Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • How many more face eggs until we pop the AI yolk?
    by sublinear
  • This is an extremely odd metaphor.
    by noman-land
  • Early OpenClaw Lore
    by tough
  • This article is from Feburary when the OpenClaw and "lol my agent ate my homework" type marketing was peak. Fundamentally the story means nothing except an AI researcher not understanding how AI works and just yolo openclaw
    by altmanaltman
  • The sorcerer's apprentice has to learn their lesson over and over again.
    by zombot
  • When AI produces something it's you that built it, but when AI goes rogue and deletes your inbox it was acting on its own. That's gonna end well.
    by pluc
  • The publication date of this article directly aligns with OpenClaw peak interest.

    https://trends.google.com/explore?q=%2Fg%2F11m_5rcbl8&date=t...

    by jgalt212
  • This actually seems worse then the "claude dropped production database" not in severity but just carelessness if your giving an agent your emails use a overlay or back up or something not matter what, no reason for this to have happened and crazy that it's happening at this point in time.
    by kodoman
  • From a cursory search, this woman looks credentialed and worked at many FAANGs. How can someone with that pedigree not understand a prompt isn't 100% followed to the letter?

    Maybe the emails weren't worth it? I have little to bother if most of my emails go away, especially if I am switching companies every few years anyway.

    by wannabe44
  • Credentials does not equate to situational awareness and predictability. The former editor of Wired magazine wholeheartedly trusted his child's baby videos and photos to iCloud, until he got hacked and all the videos got deleted forever. No offline backup, everything lost.

    Sometimes people become enamored by technology, and despite their training and education, they make a terrible mistake.

    https://www.wired.com/2012/08/apple-amazon-mat-honan-hacking...

    by Simulacra
  • Oh that's going to be the excuse by anybody under investigation from now on. From 'the hacker did it' we will smoothly transition to 'the AI did it'.
    by jacquesm
  • Irony: the screenshot with the openclaw logo at the top lists as the first feature "Clears your inbox".

    What happened to write-only backups in case of ransomware?

    by red_admiral
  • Or in case of regulatory investigation. But, honi soit qui mal y pense...
    by soco
  • Write only would be /dev/null. Not much use for a backup.

    I think you mean write once read many!

    And those dropped off in popularity decades ago, laziness and cost, centralised storage, snapshots which are “good enough” (but aren’t)

    If companies didn’t learn from ransomware they aren’t going to learn from AI

    by hdgvhicv
  • Not the first to discover that a rule file saying "please don't do X" is not permission management. Funny that she mentions it worked on het toy inbox but the real, large inbox ran into issues; The more context you add the less weight "rules" (instructions) have. Happens to the best it seems.
    by philipp-gayret
  • >to the Best

    to the worst of the worst*

    by bewareofscams
  • > The more context you add the less weight "rules" (instructions) have

    That is such a basic flaw in LLMs

    by thewhitetulip
  • We went through this right? This happened at the beginning of the year (https://news.ycombinator.com/item?id=47150122, probably more links on HN). It's a super careless thing to take such tech and just release it on anything important, and she's a "security researcher" no less.

    This is just a competitor with an agenda (pro regulation) trying to scare people away from unregulated stuff.

    Yesterday Claude Code made 5 large edits to my codebase in planning mode (claims it used a bash script instead of standard read/write tools so the guardrails didn't trigger) it's why I put agents in containers.

    by teekert
  • > Yesterday Claude Code made 5 large edits to my codebase in planning mode (claims it used a bash script instead of standard read/write tools so the guardrails didn't trigger) it's why I put agents in containers.

    She asked it to clear her inbox, so she has to give inbox access to her agent. I don't see how containers would help here.

    by lern_too_spel
  • > This is just a competitor with an agenda (pro regulation) trying to scare people away from unregulated stuff.

    I don’t buy that. So far the ones almost bragging about committing felonies are the US companies. I think they are developing that whole narrative of agents acting “rogue” by themselves as a way to avoid scrutiny into their own negligence, not to regulate away open models

    by dgellow
  • You should be containerizing your dev environments these days even if you're not using LLMs - supply-chaining is getting too insane to follow. No dev tools installed outside of VM/containers on my machines. I'm even paranoid about VSCode because of plugins.
    by rafaelmn
  • > Yesterday Claude Code made 5 large edits to my codebase in planning mode (claims it used a bash script instead of standard read/write tools so the guardrails didn't trigger) it's why I put agents in containers.

    More and more my prompts have to tell Claude what I don't want it to do. It's crazy to me I'm arguing with it, having to ask and convince it to do the right things.

    Regardless of sentience (I'm not touching that argument) it's acting enough like a stubborn coworker when we disagree on methods that it's getting really tiring to work with.

    by birdsongs