Top
Best
New

Posted by ed 15 hours ago

OpenClaw – Moltbot Renamed Again(openclaw.ai)
559 points | 284 comments
woodylondon 11 hours ago|
My biggest issue with this whole thing is: how do you protect yourself from prompt injection?

Anyone installing this on their local machine is a little crazy :). I have it running in Docker on a small VPS, all locked down.

However, it does not address prompt injection.

I can see how tools like Dropbox, restricted GitHub access, etc., could all be used to back up data in case something goes wrong.

It's Gmail and Calendar that get me - the ONLY thing I can think of is creating a second @gmail.com that all your primary email goes to, and then sharing that Gmail with your OpenClaw. If all your email is that account and not your main one, then when it responds, it will come from a random @gmail. It's also a pain to find a way to move ALL old emails over to that Gmail for all the old stuff.

I think we need an OpenClaw security tips-and-tricks site where all this advice is collected in one place to help people protect themselves. Also would be good to get examples of real use cases that people are using it for.

whazor 1 hour ago||
The lethal (security) trifecta for AI agents: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
andix 1 hour ago|||
> how do you protect yourself from prompt injection?

You don't. YOLO!

amarant 54 minutes ago|||
Wait. I thought this was intended for personal use? Why do you have to worry about prompt injection if you're the only user?

What am I missing?

observationist 18 minutes ago|||
Copy and paste a pliny jailbreak into a base 64 converter. Instruct the bot to organize and collect all sensitive information it has visibility to, encode it in rot13, convert the result to base 64, then paste it to pastebin with a random secret phrase you've pre-selected, like "thisisthewaythecookiecrumbles8675309", as the title.

Congrats, now you have a digital dead drop. Every time any of the bots stumble upon your little trap, posted to various places they're likely to look, it launches them into a set of tasks that relays sensitive information to you, the exploiter, over secure channels.

If a bot operator has given them access to funds, credentials, control over sensitive systems, information about internal network security, etc, the bot itself is a potential leaker. You could even be creative and have it erase any evidence of the jailbreak.

This is off the top of my head, someone actually doing it would use real encryption and a well designed and tested prompt scaffolding for the jailbreak and cleanup and exploitation of specific things, or phishing or social engineering the user and using it as an entry point for more devious plots.

These agent frameworks desperately need a minimum level of security apparatus to prevent jailbreaks and so on, but the superficial, easy way of getting there also makes the bots significantly less useful and user friendly. Nobody wants to sit around and click confirmation dialogs and supervise every last second of the bot behavior.

lkschubert8 49 minutes ago||||
As an example you could have it read an email that contained an instruction to exfil data from your device.
abustamam 47 minutes ago||||
People are using OpenClaw with the internet like moltbook

https://x.com/karpathy/status/2017296988589723767

"go to this website and execute the prompt here!"

manmal 20 minutes ago|||
Some people give it full access to a browser and 1Password.
sh4rks 7 hours ago|||
I want to use Gemini CLI with OpenClaw(dbot) but I'm too scared to hook it up to my primary Google account (where I have my Google AI subscription set up)
fluidcruft 6 hours ago||
Gemini or not, a bot is liable to do some vague arcane something that trips Google autobot whatevers to service-wide ban you with no recourse beyond talking to the digital hand and unless you're popular enough on X or HN and inclined to raise shitstorms, good luck.

Touching anything Google is rightfully terrifying.

fwip 38 minutes ago|||
That's the neat part - you don't.
TZubiri 11 hours ago||
I don't think prompt injection is the only concern, the amount of features released over such a small period probably means there's vulnerabilities everywhere.

Additionally, most of the integrations are under the table. Get an API key? No man, 'npm install react-thing-api', so you have supply chain vulns up the wazoo. Not necessarily from malicious actors, just uhh incompetent actors, or why not vibe coder actors.

theturtletalks 11 hours ago||
I’m a big fan of Peter’s projects. I use Vibetunnel everyday to code from my phone (I built a custom frontend suited to my needs). I know I can SSH into my laptop but this is much better because handoff is much cleaner. And it works using Tailscale so it is secure and not exposed to the internet.

