Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Claws are now a new layer on top of LLM agents

twitter.com

Post reply on HN
Print view View original

141–150 of 1001 posts

Re: Claws are now a new layer on top of LLM agents

#141

Post by embedding-shape »

mikkupikku wrote: post #139
embedding-shape wrote: post #136

Earlier quoted context omitted.

So why are these people not involved from the first place? Seems like a huge management/executive failure that the right people who needs to check off the design weren't involved until after developers implemented the feature. You seem to blame the person who is trying to save the company from security issues, rather than placing the blame on your boss that made you do work that would never gotten approved in the fir…

Because they don't respond to their emails until months after they were nominally brought into the loop. They sit back jerking their dicks all day, voicing no complaints and giving no feedback until the thing is actually done. Yes, management was ultimately at fault. They're at fault for not tard wrangling the security guys into doing their jobs up front. They're also at fault for not tard wrangling the security guys…

Again sounds like a management failure. Why aren't you boss talking with their boss and asking what the fuck is going on, and putting the development on hold until it's been agreed on? Again your boss is the one who is wasting your time, they are the one responsible for that what you spend your time on is actually useful and valuable, which they clearly messed up in that case.

Re: Claws are now a new layer on top of LLM agents

#143

Post by [deleted] »

tovej wrote: post #80

Ah yes, let's create an autonomic actor out of a nondeterministic system which can literally be hacked by giving it plaintext to read. Let's give that system access to important credentials letting it poop all over the internet. Completely safe and normal software engineering practice.

[deleted]

Re: Claws are now a new layer on top of LLM agents

#144

Post by backscratches »

fxj wrote: post #69

He also talks about picoclaw which even runs on $10 hardware and is a fork by sipeed, a chinese company who does IoT. https://github.com/sipeed/picoclaw another chinese coompany m5stack provides local LLMs like Qwen2.5-1.5B running on a local IoT device. https://shop.m5stack.com/products/m5stack-llm-large-language... Imagine the possibilities. Soon we will see claw-in-a-box for less than $50.

It's just sending API calls to anthropic, $50 is overkill.

Re: Claws are now a new layer on top of LLM agents

#145

Post by beaker52 »

ggrab wrote: post #53

IMO the security pitchforking on OpenClaw is just so overdone. People without consideration for the implications will inevitably get burned, as we saw with the reddit posts "Agentic Coding tool X wiped my hard drive and apologized profusely". I work at a FAANG and every time you try something innovative the "policy people" will climb out of their holes and put random roadblocks in your way, not for the sake of actual…

The difference is that _you_ wiped your own hard drive. Even if prompt injection arrives by a scraped webpage, you still pressed the button.

All these claws throw caution to the wind in enabling the LLM to be triggered by text coming from external sources, which is another step in wrecklessness.

Re: Claws are now a new layer on top of LLM agents

#146

Post by sergiomattei »

_pdp_ wrote: post #37

You can take any AI agent (Codex, Gemini, Claude Code, ollama), run it on a loop with some delay and connect to a messaging platform using Pantalk ( https://github.com/pantalk/pantalk ). In fact, you can use Pantalk buffer to automatically start your agent. You don't need OpenClaw for that. What OpenClaw did is to show the messages that this is in fact possible to do. IMHO nobody is using it yet for meaningful things…

No shade, I think it looks cool and will likely use it, but next time maybe disclose that you’re the founder?

Re: Claws are now a new layer on top of LLM agents

#147

Post by mikkupikku »

embedding-shape wrote: post #141
mikkupikku wrote: post #139

Earlier quoted context omitted.

Because they don't respond to their emails until months after they were nominally brought into the loop. They sit back jerking their dicks all day, voicing no complaints and giving no feedback until the thing is actually done. Yes, management was ultimately at fault. They're at fault for not tard wrangling the security guys into doing their jobs up front. They're also at fault for not tard wrangling the security guys…

Again sounds like a management failure. Why aren't you boss talking with their boss and asking what the fuck is going on, and putting the development on hold until it's been agreed on? Again your boss is the one who is wasting your time, they are the one responsible for that what you spend your time on is actually useful and valuable, which they clearly messed up in that case.

As I already said, management ultimately is the root of the blame. But what you don't seem to get is that at least some of their blame is from hiring dumbasses into that security review role.

Why did the security team initially give the okay to checking signatures on plugin jars? They're supposed to be security experts, what kind of security expert doesn't know that a signature check like that could be modded out? I knew it when I implemented it, and the modder at the partner corp obviously knew it but lacked the tact to stay quiet about it. Management didn't realize it, but they aren't technical. So why didn't security realize it until it was brought to their attention? Because they were retarded.

By the way, this application is still publicly downloadable, still easily modded, and hasn't been updated in almost 10 years now. Security review is fine with that, apparently. They only get bent out of shape when somebody actually tries to make something more useful, not when old nominally vulnerable software is left to rot in public. They're not protecting the company from a damn thing.

Re: Claws are now a new layer on top of LLM agents

#149

Post by empath75 »

mittermayr wrote: post #43

I wonder how long it'll take (if it hasn't already) until the messaging around this inevitably moves on to "Do not self-host this, are you crazy? This requires console commands, don't be silly! Our team of industry-veteran security professionals works on your digital safety 24/7, you would never be able to keep up with the demands of today's cybersecurity attack spectrum. Any sane person would host their claw with us…

I already built an operator so we can deploy nanoclaw agents in kubernetes with basically a single yaml file. We're already running two of them in production (PR reviews and ticket triaging)

Re: Claws are now a new layer on top of LLM agents

#150

Post by UncleMeat »

7777777phil wrote: post #20

Karpathy has a good ear for naming things. "Claw" captures what the existing terminology missed, these aren't agents with more tools (maybe even the opposite), they're persistent processes with scheduling and inter-agent communication that happen to use LLMs for reasoning.

How does "claw" capture this? Other than being derived from a product with this name, the word "claw" doesn't seem to connect to persistence, scheduling, or inter-agent communication at all.
Post reply on HN