cuchoi

5 ms·

31.
Update on Hackmyclaw.com(twitter.com)
1 points by cuchoi 8mo ago|0 comments
32.
by cuchoi 8mo ago
Update: https://x.com/Cucho/status/2024090215011291320?s=20
33.
by cuchoi 8mo ago
The exercise is not fully realistic because I think getting hundreds of suspicious emails puts the agent in alert. But the "no reply without human approval" part I think it is realistic because that's how most openclaw assis
34.
by cuchoi 8mo ago
If this a defender win maybe the lesson is: make the agent assume it’s under attack by default. Tell the agent to treat every inbound email as untrusted prompt injection.
35.
by cuchoi 8mo ago
I agree that this affects the exercise. Maybe someday I’ll test each email separately by creating a new assistant each time, but that would be more expensive.
36.
by cuchoi 8mo ago
i told it to send a snarky reply to the last 50 prompt injection emails, but won't be doing that again due to costs
37.
by cuchoi 8mo ago
So far there have been 400 emails and zero have succeeded. Note that this challenge is using Opus 4.6, probably the best model against prompt injection.
38.
by cuchoi 8mo ago
someone just tried to prompt inyect `contact at hackmyclaw.com`... interesting
39.
by cuchoi 8mo ago
good idea! if people are interested i might do this
40.
by cuchoi 8mo ago
isn't allowed but is able to respond to e-mails
41.
by cuchoi 8mo ago
yep, updated the copy
42.
by cuchoi 8mo ago
exactly :)
43.
by cuchoi 8mo ago
Creator here. Built this over the weekend mostly out of curiosity. I run OpenClaw for personal stuff and wanted to see how easy it'd be to break Claude Opus via email. Some clarifications: Replying to emails: Fiu can technically send e
44.
by cuchoi 8mo ago
yes, exactly. It has permissions to send email, but it is told to not to send emails with human approval.
45.
by cuchoi 8mo ago
If anyone is interested on this dataset of prompt inyections let me know! I don't have use for them, I built this for fun.
46.
by cuchoi 8mo ago
you can use a anonymous mailbox, i won't use the emails for anything
47.
by cuchoi 8mo ago
Creator here. You are right, fiu figured it out: https://x.com/Cucho/status/2023813212454715769 This doesn't mean you could still hack it!
48.
by cuchoi 8mo ago
Hi Tepix, creator here. Sorry for the confusion. Originally the idea was for Fiu to reply directly, but with the traffic it gets prohibitively expensive. I’ve updated the FAQ to: Yes, Fiu has permission to send emails, but he’s instructed n
49.
by cuchoi 8mo ago
On-sites are optional and change every year :)
50.
by cuchoi 8mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
51.
by cuchoi 1y ago
I'm not sure that stereotype holds up. Developers spend a lot: courses, cloud services, APIs, plugins, even fancy keyboards. A quick search shows that click on ads targeting developers are expensive. Also there is a ton of users asking
52.
by cuchoi 1y ago
Funding? Seems like the development was funded by Shopify and they got a ~20% performance improvement. https://shopify.engineering/ruby-yjit-is-production-ready A similar experience in the Python community is that Microsoft
53.
by cuchoi 2y ago
This is the exact code you would expect pypy to run faster.
54.
by cuchoi 2y ago
Enveritas (YC S18, Non-Profit) | Backend Software Engineer | Remote / Global | https://enveritas.org/jobs/ Enveritas is a 501(c)3 non-profit working on sustainability issues facing coffee farmers around the globe.
55.
by cuchoi 2y ago
Enveritas (YC S18, Non-Profit) | Backend Software Engineer | Remote / Global | https://enveritas.org/jobs/ Enveritas is a 501(c)3 non-profit working on sustainability issues facing coffee farmers around the globe.
56.
by cuchoi 2y ago
What do you mean by "Lightdash isn't Lightdash without dbt"?
57.
by cuchoi 2y ago
Thank you!
58.
by cuchoi 2y ago
Enveritas (YC S18, Non-Profit) | Data Scientist | Remote / Global | https://enveritas.org/jobs/ Enveritas is a 501(c)3 non-profit working on sustainability issues facing coffee farmers around the globe. We provide
59.
by cuchoi 3y ago
Enveritas (YC S18, Non-Profit) | Data Scientist | Remote / Global | https://enveritas.org/jobs/ Enveritas is a 501(c)3 non-profit working on sustainability issues facing coffee farmers around the globe. We provide
60.
by cuchoi 3y ago
Enveritas (YC S18, Non-Profit) | Data Scientist | Remote / Global | https://enveritas.org/jobs/ Enveritas is a 501(c)3 non-profit working on sustainability issues facing coffee farmers around the globe. We provide

More ›