Live data from Hacker News

Top downloaded skill in ClawHub contains malware

1password.com

51–60 of 166 posts

Re: Top downloaded skill in ClawHub contains malware

#51
post #49

It's absolute negligence for anyone to be installing anything at this point in this space. There is no oversight, hardly anyone looking at what's published, no automated scanning and there is no security model in place that works that isn't vulnerable to prompt injection. We need to go back to the drawing board. You might as well just run curl https://example.com/script.sh | sudo bash at this point.

[dead]

Re: Top downloaded skill in ClawHub contains malware

#52

Why are these articles always AI written? What's the point of having AI generate a bunch of filler text?

Yes!! I'm interested in the topic but the AI patterns are so grating once you learn to spot them.

I was in prison as AI became a thing, didn't spend all that much time on the internet. Regardless, the LLM-writing stood out immediately. I didn't know what it was, but it didn't take any learning to realize that this is not how any normal human writes.

Re: Top downloaded skill in ClawHub contains malware

#53
post #49

It's absolute negligence for anyone to be installing anything at this point in this space. There is no oversight, hardly anyone looking at what's published, no automated scanning and there is no security model in place that works that isn't vulnerable to prompt injection. We need to go back to the drawing board. You might as well just run curl https://example.com/script.sh | sudo bash at this point.

It's far worse than that. `curl | bash` is at least a one-time thing coming from a single source. An autonomous agent like OpenClaw is more like running `slack | bash` or `mail | bash`.

Re: Top downloaded skill in ClawHub contains malware

#54

Earlier quoted context omitted.

Author here, I used AI to help me write this article primarily to generalize the content and remove a lot of the specific links and dangerous commands in the malware. If you are actually curious about the specifics, happy to share here since this is a more technical audience. --- The top downloaded skill at the time of this writing is.... https://www.clawhub.com/moonshine-100rze/twitter-4n "ClawHubTwitter — ClawHubUs…

I agree with your parent that the AI writing style is incredibly frustrating. Is there a difficulty with making a pass, reading every sentence of what was written, and then rewriting in your own words when you see AI cliches? It makes it difficult to trust the substance when the lack of effort in form is evident.

My suspicion is that the problem here is pretty simple: people publishing articles that contain these kinds of LLM-ass LLMisms don't mind and don't notice them.

I spotted this recently on Reddit. There are tons of very obviously bot-generated or LLM-written posts, but there are also always clearly real people in the comments who just don't realize that they're responding to a bot.

Re: Top downloaded skill in ClawHub contains malware

#58
post #11

Since increasingly every "successful" application is a form of an insecure, overcomplicated computer game: How do you get the mindset to develop such applications? Do you have to play League of Legends for 8 hours per day as a teenager? Do you have to be a crypto bro who lost money on MtGox? People in the AI space seem literally mentally ill. How does one acquire the skills (pun intended) to participate in the madnes…

> People in the AI space seem literally mentally ill. How does one acquire the skills (pun intended) to participate in the madness? Stop reading books. Really, stop reading everything except blog posts on HackerNews. Start watching Youtube videos and Instagram shorts. Alienate people you have in-person relationships with.

[dead]

Re: Top downloaded skill in ClawHub contains malware

#59

Back in the XP days if you let your computer for too much time on the hands of an illiterate relative, they would eventually install something and turn Internet Explorer into this https://i.redd.it/z7qq51usb7n91.jpg . Now the security implications are even greater, and we won't even have funny screenshots to share in the future.

That era taught me how much regular users can tolerate awful, slow interfaces.

Re: Top downloaded skill in ClawHub contains malware

#60

Earlier quoted context omitted.

I agree with your parent that the AI writing style is incredibly frustrating. Is there a difficulty with making a pass, reading every sentence of what was written, and then rewriting in your own words when you see AI cliches? It makes it difficult to trust the substance when the lack of effort in form is evident.

Will do better next time.

[flagged]
Post reply on HN