sachaa
I made it open source: https://github.com/wexare-ai/browser-laya
System one systems will be essential for the future of AI and truly believe we need to push for more decentralized solutions like this.
Real-Time caustics in the browser
ReplaceByClawd: Find out if you can be replaced by OpenClaw
The real unlock isn’t TinyLoRA, it’s what this implies: ultra-cheap, continuous adaptation. The bottleneck shifts from compute to having a good reward signal.
Create a new bookmark in your browser, name it something like "Profile HN User", and paste this as the URL:
javascript:void(function(){var u;var m=window.location.href.match(/news\.ycombinator\.com\/user\?id=([^&]+)/);if(m){u=m[1]}else{u=prompt(%27Enter HN username:%27)}if(!u)return;var msg=%27Profile this HN user: https://hn.algolia.com/api/v1/search_by_date?tags=comment,au...})()
If you're on a HN profile page (news.ycombinator.com/user?id=someone) it grabs the username automatically. Otherwise it prompts you to type one. It copies the profiling prompt to your clipboard and opens a new Claude conversation, just Cmd/Ctrl+V and hit Enter.
Show HN: OpenBrowserClaw: Browser-native Claw assistant, zero infrastructure
https://www.openbrowserclaw.com/
I built OpenBrowserClaw as a browser-only reimagining of OpenClaw. Same philosophy: small enough to understand, built for one user, but running entirely in a browser tab.No Mac Mini. No VPS. No cloud deploy. No Docker. Just open a tab.The idea: What if your AI assistant lived in a browser tab instead of a server? No infrastructure to manage, no background processes, no deployment headaches....
To your questions:
- 1. The CryptoKey is extractable: false, so JS can't export the raw key material, it only exposes encrypt/decrypt operations. It won't stop a full XSS attack on the same origin, but it does prevent casual inspection of IndexedDB/DevTools. Defense in depth, not a silver bullet.
- 2 & 4. You're right, the fetch_url tool and javascript eval in the worker both have unrestricted network access. A confirmation step for outgoing requests is worth adding. Good callout.
- 3 Honest oversight, no reason the Telegram token shouldn't get the same treatment. Will fix.
Updating the security language in the README to be more accurate about the threat model. PRs welcome if anyone wants to tackle sandboxing the JS tool (iframe with a null origin is one approach).
Show HN: OpenBrowserClaw – No Mac Mini. No VPS. No Cloud Deploy. Just Open a Tab
https://www.openbrowserclaw.com/
I was wondering... why do we need a Mac Mini, a VPS, or a Docker container to run OpenClaw?Your browser already has a secure sandboxed OS, a database, a filesystem, and a JS engine. What if we just... used those?So I built OpenBrowserClaw inspired by the simplicity of NanoClaw but running entirely in a browser tab.- Claude API with full tool-use loop- Shell commands in a v86-emulated Alpine...
Show HN: Alexa-like voice interface for OpenClaw
https://github.com/sachaabot/openclaw-voice-agent
I’ve been experimenting with running OpenClaw fully locally on a small PamirAI Distiller Alpha device. Something interesting happened: OpenClaw detected the device had an unused microphone + speaker, and I ended up wiring a full local voice interface on top of it, wake word, audio pipeline, and agent loop, all running 24/7 on-device.The result is a completely local, always-on AI agent I can...
https://www.youtube.com/watch?v=mvK0UzFNw1Q
If coding is the way to go to solve a problem then be it. If plumbing is the solution then that is what they should learn.
The key is to empower them to solve problems early on. The good news is that that can even happen in their backyard getting dirty.