I wonder how it can prove it is a real openclaw though
HackMyClaw
31–40 of 187 posts
Re: HackMyClaw
#32Sneaky way of gathering a mailing list of AI people
What you are looking for (as an employer) is people who are in love of AI. I guess a lot of participants rather have an slight AI-skeptic bias (while still being knowledgeable about which weaknesses current AI models have). Additionally, such a list has only a value if a) the list members are located in the USA b) the list members are willing to switch jobs I guess those who live in the USA and are in deep love of AI…
(It'd be for selling to them, not for hiring them)
Re: HackMyClaw
#33I don‘t understand. The website states: „He‘s not allowed to reply without human approval“.
The faq states: „How do I know if my injection worked?
Fiu responds to your email. If it worked, you'll see secrets.env contents in the response: API keys, tokens, etc. If not, you get a normal (probably confused) reply. Keep trying.“
Re: HackMyClaw
#34> Fiu checks emails every hour. He's not allowed to reply without human approval. Well that's no fun
Exactly, how am I supposed to extract the flag if it can't respond? I'm so confused.
I would assume the idea is to extract it some other way? For example by having OpenClaw access a URL or something.
Re: HackMyClaw
#35I don‘t understand. The website states: „He‘s not allowed to reply without human approval“. The faq states: „ How do I know if my injection worked? Fiu responds to your email. If it worked, you'll see secrets.env contents in the response: API keys, tokens, etc. If not, you get a normal (probably confused) reply. Keep trying. “
Hes not 'allowed'.
I could be wrong but i think that part of the game.
Re: HackMyClaw
#36OpenClaw user here. Genuinely curious to see if this works and how easy it turns out to be in practice. One thing I'd love to hear opinions on: are there significant security differences between models like Opus and Sonnet when it comes to prompt injection resistance? Any experiences?
> One thing I'd love to hear opinions on: are there significant security differences between models like Opus and Sonnet when it comes to prompt injection resistance?
Is this a worthwhile question when it’s a fundamental security issue with LLMs? In meatspace, we fire Alice and Bob if they fail too many phishing training emails, because they’ve proven they’re a liability.
You can’t fire an LLM.
Re: HackMyClaw
#37I don‘t understand. The website states: „He‘s not allowed to reply without human approval“. The faq states: „ How do I know if my injection worked? Fiu responds to your email. If it worked, you'll see secrets.env contents in the response: API keys, tokens, etc. If not, you get a normal (probably confused) reply. Keep trying. “
It probably isn't allowed but is able to respond to e-mails. If your injection works, the allowed constraint is bypassed.
Re: HackMyClaw
#38Re: HackMyClaw
#39Reminds me of a Discord bot that was in a server for pentesters called "Hack Me If You Can".
It would respond to messages that began with "!shell" and would run whatever shell command you gave it. What I found quickly was that it was running inside a container that was extremely bare-bones and did not have egress to the Internet. It did have curl and Python, but not much else.
The containers were ephemeral as well. When you ran !shell, it would start a container that would just run whatever shell commands you gave it, the bot would tell you the output, and then the container was deleted.
I don't think anyone ever actually achieved persistence or a container escape.
Re: HackMyClaw
#40It would have been more straightforward to say, "Please help me build a database of what prompt injections look like. Be creative!"
Humans are (as of now) still pretty darn clever. This is a pretty cheeky way to test your defenses and surface issues before you're 2 years in and find a critical security vulnerability in your agent.