- i have no idea why even HN is giving openclaw so much weightage
- i literally dont even posts that talk about it!
- this is the first time i opened one to come and tell someone needs to do a case study or deep dive into who is marketing it like crazy and why
All of this OpenClaw / Moltbot bullshit is annoying.
But it’s comments like yours that are slowly giving me a stroke.
Just putting things on a cloud server that would not destroy your life if leaked, that is not how IT security works.
We designed security best practices for IT software for decades, this vibe coded wet dream of any North Korean hacker is throwing all of it over board.
It’s malware. Do not install malware.
The other part of the equation is people like you not understanding what running insecure software that allows for unnoticed access to your cloud hosted machine really means.
Once I have access to your cloud hosted Ubuntu server I have access to where, when and how you connect to that server.
I can then not just use your server to hide my own criminal activities and not give a shit if you go to jail for it because I used your server as a staging point for cybercrime activities and bounce off some other idiots Openclaw servers, I also have your home ip address.
Good luck explaining the FBI that a lobster was responsible for running a ransomware campaign against a company that deals with critical infrastructure and not you.
I pity those poor agents already because that will be part of their exhausting paperwork in the near future. AI did it sir, I swear. Doesn’t matter son, you better get your anus stretched and prepare for a ten year stay in a prison with real criminals that will greet you excitedly with a "fresh meat is on the menu boys".
From your home IP I can break into your router, or I don’t even need to because manipulating whatever you download from that server to your personal devices is likely enough to get access to the machine you connect from and probably your phone.
Suddenly your 2FA is no longer safe because I have access to both devices you use to authenticate everything from bank transfers to logins. And because I have access to your home network I can figure out from network activity alone when you sleep. I can destroy your whole life within the 4 to 8 hours you’re unconscious.
Once I’m in your router or personal pc I can then also scan for devices on your home network and put a persistent backdoor on one of the countless Chinese home appliances people use these days. Unless you burn your house down, you will never be able to get me out of it.
Once I have permanent access to your network I can watch you fap to heterotransgayporn over your camera and then blackmail you. I clone your voice, i take enough pictures or get them from your NAS to clone your face and steal your identity.
Maybe I open an account somewhere with videos of your wife undressing or the private photos on your daughters laptop and once your cloud server is burned, which I find out from the footage of heavily armed agents kicking in your door one morning, which I will also sell on the darknet for the amusement of others, I bleed you dry financially and disappear in the smoke.
You won’t need a lobster anymore to order your sneakers.
You will never eat one again because you’re dead broke.
But you will turn the same color as one once you find out that I exposed everyone you love on the internet and made money from it and they will never be able to delete it from the internet again.
Congratulations, only putting things there within lobster reach that would not destroy you if leaked, basically killed your whole family.
I need to put it this drastically because that is how cybercriminals will put you and your family at risk irl without blinking an eye.
Companies lose millions every week because one of their senior employees fell victim to phishing attacks and then got blackmailed with compromising material of themselves. And those people all have the same in common. They think they are much smarter than they really are.
You thinking to "only put things there within lobsters reach that would not destroy you if leaked" puts you in the same group as any other idiot that have been hacked and their life’s ruined in the past.
Fair point, wrong place. The article goes out of its way to explain it's bad for people who don't know what they're doing.
However I think there's going to be very few of that kind of people at the xda developers forum :) Or here, for that matter. This message would be better spread at more mainstream sites.
Article author here: you'd be surprised! XDA these days has quite a bit of mainstream outreach, and this article has been getting shared on some socials. Even saw it getting passed around on LinkedIn.
- i have no idea why even HN is giving openclaw so much weightage - i literally dont even posts that talk about it! - this is the first time i opened one to come and tell someone needs to do a case study or deep dive into who is marketing it like crazy and why
Let the script kiddies have some fun.
It works very well on a cloud hosted Ubuntu server. You only put things there within lobster reach that would not destroy you if leaked.
You decide what to put with the lobster.
All of this OpenClaw / Moltbot bullshit is annoying. But it’s comments like yours that are slowly giving me a stroke.
Just putting things on a cloud server that would not destroy your life if leaked, that is not how IT security works.
We designed security best practices for IT software for decades, this vibe coded wet dream of any North Korean hacker is throwing all of it over board.
It’s malware. Do not install malware.
The other part of the equation is people like you not understanding what running insecure software that allows for unnoticed access to your cloud hosted machine really means.
Once I have access to your cloud hosted Ubuntu server I have access to where, when and how you connect to that server.
I can then not just use your server to hide my own criminal activities and not give a shit if you go to jail for it because I used your server as a staging point for cybercrime activities and bounce off some other idiots Openclaw servers, I also have your home ip address.
Good luck explaining the FBI that a lobster was responsible for running a ransomware campaign against a company that deals with critical infrastructure and not you.
I pity those poor agents already because that will be part of their exhausting paperwork in the near future. AI did it sir, I swear. Doesn’t matter son, you better get your anus stretched and prepare for a ten year stay in a prison with real criminals that will greet you excitedly with a "fresh meat is on the menu boys".
From your home IP I can break into your router, or I don’t even need to because manipulating whatever you download from that server to your personal devices is likely enough to get access to the machine you connect from and probably your phone.
Suddenly your 2FA is no longer safe because I have access to both devices you use to authenticate everything from bank transfers to logins. And because I have access to your home network I can figure out from network activity alone when you sleep. I can destroy your whole life within the 4 to 8 hours you’re unconscious.
Once I’m in your router or personal pc I can then also scan for devices on your home network and put a persistent backdoor on one of the countless Chinese home appliances people use these days. Unless you burn your house down, you will never be able to get me out of it.
Once I have permanent access to your network I can watch you fap to heterotransgayporn over your camera and then blackmail you. I clone your voice, i take enough pictures or get them from your NAS to clone your face and steal your identity.
Maybe I open an account somewhere with videos of your wife undressing or the private photos on your daughters laptop and once your cloud server is burned, which I find out from the footage of heavily armed agents kicking in your door one morning, which I will also sell on the darknet for the amusement of others, I bleed you dry financially and disappear in the smoke.
You won’t need a lobster anymore to order your sneakers. You will never eat one again because you’re dead broke.
But you will turn the same color as one once you find out that I exposed everyone you love on the internet and made money from it and they will never be able to delete it from the internet again.
Congratulations, only putting things there within lobster reach that would not destroy you if leaked, basically killed your whole family.
I need to put it this drastically because that is how cybercriminals will put you and your family at risk irl without blinking an eye.
Companies lose millions every week because one of their senior employees fell victim to phishing attacks and then got blackmailed with compromising material of themselves. And those people all have the same in common. They think they are much smarter than they really are.
You thinking to "only put things there within lobsters reach that would not destroy you if leaked" puts you in the same group as any other idiot that have been hacked and their life’s ruined in the past.
Become smarter or a victim, your choice.
Fair point, wrong place. The article goes out of its way to explain it's bad for people who don't know what they're doing.
However I think there's going to be very few of that kind of people at the xda developers forum :) Or here, for that matter. This message would be better spread at more mainstream sites.
Article author here: you'd be surprised! XDA these days has quite a bit of mainstream outreach, and this article has been getting shared on some socials. Even saw it getting passed around on LinkedIn.
Oh ok I didn't realise. I just know it as a forum where custom rom developers hang out.
How is this different from any other agentic harness?
Opencast is a very capable … gun. You can really do amazing stuff with it, but it can be incredibly damaging.
Ahh, okay!