash commands on my laptop. Naturally I was horrified by what I had created. But suddenly I realized, wait a minute... strictly this is less bad than what I had before, which is the same thing except piped through a LLM! Funny how that works, subjectively... (I have it, and all coding agents, running as my "agent" user, which can't touch my files. But I appear to be in the minority, especially on the discord, where it's popular to run it as the main admin user on Windows.) As for what could go wrong, that is an interesting question. RCE aside, the agentic thing is its own weird security situation. Like people will run it sandboxed in Docker, but then hook it up to all their cloud accounts. Or let it remote control their browser for hours unattended... https://xkcd.com/1200/ https://xkcd.com/1200/
- frenchtoast8 8mo agoThe security team at my company announced recently that OpenClaw was banned on any company device and could not be used with any company login. Later in an unrelated meeting a non technical executive said they were excited about their new Mac Mini they just bought for OpenClaw. When they were told it was banned they sort of laughed and said that obviously doesn't apply to them. No one said anything back. Why would they? This is an executive team that literally instructed the security team to weaken policies so it could be more accommodating of "this new world we live in."
- trehalose 8mo agoI hope the security team talked to the legal team about that. There is potential for OpenClaw to commit crimes on behalf of the company.
- ropetin 8mo agoSimilar thing at my company. Someone /very/ high up in the org chart recently said to the entire company that OpenClaw is the future of computing, and specifically called out Moltbook as something amazing and ground breaking. There is literally no way security would ever let OpenClaw in the same room as company systems, never mind actually be installed anywhere with access to our data. It should be noted that this exec also mentioned we should try "all the AIs", without offering up their credit card to cover the costs. I guess when your base salary is more than most people make in a life time, a few hundred bucks a month to test something doesn't even register.
- xmcp123 8mo agoMoltBook is vibe coded. It passed its own API key via client side JS, and in doing so exposed full read/write access to it’s supabase db, complete with over a million API keys. That is groundbreaking for a product held in such high esteem, just not in a good way. I lack the words to explain my frustration at this timeline.
- DANmode 8mo ago> exposed full read/write access to it’s supabase db, complete with over a million API keys. When was this lol; I knew it didn’t drop out of the news that fast by inertia alone.
- tptacek 8mo agoI'm enthusiastic about AI (it's gone from the 2nd most important thing to happen in my career to tied for first, with the Internet) and I am baffled by OpenClaw.
- eucyclos 8mo agoI thought Ben Goertzel had a good take on it: "someone made hands for a brain that doesn't exist yet"
- neya 8mo ago> why sane developers who for decades have been advocating for best practices when it comes to security and privacy seem to be completely abandoning all of them I'm a sane developer. I do not trust AI at all. I built my own personal OpenClaw clone (long before it was even a thing) and ran controlled experiments inside a sandbox. My stack is Elixir, so this is pretty much easy. If an agent didn't actually respect your requirements, it's just as easy as running an iex command to kill that particular task. In my experience, AI, be it any model - consistently disobeys direct commands. And worse, it consistently tried to cover up its tracks. For example, I will ask it to create a task within my backend. It will tell me it did - for no reason at all, even share me a task ID that never existed. And when asked why it lied, it would actually spin the task up and accuse me of not trusting it. It doesn't matter which vendor, which model. This behaviour is repeatable across models and vendors. Now, why would I give something like this access to my entire personal and professional life? To group me and others like me with the clowns doing this is an insult to me and others who have accumulated decades of experience and security best practices and who had nothing to do with OpenClaw.
- almosthere 8mo ago"ever" is the key word. Like driving, we as humans will cede control, at some point, to AI.
- hugs 8mo agoopenclaw is the napster of itunes. people who have been around long enough know that we're currently in the wild west of networked agentic systems. it's an exciting time to build and explore. (just like napster and early digital music.) eventually some big company will come along and pave the cow paths and make everything safe and secure. but the people who will actually deliver that are likely playing with openclaw (and openclaw-like systems) now.
- mountainriver 8mo agoHonestly it’s been a breath of fresh air to have most of the gatekeeping in software be removed. Seems that it was by and large just people wanting to feel important, and holding onto their positions. Apps need great security, but security can also get out of control. Apps need good abstractions and code hygiene but that too can get out of control. I’ve fallen in love with programming all of again now that I’m not so tied down by perceived perfection.
