Basically: If you run OpenClaw connected to any meaningful system you are not fit to design, program or run any kind of software.

[tante@tldr.nettime.org]

Basically: If you run OpenClaw connected to any meaningful system you are not fit to design, program or run any kind of software. That disregard for security and quality should leave a black mark on you for many years.

[art_codesmith@toot.cafe]

@tante Question: what if you name it?

[ftranschel@norden.social]

@tante The similarities to the concept of "unprotected intercourse" are more than striking here.

[tante@tldr.nettime.org]

@art_codesmith You should be forced into getting therapy

[toolsontech@pkm.social]

@tante If the people doing that would understand security they would be very upset.

I'm not worried about the competent people, I'm worried about the majority that doesn't even consider why giving access is a bad idea.

[art_codesmith@toot.cafe]

@tante So um... funny thing I read on LinkedIn today... #DHH

[tomw@mastodon.social]

@tante I agree BUT even if you run it on a Mac Mini or VPS or whatever without giving it your own data or accounts, it can still go and bother other internet users, for example by emailing them, sending spurious Github pull requests, making phone calls (!), the recent case of one making a hostile blog post about a named person, and so on.

Even if you make it not a danger to you, it remains a danger to others.

[art_codesmith@toot.cafe]

@tomw @tante The thing becomes then, why would you run it without giving it access to your accounts? The whole point is that it can Do Stuff For You.

[larsmb@mastodon.online]

@tomw @tante We desperately need a few incidents where their operators are identified and legally held responsible.

[tante@tldr.nettime.org]

@larsmb @tomw they are identified: By OpenAI's and Meta's and Anthropic's HR department to offer them jobs

[larsmb@mastodon.online]

@tante @tomw I didn't mean the one or two people who had them vibed, but the masses who run and operate them even more recklessly.

[lennybacon@infosec.exchange]

@tante Unfit… or “security expert at Meta”

Golem

(www.golem.de)

[vbabka@mastodon.social]

@tante more like OpenClown, huh.

[quietewe@urbanists.social]

@art_codesmith @tante lol he’s so proud of his agent, and then his story amounts to “I told the AI to do something. It couldn’t and didn’t have any idea how to proceed. So I told it to do a different thing first. And it did that, all on its own, no prompting from me! Then it did the first thing I told it to do. With no direction at all!”

Like awww it’s almost sweet that you don’t know what prompting and direction are, David! Truly groundbreaking.