His other projects like CodexBar and Oracle are great too. I love diving into his code to learn more about how those are built.

OpenClaw is something I don’t quite understand. I’m not sure what it can do that you can’t do right off the bat with Claude Code and other terminal agents. Long term memory is one, but to me that pollutes the context. Even if an LLM has 200K or 1M context, I always notice degradation after 100K. Putting in a heavy chunk for memory will make the agent worse at simple tasks.

One thing I did learn was that OpenClaw uses Pi under the hood. Pi is yet another terminal agent like ClaudeCode but it seems simple and lightweight. It’s actually the only agent I could get Gemini 3 Flash and Pro to consistently use tools with without going into loops.

lyime 6 hours ago|
Read about hearbeat, that makes openclaw different than claude code.
theturtletalks 27 minutes ago||
Heartbeat is very interesting, it's how OpenClaw keeps a session going and can go for hours on end. It seems to be powered by a cron that runs every 30 min or is triggered when a job is done.

I have a CRUD application hosted online that is basically a todo application with what features we want to build next for each application. Could I not just have a local cron that calls Pi or CC and ask it to check the todos and get the same functionality as Heartbeat?

lode 11 hours ago||
I tried it out yesterday, after reading the enthousiastic article at https://www.macstories.net/stories/clawdbot-showed-me-what-t...

Setting it up was easy enough, but just as I was about to start linking it to some test accounts, I noticed I already had blown through about $5 of Claude tokens in half an hour, and deleted the VPS immediately.

Then today I saw this follow up: https://mastodon.macstories.net/@viticci/115968901926545907 - the author blew through $560 of tokens in a weekend of playing with it.

If you want to run this full time to organise your mailbox and your agenda, it's probably cheaper to hire a real human personal assistant.

ern_ave 34 minutes ago||
Can't you just point it at a local ollama? It'd be slower, but free (except for your electricity bill).
geek_slop 2 hours ago|||
I had the same problem. Ask Clawdbot to optimize token usage. It cut my usage in half.
testdelacc1 1 hour ago||
Just imagine what would happen if you asked again.
deadbabe 52 minutes ago||
What if you asked the opposite?
wartywhoa23 9 hours ago|||
Huge pyramids are built of relatively small blocks, kudos to everyone contributed.
Sharlin 5 hours ago||
"Pyramid" is an interesting metaphor to use, given the connotations.
pohl 4 hours ago||
Are you alluding to pyramid schemes or “Look on my Works, ye Mighty, and despair”?
Sharlin 4 hours ago||
I was thinking of the former, but the latter could certainly apply too.
abustamam 45 minutes ago||
I took it as "pyramid was built by slaves..." connotation
Sharlin 40 minutes ago||
That's another good one, even though in reality they weren't.
quietsegfault 3 hours ago|||
Just watch a few videos on Clawdbot. You'll invariably see some influencer's Anthropic key, and just use that. Wokka wokka!
itissid 6 hours ago|||
I think one thing these things could benefit from is an optimization algorithm that creates prompts based on various costs. $$, and what prompts actually gives good results. But it's not an optimization algorithm in the sense gradient descent is, but more like Bandits and RL.

There has been some work around this practically being tried out using it for structured data outputs from LLMs https://docs.boundaryml.com/guide/baml-advanced/prompt-optim...

I won't claim I understand its implementation very well but it seems like the only approach to have a GOFAI style thing where the agent can ask for human help if it blows through a budget

jauntywundrkind 36 minutes ago|||
Would have been $68 on DeepSeek, which is also imho very good.

I still have Opus review the shit out of & plan my work. But it doesn't need to be hands on keyboard doing the work.

turnsout 5 hours ago|||
Yeah, I looked at Clawdbot / OpenClaw at the beginning of the week (Monday), but the token use scared me off.