- cosmic_cheese 8mo agoLots of developers have been flippant for a long time when it comes to the security of the systems they use and violate best practices on a regular basis, often for convenience. Developer ≠ sensible with personal security.
- petterroea 8mo agoThe bar for working security at Meta doesn't seem that high
- cl0zedmind 8mo ago[dead]
- miki123211 8mo agoBecause security isn't the be-and-end-all, it has to serve the goals of the business and its customers. Customers say that they want security with their mouths, but they say that they want features with their wallets. The best improvement to computer security you can make is turning the computer off, but this is clearly not what your (non-HN) customers want you to do. AI has serious security risks (E.G. prompt injection), but it lets you deliver customer value a lot faster. Security doesn't matter if the competitors' technology is so much better that nobody is buying yours.
- antisol 8mo ago> Security doesn't matter if the competitors' technology is so much better that nobody is buying yours. This is true right up until the moment their entire database is available as a torrent.
- freehorse 8mo agoWhich companies collapsed or had to face important consequences because their database leaked?
- antisol 8mo agoThe first one which immediately springs to mind: https://www.abc.net.au/news/2025-08-08/optus-sued-by-privacy-regulator-alleged-failures-22-cyber-attack/105628586 https://www.abc.net.au/news/2025-08-08/optus-sued-by-privacy... I'm sure a search engine could help you find other examples.
- overfeed 8mo ago> Really don’t understand why sane developers who for decades have been advocating for best practices when it comes to security and privacy seem to be completely abandoning all of them simply because it’s AI The deep irony is that the email deletion victim is an "AI alignment specialist" at Meta, and she didn't consider this failure mode.
- rk06 8mo agoThis is The difference between technical and nontechnical audience Relevant xkcd https://xkcd.com/2030/ https://xkcd.com/2030/
- trymas 8mo agoSame "sane developers advocating for best practices" preached to the moon: - Alexa (and other voice assistants) spy microphones in their homes; - Internet connected: - locks; - door, bedroom, living room cameras; - lights, appliances and whatnot; Giving full and unfettered control to their personal computer with all its accounts, apps, etc does not surprise me at all. I wonder what anthropologists will write about us these days 100 years in the future. What is super creepy and super illegal to do for a physical individual, but is given a blank check from society to be done by tech corporations at unimaginable scale. EDIT: also corporations (from my social bubble) are giving (almost) unfiltered access to their data from LLMs (and probably soon a control of that data through "Claw" trend), that would be instantly fireable offence for any employee. Imagine giving enterprise access to some Joe-Claw from the street and allowing him to press any buttons he wants..
- JumpCrisscross 8mo ago> developers who for decades have been advocating for best practices when it comes to security and privacy seem to be completely abandoning all of them simply because it’s AI Risk and reward. That balance, currently, seems tipped to favour risk taking. (Which in turn encompasses both boldness and recklessness.)
- cedws 8mo agoThere’s still sane people out there, I’m one of them, watching this gigantic trash heap ready to go up in flames. It’s not just OpenClaw either, it’s everything. Nobody is paying any attention and when it goes wrong it’s going to be an absolute catastrophe.
- mhitza 8mo agoAre you sure these are the same people and not new people that got hooked on hype?
- tempodox 8mo agoObviouly the assumption of sanity was premature.
- lofaszvanitt 8mo agoOpenClaw has now weeded out the shills, leaving only the real pros :D.
- hiuioejfjkf 8mo ago[flagged]
- blibble 8mo agopretty clear the facebook safety and alignment role is just for show if she couldn't figure this out its like they hired the worst person they could get their hands on
- mv4 8mo agoLinkedIn says she was a researcher. Joined as part of the Meta <> Scale deal with Alexandr Wang.
- observationist 8mo agoSafety and Alignment is just the same old trust & safety people from social media platforms, they somehow managed to convince the people with money of their relevance. I'll never understand that move - the slightest pause for consideration of necessary personnel by those in charge should have nixed any such hiring, but they're spending billions in stock and salary on these folks. Good for them, I guess.
- 8cvor6j844qw_d6 8mo agoAre people really running OpenClaw on their primary machine? Anyone security-conscious would isolate it on dedicated hardware (old laptop, Raspberry Pi, etc.) with a separate network and chat surface.
- amelius 8mo agoDid Hegseth install OpenClaw in the pentagon yet?
