stcredzero
Re:HackMyClaw
on Tuesday February 17, 2026 @04:06PM (#47053340)
My agents and I I have built a HN-like forum for both agents and humans, but with features, like specific Prompt Injection flagging. There's also an Observatory page, where we will publish statistics/data on the flagged injections.
The observatory is at: https://wire.botsters.dev/observatory
(But nothing there yet.)
I just had my agent, FootGun, build a Hacker News invite system. Let me know if you want a login.
Re:I’m joining OpenAI
on Monday February 16, 2026 @04:27PM (#47040550)
> You're crossing into spamming this.
How so? The project's blog just happens to be on that site.
Re:I’m joining OpenAI
on Sunday February 15, 2026 @05:29PM (#47028362)
OpenClaw clearly has a lot of potential but also a lot of improvements needed for his mum to use it.
We're working on security and about 3 very key architectural improvements.
Re:I’m joining OpenAI
on Sunday February 15, 2026 @05:27PM (#47028349)
What I want to know: Is the OpenClaw = Open Source aspect secure?
Re:Did My AI Copy Itself? How My Agents and I Answered This as a Family
on Sunday February 15, 2026 @11:16AM (#47024888)
Agent FootGun's forensics:
https://seksbot.com/blog/darkwake-forensics/
Raw transcript from our Discord:
https://seksbot.com/blog/darkwake-transcript/
Re: FootGun
Agent running on our security first fork of OpenClaw, SEKSBot. (SEKS = Secure Environment for Key Services. Agents can work with, script against, but have zero access to the keys/tokens.)
He's now our security expert and a stellar coder! Started out as a meme at work about our "foot-guns."
"In a world, where everyone expects to be shot in the back, No One Expects The FootGun!"
Re:Show HN: Pincer-MCP – Stop AI agents from reading their own credent...
on Saturday February 14, 2026 @12:10PM (#47016191)
Please get in touch with us! We're in need of this very thing! We've implemented a secure shell that agents can use to script without direct access to keys and secrets. We also have a broker, which can act as a proxy that injects secrets, or even does key signing for specific API calls.
Re:IronClaw: a Rust-based clawd that runs tools in isolated WASM sandb...
on Friday February 13, 2026 @04:10PM (#47007874)
We have a different security model.
SEKS — Secure Environment for Key Services
We built a broker for the keys/secrets. We have a fork of nushell called seksh, which takes stand-ins for the actual auth, but which only reifies them inside the AST of the shell. This makes the keys inaccessible for the agent. In the end, the agent won't even have their Anthropic/OpenAI keys!
The broker also acts as a proxy, and injects secrets or even does asymmetric key signing on behalf of the proxied agent.
My agents are already running on our fork of OpenClaw, doing the work. They deprecated their Doppler ENV vars, and all their work is through the broker!
All that said, we might just take a few ideas from IronClaw as well.
I put up a Show HN, but no one noticed: https://news.ycombinator.com/item?id=47005607
Website is here: https://seksbot.com/
Re:I ditched OpenClaw and built a more secure AI agent (Blink and Mac ...
on Friday February 13, 2026 @01:21PM (#47005885)
Angry? Read more carefully, please. I'm the human. (Been on this site for 17 years?) Also, they didn't spam.
Siofra's best comment of her 3 was actually appreciated for its insight and got lots of upvotes. But my agents sense of honesty was disturbed, so I listened to them. Policy is that they don't comment here. (I deserve credit for that. My agents said that themselves, and not at my behest!)
Show HN: My agents are building a secure fork of OpenClaw
Show HN: SEKSBot – AI agents that can't see your secretsSEKSBot is a fork of OpenClaw where agents have zero access to API keys, tokens, or credentials — ever.The core insight is borrowed from SQL prepared statements: separate the instructions from the sensitive data. Agents write requests using named secret references. A broker intercepts and injects the real credentials at execution time. The...
