Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: DenchClaw – Local CRM on Top of OpenClaw

github.com

Post reply on HN
Print view View original

81–90 of 143 posts

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#81

Post by conqrr »

jesse_dot_id wrote: post #49

OpenClaw opens a wide attack surface on your digital life that cannot be remediated so long as hallucinations and prompt injection remain unsolved problems. Anything built on top of it is equally insecure and probably even more insecure. I really don't want to yuck anybody's yums or step on dev work that I had nothing to do with, because I've been there and I know it sucks, but OpenClaw is barely secure enough to eve…

This rings so true. Software Engineering should have stricter bar similar to med professionals. If we have leaked such lousy products and the public crowd thinks this is usable, it's a failure of the industry as a whole.

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#85

Post by kumar_abhirup »

jesse_dot_id wrote: post #79
kumar_abhirup wrote: post #61

Earlier quoted context omitted.

Bruh it's not botted, the 500 stars came from Garry Tan's viral tweet.

Can you link to it? I'm not able to find it on his account. Unless you mean his retweet of your tweet? If so, that retweet has just under 10k views and the tweet is in celebration of hitting 500 stars on Github.

Sigh The HN post literally has the link... https://x.com/garrytan/status/2023518514120937672?s=20

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#86

Post by skeeter2020 »

conqrr wrote: post #81
jesse_dot_id wrote: post #49

OpenClaw opens a wide attack surface on your digital life that cannot be remediated so long as hallucinations and prompt injection remain unsolved problems. Anything built on top of it is equally insecure and probably even more insecure. I really don't want to yuck anybody's yums or step on dev work that I had nothing to do with, because I've been there and I know it sucks, but OpenClaw is barely secure enough to eve…

This rings so true. Software Engineering should have stricter bar similar to med professionals. If we have leaked such lousy products and the public crowd thinks this is usable, it's a failure of the industry as a whole.

>> Software Engineering should have stricter bar similar to med professionals.

This is a month-old project by someone how has been suckling at the YC teat of release as early as possible; #YOLO. There's no "engineering" here.

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#87

Post by zipping1549 »

jesse_dot_id wrote: post #49

OpenClaw opens a wide attack surface on your digital life that cannot be remediated so long as hallucinations and prompt injection remain unsolved problems. Anything built on top of it is equally insecure and probably even more insecure. I really don't want to yuck anybody's yums or step on dev work that I had nothing to do with, because I've been there and I know it sucks, but OpenClaw is barely secure enough to eve…

> so long as hallucinations and prompt injection remain unsolved problems

Aren't hallucinations mathematically impossible to be _solved_? Cannot believe how so many people just willy nilly give everything they have to a lying parrot.

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#88

Post by tuesdaynight »

kumar_abhirup wrote: post #84
tuesdaynight wrote: post #80

Are small local models good enough for driving OpenClaw-likes or an API key from one of the big labs is needed?

I always recommend Claude Opus 4.6 for anything OpenClaw gets its hands on.

I was hopeful that small models would be enough for the majority of the tasks, but I understand that it's not the case yet. But thanks for answering

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#89

Post by lnrd »

jesse_dot_id wrote: post #49

OpenClaw opens a wide attack surface on your digital life that cannot be remediated so long as hallucinations and prompt injection remain unsolved problems. Anything built on top of it is equally insecure and probably even more insecure. I really don't want to yuck anybody's yums or step on dev work that I had nothing to do with, because I've been there and I know it sucks, but OpenClaw is barely secure enough to eve…

I like the idea of OpenClaw a lot, it's a technology that I would want in my life. But in it's current form it's kinda chilling and I cannot see it become safe to use anytime soon.

It seems to me many infosec best practices that have been built over decades have been forgot in the last few months like nothing happened. People really do give this kind of software full system access, plus access to their emails, their private chats, most likely their passwords too and who knows what else via plugins. I couldn't really imagine this happening one year ago.

I'm 100% confident that any state actor and cybercrime groups are currently heavily focusing their research on these tools. You compromise the right person and you can access all kind of critical information, it would basically be the same as having some remote control software on their system with full permissions.

And everyone on the hype train seems to be absolutely unaware of this. Maybe I'm missing something, but all of this feels so odd to me.

Re: Show HN: DenchClaw – Local CRM on Top of OpenClaw

#90

Post by monster_truck »

jesse_dot_id wrote: post #49

OpenClaw opens a wide attack surface on your digital life that cannot be remediated so long as hallucinations and prompt injection remain unsolved problems. Anything built on top of it is equally insecure and probably even more insecure. I really don't want to yuck anybody's yums or step on dev work that I had nothing to do with, because I've been there and I know it sucks, but OpenClaw is barely secure enough to eve…

I cannot fucking believe people are letting it remote start their cars and control their garage door. Nevermind ovens. All things people have done and posted about.

As someone that has worked in the automotive space, an enormous amount of regulation and effort is spent making sure you cannot do something like forgetfully remote start the car with your garage door closed and gas yourself. Nevermind securing it so that others cannot do this to you.

And these people are plugging it into ... this, which will happily go "oh, the car turned off after 15 minutes, let me turn it back on!"

There are realistic odds that someone is rotting in their house while their lobster pays the bills and writes blog posts for them.

Post reply on HN