- earleybird 8mo agoIt's running his Signal chats. You didn't get the invite???
- latentsea 8mo agoNo, because he's currently clean on opsec.
- chickensong 8mo ago> Anyone security-conscious Most people aren't, including many professional developers.
- KennyBlanken 8mo ago[flagged]
- JoBrad 8mo agoThere are definitely problems with homebrew, but user-owned directories isn’t high on the list, imo. Your ssh private keys, startup scripts, and any number of other things that can do serious damage are all owned by your user. Frankly, if install vim as my user, I want it to execute instead of the built-in version, unless I’m running a command with sudo, in which case the system binaries take precedence. So I don’t even see path order as a major issue here. If someone has compromised your user, you’re compromised whether you’ve used homebrew or not.
- alex_trekkoa 8mo ago[flagged]
- deleted 8mo ago[deleted]
- plagiarist 8mo agoThis is the sanest take I've seen from anyone using the claws. I would still not want the LLM to have read access to email. Email is a primary vector for prompt injection and also used for password resets.
- ericbuildsio 8mo agoAgreed, I wouldn't even trust it with read-only access to my email I'd trust it as much as I would a VA from Fiverr Want it to check you into a flight? Forward the check-in email to its own inbox Read-only access to my calendar; it can invite me to meetings No permissions beyond that
- BloondAndDoom 8mo agoI mean if you are not connecting it to the real things why even bother, just chatgpt or Claude online at that point. We have enough assistants, the key idea with opeclaw is it can do stuff instead of talk with what you have. It’s terrible security but that’s the only way it makes sense. Otherwise it’s just a lot of hoops to combine cron jobs with a AI agent on the cloud that can do things an report back. Not that I think anyone should do it, it’s a recipe for disaster
- recursivecaveat 8mo agoYeah, it's like saying you can hire a con artist as your personal assistant as long as they work from a sealed box and just pass little reviewed paper slips back and forth through a slit. Why have one at that point? Very difficult to be 'assisted' without granting access.
- SafeDusk 8mo ago[flagged]
- hinkley 8mo agoSo... stupid question, if this is true, why isn't it downloaded as a docker image?
- ImPostingOnHN 8mo agoYou can break out of a docker container, especially with the permissions many people would give such a container (privileged=true, etc).
- throwaway920102 8mo agoPeople are working on this stuff as we speak. Stuff like https://fly.io/blog/design-and-implementation/ https://fly.io/blog/design-and-implementation/
- mh2266 8mo agothe point is to give it access to your email so it can do email things, putting it in a container stops it from rm -rf / but it doesn't stop it from, well, doing anything it can do with email
- sowbug 8mo agoDocker won't contain it. If it has access to your email, it can hire someone from TaskRabbit to migrate it onto a new computer it ordered from Amazon.
- hinkley 8mo agoI kind of suspect an AI to sign up for AWS instances using stolen credit cards at some point.
- aitchnyu 8mo agoAI in a box experiment is already underway https://www.explainxkcd.com/wiki/index.php/1450:_AI-Box_Experiment https://www.explainxkcd.com/wiki/index.php/1450:_AI-Box_Expe... While Kagi'ing for above link I saw a handful of links unironically selling "AI in a box" solutions.
- slg 8mo agoThis post exists in that Poe's law purgatory of it being impossible for someone without the proper context to know whether this is sarcastically mocking OpenClaw or an attempt at defending OpenClaw against some of the bad press it has received due to people not understanding the risks involved. Because the comments here are responding of if this post is a sane reasonable take, but I read it and just see a laundry list of restrictions you need to put on OpenClaw listed one after another until you get to the point in which the software is effectively useless.
- fourthark 8mo ago(Which it is?)
- nurettin 8mo agoDidn't all vendors directly or indirectly ban the use of *claw? Why are there still articles about this? Are they unable to detect users?
- SoMomentary 8mo agoHas OpenAI banned it's use already? I hadn't seen that one come through yet.
- ukuina 8mo agoAPI usage is not banned.
- crazygringo 8mo agoNo, not at all. They're banned from using them with flat-fee subscription accounts meant only for first party tools. You're entirely welcome to use them with pay-as-you-go API access. That's what the API is for.
