@AirIndiaX Happy to share but the issue isn’t really the PNR it’s the policy and the way it was enforced. 5 staff, one bag, and the suggestion to literally hold my laptop in my hand. Hoping you’ll look at the training
Disaster is coming.
Thousands of ClawdBots are live right now on VPSs… with open ports to the internet… and zero authentication.
This is going to get ugly.
If your agent can:
- browse the web
- call tools
- access files/secrets
- hit internal endpoints
…then an unauthenticated public endpoint is basically “please take over my bot”.
This isn’t theoretical. The internet is a nonstop scanner.
Fix it today:
1) close the port / firewall to VPN or IP allowlist
2) add auth (JWT/OAuth, at least a strong secret) + TLS
3) rotate keys (assume compromise)
4) rate limit + logs + alerts
Agents are powerful. Demo-grade deployments on the open internet are not.
Earlier this week @flyingbeast320 celebrated India’s Republic Day by drawing the world’s largest map of India with a Cessna 172.
Check out playback at https://t.co/QiYyUn7aTD