Recent submissions

Comment · 7 months ago
What does any of this have to do with Israel?
Comment · 8 months ago
It would be nice if one could sync dot files in the vault. For example, the .claude or .pi folder containing skills and whatnot.
Comment · 8 months ago
Iran attacks through its proxies.
Comment · 8 months ago
It's not a soluble problem, at least not completely. The big frontier models are better at resisting prompt injection, but any LLM is vulnerable to some degree. If you give it access to arbitrary inputs like the web and to your personal data, there's a risk it'll disclose stuff you don't want it to.

It's annoying, because I love OpenClaw as an idea, but I don't trust it enough to give it what it needs to be useful.

Comment · 8 months ago
Comment · 8 months ago
Also more vulnerable to prompt injection than the frontier models, which are still vulnerable, but less so.
Comment · 8 months ago
> CME's website is very bot-hostile and blocked it after a few requests

This is one of the reasons people buy a Mac mini (or similar local machine). Those browser automation requests come from a residential IP and are less likely to be blocked.

Comment · 8 months ago
Many people use the Max subscription OAuth token in OpenClaw. The main chat, heartbeat, etc., functionality does not call the Claude Code CLI. It uses the API authenticated via subscription OAuth tokens, which is precisely what Anthropic has banned.

There are many other options too: direct API, other model providers, etc. But Opus is particularly good for "agent with a personality" applications, so it's what thousands of OpenClaw users go with, mostly via the OAuth token, because it's much cheaper than the API.

Comment · 9 months ago
There's a lot of, to put it lightly, bullshit in this blog article, starting with when openclaw was released (late November 2025, not January 25, 2026). The first bit of config — "listen: "0.0.0.0:8080" — is not the default. Default is loopback and it was when I first encounter this project at the end of December.

Essentially, the author has deliberately misconfigured an openclaw installation so it is as insecure as possible, changing the defaults and ignoring the docs to do so. Lied about what they've done and what the defaults are. Then "hacked" it using the vulnerability they created.

That said, there are definite risks to using something like openclaw and people who don't understand those risks are going to get compromised, but that doesn't justify blatant lying.

Comment · 9 months ago
More that moltbot is ugly and was chosen in a bit of a panic after Anthropic complained. No one liked it, including the people who chose it.
Comment · 9 months ago
They've recently added "lobster" which is an extension for deterministic workflows outside of the LLM, at least partially solving that problem. Also fixed a context caching bug that resulted in it using far more Anthropic tokens than it should have.
Comment · 9 months ago
It's not. The guy behind Moltbot dislikes crypto bros as much as you seem to. He's repeatedly publicly refused to take fees for the coin some unconnected scumbags made to ride the hype wave, and now they're attacking him for that and because he had to change the name. The Discord and Peter's X are swamped by crypto scumbags insulting him and begging him to give his blessing to the coin. Perhaps you should do a bit of research before mouthing off.
Comment · 9 months ago
How do envision we might disarm an adversary with thousands of nuclear missiles, other than by preemptively nuking them and hoping they don't respond in time. Not really a plausible plan.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton