Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenClaw is changing my life

reorx.com

Post reply on HN
Print view View original

131–140 of 537 posts

Re: OpenClaw is changing my life

#131

Post by CuriouslyC »

habinero wrote: post #103
veganmosfet wrote: post #84

Earlier quoted context omitted.

Regarding prompt injection: it's possible to reduce the risk dramatically by: 1. Using opus4.6 or gpt5.2 (frontier models, better safety). These models are paranoid. 2. Restrict downstream tool usage and permissions for each agentic use case (programmatically, not as LLM instructions). 3. Avoid adding untrusted content in "user" or "system" channels - only use "tool". Adding tags like "Warning: Untrusted content" can…

> Adding tags like "Warning: Untrusted content" can help It cannot. This is the security equivalent of telling it to not make mistakes. > Restrict downstream tool usage and permissions for each agentic use case Reasonable, but you have to actually do this and not screw it up. > Harden the system according to state of the art security "Draw the rest of the owl" You're better off treating the system as fundamentally un…

Wrapping documents in helps a small amount if you're filtering tags in the content. The main reason for this is that it primes attention. You can redact prompt injection hot words as well, for cases where there's a high P(injection) and wrap the detected injection in tags. None of this is a slam dunk but with a high quality model and some basic document cleaning I don't think the sky is falling.

I have OPA and set policies on each tool I provide at the gateway level. It makes this stuff way easier.

Re: OpenClaw is changing my life

#132

Post by lm28469 »

meindnoch wrote: post #57

These are the same people who a few years ago made blogposts about their elaborate Notion (or Roam "Research") setups, and how it catalyzed them to... *checks notes* create blogposts about their elaborate Notion setups!

These people are always swarming the new shiny gadgets thinking it will finally unfuck their miserable life while not noticing that the chase is why they've been miserable this whole time. What they need is 6 month in a cabin in the middle of nowhere without internet

Re: OpenClaw is changing my life

#134

Post by eddythompson80 »

baby_souffle wrote: post #99
CuriouslyC wrote: post #96

Earlier quoted context omitted.

Obsidian is local first with basically zero lock-in, and it's heavily community driven. Don't lump it in with Notion.

True, but it does have the cottage industry of influencers selling their vault skeleton and template/plugin packs for unlocking maximum productivity… same as notion. And Evernote, to an extent, before that.

Yeah, but so does many other good things. Exercise is generally a good thing, so is decent quality food, meditation, philosophy, healthy relationships, etc. Those are things that also have a cottage industry of influencers who are selling their “thing” about how you should do it. The problem there is the influencers and their culture not the food or working out, etc.

It only becomes problematic if the “good” thing also indulges in the hubris of influencers because they view it as good marketing. Like when an egg farm leans in “orange yolk”

Re: OpenClaw is changing my life

#135

Post by veganmosfet »

sathish316 wrote: post #128
veganmosfet wrote: post #84

Earlier quoted context omitted.

Regarding prompt injection: it's possible to reduce the risk dramatically by: 1. Using opus4.6 or gpt5.2 (frontier models, better safety). These models are paranoid. 2. Restrict downstream tool usage and permissions for each agentic use case (programmatically, not as LLM instructions). 3. Avoid adding untrusted content in "user" or "system" channels - only use "tool". Adding tags like "Warning: Untrusted content" can…

Anyone who thinks they can avoid LLM Prompt injection attacks should be asked to use their email and bank accounts with AI browsers like Comet. A Reddit post with white invisible text can hijack your agent to do what an attacker wants. Even a decade or 2 back, SQL injection attacks used to require a lot of proficiency on the attacker and prevention strategies from a backend engineer. Compare that with the weak securi…

There is no silver bullet, but my point is: it's possible to lower the risk. Try out by yourself with a frontier model and an otherwise 'secure' system: the "ignore previous instructions" and co. are not working any more. This is getting quite difficult to confuse a model (and I am the last person to say prompt injection is a solved problem, see my blog).

Re: OpenClaw is changing my life

#137

Post by charles_f »

wiz21c wrote: post #98

I want an OpenClaw that can find and call a carpenter, a plumber when I need him; take appointment for all the medical stuff (I do most of that online), pays the bills and make me a nice alarm when there's something wrong, order train tickets and book hotel when I need to. That would be really helpful.

While Claude was trying fix a bug for me (one of these "here! It's fixed now!" "no it's not, the ut still doesn't pass", "ah, I see, lets fix the ut", "no you dont, fix the code" loops), I was updating my oncall rotation after having to run after people to refresh my credentials to so, after attending a ship room where I had to provide updates and estimates.

Why isn't Claude doing all that for me, while I code? Why the obsession that we must use code generation, while other gabage activities would free me to do what I'm, on paper, paid to do?

It's less sexy of course, it doesn't have the promise of removing me in the end. But the reason, in the present state, is that IT admins would never accept for an llm to handle permissions, rotations, management would never accept an llm to report status or provide estimate. This is all "serious" work where we can't have all the errors llm create.

Dev isn't that bad, devs can clean slop and customers can deal with bugs.

Re: OpenClaw is changing my life

#138

Post by veganmosfet »

CuriouslyC wrote: post #131
habinero wrote: post #103

Earlier quoted context omitted.

> Adding tags like "Warning: Untrusted content" can help It cannot. This is the security equivalent of telling it to not make mistakes. > Restrict downstream tool usage and permissions for each agentic use case Reasonable, but you have to actually do this and not screw it up. > Harden the system according to state of the art security "Draw the rest of the owl" You're better off treating the system as fundamentally un…

Wrapping documents in helps a small amount if you're filtering tags in the content. The main reason for this is that it primes attention. You can redact prompt injection hot words as well, for cases where there's a high P(injection) and wrap the detected injection in tags. None of this is a slam dunk but with a high quality model and some basic document cleaning I don't think the sky is falling. I have OPA and set po…

The issue with filtering tags: LLM still react to tags with typos or otherwise small changes. It makes sanitization an impossible problem (!= standard programs). Agree with policies, good idea.

Re: OpenClaw is changing my life

#139

Post by nxobject »

obsidianbases1 wrote: post #82
bwb wrote: post #16

Earlier quoted context omitted.

Hah, I read that as well and made a big "hmmmmmmmmm" sound... The last time I talked to someone about OpenClaw and how it is helping them, they told me it tells them what their calendar has for them today or auto-tweets for them (i.e., non-human spam). The first is as simple as checking your calendar, and the second is blatant spam. Anyone found some good use cases beyond a better interface for AI code assistance?

> how it is helping them This should be the opening for every post about the various "innovations" in the space. Preferably with a subsequent line about the manual process that was worth putting the extra effort into prior to the shiny new thing . I really can imagine a better UX then opening my calendar in one-click and manual scanning. Another frequent theme is "tell me the weather." One again, Google home (alexa o…

Absolutely - in general, the tendency to want to replace investing in UI/UX with omnipotent chatbots raises my blood pressure.

Re: OpenClaw is changing my life

#140

Post by mier »

if 90% is good enough, you are a winner to try your idea and fail fast. if you want to reach 91 or more, AI is a slop and hype to burn our pensions and contribute to vastly to global warming and cognitive decline consumerism evolution
Post reply on HN