<![CDATA[oh jesus tapdancing christ]]>RE: https://social.lansky.name/@hn50/116341899721749250

oh jesus tapdancing christ

]]>https://forum.fedi.dk/topic/9c5b6f15-32aa-4913-acd7-0dede04cae8c/oh-jesus-tapdancing-christRSS for NodeThu, 09 Apr 2026 04:19:27 GMTFri, 03 Apr 2026 17:27:10 GMT60<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:09:40 GMT]]>@Viss sweet, will email you a Meet link, thanks man

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342114285305490https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342114285305490Fri, 03 Apr 2026 18:09:40 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:09:04 GMT]]>@neurovagrant done!

]]>https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342111885057767https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342111885057767Fri, 03 Apr 2026 18:09:04 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:08:40 GMT]]>@Viss 1500 Eastern / 1200 pacific?

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342110299276252https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342110299276252Fri, 03 Apr 2026 18:08:40 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:07:46 GMT]]>@neurovagrant The AI bros see security as something to be circumvented. “Move fast and break stuff.”

]]>https://forum.fedi.dk/post/https://mastodon.nl/users/mkoek/statuses/116342106763869955https://forum.fedi.dk/post/https://mastodon.nl/users/mkoek/statuses/116342106763869955Fri, 03 Apr 2026 18:07:46 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:04:05 GMT]]>@neurovagrant I’m honestly surprised it took this long for it to crackle.

One of the ”enthusiasts” at work recently explained to me why they think Clown Cod™ is safe to use. To paraphrase them ”it automatically checks the fist two words in bash commands for anything malicious”.

What worries me most about this ride through the Gartner Hype Cycle is that this time it’s not the senior engineers that are at the steering wheel. We’re more often found in the trunk tied up and gagged.

]]>https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/jordgubben/statuses/116342092294540900https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/jordgubben/statuses/116342092294540900Fri, 03 Apr 2026 18:04:05 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 18:00:22 GMT]]>@neurovagrant i literally have all day open, and the entire day is earmarked for dealing with it, so just throw a dart for whenever is comfy for you 😄

]]>https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342077715673902https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342077715673902Fri, 03 Apr 2026 18:00:22 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:59:41 GMT]]>@Viss sure what time?

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342075003338743https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342075003338743Fri, 03 Apr 2026 17:59:41 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:57:12 GMT]]>the other fun part?

even if you don't set up an exposed instance

even if you require auth

if any entity you pair openclaw with gets compromised, regardless of its permissions level, it can escalate to admin and pwn you

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342065226812726https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342065226812726Fri, 03 Apr 2026 17:57:12 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:55:50 GMT]]>@neurovagrant The real fun bonus parts are the scolds in the HN comments telling people that if they set this code they love up wrong then they deserve to be hacked, as if it's possible to set this thing up in a safe way as multiple hacks (including this one) demonstrate.

]]>https://forum.fedi.dk/post/https://weatherishappening.network/users/wordshaper/statuses/116342059852580329https://forum.fedi.dk/post/https://weatherishappening.network/users/wordshaper/statuses/116342059852580329Fri, 03 Apr 2026 17:55:50 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:50:48 GMT]]>@neurovagrant say, you wanna do the thing today?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342040052250254https://forum.fedi.dk/post/https://mastodon.social/users/Viss/statuses/116342040052250254Fri, 03 Apr 2026 17:50:48 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:49:41 GMT]]>thing is, this is likely to cause many downstream enterprise breaches, even in enterprises that actively ban openclaw.

unauthorized instances, or instances that allow a threat actor to pivot from private hardware to work hardware.

pure negligence, rolling OpenClaw out in the way they did, both the devs and all the hosting companies that saw profit in providing easy-install packages.

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342035692532981https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116342035692532981Fri, 03 Apr 2026 17:49:41 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:42:30 GMT]]>@lauren @neurovagrant I had been thinking about setting up an instance to see what all the fuss was about but every news story I see makes me glad I’ve dragged my feet.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/zachery_delong/statuses/116342007405757897https://forum.fedi.dk/post/https://mastodon.social/users/zachery_delong/statuses/116342007405757897Fri, 03 Apr 2026 17:42:30 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:33:59 GMT]]>@neurovagrant I'm not surprised in the least. Seriously. Exactly the kind of stuff I would have expected.

]]>https://forum.fedi.dk/post/https://mastodon.laurenweinstein.org/users/lauren/statuses/116341973934701792https://forum.fedi.dk/post/https://mastodon.laurenweinstein.org/users/lauren/statuses/116341973934701792Fri, 03 Apr 2026 17:33:59 GMT<![CDATA[Reply to oh jesus tapdancing christ on Fri, 03 Apr 2026 17:32:44 GMT]]>i know i'm an AI skeptic, but i did not expect "virally popular agent does no authentication checks before escalating system privileges"

]]>https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116341969058729163https://forum.fedi.dk/post/https://masto.deoan.org/users/neurovagrant/statuses/116341969058729163Fri, 03 Apr 2026 17:32:44 GMT