Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Klaus – OpenClaw on a VM, batteries included

klausai.com

Post reply on HN
Print view View original

61–70 of 104 posts

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#61

Post by lifis »

Tharre wrote: post #37

I don't get it. The point of OpenClaw is it's supposed to be an assistant, helping you with whatever random tasks you happen to have, in natural language. But for that to work, it has to have access to your personal data, your calendar, your emails, your credit card, etc., no? Are there other tasks that people commonly want to run, that don't require this, that I'm not aware of? If so I'd love to hear about them. The…

You can solve that by requiring confirmation for anything except reading information from trusted sites. Web visits can be done without confirmation by reading a cached copy and not executing any JavaScript on it with network access (otherwise visiting arbitrary sites can leak information via the URLs sent to arbitrary servers)

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#62

Post by docybo »

Feels like most agent security discussions focus on where the agent runs (VMs, sandboxes, etc), but not whether the action itself should execute.

Even in a locked-down VM the agent can still send emails, spin up infra, hit APIs, burn tokens.

A pattern we've been experimenting with is putting an authorization boundary between the runtime and the tools it calls. The runtime proposes an action, a policy evaluates it, and the action only runs if authorization verifies.

Curious if others building agent runtimes are exploring similar patterns.

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#65

Post by robthompson2018 »

ericlevine wrote: post #57

> Connecting your email is still a risk. > If you’ve built something agents want, please let us know. Comments welcome! I'll bite! I've built a self-hosted open source tool that's intended to solve this problem specifically. It allows you to approve an agent purpose rather than specific scopes. An LLM then makes sure that all requests fit that purpose, and only inject the credentials if they're in line with the appro…

Would love to see any evals you've run of this system

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#66

Post by [deleted] »

docybo wrote: post #62

Feels like most agent security discussions focus on where the agent runs (VMs, sandboxes, etc), but not whether the action itself should execute. Even in a locked-down VM the agent can still send emails, spin up infra, hit APIs, burn tokens. A pattern we've been experimenting with is putting an authorization boundary between the runtime and the tools it calls. The runtime proposes an action, a policy evaluates it, an…

[deleted]

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#67

Post by simple10 »

Klaus looks great! It's definitely looks like a step up from the one-click VPS deploys that are terribly insecure.

I spent the past month hacking on openclaw to play nice in a docker container for my own VPS use.

This project has a lot of useful debugging tools for running multiple claws on a single VPS:

https://github.com/simple10/openclaw-stack

For average users, Klaus is a much better fit.

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#68

Post by lombasihir »

docybo wrote: post #62

Feels like most agent security discussions focus on where the agent runs (VMs, sandboxes, etc), but not whether the action itself should execute. Even in a locked-down VM the agent can still send emails, spin up infra, hit APIs, burn tokens. A pattern we've been experimenting with is putting an authorization boundary between the runtime and the tools it calls. The runtime proposes an action, a policy evaluates it, an…

agree, maybe use threadlocker-like mode? confirm any action before it ran, but then it defeat the purpose of autonomous agents.

Re: Show HN: Klaus – OpenClaw on a VM, batteries included

#69

Post by iJohnDoe »

robthompson2018 wrote: post #10
ndnichols wrote: post #5

This sounds awesome and exactly like the easy and safe on-ramp to OpenClaw that I've been looking for! I want to believe. Two questions as a potential user who knows the gist of OpenClaw but has been afraid to try it: 1. I don't understand how the two consumption credits play into the total cost of ownership. E.g. how long will $20 of Orthogonal credits last me? I have no idea what it will actually cost to use Klaus/…

Our average user spends $50 a month all-in (tokens and subscription). If you're budget conscious you can use a cheap model (eg Gemini Flash) or even a free one. I confess I am a snob and only use Claude Opus, but even using OpenClaw all day every day I only spend about $500 a month on tokens. Orthogonal credits are used more frequently by power users. For everyday tasks they'll last a very long time, I don't think an…

Thanks for giving real-world examples of your usage.

Do you think it’s worth $500 a month? Also, maybe tough to answer, does it seem like the token usage ($500 a month) would be equivalent if you did the same things using Claude or GPT directly?

My reason for asking is because I tried OpenClaw and a quick one-line test question used 10,000 tokens. I immediately deleted the whole thing.

Post reply on HN