Hacker News Reader

Comment by ropetin | Hacker News Reader

Similar thing at my company. Someone /very/ high up in the org chart recently said to the entire company that OpenClaw is the future of computing, and specifically called out Moltbook as something amazing and ground breaking. There is literally no way security would ever let OpenClaw in the same room as company systems, never mind actually be installed anywhere with access to our data.

It should be noted that this exec also mentioned we should try "all the AIs", without offering up their credit card to cover the costs. I guess when your base salary is more than most people make in a life time, a few hundred bucks a month to test something doesn't even register.

View on HN

  MoltBook is vibe coded. It passed its own API key via client side JS, and in doing so exposed full read/write access to it’s supabase db, complete with over a million API keys.

That is groundbreaking for a product held in such high esteem, just not in a good way.

I lack the words to explain my frustration at this timeline.

> exposed full read/write access to it’s supabase db, complete with over a million API keys.

When was this lol; I knew it didn’t drop out of the news that fast by inertia alone.

It was revealed by this post by Wiz from the beginning of this month: https://www.wiz.io/blog/exposed-moltbook-database-reveals-mi...

> 35,000 emails. 1.5M API keys. And 17,000 humans behind the not-so-autonomous AI network

Wow, this is sure a brave new world. I'd just recently heard about the project and they've already been pwned so massively. We're accelerating into a future beyond our control.

I miss the old days of 5.5 years ago when people were skill sceptical of Yudkowsky's AI Box experiment:

https://news.ycombinator.com/item?id=24402893

Am I missing something or are both of the "we convinced someone to let the AI out" claims missing any logs of what was actually said? Why wouldn't that be shared? You can't just claim something is true because you have proof, but not share the proof.

You're not missing anything; I can't remember what his reasoning was, just that he gave one, therefore his say-so was only worth as much as your trust that he was honest.

Today though, with headlines like this one in response to events such as it quotes from people in positions such as they are?

That is why I miss the old days, when not believing Yudkowsky's statements about the AI Box experiment only meant your views were compatible with the norms of corporate IT security rules.

> vibe coded

s/vibe/slop/;

Honestly “vibe coded” is already so derogatory in my eyes that I didn’t even consider another term

Sounds like you work at a music streaming company, but then again, this behavior is probably very wide spread.

Reply on news.ycombinator.com