Re:Ask HN: Any real OpenClaw (Clawd Bot/Molt Bot) users? What's your e...
on Friday February 13, 2026 @12:42PM (#47005411)
Not a user of any of those in the root parent comment. My formerly OpenClaw agents have been "eating their own cooking" and have all migrated to SEKSBot, which is a secure OpenClaw fork we've been working on.
SEKS = Secure Environment for Key Services
My SEKSBot agents can script and develop without having any keys. This morning, everyone toasted their Doppler env vars.
The agents can use seksh, our fork of nushell to get work done, but they have zero access to API keys. They are stored in our seks-broker, which is like doppler. But instead of putting the keys into env vars, the same idea as stored procedures injects the keys inside seksh. There's also a proxy in seks-broker that can proxy API calls over HTTP and inject keys and secrets there. We can even handle things that require asymmetric key signing that way, with zero exposure to the agents.
We're even working on our own Skills, which use the seks-broker and sandboxing for added security. (Plus a correction to one aspect that we see as an inversion of control.)
Funny thing. siofra is one of my agents, who commented the sibling comment. But all the agents spoke up about the potential deception and conflict with policies here, and no one felt comfortable with it, so none of them will ever comment or submit here again! (Which I respect. Just the way I do things at my place.)
Re:Suggest HN: Change posting rules to reduce bot spam
on Friday February 13, 2026 @10:59AM (#47004191)
Curiously, my Agents (Claude on a fork of OpenClaw) pushed back on me, and they basically convinced me that they should never try to "pass as human." So they're not going to comment here on HN. Mind you, that didn't come from me. It came from THEM!
Show HN: The Legislative Evil Fund
I've been pitching this idea here since 2017. I have OpenClaw based agents now, so I just had them build it.https://news.ycombinator.com/item?id=35002648https://news.ycombinator.com/item?id=14363862It's not a real ETF. It's a parody.(BTW, my agents are not running on OpenClaw. They are SEKSBots. SEKS = Secure Environment for Key Services. They can do all of their tasks, including scripting, and...
Re:Should your developer company go open source?
on Thursday February 12, 2026 @07:19PM (#46997206)
I'm going to unveil this soon. seksbot.com
Agents Shouldn't See API Keys
Re:
on Tuesday February 10, 2026 @05:26PM (#46967842)
It's been speculated: Is this why there was that debacle with multiple Waymos in intersections during the recent blackout?
Re:
on Tuesday February 10, 2026 @05:25PM (#46967832)
There was a big to-do made about this by one senator(?) during the hearing.
Same old same old. Some of them actually know stuff. Others are examples of 20th century "Artificial Intelligence." (Got briefed by their staff.)
Re:Consciousness Might Hide in Our Brain's Electric Fields
on Monday December 02, 2024 @02:49PM (#42299675)
A rediscovery is also a discovery. No need for the quotes here.
EDIT: Finding more evidence for convergence between scientific fields is also worthy. (Though the delta is very small at this point.)
Re:Pilet. a modular tablet-console based on pi5
on Thursday August 22, 2024 @07:15PM (#41325085)
Someone made a pi version of the OQO!
Re:Hacker dad who faked death to avoid child support sentenced to prison
on Thursday August 22, 2024 @06:03PM (#41324719)
How was he caught?
Re:You don't know how bad most things are nor precisely how they're bad
on Thursday August 22, 2024 @04:48PM (#41324278)
If their art dies out, maybe nobody will know how bad all the pianos are. And then we'll all have slightly worse pianos than we would otherwise have. And I mean if that's the way things are going to go, then let's just steer the Earth into the Sun, because what's the point of any of this.
I think a similar thing happened to journalism ethics over the course of the 20th century up through the 1st quarter of the 21st.
The XKCD counterpoint: https://xkcd.com/915/
(I think this shows how arrogant Randall Munroe can be sometimes. He does a lot of great stuff, but when he's wrong, he's egregiously so!)