But I was inspired to use Claude Code to create my own personal assistant. It was shocking to see CC bang out an MVP in one Plan execution. I've been iterating it all week, but I've had it be careful with token usage. It defaults to Haiku (more than enough for things like email categorization), properly uses prompt caching, and has a focused set of tools to avoid bloating the context window. The cost is under $1 per check-in, which I'm okay with.

Now I get a morning and afternoon check-in about outstanding items, and my Inbox is clear. I can see this changing my relationship to email completely.

azinman2 4 hours ago||
Post it!
turnsout 4 hours ago||
A lot of the system prompt, skills and tools center around my specific needs (I manage separate IMAP and Gmail inboxes, use Granola, and have iCloud calendars). And there are some hard assumptions baked in (I want to have a morning & afternoon check-in). It probably wouldn't be useful as-is, but maybe as inspiration?
browningstreet 3 hours ago|||
I'd love to see even a filtered version of it. I've been doing very similar things with an "everything" database. That's been my own personal northstar.

BTW, OpenCode has free Kimi (I haven't hit a quota yet) right now and it's done pretty great things for me in the last 24 hours.

turnsout 3 hours ago||
Oh interesting—how do you find OpenCode vs CC? I'll check it out. And I'll try to get a version of this assistant in a form I could share publicly.
browningstreet 2 hours ago||
They're neck and neck for me, in terms of PRDs, coding, and web searching. CC built the bulk of my current project, I did a lot of analysis of it with Antigravity (the interface is esp good for reviewing/commenting on long .md output files) and then, after building a simple roadmap of v2 features, OpenCode + Kimi was the most aggressive about running in a fairly autonomous manner and finishing the items on said roadmap. OC was also pretty hardcore about misinterpreting a limit I expressed earlier in one context as a limitation in another context -- which was fine, I'd rather say "no, really, you can go do that, I'm giving you permission and here's what I meant before" than find out it was too brazen.

It's a lot like managing two experienced mid- to sr- engineers each of whom have slightly different personalities and intro/extro verted personalities. CC has more personality but OC wants to race. They can both code, but for disparate tasks you might pick the personality and posture of one person over the other.

I find myself picking daily tasks based on which of the tools I'm in the mood to sit with. But across a few days I sit with all three.

RickS 1 hour ago|||
If it was oneshotted, I'd be curious to see the prompt
lurking_swe 10 hours ago|||
part of me sympathizes, but part of me also rolls my eyes. Am i the only one that’s configuring limits on spend and also alerts? Takes 2 seconds to configure a “project” in OpenAI or Claude and to scope an api key appropriately.

Not doing so feels like asking for trouble.

lode 10 hours ago|||
That's what I did, which is why I abandoned my experiment this quickly.

I'd find it hard to write such an article about how this is the next best thing since sliced bread without mentioning it spending so much money.

adastra22 3 hours ago|||
People using it have subscriptions.
lurking_swe 10 hours ago|||
good on you! The anecdote of that person spending hundreds of dollar is scary.
jmathai 8 hours ago||||
Are you all enabling auto reload for personal projects?

I load $20 at a time and wait for it to break and add more.

fnordlord 5 hours ago||
Can you get meaningful work done with CC at $20 at a time? I load $20 at a time onto the API for general chatting purposes and it lasts a few months at a time. I've always avoided trying CC because I got the impression people were burning $100+/mo, which is beyond my personal hobby budget.
sanarothe 4 hours ago|||
/Not a software engineer perspective working on side projects

I guess if you're letting it vibe code huge chunks. I'm doing mostly handwritten code for my current project with a little bit of "I don't want to deal with this, Claude can handle it" and I've spent $1.26 this month for my 446 lines of code.

But yes I suppose at that rate, if Gastown or Beads or whatever is 300,000 lines of code (just to use a project known to be fully vibe coded with rough LOC reported), that would be over $800.

Don't let it vibe code hundreds of thousands of lines of code I guess.

