21–30 of 63 posts
yeah, openclaw is tue more user friendly product (whatsapp bridge, chat interface) bit otherwise at the core they are the same.
i did run moltbook for half a week - it crunched through my claude code pro token allowance in that time. needed to put claw to sleep again after that. needed some work to do.
Strange that security still isn’t a first class feature when something new is developed. I'm slowly beginning to doubt that people can learn from the mistakes of others. Why do we keep making the same mistakes over and over again?
For those interested, you can get the base config Mac Mini (in the US) for $400 from Micro Center [0]. They don’t seem to ship to where I live, but BestBuy was happy to price match in the support chat. Just received mine and planned on experimenting with something like OP this weekend. [0] https://www.microcenter.com/product/688173/apple-mac-mini-mu...
How is it better than a $3/month VPS that you can easily wipe and restart as needed?
For those interested, you can get the base config Mac Mini (in the US) for $400 from Micro Center [0]. They don’t seem to ship to where I live, but BestBuy was happy to price match in the support chat. Just received mine and planned on experimenting with something like OP this weekend. [0] https://www.microcenter.com/product/688173/apple-mac-mini-mu...
How is it better than a $3/month VPS that you can easily wipe and restart as needed?
driving a browser in the cloud is also a bit of work
but you could put a proxy on your residential machine
so, ignoring the the fact that you yourself didn't actually write this (based on commit history), and the fact that your claims about better security are dubious at best, the most interesting thing I find about this whole situation is - how did you get this to the hackernews front page so fast? that's the real (not-so) secret sauce here :)
Fast? Posted one hour ago. Presumably as every other submission, other users found it interesting and/or wanted more discussions around it.
You can't solve prompt injection now, for things like "delete all your emails", but you can minimize the damage by making the agent physically unable to perform unsanctioned actions.
I still want the agent to be able to largely upgrade itself, but this should be behind unskippable confirmation prompts.
Does anyone know anything like this, so I don't have to build it?
For those interested, you can get the base config Mac Mini (in the US) for $400 from Micro Center [0]. They don’t seem to ship to where I live, but BestBuy was happy to price match in the support chat. Just received mine and planned on experimenting with something like OP this weekend. [0] https://www.microcenter.com/product/688173/apple-mac-mini-mu...
I understand the need for a dedicated box, but any reason you shouldn't just use a server? What would someone recommend for cloud on something like Hetzner? https://www.hetzner.com/cloud/
I still don't understand why people don't just run it in a VM and separate VLAN instead.
For those interested, you can get the base config Mac Mini (in the US) for $400 from Micro Center [0]. They don’t seem to ship to where I live, but BestBuy was happy to price match in the support chat. Just received mine and planned on experimenting with something like OP this weekend. [0] https://www.microcenter.com/product/688173/apple-mac-mini-mu...
I understand the need for a dedicated box, but any reason you shouldn't just use a server? What would someone recommend for cloud on something like Hetzner? https://www.hetzner.com/cloud/
Earlier quoted context omitted.
Have you used OpenClaw? My experience has been that it doesn't take input from the world, unless you explicitly ask it to. But I guess that isn't too crazy, if you ask it to look at a website, maybe the website has a hidden prompt. I guess that's more of a responsibility of the LLM model in the security model. That said, I don't think the main dev is serious about security, I've listened to the whole Lex Friedman int…
LLMs famously can't separate data from commands (what you mean by input) - that's one of their core security issues. Check simonw's lethal trifacta. Agreed on all the other points !
OpenClaw is not insecure because it has ports open to the internet. This is an easily solved problem in one line of code (if indeed it even has that bug, which I don’t think it does). Furthermore you’re probably behind NAT. OpenClaw, as well as the author’s solution, is insecure because it sends the full content of all of your private documents and data to a remote inference API which is logging everything forever (a…
Are they though? I mean, I'm running all my agents in -yolo mode but I would never trust it to remain on track for more than one session. There's no real solution to agent memory (yet) so it's incredibly lossy, and so are fast/cheap sub agents and so are agents near their context limits. It's easy to see how "clean up my desktop" ends with a sub-subagent at its context limit deciding to format your hard drive.