Hacker News Reader

Comment by jesse_dot_id | Hacker News Reader

The fully autonomous agentic ecosystem makes me feel a little crazy — like all common sense has escaped. It feels like there is a lot of engineering effort being exhausted to harden the engine room on the Titanic against flooding. It's going to look really secure... buried in debris at the bottom of the ocean.

When a state sponsored threat actor discovers a zero day prompt injection attack, it will not matter how isolated your *Claw is, because like any other assistant, they are only useful when they have access to your life. The access is the glaring threat surface that cannot be remediated — not the software or the server it's running on.

This is the computing equivalent of practicing free love in the late 80's without a condom. It looks really fun from a distance and it's probably really fun in the moment, but y'all are out of your minds.

View on HN

Free love was the 60's and 70's followed by the sex, drugs and rock n' roll 80's. Once AIDS and drug addiction hit, the party was over.

I think your analogy is still accurate, I'm just wondering when the AIDS, the drug overdoses and addiction phase of AI will finally hit.

We need to plateau I think and plateau hard. Currently that's not happening because Anthropic is clearly making better and better SOTA models.

Just my 2c

We haven't even seen what these models are fully capable of, and I'm not talking about agentic engineering here, just in general.

> a state sponsored threat actor

your CPU, your OS, CPU and firmware on your motherboard chips, ethernet, wifi, HDDs (btw did you know your sim card has JVM?), your browser, all your networking equipment in between, BGP and all the root certs and I'm just scratching the surface

the ballpark is on anther planet

Well, at least we share the same world as these people, meaning that we too will experience the consequences of their actions.

Isn't that a nice perspective

> a state sponsored threat actor

Most people don't seriously worry that they'll be targeted by a state sponsored actor.

Plus most people already expose their life on cloud (in forms of social media, iCloud, Google Drive, Windows's Bitlock key, etc).

I’m still not sure why there’s this general idea that people care about security/privacy. For critical systems, sure. But over the last decade, we’ve seen that an average person will always choose fun and convenience over security.

Even the analogy to free love is interesting, because sex in itself during that era was fun. Frankly it’s the same nowadays as well, we just figured out a way out of most of the diseases.

Eh… Titanic did flood in the engine rooms so… might work?

That humor aside: I think it’s about risk tolerance, and you configure accordingly.

You lock it down as much as you need to still do the things you want, and look for good outcomes, and shut it down if things get too risky.

You practice free love, but with protection. Probably still fun?

Big difference between running a bot with fairly narrow scopes inside a network available via secure chat that compounds its usefulness over time, and granting full admin with all your logins and a bank account. Lots of usefulness in the middle.

Reply on news.ycombinator.com