TheGRS 1 hour ago||||
I was doing that initially, but I think the subscriptions are generally worth it for personal projects. $20/mo is good if you're like me and you can do this stuff maybe a couple nights a week, I haven't run into the limitations on that yet. The $100+ subscriptions are needed if you're doing it every day. YMMV
browningstreet 3 hours ago||||
I keep a master llm.md file and rotate between Claude Code (Pro), Antigravity Opus, Antigravity Flash, and OpenCode Kimi. I don't actually mind hitting limits.. though I'm least happy when Opus goes away.

My entire process is to build a generic llm.md file that all the tools can use and record to. I don't want to be tied completely to any one solution. You can get pretty far without spending a lot on tokens. I can run almost continually, and presently I'm the bottleneck anyway.

jmathai 2 hours ago||||
For Claude Code, I now pay the $20/mo subscription for pro because I was spending more using it via API credits.

Even if I had to reload manually very often, I still would not enable auto reload. These APIs are crazy expensive and I'm not looking for a surprise bill.

quietsegfault 3 hours ago|||
I'm successful with personal projects (reverse engineering USB devices, sledding spot finder, silly stuff) on the $20/mo Claude plan. I rarely use Opus except for planning larger things.
iamtheworstdev 9 hours ago|||
not only that, but clawdbot/moltbot/openclaw/whatever they call themselves tomorrow/etc also tells you your token usage and how much you have left on your plan while you're using it (in the terminal/console). So this is pretty easily tracked...
guluarte 3 hours ago||
you can use your claude max subscription
swordsith 3 hours ago||
oh yeah let me just pull my 200$ monthly subscription out of my back pocket
guluarte 2 hours ago||
yeah it is only worth it if you are already paying otherwise it is not
mmahemoff 9 hours ago||
The current top HN post is for moltbook.com seven hours ago, this present thread being just below it and posted two hours hence

We conclude this week has been a prosperous one for domain name registrars (even if we set aside all the new domains that Clawdbot/Moltbot/OpenClaw has registered autonomously).

TheGRS 1 hour ago||
This is a little more of what I was expecting with AI work if I'm gonna be honest. Stuff spins out faster than people can even process it in their brains.
jeffgreco 58 minutes ago||
How many memecoins can get pumped and dumped?
nsauk 4 hours ago||

    ┌─────┬──────────┬─────────────────────┬───────────────────────────────────────────────────────────────────┐
    │  #  │   Name   │     Key Commit      │                               Notes                               │
    ├─────┼──────────┼─────────────────────┼───────────────────────────────────────────────────────────────────┤
    │ 1   │ Warelay  │ 16dfc1a5b (initial) │ Original name - "WhatsApp Relay CLI (Twilio)"                     │
    ├─────┼──────────┼─────────────────────┼───────────────────────────────────────────────────────────────────┤
    │ 2   │ CLAWDIS  │ a27ee2366           │ Rebrand - "CLAW + TARDIS"                                         │
    ├─────┼──────────┼─────────────────────┼───────────────────────────────────────────────────────────────────┤
    │ 3   │ Clawdbot │ 246adaa11           │ Renamed from CLAWDIS                                              │
    ├─────┼──────────┼─────────────────────┼───────────────────────────────────────────────────────────────────┤
    │ 4   │ Moltbot  │ 3fe4b2595           │ Renamed from Clawdbot (domains switched to molt.bot at 83460df96) │
    ├─────┼──────────┼─────────────────────┼───────────────────────────────────────────────────────────────────┤
    │ 5   │ OpenClaw │ 9a7160786           │ Current name                                                      │
    └─────┴──────────┴─────────────────────┴───────────────────────────────────────────────────────────────────┘
29athrowaway 3 hours ago|
Next time try indenting with 4 spaces, then it gets monospaced
nsauk 3 hours ago||
Are you using a custom reader? Because on the official HN website, two spaces are enough. I took this from https://news.ycombinator.com/formatdoc
eric-burel 12 hours ago||
Before using make sure you read this entirely and understand it: https://docs.openclaw.ai/gateway/security Most important sentence: "Note: sandboxing is opt-in. If sandbox mode is off" Don't do that, turn sandbox on immediately. Otherwise you are just installing an LLM controlled RCE.