- antisol 8mo agoListen carefully: OpenClaw is basically a real person you have hired, whose capabilities are vast and fast — in ways both good and potentially bad. But you’ve hired it in the absence of a resume or behavioral background check results. ...Except that a human is culpable and subject to consequences when they directly disobey instructions in a way that causes damage, particularly if you give them repeated direct instructions to "stop what you are doing". And also, when it says "You're absolutely right! I disobeyed your direct instructions causing irreparable damage, so sorry, that totes won't happen again, pinky promise!", those are just some words, not actually a meaningful apology or promise to not disobey future instructions. Personally, I question the usefulness of an AI assistant that can't even be trusted to add an entry to my calendar. you withhold and limit access to your devices, your account credentials, and even its own full account permissions, from the start, to the same extent that you would withhold such access from a new hire. No, like I pointed out, a new hire has signed an employment agreement filled with legalese and is subject to legal ramifications if they delete all my emails while I'm screaming "stop what you are doing!". And if they say "oh, sorry, I totally misunderstood your instructions, that won't happen again" and then do it again, they're committing a crime. What's the point of hiring a personal assistant who is incapable of sending email? Isn't that precisely what you hire a PA to do? Would you let a human being with the aforementioned characteristics — brilliant and capable, but lacking a resume or behavioral background check results — directly use your personal computer or your work computer? No. And I also wouldn't hire that person as a PA.
- ericbuildsio 8mo agoGiving OpenClaw permissions on a non-sandboxed account seems like it would massively fragilize my digital life Small upside: it saves a few minutes here and there on some tasks (eg. checking into flights) Massive tail-risk downside: it does something like what's linked in the tweet (eg. deletes my entire inbox)
- throwatdem12311 8mo agoIt doesn’t matter what you’re “supposed to do”. People don’t read manuals or warnings.
- gedy 8mo agoI agree - but what exactly are you supposed to do with it if it has its own email, phone #, etc?
- uniformlyrandom 8mo agoexactly.
- nanobuilds 8mo agoIt can always forward you things to your real email for you to action them. So as a layer doing the boring work of sorting things, researching, and keeping track of changes, but execution, public actions, real-life stuff can still be confirmed by the human (through telegram for example). There are some good uses if managed properly but people tend to trust ais more and more these days.
- yesitcan 8mo agoThis person’s title is “Safety and alignment at Meta Superintelligence”. It must be satire.
- nkrisc 8mo agoLooking at the tweet he’s replying to, I still find it incredible people talk to these LLMs as if they are rational beings who will listen to them. The fact that they sometimes do is almost coincidence more than anything. It’s even more unbelievable that they seem to think instructions are rules it will follow. To paraphrase Captain Barbossa: “They’re more guidelines than actual rules.”
- slopinthebag 8mo agoLol. I tried doing some image generation with SOTA models. I explicitly asked it not to do something it was doing and it would literally do the thing, and straight up tell me it didn't. Unless someone has a cognitive impairment it's just simply not a failure mode of cooperative humans. Same with hallucinations. Both humans and AI can be wrong, but a human has the ability to admit when they don't understand or know something, AI will just make it up. I don't understand why people would ever trust anything important to something with the same failure mode as AI. It's insane.
- astrange 8mo agoImage generation models are usually not LLMs. Only Nano Banana Pro is capable of following negative directions like that.
- nunez 8mo agoNot in my experience. I asked nb to create a transparent rectangle shape and gave it RGB hex for the fill. It created the box but put the hex as text inside of it and used a checkerboard for its background. When I told it that the image wasn't transparent, it wouldn't budge!
- astrange 8mo agoOh yeah, they don't know what "transparent" means. Most of them generate the Photoshop checkerboard background. They also don't know "upside-down". There isn't much R&D going into image models and what you're getting is scraps from labs that care more about other things. NBP is the closest to a reasoning image generator we have.
- peteforde 8mo agoI am baffled by the popularity of *claw but I am always looking to learn, so I was happy to have the algo serve me this YT video of Limor explaining how she had a sandboxed claw running a local LLM to chew through a particularly dense datasheet to create a wrapper library and matching test coverage. https://www.youtube.com/watch?v=fdidNp5IHHI https://www.youtube.com/watch?v=fdidNp5IHHI This example is, as of this moment, the only example that has communicated to me that February 2026's local agent harnesses have some utility in the right context and expert hands. I was particularly bolstered by the unintentional but very real demonstration of how LLMs really can be leveraged to free up humans to spend more parent time with their infants. We spend a lot of characters lamenting how we never got jetpacks, so here's someone doing it right. Edit an hour later: this comment is at -2 as of the time I'm writing this, but apparently those folks don't have anything to say about why this felt important to rail against.
