321–330 of 1001 posts
The amount of negative posts about this on twitter is crazy, I've not seen any positive posts. Jealousy or something else?
Earlier quoted context omitted.
But the security risk wasnt taken by OpenClaw. Releasing vulnerable software that users run on their own machines isn't going to compromise OpenClaw itself. It can still deliver value for it's users while also requiring those same users to handle the insecurity of the software themselves (by either ignoring it or setting up sandboxes, etc to reduce the risk, and then maybe that reduced risk is weighed against the nov…
I don't agree that making your users run the binaries means security isn't your concern. Perhaps it doesn't have to be quite as buttoned down as a commercial product, but you can't release something broken by design and wash your hands of the consequences. Within a few months, someone is going to deploy a large-scale exploit which absolutely ruins OpenClaw users, and the author's new OpenAI job will probably allow hi…
Earlier quoted context omitted.
> Special thanks to Mario Zechner for his support and for pi-mono. Special thanks to Adam Doppelt for lobster.bot. https://github.com/openclaw/openclaw?tab=readme-ov-file#comm...
[flagged]
Earlier quoted context omitted.
But the security risk wasnt taken by OpenClaw. Releasing vulnerable software that users run on their own machines isn't going to compromise OpenClaw itself. It can still deliver value for it's users while also requiring those same users to handle the insecurity of the software themselves (by either ignoring it or setting up sandboxes, etc to reduce the risk, and then maybe that reduced risk is weighed against the nov…
This argument has the same obvious flaws as the anti-mask/anti-vax movement (which unfortunately means there will always be a fringe that don't care). These things are allowed to interact with the outside world, it's not as simple as "users can blow their own system up, it's their responsibility". I don't need to think hard to speculate on what might go wrong here - will it answer spam emails sincerely? Start cancell…
I really hope Mario who wrote the engine that powers OpenClaw[0] gets spoils as well. OpenClaw is mostly a shell around this (ha!), and I've always been annoyed OpenClaw never credited those repos openly. The pi agent repos are a joy to read, are 1/100th the size of OpenClaw, and have 95% of the functionality. [0]: https://github.com/badlogic/pi-mono
It’s not like Anthropic or OpenAI were not working on “AI assistants” before OpenClaw, it’s pretty much the endgame as I can see it. This guy just single handedly released something useful (and very insecure) before anyone else. Although that’s impressive, I don’t see more than an acquisition of the hype by OpenAI.
Seriously, I just don't understand what's going on. To me it looks like all world just has gone crazy.
Thank you, we already fucked. I am a hypocrite of course.
For anyone looking at alternatives in this space - I built Gobii ( https://gobii.ai ) 8 months before OpenClaw existed. MIT licensed, cloud native, gVisor sandboxed. The sandboxing part matters more than people think. Giving an LLM a browser with full network access and no isolation is a real security problem that most projects in this space hand-wave away. Multi-provider LLM support (OpenAI, Anthropic, DeepSeek, ope…
Looks good! I'm curious, are customers fine with their data going to third-party LLM providers?
Earlier quoted context omitted.
Looks good! I'm curious, are customers fine with their data going to third-party LLM providers?
I think this ship has sailed pretty hard, by now. Pretty much any app you can possibly use, from iTerm to Slack, is sending data to third-party LLMs (sometimes explicitly, most times as small features here and there)
With OpenClaw we are seeing how the app layer becomes as important as the model layer. You can switch models multiple times (online/proprietary, open weight, local), but you have one UI : OpenClaw.