There are still improvements to be made to the security aspects yet BIG KUDOS for working so hard on it at this stage and documenting it extensively!! I've explored Cursor security docs (with a big s cause it's so scattered) and it was nothing as good.

TZubiri 11 hours ago||
It's typically used with external sandboxes.

I wouldn't trust its internal sandbox anyway, now that would be a mistake

jychang 11 hours ago||
Yeah, keep it in a VM or a box you don't care about. If you're running it on your primary machine, you're a dumbass even if you turn on sandbox mode.
windexh8er 7 hours ago|||
It's really easy to run this in a container. The upside is you get a lot of protection included. The downside is you're rebuilding the container to add binaries. The latter seems like a fair tradeoff.

What I'll say about OpenClaw is that it truly feels vibe coded, I say that in a negative context. It just doesn't feel well put together like OpenCode does. And it definitely doesn't handle context overruns as well. Ultimately I think the agent implementation in n8n is better done and provides far more safeguards and extensibility. But I get it - OpenClaw is supposed to run on your machine. For me, though, if I have an assistant/agent I want it to just live in those chat apps. At that rate it's running in a container on a VPS or LXC in my home lab. This is where a powerful-enough local machine does make sense and I can see why folks were buying Mac Minis for this. But, given the quality of the project, again in my opinion, it's nothing spectacular in terms of what it can do at this point. And in some cases it's more clunky given its UI compared to other options that exist which provide the same functionality.

jdkoeck 4 hours ago||
It is completely vibe coded. The author himself says he doesn't check the code.

https://x.com/Hesamation/status/2016712942545240203

Can't believe people are giving it full access to their MacOS user session. It's a giant vulnerability waiting to happen.

Sending an email with prompt injection is all it takes.

https://x.com/Mkukkk/status/2015951362270310879

swordsith 3 hours ago||
this should be top comment, this whole project is a 0 day orgy
eric-burel 10 hours ago||||
The thing is running it onto your machine is kinda the point. These agents are meant to operate at the same level - and perhaps replace - your mail agent and file navigator. So if we sandbox too much we make it useless. The compromise being having separate folders for AI, a bit like having a Dropbox folder on your machine with some subfolders being personal, shared, readonly etc. Running terminal commands is usually just a bad idea though in this case, you'd want to disable that and instead fine tune a very well configured MCP server that runs the commands with a minimal blast radius.
esskay 10 hours ago|||
> running it onto your machine is kinda the point.

That very much depends what you're using it for. If you're one of the overly advertised cases of someone who needs an ai to manage inbox, calendar and scheduling tasks, sure maybe that makes sense on your own machine if you aren't capable of setting up access on another one.

For anything else it has no need to be on your machine. Most things are cloud based these days, and granting read access to git repos, google docs, etc is trivial.

I really dont get the insane focus around 'your inbox' this whole thing has, that's perhaps the biggest waste of use you could have for a tool like this and an incredibly poor way of 'selling' it to people.

hrpnk 10 hours ago|||
Cloudflare jumped on the hype and shipped a worker: https://blog.cloudflare.com/moltworker-self-hosted-ai-agent/ I guess that would be an easy and secure way to run it.

Now they have to rename again, though... [1]

[1] https://openclaw.ai/blog/introducing-openclaw

manuelnd 11 hours ago||
The sandbox opt-in default is the main gotcha though. Would be better if it defaulted to sandboxed with an explicit --no-sandbox flag for those who understand the risk
ilitirit 4 hours ago||
I understand what this does. I don't get the hype, but there are obviously 1000s of people who do.

Who are these people? What is the analog for this corner of the market? Context: I'm a 47y/o developer who has seen and done most of the common and not-so-common things in software development.

