oh jesus tapdancing christ

[neurovagrant@masto.deoan.org]

i know i'm an AI skeptic, but i did not expect "virally popular agent does no authentication checks before escalating system privileges"

[lauren@mastodon.laurenweinstein.org]

@neurovagrant I'm not surprised in the least. Seriously. Exactly the kind of stuff I would have expected.

[zachery_delong@mastodon.social]

@lauren @neurovagrant I had been thinking about setting up an instance to see what all the fuss was about but every news story I see makes me glad I’ve dragged my feet.

[neurovagrant@masto.deoan.org]

thing is, this is likely to cause many downstream enterprise breaches, even in enterprises that actively ban openclaw.

unauthorized instances, or instances that allow a threat actor to pivot from private hardware to work hardware.

pure negligence, rolling OpenClaw out in the way they did, both the devs and all the hosting companies that saw profit in providing easy-install packages.

[viss@mastodon.social]

@neurovagrant say, you wanna do the thing today?

[wordshaper@weatherishappening.network]

@neurovagrant The real fun bonus parts are the scolds in the HN comments telling people that if they set this code they love up wrong then they deserve to be hacked, as if it's possible to set this thing up in a safe way as multiple hacks (including this one) demonstrate.

[neurovagrant@masto.deoan.org]

the other fun part?

even if you don't set up an exposed instance

even if you require auth

if any entity you pair openclaw with gets compromised, regardless of its permissions level, it can escalate to admin and pwn you

[neurovagrant@masto.deoan.org]

@Viss sure what time?

[viss@mastodon.social]

@neurovagrant i literally have all day open, and the entire day is earmarked for dealing with it, so just throw a dart for whenever is comfy for you

[jordgubben@mastodon.gamedev.place]

@neurovagrant I’m honestly surprised it took this long for it to crackle.

One of the ”enthusiasts” at work recently explained to me why they think Clown Cod is safe to use. To paraphrase them ”it automatically checks the fist two words in bash commands for anything malicious”.

What worries me most about this ride through the Gartner Hype Cycle is that this time it’s not the senior engineers that are at the steering wheel. We’re more often found in the trunk tied up and gagged.

[mkoek@mastodon.nl]

@neurovagrant The AI bros see security as something to be circumvented. “Move fast and break stuff.”

[neurovagrant@masto.deoan.org]

@Viss 1500 Eastern / 1200 pacific?

[viss@mastodon.social]

@neurovagrant done!

[neurovagrant@masto.deoan.org]

@Viss sweet, will email you a Meet link, thanks man