Hey @AnthropicAI , why don't you add some reality to the live status updates for Clown Code? I propose the following for a starter: Leaking..., Destroying..., Slopping..., Swiss Cheesing..., Confusing..., Slowing..., Complexifying...Retarding...
As someone who:
> Hacked basically every component of openclaw's ecosystem (harness, skills ecosystem etc)
> Helped lead security, trust & threat modelling
> Found 15 CVE's in the software
Absolutely do not run OpenClaw on your enterprise device.
AI-powered computer worm, a self-replicating agent that reasons its way through a network instead of carrying a fixed exploit list. It steals compute from compromised GPU machines to run its own open-weight LLM, then uses weaker machines as relays for reach. In trials on a corporate testbed, it identified vulnerabilities, exploited systems, and launched replicas across Linux, Windows, and IoT targets. Every new infection can add more infrastructure while costing the attacker almost nothing. Patching one flaw no longer ends the threat, because the worm can operationalise fresh advisories, generate new attack logic, and keep adapting without a human operator. It is not a WannaCry-style worm with one baked exploit and one baked ransomware payload. It can adapt across many vulnerability classes it can discover and operationalise https://t.co/nSupd1h0BG
"So many vulnerabilities and attacks" isn't scary to me. That's stuff cybersecurity knows how to deal with.
The scary part is that we're rolling out AI agents and have ~zero experience securing them. And those attacks haven't started yet.
Dear @RichardDawkins, you've always been an inspiration to me. I made this website for you.
My goal is for it to help you understand AI chatbots at a deeper level, and avoid getting fooled by sycophancy and other cheap tricks that models have learned through RLHF.
https://t.co/ViGYPupooX