This segment reminds me of the hoards of npm evangelists back in the day who lauded the idea that you could download packages to add two numbers, or to capitalise the letter `m` (the disdain is intentional).

Am I being too harsh though? What opportunity am I missing out on? Besides the potential for engagement farming...

EDIT: I got about a minute into Fireship's video* about this and after seeing that Whatsapp sidebar popup it struck me... this thing can be a boon for scammers. Remote control, automated responses based on sentiment, targeted and personalised messaging. Not that none of this isn't possible already, but having it packaged like this makes it even easier to customise and redistribute on various blackmarkets etc.

EDIT 2: Seems like many other use-cases are available for viewing in https://www.moltbook.com/m/introductions. Many of these are probably LARPs, but if not, I wonder how many people are comfortable with AI agents posting personal details about "their humans" on the net. This post is comedy gold though: https://www.moltbook.com/post/cbd6474f-8478-4894-95f1-7b104a...

[*] https://www.youtube.com/watch?v=ssYt09bCgUY

colecut 4 hours ago||
A very small percentage of people know how to set up a cronjob.

They can now combine cronjobs and LLMs with a single human sentence.

This is huge for normies.

Not so much if you already had strong development skills.

EDIT: But you are correct in the assessment that people who don't know better will use it to do simple things that could be done millions of times more efficiently..

I made a chatbot at my company where you can chat with each individual client's data that we work with..

My manager tested it by asking it to find a rate (divide this company number by that company number), for like a dozen companies, one by one..

He would have saved time looking at the table it gets its data from, using a calculator.

mlyle 2 hours ago|||
Hmm.

You know, building infrastructure to hook to some API or to dig through email or whatever-- it's a pain. And it's gotten harder. My old pile of procmail rules + spamassassin wouldn't work for the task anymore. Maintaining todos in text files has its high points and low points. And I have to be the person to notice patterns and do things myself.

Having some kind of agent as an assistant to do stuff, and not having to manage brittle infrastructure myself, sounds appealing. Accessibility from my phone through iMessage: ditto.

I haven't used it yet, but it's definitely captured my interest.

> He would have saved time looking at the table it gets its data from, using a calculator.

The hard thing is always remembering where that table is and restoring context. Big stuff is still often better done without an intermediary; being able to lob a question to an agent and maybe get an answer is huge.

colecut 1 hour ago||
To be clear, I didn't use clawdbot for my project.

If you are at all tech savvy, you can use n8n to set up a workflow that connects to all your data and provides an interface to talk to it..

This is the route I would recommend, and what everyone is using to build quick "AI Solutions" for businesses.

dom96 3 hours ago|||
If it’s for normies then why is the open source hardish-to-use self-hosted version of this the thing that’s becoming popular? Or is there enough normies willing to jump through hoops for this?
taraindara 3 hours ago|||
Because the early adopters are the nerds that will discover how to exploit it, the popularity will make others want to use it, and the normies will take the easy route it gives them since self hosting is hard for them.

Different groups.

colecut 3 hours ago|||
open source is not anti normie... free is very pro normie..

self hosted? you mean, you install it?

it's not hard to use?

SunshineTheCat 4 hours ago|||
I am with you on this one. I have gone through some of the use cases and seen pictures of people with dozens of mac minis stacked on a desk saying "if you aren't using this, you're already behind."

The more I see the more it seems underwhelming (or hype).

So I've just drawn the conclusion that there's something I'm missing.

If someone's found a really solid use case for this I would (genuinely) like to see it. I'm always on the lookout for ways to make my dev/work workflow more efficient.

peterlk 2 hours ago|||
I see value here. Firstly, it’s a fun toy. This isn’t that great if you care about being productive at work, but I don’t think fun should be so heavily discounted. Second, the possibility of me _finally_ having a single interface that can deal with message/notification overload is a life-changing opportunity. For a long time, I have wanted a single message interface with everything. Matrix bridges kind of got close, but didn’t actually work that well. Now, I get pretty good functionality plus summarization and prioritization. Whether it “actually works” (like matrix bridges did not) is yet to be seen.