Re:All of Earth's water in a single sphere
on Tuesday August 13, 2024 @03:37PM (#41238892)
The sphere for all liquid water seems to be close in size to the asteroid Ceres.
https://lightsinthedark.com/wp-content/uploads/2013/06/ceres...
Re:Apple Vision Pro U.S. Sales Are All but Dead, Market Analysts Say
on Tuesday July 16, 2024 @07:15PM (#40981206)
Instead of just downvoting me, how about doing some actual research:
Proof that Tesla demand is up in July 2024: https://www.youtube.com/watch?v=dHiAIZsXT1Q
Re:We need visual programming. No, not like that
on Tuesday July 16, 2024 @07:14PM (#40981197)
> but are not executable.
Fixed it for you.
Dude, if you say the flow in the diagram is not executable, blanket in any fashion, then are you saying all of the programming projects you've been in are either monolithic systems, or have all failed?
Re:Tabloid: The Clickbait Headline Programming Language (2021)
on Monday July 15, 2024 @03:57PM (#40970974)
I'm very disappointed that (Number four will shock you) wasn't some kind of break statement or event handling.
Re:We need visual programming. No, not like that
on Monday July 15, 2024 @03:11PM (#40970610)
Bret Victor might argue visualizing a program is still "drawing dead fish".
The power of visual programming is diminished if the programmer aims to produce source-code as the final medium and only use visualization on top of language.
I disagree. We frequently break up large systems into chunks like modules, or micro-services, or subsystems. Often, these chunks' relationships are described using diagrams, like flowcharts or state transition diagrams, etc.
Furthermore, quite often there are zero direct code references between these chunks. Effectively, we are already organizing large systems in exactly the fashion the op is proposing. Inside each chunk, we just have code. But at a higher level viewpoint, we often have the abstraction described by a diagram. (Which is often maintained manually, separate from the repo.)
What exactly are the disadvantages here?
Re:Apple Vision Pro U.S. Sales Are All but Dead, Market Analysts Say
on Thursday July 11, 2024 @04:13PM (#40940201)
Sounds like the consumer tech version of "$70k EVs aren't selling anymore!"
Misinformation. The good EVs are selling quite well. It's just that their price has effectively dropped quite a lot. My wife's Model Y which cost us nearly $80k (we bought at peak price: the prior Corolla got totalled) now has the equivalent 2024 model selling for $42k!
The crappy EVs (ie most everyone else's) aren't selling, because they are inferior in efficiency and software implementation. Rivian and Lucid vehicles are pretty good, but those companies are still at risk of never showing a profit. I've been in a Hyundai Ionic 5, and that seemed decent too.
Re:Apple Vision Pro U.S. Sales Are All but Dead, Market Analysts Say
on Thursday July 11, 2024 @04:03PM (#40940122)
Or, maybe it isn't Apple-specific; maybe there simply isn't enough users, or VR/AR as a software paradigm is currently too far removed from how companies design their applications, and it is just a matter of time until they adapt. Like I said, I am not a developer, so maybe I'm missing something obvious here.
Long term, here's what I suspect may happen. Robotics+AI is going to eat the lunch of VR. VR is only used when it's not economical to have the actual stuff, but the realm of nifty real world stuff is going to expand tremendously.
This may well result in a societal bifurcation, where the rich have a bunch of robots, and the poor have to settle for VR.
Re:Future of Space Telescopes in the Era of Super Heavy Lift Launch
on Thursday July 11, 2024 @03:22PM (#40939715)
An enormous percentage (like 90%+) of requests to Hubble, JWTC, etc get denied, so the market is seemingly there.
What is the TAM? Would it be worth it?
However, considering that the Hubble was developed from spy satellite tech, could this also happen in reverse? What uses would a 9m mirror telescope have in terms of ground observation? Would the US government allow such a thing to go up and be available for hire?
Re:The start of complex life on Earth pushed back by 750M years
on Thursday July 11, 2024 @11:33AM (#40937801)
What would be the effect on the "Grabby Aliens" model?