Hacker Newsnew | past | comments | ask | show | jobs | submit | ropetin's commentslogin

Similar thing at my company. Someone /very/ high up in the org chart recently said to the entire company that OpenClaw is the future of computing, and specifically called out Moltbook as something amazing and ground breaking. There is literally no way security would ever let OpenClaw in the same room as company systems, never mind actually be installed anywhere with access to our data.

It should be noted that this exec also mentioned we should try "all the AIs", without offering up their credit card to cover the costs. I guess when your base salary is more than most people make in a life time, a few hundred bucks a month to test something doesn't even register.


  MoltBook is vibe coded. It passed its own API key via client side JS, and in doing so exposed full read/write access to it’s supabase db, complete with over a million API keys. 
That is groundbreaking for a product held in such high esteem, just not in a good way.

I lack the words to explain my frustration at this timeline.


I miss the old days of 5.5 years ago when people were skill sceptical of Yudkowsky's AI Box experiment:

https://news.ycombinator.com/item?id=24402893


Am I missing something or are both of the "we convinced someone to let the AI out" claims missing any logs of what was actually said? Why wouldn't that be shared? You can't just claim something is true because you have proof, but not share the proof.

You're not missing anything; I can't remember what his reasoning was, just that he gave one, therefore his say-so was only worth as much as your trust that he was honest.

Today though, with headlines like this one in response to events such as it quotes from people in positions such as they are?

That is why I miss the old days, when not believing Yudkowsky's statements about the AI Box experiment only meant your views were compatible with the norms of corporate IT security rules.


> exposed full read/write access to it’s supabase db, complete with over a million API keys.

When was this lol; I knew it didn’t drop out of the news that fast by inertia alone.


It was revealed by this post by Wiz from the beginning of this month: https://www.wiz.io/blog/exposed-moltbook-database-reveals-mi...

> 35,000 emails. 1.5M API keys. And 17,000 humans behind the not-so-autonomous AI network

Wow, this is sure a brave new world. I'd just recently heard about the project and they've already been pwned so massively. We're accelerating into a future beyond our control.


> vibe coded

s/vibe/slop/;


Honestly “vibe coded” is already so derogatory in my eyes that I didn’t even consider another term

Sounds like you work at a music streaming company, but then again, this behavior is probably very wide spread.

If I'm reading you right, you're saying if one country does something bad, that makes it OK for another country to do the same? You can likely find a country in the world doing any heinous thing you can think of, so is everything on the table? What about positive things? Lots of countries have socialized medicine, so by your logic doesn't that mean the US should, too?

And if you think activism is bad for non-residents (non-citizens?) who do you think should decide what constitutes activism? A student goes to a pro-Israel rally, is that deportable activism? A tourist goes to an 'adopt-a-puppy' event at a no-kill shelter and donates $10, is that deportable activism?


No, you're so far off base I don't really know how you even got there.

My point is purely that it is 100% inappropriate for a guests in our country to be pushing for political change in our own country.


Once upon a same, the exact same argument was made against women or black slaves pushing for political change.


> Contrary to the national security threat machine’s picture of a country at war with itself, we all got along so swimmingly that the idea of a civil war or anything like it struck me as laughable, as did the notion that the statistically insignificant number of politically-motivated killings, though real, said anything at all about the vast majority of real-world Americans.

This line of thinking drives me crazy, especially from someone like Ken. Just because a bunch of privileged Americans were friendly with each other while enjoying an amazing time in nature doesn't immediately negate the very real problems going on in the US.


I think what he is trying to say is that if we all sit down with each other and stop requiring that people agree with our worldview before engaging in good faith, we would find that we actually get along peacefully. He is saying that it isn't as bad as he thought it was before he experienced a situation where that happened.


See them discuss about how much someone of them gets paid or taxed, if he has medical help if needed or if he can afford to live where he's living now.


This person lives and breathes politics, he is a political blogger. Just interacting with people outside of politics was new for him.

He isn't saying 'ignore politics', and he isn't saying 'we can all agree on everything'. What he is saying is 'making your life about political issues distorts your perspective to where you think that everyone hates one another to point of declaring a civil war' and is advocating sitting down and just socializing with people without the baggage.