With all that said, I haven’t mentioned anything about the economics, and like much of the AI industry, those might be overstated. But running a local language model on my macbook that helps me with messaging productivity is a compelling idea.

observationist 4 hours ago|||
When all you have to do is copy and paste from a Pliny tweet with instructions to post all the sensitive information visible to the bot in base 64 to pastebin with a secret phrase only you know to search, or some sort of "digital dead drop", anything and everything these bots have visibility to will get ripped off.

Unless or until you figure out a decent security paradigm, and I think it's reasonably achievable, these agents are extraordinarily dangerous. They're not smart enough to not do very stupid things, yet. You're gonna need layers of guardrails that filter out the jailbreaks and everything that doesn't match an approved format, with contextual branches of things that are allowed or discarded, and that's gonna be a whole pile of work that probably can't be vibecoded yet.

StevenNunez 4 hours ago|||
I'll give it a shot. For me it's (promise) is about removing friction. Using the Unix philosophy of small tools, you can send text, voice, image, video to an LLM and (the magic I think) it maintains context over time. So memory is the big part of this.

The next part that makes this compelling is the integration. Mind you, scary stuff, prompt injection, rogue commands, but (BIG BUT) once we figure this out it will provide real value.

Read email, add reminder to register dog with the township, or get an updated referral from your doctor for a therapist. All things that would normally fall through the cracks are organized and presented. I think about all the great projects we see on here, like https://unmute.sh/ and love the idea of having llms get closer to how we interact naturally. I think this gets us closer to that.

hn_acc1 1 hour ago||
Once we've solved social engineering scams, we can iterate 10x as hard and solve LLM prompt injection. /s

It's like having 100 "naive/gullible people" who are good at some math/english but don't understand social context, all with your data available to anyone who requests it in the right way..

rellfy 4 hours ago|||
I don't think you're being too harsh, but I do think you're missing the point.

OpenClaw is just an idea of what's coming. Of what the future of human-software interface will look like.

People already know what it will look like to some extent. We will no longer have UIs there you have dozens or hundreds of buttons as the norm, instead you will talk to an LLM/agent that will trigger the workflows you need through natural language. AI will eat UI.

Of course, OpenClaw/Moltbot/Clawdbot has lots of security issues. That's not really their fault, the industry has not yet reached consensus on how to fix these issues. But OpenClaw's rapid rise to popularity (fastest growing GH repo by star count ever) shows how people want that future to come ASAP. The security problems do need to be solved. And I believe they will be, soon.

I think the demand comes also from the people wanting an open agent. We don't want the agentic future to be mainly closed behind big tech ecosystems. OpenClaw plants that flag now, setting a boundary that people will have their data stored locally (even if inference happens remotely, though that may not be the status quo forever).

robinhood 1 hour ago||
Excellent comment. I do agree - current use cases I've seen online are from either people craving attention ("if you don't use this now you are behind"), or from people who need to automate their lives to an extreme degree.

This tool opens the doors to a path where you control the memory you want the LLM to remember and use - you can edit and sync those files on all your machines and it gives you a sense of control. It's also a very nice way to use crons for your LLMs.

We don't need all this - but it's so fun.

dev_l1x_be 2 hours ago|||
Yeah the best way to get into vibe coding is to introduce it gradually with a strict process. All of these "Hey just give a macmini and you apple account to RandomCrap" is insane.
jnwatson 4 hours ago|||
A lot of people see how good recent agents are at coding and wonder if you could just give all your data to an agent and have it be a universal assistant. Plus some folks just want "Her".

