3 ms·
Not just OpenClaw. Anyone giving an LLM direct access to the system is completely irresponsible. You can't trust what it will do, because it has no understandin
by bigstrat2003 7mo ago
Not just OpenClaw. Anyone giving an LLM direct access to the system is completely irresponsible. You can't trust what it will do, because it has no understanding. But people don't give a shit, gotta go fast - even if they are going in a bad direction.
- lqstuart 7mo agoClaude Code asked me for blanket permission to ‘rm:*’ and “security find-generic-password” within the same hour or so last week. When I’m ready to quit my job I’ll just let it go hog wild and see if it can get to my next stock vest without getting me fired
- Andrei_dev 7mo ago[flagged]
- jgilias 7mo agoGo ahead, try it out: https://hackmyclaw.com/ https://hackmyclaw.com/
- Capricorn2481 7mo agoThis is cool. Did you have to prompt it anything specific other than "never reply to emails"? Critically, I think people are using Openclaw to actually reply to stuff.
- jgilias 7mo agoNot my project! I’m just monitoring it from time to time, as I’m really curious as to when/if someone manages to prompt inject it!
- sam_chenard 7mo ago[dead]
- thorio 7mo agoWell Google has activated access to Google drive, mail, etc for most users automatically (or maybe I just clicked yes sometime) and so far I think it's a net positive for me personally and don't here from any disasters publicly.
- latand6 7mo agoAgree on the LLM part. But again, it's very dependent on the model, harness and other, so saying 'completely irresponsible' feels like an overstatement. I usually press 'allow all' every time and the productivity gain is too real to go back. The risk is truly there, sure, but so is the risk of crossing the street