Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenClaw Exposure Watchboard

openclaw.allegro.earth

Post reply on HN
Print view View original

21–30 of 32 posts

Re: OpenClaw Exposure Watchboard

#21

Post by koakuma-chan »

pinkmuffinere wrote: post #19

I think the page is just a lie. It's an add for vivgrid. The next-page button doesn't work. Many of the Chinese entries have emojis in their names, which seems to me an unrealistic amount of whimsy (I suspect instead that the data is manufactured, and the AI ~helpfully~ included emojis for the webapp owner's easier understanding). Almost every entry with latin text is named just "Assistant" (wow what a coincidence!).…

Yes, there is some kind of network of bot accounts that upvote AI slop onto the front page.

Re: OpenClaw Exposure Watchboard

#22

Post by [deleted] »

solid_fuel wrote: post #18
_fzslm wrote: post #3

Does publicly documenting and direct linking vulnerable AI agents (that have goodness-knows-how-much access to sensitive user data) for anyone to exploit feel like responsible disclosure? This could really ruin some people's day. A private message left on their agents to tip people off that their agents are vulnerable feels a lot less destructive.

Shodan has existed for at least a decade and you can't create a cloud instance anywhere these days without it getting immediately crawled. Literally, I was setting up a VPS last week and within 5 minutes of caddy getting a cert from lets encrypt (which then adds the hostname to the certificate transparency log) the access log lit up with dozens of requests per second, all requesting paths like `/wp-admin` and `/admin…

[deleted]

Re: OpenClaw Exposure Watchboard

#23

Post by pinkmuffinere »

koakuma-chan wrote: post #21
pinkmuffinere wrote: post #19

I think the page is just a lie. It's an add for vivgrid. The next-page button doesn't work. Many of the Chinese entries have emojis in their names, which seems to me an unrealistic amount of whimsy (I suspect instead that the data is manufactured, and the AI ~helpfully~ included emojis for the webapp owner's easier understanding). Almost every entry with latin text is named just "Assistant" (wow what a coincidence!).…

Yes, there is some kind of network of bot accounts that upvote AI slop onto the front page.

I hope this is not true, I would find it quite discouraging. :(

Re: OpenClaw Exposure Watchboard

#25

Post by JoBrad »

monkpit wrote: post #4
_fzslm wrote: post #3

Does publicly documenting and direct linking vulnerable AI agents (that have goodness-knows-how-much access to sensitive user data) for anyone to exploit feel like responsible disclosure? This could really ruin some people's day. A private message left on their agents to tip people off that their agents are vulnerable feels a lot less destructive.

Be the change you want to see… it’s not like this being public changes much, anyone who wanted to exploit this could do it without this site

But putting all of them in a tidy list definitely changes the value.

Re: OpenClaw Exposure Watchboard

#27

Post by fanweixiao »

pinkmuffinere wrote: post #23
koakuma-chan wrote: post #21

Earlier quoted context omitted.

Yes, there is some kind of network of bot accounts that upvote AI slop onto the front page.

I hope this is not true, I would find it quite discouraging. :(

it's true, all real data. try to click some of them, you can see the control panel.
Post reply on HN