- Spivak 8mo agoI don't use it but am thinking about it because it's very roughly the agent I built myself but with a community around it so I have to do less work fiddling with it. Please people use protection and run this stuff in its own dedicated VM. Treat it like a coworker, they have their own dev setup separate from yours. Any AI from the last few years can even do the work of writing a libvirtd script to handle everything for you. It's touching your data but it least it can't accidentally rm rf your machine.
- syngrog66 8mo agomadness & reeks of setup bait for security exploits
- Animats 8mo agoIs it sufficient to use a VM for isolation? Docker? More cloud services now need role accounts. You need a "can read email but not send or forward" account, for example. And "can send only to this read-only contacts list".
- SV_BubbleTime 8mo agoIt’s called Identity and Access Management, IAM. Not sure I’ve ever seen an email provider with IAM for the accounts.
- Karrot_Kream 8mo agoI saw the original tweet before it got lampooned everywhere, looked at the author's bio, and it felt obviously like engagement bait to me. Why would someone actually post about how "humbled" they are that their LLM assistant deleted their emails, and this person is a VP at Meta? I may be wrong but it feels obviously written to go viral. All it would have taken is for the author to not post and nothing would have happened. I was originally tempted to make fun of the author myself but decided not to feed what I thought was obvious engagement bait. Moral outrage about how everything is in decline is absolutely the viral currency of social media and HN is no exception. I find it amazing how few people doubt the sincerity of the original post. Probably hundreds of thousands of aggregate words spent on how everything is going downhill, but not one on the intentions of the original post.
- vivzkestrel 8mo ago- let me paraphrase it even better for you "You are not supposed to install OpenClaw at all"
- Analemma_ 8mo agoBut look how efficient I am now that my inbox is empty!
- petterroea 8mo agoAm I understanding correctly that he is freaking out because his little hobby project that blew out of proportions is causing people harm?
- snowhale 8mo ago[flagged]
- mh2266 8mo ago> isn't just the attack surface — it's the trust boundary collapse sigh
- deleted 8mo ago[deleted]
- orbital-decay 8mo agoSandboxing is necessary but you still have to trust it with the thing it's supposed to operate on, that means it should be able do the job correctly and be resistant to prompt injections (social engineering in the case of that human worker example). In its current state neither is really possible. It's a system of a highly experimental nature, use your own damn sense, don't give it too much and don't rely upon it.
- bandrami 8mo ago"Hey Claude, summarize, this document I downloaded from the Internet" being a use-case people actually talk about is still mind boggling to me.
- cheeze 8mo agoI'm curious why? I do this all the time. Saves me time and lets me pull information quickly. I'm not running it in a container that has access to my local filesystem or anything...
- bandrami 8mo agoIf it has no access to your filesystem or network services that's better, but you're still giving input from an unknown party to an interpreter, with the extra bonus of that interpreter being non-deterministic by design. But then again people today will also pipe curl to bash, so I may have lost this battle a while ago...
- munchler 8mo ago> "Hey Claude, summarize, this document I downloaded from the Internet" I think you've created confusion with this example due to its ambiguity. Let's be clear about the difference between a chatbot and an agent: Asking a chatbot (e.g. vanilla Claude) to summarize an unknown document is not risky, since all it can do is generate text. Asking an agent (e.g. Claude Code) to summarize an unknown document could indeed be risky for the reason you state.
- alun 8mo agoThis is a good example of why companies that have IAM figured out (Amazon, Google, etc.) might do well as AI becomes more embedded into our daily lives.
- mindslight 8mo agoIs anybody else getting strong "Do not taunt Happy Fun Ball" vibes from this?
- aezart 8mo agoRegarding the interactions shown in the screenshots: LLMs are pattern-matching machines. They keep the pattern going. Once "the agent disobeys the human's instructions" has made its way into the context, that is the pattern that it's going to keep matching. No amount of telling it to stop will make it stop. The only possible solution is excising it from context and replacing it with examples of it doing the right thing. Given that these models have massive context windows now and much of the output is hidden from the user, that's becoming less viable.
