6 ms·
[stub for offtopicness and general piling-on behavior, which we don't want on this site] [[attacking project creators when they show up to discuss their work i
by dang 7mo ago
[stub for offtopicness and general piling-on behavior, which we don't want on this site]
[[attacking project creators when they show up to discuss their work is particularly harmful; please don't ever do that here]]
[[[if you posted any of these, we'd appreciate it if you'd please review https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html and stick to the rules from now on]]]
- bigstrat2003 7mo agoIf you're running OpenClaw, you already threw security and reliability out the window by running LLMs on the command line. It's a bit late to start worrying now.
- deadbabe 7mo ago[flagged]
- EA-3167 7mo agoIn this case I'd say that it was made not to enable that, but in total disregard of its realistic uses and risks. In a sense this is less... deliberate poisoning, and more doing a bad job cutting heroin with fentanyl for distribution. Yeah the result is the same, but the cause is negligence to the point of parody rather than outright malice.
- throwatdem12311 7mo agoSome people are so stupid it is indistinguishable from evil.
- cactusplant7374 7mo agoWhat reason would Steinberger have for doing that? It was his hobby project.
- asdff 7mo agoHe doesn't need a reason. He could have been captured by intelligence after the fact.
- throwatdem12311 7mo agoYou can’t think of a single reason? Intelligence asset. Useful idiot. Plenty of reasons.
- crazy5sheep 7mo ago[dead]
- butlike 7mo agoHanlon's Razor https://en.wikipedia.org/wiki/Hanlon%27s_razor https://en.wikipedia.org/wiki/Hanlon%27s_razor
- deadbabe 7mo agoThat razor is poorly understood. It’s not malice if it can be explained by stupidity. In this case it’s not explained by stupidity, as the guy who made OpenClaw is very smart. Therefore, it can only be malice.
- podgorniy 7mo ago[flagged]
- tgv 7mo agoYour comment is obviously against the rules, but I read it as: Why are people not more careful? This is some unknown, app, with unknown, unvetted depths, and you only like it because other people say it's shiny and AI. It made you giddy, and you forgot that giving a tool permissions is an invitation to hackers. Well, you went ahead and ignored all common sense, and here we are.
- podgorniy 7mo agoThere are many "right" ways to read my comment. Reading it says more about reader than the writer. And yes, most probably I violated some spoken/unspoken rules and ready to bear consequences. -- Common sense abotu security has shifted significantly. You're (me including) with out common sense of security are in minority today. We're uncommon. Wait till people start questioning such stance. -- I just was reading docs on plugin for toddlywiki which makes gives it multiuser support and lan accessibility. The level of awarness of the risks of opening your tw server (i't like 5-ish years ago) to LAN is almost read like a satire from where we're today.
- fraywing 7mo ago[flagged]
- jstanley 7mo agoBut this is nothing to do with the agent being tricked. This is ordinary old-fashioned code being tricked!
- fraywing 7mo ago[dead]
- paulhebert 7mo agoBut was the code written by an agent? It's agents all the way down
- neya 7mo ago[flagged]
- plestik 7mo ago[flagged]
- lp0_on_fire 7mo agoHave you met these AI companies yet?
- inetknght 7mo ago> There used to be a time where people who shipped CVEs took accountability. I see you haven't heard of Microsoft...
- ua709 7mo agoWhat time was that and who do we get to blame for Log4j?
- orsorna 7mo ago[flagged]
- tomhow 7mo agoWe detached this subthread from https://news.ycombinator.com/item?id=47629849 https://news.ycombinator.com/item?id=47629849 and marked it off-topic.
- plestik 7mo agoWhy?
- tomhow 7mo agoIt breaks several guidelines: Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes. Comments should get more thoughtful and substantive, not less, as a topic gets more divisive. Please don't fulminate. Please don't sneer. Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something. The guidelines still apply, even if you feel negatively towards a project and its creator. Indeed it's even more important to make the effort to heed the guidelines for topics you feel negatively towards (after all, it's easy to be respectful about things we feel positively towards). https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- mvdtnz 7mo ago[flagged]
- rob 7mo ago[flagged]
- rdtsc 7mo ago- "OpenClaw, read the code" - "You're absolutely right. One should read and understand their own code. I did, and it looks great"
- TZubiri 7mo agoI'm critical of OpenClaw and even the author to some extent, but I prefer to have nuanced and compartmentalized conversations, on a thread about a specific vulnerability, it's much more productive to talk about the specific vulnerability rather than OpenClaw as a whole. Otherwise we would only have generic OpenClaw conversations and we would only be saying the same thing.
- maxbond 7mo agoThe comment could have been more substantive but it isn't generic or tangential. Discussing a vulnerability ultimately means discussing the failures of process that allowed it to be shipped. Especially with these application-level logic bugs that static analyzers can't generally find, the most productive outcome (after the vulnerability is fixed) is to discuss what process changes we can make to avoid shipping the next vulnerability. I'm sure there's hardening that can be done in OpenClaw but the premise of OpenClaw is to integrate many different services - it has a really large attack surface, only so much can be done to mitigate that, so it's critical to create code review processes that catch these issues. OpenClaw is probably entering a phase of it's life where prototype-grade YOLO processes (like what the tweet describes) aren't going to cut it anymore. That's not really a criticism, the product's success has over vaulted it's maturity, which is a fortunate problem to have.
- popalchemist 7mo ago[flagged]
- pym4n 7mo agoGuys, OpenClaw is a toy, that's it!
- LucidLynx 7mo ago[flagged]
- ponector 7mo ago[dead]
- equasar 7mo ago[flagged]
- tomhow 7mo agoYou can't comment like this on Hacker News. The guidelines make it clear we're trying for better than this. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html We detached this comment from https://news.ycombinator.com/item?id=47629849 https://news.ycombinator.com/item?id=47629849 and marked it off topic.
- hmokiguess 7mo ago[flagged]
- rybosome 7mo ago[flagged]
- dang 7mo agoPlease make your substantive points without crossing into personal attack. Your comment would be fine but for the paragraph in the middle where it does that. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- sbochins 7mo ago[flagged]
- dang 7mo agoPlease don't cross into personal attack. It destroys what this site is for, and you can always make your substantive points without it. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- croes 7mo agoDidn‘t know that pointing out a lack of accountability is seen as personal attack. Who wants the fame must also take the blame. Especially if they create a dangerous tool.
- dang 7mo agoWe don't want mobs on HN. There was very clearly a mob dynamic happening in the replies. Edit: there was another case of this recently: https://news.ycombinator.com/item?id=47576107 https://news.ycombinator.com/item?id=47576107 https://news.ycombinator.com/item?id=47576084 https://news.ycombinator.com/item?id=47576084 The point is that mob dynamics do more damage to the community than the threads add value, and protecting the community has to be the high-order bit.
- 8593376393 7mo ago[dead]