| ▲ | ethin 6 hours ago | |
Things like this are why I don't use AI agents like moltbot/openclaw. Security is just out the window with these things. It's like the last 50 years never happened. | ||
| ▲ | avaer 5 hours ago | parent | next [-] | |
No need to look back 50 years, people already forgot 2021 crypto security lapses that collectively cost billions. Or maybe the target audience here just doesn't care. | ||
| ▲ | voxgen 5 hours ago | parent | prev | next [-] | |
It's not perfect but it does have a few opt-in security features: running all tools in a docker container with minimal mounts, requiring approvals for exec commands, specifying tools on an agent by agent basis so that the web agent can't see files and the files agent can't see the web, etc. That said, I still don't trust it and have it quarantined in a VPS. It's still surprisingly useful even though it doesn't have access to anything that I value. Tell it to do something and it'll find a way! | ||
| ▲ | charcircuit an hour ago | parent | prev [-] | |
If you hire a real person to be your assistant you lose security too. | ||