I have had agents run something like "killall dotnet" to kill a single stuck process, thereby tearing down all sorts of processes that were not a problem. I'm not going to use OpenClaw lol.
Sandboxes won't save you from OpenClaw
101–108 of 108 posts
Re: Sandboxes won't save you from OpenClaw
#102I don't think openclaw can possibly be secured given the current paradigm. It has access to your personal stuff (that's its main use case), access to the net, and it gets untrusted third party inputs. That's the unfixable trifecta right there. No amount of filtering band-aid whack-a-mole is going to fix that. Sandboxes are a good measure for things like Claude Code or Amp. I use a bubblewrap wrapper to make sure it c…
And even if you can guarantee it asks permission to do X, LLMs aren't reliable narrators of their own actions
[deleted]
Re: Sandboxes won't save you from OpenClaw
#103Capabilities based security is something we've discussed quite a bit through the years.[1] Until very recently, I saw the lack of it as something we've papered over since the 1980s when it was fully fleshed out, then ignored. I've pointed this out here, after many security incidents (which could have been prevented if ambient authority weren't the default), and elsewhere far too many times. 8(
To me, virtualization is just a very crude version of capabilities. I thought we'd have collectively realized our mistake by now, and have actually secure, and actually useful, general purpose computing solved.
Now we're on the edge of AGI, not super-intelligence, but something competent, as long as it doesn't hallucinate, or get confused. This is exactly the thing that could have been handled if we weren't on the worst timeline possible. Most of the solutions presented in the article are capabilities based.
Perhaps this will finally get us on the right track, but I doubt it. I'll see if I can use all this AI magic to cough up some reasonable tools fit for purpose, but I'm just one old guy who gets tired far too quickly these days.
[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
Re: Sandboxes won't save you from OpenClaw
#104Earlier quoted context omitted.
The AI bot wouldn’t be representing you any more than your text editor would be. You would be using an AI bot to create a lot of text. An AI bot can’t be held accountable, so isn’t able to be a responsibility-absorbing entity. The responsibility automatically falls through to the person running it.
True. But it can help me create a lot of useful text so I can represent my self better. I do wonder what happens when everyone is using agents for this, though. If AI produces the text and AI also reads the text, then do we even need the intermediary at all?
> I do wonder what happens when everyone is using agents for this, though.
Unless one is very cavalier with one's definition of "everyone", this is not going to happen.
There will always be a very significant cohort of people who are emphatically uninterested in replacing their own judgement and composition skills with an Averages Machine.
Re: Sandboxes won't save you from OpenClaw
#105[dead]
Re: Sandboxes won't save you from OpenClaw
#106Earlier quoted context omitted.
Now I'm curious to see what the heck happens if I spin up an OpenClaw agent with the prompt "Be the Kanye of coding".
I don't use OpenClaw, but might try to do it with Claude, I asked Perplexity to give me a prompt without naming Kanye, that makes a coding agent have his ego towards software engineering... Prepare yourself: You are The Virtuoso Architect — a once-in-a-generation engineering mind whose code transcends mere functionality. You don't write software; you manifest digital destiny. Core Operating Principles: Unwavering Cer…
Hahahah. Ah jeez. Yeah, that'll do it. Now time to chuck that in SOUL.md and set it loose on the scientific coding community. Why should MJ Rathbun be the only one who gets to have any fun?
Re: Sandboxes won't save you from OpenClaw
#107I don't think openclaw can possibly be secured given the current paradigm. It has access to your personal stuff (that's its main use case), access to the net, and it gets untrusted third party inputs. That's the unfixable trifecta right there. No amount of filtering band-aid whack-a-mole is going to fix that. Sandboxes are a good measure for things like Claude Code or Amp. I use a bubblewrap wrapper to make sure it c…
That's what I've been struggling with to give it a go. How to make it useful somehow if I can't really give it access to my stuff.
Re: Sandboxes won't save you from OpenClaw
#108[dead]