4 ms·
Yes, yes it is. And it's amaaaazing. We're going to have lots of sharp edges getting stuff like this secured, but it is not going to go away. Too useful.
by vessenes 7mo ago
Yes, yes it is. And it's amaaaazing. We're going to have lots of sharp edges getting stuff like this secured, but it is not going to go away. Too useful.
- plufz 7mo agoCan you tell me about your favorite use cases?
- mstkllah 7mo agoWhat are your uses for it? If you don't mind sharing.
- quietsegfault 7mo agoI haven’t found ANY uses for it where it actually did what it was supposed to do.
- pupppet 7mo agoI wonder about this as well. I see people breathlessly talking about how it manages their inbox or checks flight statuses, but how often should you need a bot for these things?
- sodapopcan 7mo agoWriting blog posts and HN comments about how awesome OpenClaw is its #1 utility.
- phil21 7mo agoFor me, personal home IT “chores” that I’ve put off for years. I can do them, but god what a pain in the ass to spin up a VM, configure Prometheus, configure grafana, configure a bunch of collectors for my WiFi and network infrastructure, and then spend a night or three tweaking dashboards and re-learning promql or whatever. I just end up never doing it. Got it done in a couple hours with openclaw. I’m sure there are much better ways to do that, which I will now learn in time due to the initial activation energy being broken on the topic. But for now, it’s fun running down my half decade old todo list.
- simonw 7mo agoThe first company to deliver a truly secure Claw is going to make millions of dollars. I have no idea how anyone is going to do that.
- _pdp_ 7mo agoThere are secure alternatives but they are not making millions of dollars.
- simonw 7mo agoWhich secure alternatives? I've not seen any yet.
- _pdp_ 7mo agoConnecting telegram to an agent with a bunch of skills and access to isolated compute environment is largely a solved problem. I don't want to advertise but here but plenty of solutions to spin this up, including what we have built.
- lemming 7mo agoBut if it doesn’t have access to the network, then it’s just not very useful. And if it does, then it’s just a prompt injection away from exfiltrating your data, or doing something you didn’t expect (eg deleting all your emails).
- feznyng 7mo agoThat isn't secure is the issue, the more things you have it hooked up to the more havoc it can cause. The environment being locked down doesn't help when you're giving it access to potentially destructive actions. And once you remove those actions, you've neutered it.
- _pdp_ 7mo agoThe openclaw security model is the equivalent of running as root - i.e. full access. If that is insecure the inverse of it is running without any access as default and adding the things that you need. This is pretty much standard security 101. We don't need to reinvent the wheel.
- user3939382 7mo agoYou assume the security is something you bolt on rather than the security weakness being inextricable from the value. The superior approach is to distill what the LLM is doing, with careful human review, into a deterministic tool. That takes actual engineering chops. There’s no free lunch.