Hacker News Reader

marscopteron OpenClaw privilege escalation vulnerability

If I am not mistaken steipete works for OpenAI now as part of OpenClaw being acquired by them back in February.

NVIDIA is contributing to the security of OpenClaw via NemoClaw.[0]

Not sure about ByteDance and Tencent.

0. https://www.nvidia.com/en-us/ai/nemoclaw/

marscopteron Anthropic officially bans using subscription auth for third party use

> Reading these comments aren't we missing the obvious?

AI companies: "You think you own that code?"

marscopteron An AI agent published a hit piece on me – more things have happened

There is a post on their forum from what appears to Ars Technica staff saying that they're going to perform an investigation.[0]

[0] https://arstechnica.com/civis/threads/journalistic-standards...

marscopteron Coding agents have replaced every framework I used

> the growing awareness within the community of professional developers that ... blind trust cannot be given, and reasonable review of generated code at the end of a session is good practice.

This saddens me. It saddens me that this is a trend among professional developers. It's an old lesson. We've known it for decades. Running arbitrary code is probably not the best idea.

marscopteron iCloud Photos Downloader

Photos > Settings > iCloud > Download Originals to this Mac.

marscopteron The fuck off contact page

It depends.

Suppose we are a design agency which build merchandise shops for sports teams. We have specific market knowledge, research, and experience in tailoring these shops to improve the experience for sports fans.

Out of the blue, a logistics company contacts us to help them build a merchandise shop. Could we do this? Sure, but it would require a lot of upfront work and given that it's not our area of expertise could possible result in a subpar experience for both us and the logistics company.

Given such, it's reasonable disqualify such clients. We can do this through our sales process, but by adding a simple "painful" field (e.g., "What sport does your team play?") you encourage such clients to disqualify themselves.

It saves us the work and effort. And it means the clients who get through the form are more likely to be the type of client we want.

There will always be a balance because our ideal clients will always be vaguely defined to some extent. This means some legit clients might get disqualify unnecessarily (e.g., a lacrosse team because we didn't think to include that in the list of sports), but it also means the quality of leads and/or inquiries which come through the forms would be higher quality.