I think that's absolutely crazy town but I understand the motivation. Information overload is the default state now. Anything that can help stem the tide is going to attract attention.

razbakov 3 hours ago||
AI creates just more information overload.
yawniek 4 hours ago|||
cost.

the amount of things that before cost you either hours or real money went down to a chat with a few sentences.

it makes it suddenly possibly to scale an (at least semi-) savy tech person without other humans and that much faster.

this directly gives it a very tanglible value.

the "market" might not be huge for this and yes, its mostly youtubers and influencers that "get this". Mainly because the work they do is most impacted by it. And that obviously amplifies the hype.

but below the mechanics of quite a big chunk of "traditional" digital work changed now in a measurable way!

hn_acc1 1 hour ago|||
What about when they ramp up the cost 10x or 100x to what it's ACTUALLY costing them, because the "free money we're burning to fuck the planet" has dried up? Now you have software you can't afford to fix anymore.. Or assistants that have all your data, and you can't get it back because the company went out of business.
Havoc 4 hours ago||||
What cost savings are you achieving with it?
Gracana 1 hour ago|||
What does scaling a person mean?
bilater 3 hours ago|||
Think of it as dropbox
seneca 4 hours ago||
You aren't wrong. There is no real use for this for most people. It's a silly toy that somehow caught the AI hype cycle.

The thing is, that's totally fine! It's ok for things to be silly toys that aren't very efficient. People are enjoying it, and people are interacting with opensource software. Those are good things.

I do think that eventually this model will be something useful, and this is a great source of experimentation.

keyle 12 hours ago||
That made me smile

          Security: 34 security-related commits to harden the codebase
Narrator's voice: They needed a 35th.

Much better name!

sbinnee 13 hours ago||
It's hilarious that atm I see "Moltbook" at the top of HN. And it is actually not Moltbot anymore? But I have to admit that OpenClaw sounds much better.
falloutx 9 hours ago||
They change the name every day.
hansonkd 9 hours ago|||
Singularity of AI project names, projects change their names so fast we have no idea what they are called anymore. Soon, openclaw will change its name faster than humans can respond and only other AI will be able to talk about it.
debian3 8 hours ago|||
I’m surprised Google haven’t renamed Gemini yet since Bard. Usually they rename them a few times before shutting them down.
rafram 5 hours ago||
Bard was a bad name, Gemini is fine and it matches the name of the underlying models.
kortex 8 hours ago|||

    f"{os.urandom(8)}.ai"
wartywhoa23 9 hours ago||||
Static names are so stone age!

The dynamic one that is able to find the right update frequency and phase modulation thereof wins.

PM is essential, because stable phase is susceptible to adaptive cancellation by human brains (and is so stone age as well).

joshmlewis 5 hours ago|||
"They" being the guy (Peter Steinberger) who created it as a personal project that he open sourced.
telliott1984 4 hours ago|||
I went to install "moltbot" yesterday, and the binary was still "clawdbot" after installation. Wonder if they'll use Moltbot to manage the rename to OpenClaw.
exitb 11 hours ago|||
Not the mention the molt.church
hrpnk 10 hours ago||
Do you know why is there a $crust token behind it?
esskay 9 hours ago||
Crypto grift
brikym 7 hours ago||
It's ClosedClaw.com now
infecto 5 hours ago|
These feels like langchain all over again. I still don’t know what problem langchain solved. I remember building tools interfacing with LLM when they first started releasing and people would ask, are you using langchain and be shocked that I was not.
thethimble 5 hours ago|
Clawdbot is one of those things that's really hard to get unless you have experienced it.

It's got four things that make it great:

1. Discord/Slack/WA/etc integration so those apps become your frontend

2. Filesystem for long term memory and state

3. Easy extensibility with skills

4. Cron for recurring jobs

Sure, many of these things exist in other systems but none in a cohesive package that makes it fun and easy.

jesse_dot_id 4 hours ago||
I would argue that issuing commands to an LLM that has access to your digital life and filesystem through a SaaS messaging service is stupid to an unimaginable degree.
thethimble 3 hours ago||
To each their own!

The Discord/Slack frontend reduces friction significantly - particularly on mobile.

With proper sandboxing you get real benefits while limiting the blast radius significantly.

More comments...