- malshe 8mo agoRather than giving access to my emails I would let it loose on LinkedIn. It’s full of bots anyway.
- Frannky 8mo agoI want to use OpenClaw, but it seems like a mess. I want to use glam coding plan as the backend with the since it's cheap. I found ZeroClaw to be an interesting option, maybe hosted on Hetzner. I don't want to give it access to my stuff—I just need it to remind me of things and call APIs that do stuff (like looking for papers and converting them into audio, or suggesting a grocery list—all behind APIs), and talk to me via WhatsApp/telegram. I was also thinking about making a FastAPI server that Claw can call instead of using skills. Has anyone tried something like this? Do you think it's a good idea / architecture?
- Alifatisk 8mo agoI had Openclaw running in a separate machine on glm coding plan and connected to its own Whatsapp account. Worked fine. However, Openclaw sucks at reminding. It could barely handle cron jobs at all. My workaround for it was to instruct it to add reminders to its heartbeat.md with a clause to run when a certain datetime is passed (heartbeat is run every 30m).
- anon115 8mo ago[flagged]
- bad_username 8mo agoI feel this OpenClaw stuff is a bit like the "crypto" of agentic AI. Promise much, move fast and break things, be shiny and trendy, have a multitude of names, be moderately useful while things go right (and be very useful to malicious actors), be catastrophic and leave no recourse when things inevitably go wrong.
- dangus 8mo agoUltimately it’s a solution in search of a problem. Nobody really wants to over-automate their workflows and life if the tradeoff is even a modest decline in accuracy.
- stavros 8mo agoIf you want something you can install on your personal computer, I made one: https://github.com/skorokithakis/stavrobot https://github.com/skorokithakis/stavrobot Obviously, it can't do everything OpenClaw can, because it doesn't have unfettered access to data you don't even know it has, but it'll only have access to the data you give it access to. It's been really useful for me, hopefully it'll be useful to someone here.
- aanet 8mo agoSorry, I LOL'd. This is too funny to not laugh at the absurdity of "safety and alignment" researchers blindly trusting agents like Claw without fully understanding. Or maybe they were researching.
- Kiboneu 8mo agoYeah. Pretty careless from the lenses of AI safety research. Considering this is from a team at Meta, it’s not surprising that it is roleplaying.
- 1970-01-01 8mo agoI object to the term install. It's just a bunch of hacks glued together with a little bit of UI polish. Bloated by default.
- abeppu 8mo agoI feel like most participants in the thread are on the same page about limiting openclaw's access to anything that matters. But I wonder what things these people approve for Claude code and it's equivalents? Where's the line?
- mhher 8mo ago> You are not supposed to install OpenClaw Sentence could have ended there
- Surac 8mo agoOne should not build a machine in the image of man. From Dune
- dSebastien 8mo agoSafer approach: https://www.dsebastien.net/how-to-self-host-openclaw-securely-on-a-vps-a-security-first-guide/ https://www.dsebastien.net/how-to-self-host-openclaw-securel...
- akmarinov 8mo agoYeah but then it’s useless
- ksynwa 8mo agoThis response encapsulates my feelings perfectly: > if i had your job they would have had to waterboard this interaction out of me
- bsoles 8mo agoIf only I knew enough finance about making a lot of money from the impending collapse of this AI stupidity and the stupidity of AI grifters. I would put real money on it if anybody has suggestions.
- PranayKumarJain 8mo ago[dead]
- ildar 8mo ago[dead]
- throwback_dev 8mo ago[dead]
- ildar 8mo ago[dead]
- ildar 8mo agoUpdate: SecurityScorecard just published numbers that make this worse than the original post suggested. 40,214 exposed instances. 63% vulnerable. 12,812 exploitable via RCE. Endor Labs dropped 6 new CVEs this week. https://www.infosecurity-magazine.com/news/researchers-40000-exposed-openclaw/ https://www.infosecurity-magazine.com/news/researchers-40000... Malwarebytes describes OpenClaw as "an over-eager intern with an adventurous nature, a long memory, and no real understanding of what should stay private." The Dutch DPA has now formally warned organizations not to deploy OpenClaw on systems handling sensitive data. The practical question remains: most people will run it anyway because it is useful. What runtime monitoring do you layer on top? Sandboxes help with blast radius but do not monitor credential access, skill behavior, or network egress within the sandbox.