Remix.run Logo
latexr 4 hours ago

What about the convenience of having your whole inbox deleted?

https://www.pcmag.com/news/meta-security-researchers-opencla...

Maybe OpenClaw was just practicing a really aggressive form of Inbox Zero.

BeetleB 2 hours ago | parent | next [-]

So ... don't give it write access to your email?

As I said elsewhere, complaining about this is like complaining that rm can let you delete your hard drive.

It's a tool. Learn how to use it.

Volundr 2 hours ago | parent | next [-]

Ignoring that you've just cut off a whole vector of usefulness, how do I keep it from exfilling my inbox to the Internet in response to a malicious email? Or using its access to take control of my online accounts?

Honest question, this kind of stuff is what keeps me from using it.

BeetleB 2 hours ago | parent [-]

Don't give it access to your email then. I haven't. Plenty of other uses for it!

Kriev 2 hours ago | parent | prev [-]

Bad take.

You can rm -rf your entire hard drive, but you can't blame rm for it, it's you who did it, maybe because you don't know, or a mistake, doesn't matter.

When you ask the clanker to delete x number of files in a directory, it can reason itself that is easier to just get rid of the directory.

Can't expect deterministic outcomes out of a statistical model.

At it's current state its a wildcard, sure you can build guard rails, reduce permissions, but it's still a wildcard.

Let's not kid ourselves saying is just a skill issue.

BeetleB 2 hours ago | parent [-]

> When you ask the clanker to delete x number of files in a directory, it can reason itself that is easier to just get rid of the directory.

Oh sure, so don't give it write access to anything important. And make backups.

Mine is on a VM. It doesn't have access to my host's files. The worst it will do is delete the files on the VM. No great loss.

Yes, I do get it to modify things on my host, but only via a REST API I've set up on my host, and I whitelist the things it can do (no generic delete, for example). I even let it send emails. But only to me. It can't send an email to anyone else.

latexr an hour ago | parent [-]

> So ... don't give it write access to your email?

> (…)

> Oh sure, so don't give it write access to anything important. And make backups.

If this conversation continues much longer, we’ll end up with “don’t use it at all”.

If I can’t trust a piece of software with anything important, why am I wasting my time fiddling with it? Might as well go play a video game or go do literally anything else entertaining.

BeetleB an hour ago | parent [-]

> If I can’t trust a piece of software with anything important

Not what I said. As I've repeatedly said in this thread: Plenty of use cases where you don't give it access to email and write access to files. The comment you're replying to has an example of that.

> Might as well go play a video game or go do literally anything else entertaining.

True of most hobbies, right? I knew people who 20 years ago used to spend time in their garage building solar powered vehicles. But if I can't trust it to be reliable and safe on the road, I might as well go play a video game.

Also: Is anyone telling you to use it?

skeledrew 2 hours ago | parent | prev | next [-]

Worth the risk.

miroljub 3 hours ago | parent | prev [-]

[flagged]

Antipode 3 hours ago | parent [-]

OpenClaw is rightly being blamed for a mistake it made. Any argument regarding her aptitude would be irrelevant as it would in no way absolve OpenClaw.

miroljub 2 hours ago | parent [-]

[flagged]