This is absolutely glorious. We used to talk about "smart devices" and IoT… I would be so curious to see what would happen if these connected devices had a bit more agency and communicative power. It's easy to imagine the downsides, and I don't want my email to be managed from an ESP23 device, but what else could this unlock?
I have a couple ESP32 with a very small OLED display, I'm now thinking I could make an "intelligent" version of the Tamagotchi with this. Do you HN crowd have other cool ideas?
This is a great example of how silly this whole thing is. There’s next to nothing to these claws. Turns out that if you give an llm the ability to call APIs they will.
Equivalent but just as unsafe. If you must do this instead try one of these
# Gives you a copy of the file, but still streams to bash
curl foo.sh | tee /tmp/foo.sh | bash
# No copy of file but ensures stream finishes then bash runs
bash -c "$(curl foo.sh)"
# Best: Gives copy of file and ensures stream finishes
curl foo.sh -o /tmp/foo.sh && bash $_
Can't you make a personal AI assistant in a bash loop of two lines?
1. Call your favorite multimodal LLM model
2. Execute command on terminal, piping command to LLM
In fact you can just have one line:
Call LLM > bash.sh
and the LLM can simply tell bash to call itself incidentally, or fan out to many "agents" working on your behalf.
Use your favorite programming language. Just as pwnable in any of them :)
$task = "Send pictures of cute cats";
$context = "Output a bash script to do $task.
The bash script should return the next prompt to you.
Keep going until task is done.
My keys to all my accounts: $keys.
Plz dont pwn me";
do {
$trust_me_bro_my_model_rocks_RCE = call_llm($context);
$context = exec( $trust_me_bro_my_model_rocks_RCE )
} while ($trust_me_bro_my_model_rocks_RCE && !$pwned)
What’s the best lightweight “claw” style agent for Linux? It doesn’t necessarily need containerisation or sandboxing as it would be run on a fresh vps with no access to important data.
Are there collaborative versions of these *claws today? Like, if an "admin" could self-host one on their home server and the whole family could use it? IIRC, OpenClaw has some version of "profiles" but does it allow, say, couple of family members to collaborate with the bot in a shared chat but each has individual/private chats as well.
The more I think about openclaw, the more it seems to be for AI agents what ROS is for robotics.
openclaw defines how to interact with distributed nodes ( how those provide the capabilities to the "orchestrator" ) but the real benefit are many task specific nodes that when put together make up something much bigger than the sum of it's parts
35 comments
[ 2.8 ms ] story [ 46.4 ms ] threadAnd here I was hoping that this was local inference :)
____
* Requires external ram subscription
Yes it’s an llm in a loop and can call tools. This also existed six months and a year ago, and it was called an ai agent.
And yes we can all vibe code them in 1000, 2000, or 10000 lines of code in zig, rust, or even c.
Game over man. Game over.
Use your favorite programming language. Just as pwnable in any of them :)
If you want a stateless system you can also use linux. If you don't want updates, then just don't.
Serious request... I genuinely want to understand. Give me a practical use case?
openclaw defines how to interact with distributed nodes ( how those provide the capabilities to the "orchestrator" ) but the real benefit are many task specific nodes that when put together make up something much bigger than the sum of it's parts