Live data from Hacker News

Nvidia NemoClaw

github.com

191–200 of 291 posts

Re: Nvidia NemoClaw

#191

The fully autonomous agentic ecosystem makes me feel a little crazy — like all common sense has escaped. It feels like there is a lot of engineering effort being exhausted to harden the engine room on the Titanic against flooding. It's going to look really secure... buried in debris at the bottom of the ocean. When a state sponsored threat actor discovers a zero day prompt injection attack, it will not matter how iso…

> a state sponsored threat actor

Most people don't seriously worry that they'll be targeted by a state sponsored actor.

Plus most people already expose their life on cloud (in forms of social media, iCloud, Google Drive, Windows's Bitlock key, etc).

Re: Nvidia NemoClaw

#193
post #122

Earlier quoted context omitted.

Container security is an entire subfield of infosec. For example: https://github.com/advisories/GHSA-w235-x559-36mg People on both sides are just getting started finding all the ways to abuse or protect you from security assumptions with these tools. RSS is the right tool for this problem and I would be surprised if their CMS doesn't produce a feed on its own.

I don't use a container. I use a VM. I'm not totally naive. I had the VM fairly hardened originally, but it proved to be inconvenient. I relaxed it so that processes on the VM can see other devices on the network. There's definitely some risk to that.

Okay. You have sensible escape prevention.

Now this tool spreads. You help everyone get it set up. Someone hacks the site, injects a prompt lying about some event, maybe Drag Queen Story Hour in a place with lots of people enraged about it. Now there's chaos and confusion. Corrections chase the spread of misinformation.

Re: Nvidia NemoClaw

#194

Earlier quoted context omitted.

I can give you, as an example, what is driving me towards trying it. I work as a contractor for 2 companies, not out of necessity, but greed. I also have a personal project with a friend that is dangerously close to becoming a business that needs attention. I also have other responsibilities and believe it or not - friends. Also the ADHD on top of that. I yearn for a personal assistant. Something or somebody that wil…

But isn’t this just another notification to ignore? The ticket being assigned to you is your “Hey take care of this!” ping, same with the email or text from your friend. How long until you start tuning out the openclaw notifications?

cant that be fixed, tho?

If the analogy is a personal asistant, a good assistant will know when to notify you and when not to.

Re: Nvidia NemoClaw

#195
post #65

Am I missing something? Why is everyone talking about sandboxes when it comes to OpenClaw? To me it's like giving your dog a stack of important documents, then being worried he might eat them, so you put the dog in a crate, together with the documents. I thought the whole problem with that idea was that in order for the agent to be useful, you have to connect it to your calendar, your e-mail provider and other servic…

What makes it even better is that these dogs are like Malinois. If they want to get into something, they will; people have had their entire network compromised by bots they left running overnight, and any important information like account logins and so on runs the risk of being misused. It's one thing to sandbox, maybe give the bot a temporary, limited $100 card or account to go perform a specific task, but there's…

> it could also hack your home network, delete your family pictures folder, log into your bank account and wire all your money to shrimp charities.

It's interesting that Jason Calacanis is fully committed to OpenClaw. In a recent podcast he said that at a run rate around $100K a year per agent, if not more. They are providing each agent with a full set of tools, access to online paid LLM accounts, etc.

These are experiments you can only run if you can risk cash at those levels and see what happens. Watching it closely.

Re: Nvidia NemoClaw

#196

The fully autonomous agentic ecosystem makes me feel a little crazy — like all common sense has escaped. It feels like there is a lot of engineering effort being exhausted to harden the engine room on the Titanic against flooding. It's going to look really secure... buried in debris at the bottom of the ocean. When a state sponsored threat actor discovers a zero day prompt injection attack, it will not matter how iso…

> a state sponsored threat actor

your CPU, your OS, CPU and firmware on your motherboard chips, ethernet, wifi, HDDs (btw did you know your sim card has JVM?), your browser, all your networking equipment in between, BGP and all the root certs and I'm just scratching the surface

the ballpark is on anther planet

Re: Nvidia NemoClaw

#197

It’s impressive someone early in their career shipped this. There seems to be a stark increase in high-quality AI/data projects from early-career engineers lately and I'm super curious what’s driving that (and honestly speaking: a little jealous).

There are four "people" that contributes ( https://github.com/NVIDIA/NemoClaw/graphs/contributors ) judging by the git commits and the GitHub authors, none of them seem to be novices at programming, what made you write what you wrote here?

I am just flattered that at 53, I am still early career!

Re: Nvidia NemoClaw

#198
post #65

Am I missing something? Why is everyone talking about sandboxes when it comes to OpenClaw? To me it's like giving your dog a stack of important documents, then being worried he might eat them, so you put the dog in a crate, together with the documents. I thought the whole problem with that idea was that in order for the agent to be useful, you have to connect it to your calendar, your e-mail provider and other servic…

[flagged]

Re: Nvidia NemoClaw

#199
post #118

Earlier quoted context omitted.

It is sad, psychosis from exec-up has trickled down so people really want these tools to work yet these tools are so bad that people in this thread are recommending you create a second email so your openclaw can suggest events to you without being able to delete them. It's like having to hire a second maid to watch your maid that steals constantly instead of vacuuming yourself in 10 mins.

Imagine having a worldview so skewed that you'd rather reconcile it by assuming thousands of people are insane than questioning whether you're wrong about something.

A lot more than thousands of people are insane, by a few orders of magnitude
Post reply on HN