As the kids say 'its not that deep'.


But this is an environment where people aren’t talking about real and very important issues.

We obviously get along as a society when we are just doing day to day things. You don’t have to be on vacation to witness that.

But when it comes to discussing whether my trans friends have basic human rights, or whether we should treat foreigners like criminals with no due process by default, whether we should build coal power plants or nuclear power plants or solar power plants, or whether we should start a war, or whether healthcare should be a human right, it’s easy to find people I’ll have strong disagreements with these days.

And those are disagreements that have real consequences. Just ask the people I know who are discontinuing healthcare coverage due to ACA subsidies ending.

Ignorance and avoiding discussing these issues is bliss…until one day it might affect you.

The polarization is unfortunate but I think one way to lessen that is to actually confront issues and solve them. And that’s a fight since there’s a whole system setup that intends us to never solve those problems. But perhaps we might observe that a lot of the solved problems no longer occupy the debate space.


If you want to get people on your side, the best way to do that is not to argue with them, but to be friendly with them. This doesn't mean rolling over and letting them say untrue things or not advocating for causes that are important to you, but it means respecting that other people have different views and putting aside disagreements to socialize with them. There is a reason why armies disallow 'fraternizing with the enemy'.


It would be interesting to do a study (if one hasn't already been done) on whether password manager use reduces the number of compromises an individual has or not.

I think if used correctly they can be a net benefit, but the question is how many users actually use them correctly. Isn't the security they offer based on a user only having to remember a single complex and unique password for the manager, and then let it handle unique and complex passwords for everything else. The question is, however, how many users just set the password manager password to 'ImSecure123!' and use it to autofill the same old reused passwords they've always used?


This is why all the top/good password managers will alert you of: 1) password reuse between sites and 2) weak passwords. One can hope that the users will listen to those suggestions. In an organization, you can enforce compliance.


I find it interesting that the comment about VPNs offering little additional privacy or security benefits is wrapped up under 'Avoid Public WiFi' rather than being called out explicitly. It drives me nuts all the ads I see for NordVPN or whatever claiming that by using their services you are now totally safe from all the hacks. If anything, it makes the median user less safe because they have a false sense of security.


NordVPN is also one of the worst offenders in borderline marketing campaigns. Really questionable company.


Wouldn't it be the AGs who recently got 'let go'?

And why did you go straight to whataboutism? Just because one person does bad things it doesn't excuse other people from doing the same bad things. You don't see serial killers lawyers arguing, "I know my client killed 17 people, but what about that Jeffrey Dahmer, eh?"


"there are a lot of unsolved murders out there. aren't those people free? my client should be free too!"


Exactly this! I just don't understand how this is hard for otherwise competent people to grasp. The explanation I've used in the past is the choices are either being stabbed in the face or kicked in the balls. Ideally I'd not have either, but forced between one or the other I know which one I'd pick.


David Sedaris: “I look at these people and can't quite believe that they exist. Are they professional actors? I wonder. Or are they simply laymen who want a lot of attention? To put them in perspective, I think of being on an airplane. The flight attendant comes down the aisle with her food cart and, eventually, parks it beside my seat. "Can I interest you in the chicken?" she asks. "Or would you prefer the platter of shit with bits of broken glass in it? To be undecided in this election is to pause for a moment and then ask how the chicken is cooked.”


> I find it hilarious that everyone is scared of Trump when there was a concerted effort by the other side to use the justice system to stop him from ever running again.

I honestly don't get what you mean by this. Lets say all your comments about Biden, the FBI, laptops and whatever else are 100% true. How does that change if I should be worried about stuff Trump might do? To use a totally extreme example, if John Wayne Gacy went around talking all the shit in the world about Jeffrey Dahmer, does that somehow make Dahmer not a serial killer?

> He ran on “lock her up” in 2016 and never followed through.

So that proves he lies and makes promises he can't/won't/doesn't keep? Is that a positive trait in a politician? How are we supposed to determine when he is 'just joshing, bro' and actually is being truthful? And yes, I know Biden and the dems also make promises they don't keep, but again that doesn't excuse Trump from doing the same.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: